Privacy Policy

Privacy Policy


Welcome to the Privacy Policy page of RICOS Agency (accessible via https://ricos.agency/). We respect your digital privacy and are fully committed to protecting the personal data you share with us. This document outlines how we collect, handle, and safeguard your information in strict compliance with the EU General Data Protection Regulation (GDPR).


1. Data Controller (Who We Are)

The entity responsible for collecting and processing your personal data on this website is the administration of the commercial brand RICOS Agency:

Commercial Brand: RICOS Agency

Operational Location: Portugal

Official Website: https://ricos.agency/

Contact Email: ricos.creative@gmail.com


2. Your Legal Rights Under GDPR

As a resident of the European Union, you possess the following rights regarding your personal information under the GDPR framework:

Right to Access (Art. 15): You can request a copy of the personal data we hold about you.

Right to Rectification (Art. 16): You have the right to request the correction of inaccurate or incomplete personal information.

Right to Erasure / To Be Forgotten (Art. 17): You can request the deletion of your data under certain legal conditions.

Right to Restriction of Processing (Art. 18): You may ask us to suspend the processing of your personal data.

Right to Data Portability (Art. 20): You can request a transfer of your data to another provider in a structured format.

Right to Object (Art. 21): You have the right to protest against our data processing activities based on legitimate interests.

You can withdraw your consent for data processing at any moment with effect for the future. If you believe your data rights have been violated, you have the legal right to file an official complaint with the Portuguese Data Protection Authority: CNPD (Comissão Nacional de Proteção de Dados).


3. Collection and Processing of DataA. Technical Server Log Files (Website Browsing)

How and why we process it: When you browse our website passively (without filling out any forms), our web servers automatically log general technical information. This data includes your device's anonymized IP address, your web browser type, operating system, referral URLs, and the exact timestamps of your visit. We use this information exclusively to:

Guarantee seamless website connection and proper system stability.

Monitor website security and investigate potential cyber-attacks (e.g., DDoS attacks).

Legal Basis: Our legitimate interest in maintaining a secure and functional website (Art. 6(1)(f) GDPR).

Data Retention: This automated technical data is permanently deleted within 14 days, unless a specific security threat requires a longer investigation period.

B. Contact Forms and Interactive Business Quiz

How and why we process it: Our website utilizes digital feedback forms and an interactive marketing test (quiz) to collect inbound project requests. When you interact with these elements, we collect the information you choose to provide voluntarily, namely:

First and Last Name

Contact Email Address

Contact Phone Number

Project specifics (budget, business goals, service requirements)

We process this data solely to reply to your messages, evaluate your marketing requirements, and build tailored commercial proposals for your business.

Legal Basis: Processing is necessary for taking pre-contractual steps at your direct request (Art. 6(1)(b) GDPR).

Data Retention: We delete these communication records once your specific inquiry has been fully reviewed and resolved, provided there are no secondary legal or tax retention obligations (for instance, if you officially become our client and we sign a contract).

C. Web Analytics (Google Analytics 4)

How and why we process it: Subject to your explicit consent, our website deploys Google Analytics 4, a tracking service provided by Google Ireland Limited. GA4 assists us in understanding user behavior (page views, session time, quiz completion rates, and navigation paths). Note: Your IP address is automatically truncated and anonymized within the EU/EEA before any analytical data is stored or processed.

Legal Basis: Your explicit, voluntary consent granted via our Cookie Banner (Art. 6(1)(a) GDPR).

Data Retention & Transfers: Analytical data linked to tracking cookies is automatically purged every 14 months. Data may be processed on Google LLC servers in the USA. Google complies with the EU-US Data Privacy Framework, ensuring legally adequate data protection levels.


4. Cookies and Targeted Advertising (Remarketing)

We use tracking technologies commonly known as cookies to elevate our website experience and run promotional campaigns:

Essential Cookies: Technically required for the basic operation of the website or to save your preferences (such as your language selection or your choice in the Cookie Banner). Legal basis: Art. 6(1)(f) GDPR.

Marketing Pixels (Meta Pixel and Google Ads): Subject to your prior approval, we use advertising pixels from Meta (Facebook/Instagram) and Google. This allows us to track the performance of our ads and show targeted marketing campaigns to users who have previously visited the RICOS Agency website.

You can modify your cookie settings, reject marketing tracking, or completely wipe your browser's cookie history at any time through your web browser preferences or via our website's consent banner tool.


5. Contact Information for Data Privacy Inquiries

If you wish to execute any of your GDPR rights, file a protest against data processing, or ask questions regarding this policy, please reach out directly to us at:

Email: ricos.creative@gmail.com