Privacy Policy

Last updated: 14th March 2026

1. Introduction

Your privacy is fundamental to us. This Privacy Policy describes how CBOX MEDIA - PUBLICIDADE, IMAGEM E SERVIÇOS, UNIPESSOAL LDA (NIPC 519345762), trading as Clickbox (hereinafter referred to as "Clickbox", "we" or "our"), with headquarters in Lisbon, Portugal, and website www.clickbox.pt, collects, uses, stores and protects the personal data provided to us.

2. Data Controller

CBOX MEDIA - PUBLICIDADE, IMAGEM E SERVIÇOS, UNIPESSOAL LDA (NIPC 519345762)
Trading as: Clickbox
Headquarters: Lisbon, Portugal
Website: www.clickbox.pt
Email: [email protected]
Telephone: +351 923 365 660

3. Personal Data We Collect

We may collect and process the following types of personal data:

Identification data: Name, email address, telephone number
Event data: Type of event, date, location
Communication data: Messages sent through our contact forms
Technical data: IP address, browser type, pages visited, time spent on the site
Cookie data: Information about your preferences and activity on the website

4. How We Use Your Data

We use your personal data for the following purposes:

To process and respond to your quote requests and enquiries
To provide our photobooth and videobooth services
To communicate with you about our services, events and updates
To improve the user experience on our website
To comply with legal and regulatory obligations
To prevent fraud and ensure the security of our services
For statistical analysis and improvement of our services

5. Legal Basis for Processing

We process your personal data based on the following legal bases:

Consent: When you give us explicit consent to process your data
Contract performance: To fulfil contractual obligations when you engage our services
Legitimate interest: To improve our services and communicate about relevant products
Legal obligation: To comply with applicable legal obligations

6. Data Sharing

We do not sell, rent or share your personal data with third parties, except in the following circumstances:

Service providers: We may share data with service providers who help us operate our business (e.g., email services, web analytics, payment processing)
Legal obligations: When required by law or competent authorities
Protection of rights: To protect our rights, property or security

All third-party service providers are required to maintain the confidentiality of your data and comply with applicable data protection standards.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including:

Customer data: For the duration of the contract and up to 7 years after termination, as required by Portuguese tax legislation
Marketing data: Until you withdraw consent or request deletion
Technical data: Up to 2 years after the last interaction

8. Your Rights

Under the GDPR, you have the following rights:

Right of access: You may request a copy of the personal data we hold about you
Right to rectification: You may request correction of incorrect or incomplete data
Right to erasure: You may request deletion of your personal data
Right to restriction of processing: You may request restriction of processing of your data
Right to data portability: You may request transfer of your data to another service provider
Right to object: You may object to processing of your data for direct marketing purposes
Right to withdraw consent: You may withdraw your consent at any time

To exercise these rights, please contact us at [email protected].

9. Cookies

Our website uses cookies to improve user experience and analyse site traffic. Cookies are small text files stored on your device. You can configure your browser to refuse cookies, but this may affect website functionality.

We use the following types of cookies:

Essential cookies: Necessary for basic website functionality
Analytics cookies: To understand how visitors use the website (Google Analytics, Microsoft Clarity)
Marketing cookies: To personalise advertisements and measure campaign effectiveness (Facebook Pixel)

9.1 Event Galleries — Access Logging

Private galleries we deliver after each event (URLs of the form www.clickbox.pt/<event>/) log view and download events for delivery confirmation and service-improvement purposes. For every access we store: an anonymised visitor identifier (IP address run through a non-reversible cryptographic hash function with a secret salt), the browser user-agent, the downloaded file name (when applicable) and the event timestamp. We do not store the raw IP address, and the anonymised identifier does not permit re-identification. The legal basis is our legitimate interest in confirming correct delivery of the contracted content and detecting misuse. You may request deletion of these records by contacting [email protected].

9.2 Website Usage Analytics — In-house Statistics

The website uses an in-house, self-hosted analytics system (no third-party tools such as Google Analytics or Meta are used for this purpose) to understand navigation patterns and improve the experience. For each session we record: an anonymised visitor identifier (UUID stored in a 1-year first-party cookie and run through a non-reversible cryptographic hash with a secret salt before storage), a session identifier (sessionStorage, discarded after 30 minutes of inactivity), the IP address hashed with the same salt, the browser user-agent, language, time zone, viewport and screen dimensions, the visited page, referrer, campaign parameters (utm_*), time on page, scroll depth, clicks on links and buttons (form-input values are never captured), form submissions (only the names of fields that were filled, never the values), and the country inferred by Cloudflare. We do not store the raw IP address nor the content of form fields. The legal basis is our legitimate interest in understanding and improving the website. You may request deletion of these records or removal of the cb_visitor cookie via [email protected].

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. These measures include:

Encryption of data in transit (SSL/TLS)
Strict access controls
Regular security monitoring
Regular staff training on data protection

11. International Transfers

Some of our service providers may be located outside the European Economic Area (EEA). When we transfer data outside the EEA, we ensure that adequate safeguards are in place in compliance with the GDPR.

12. Minors

Our services are not directed at persons under 18 years of age. We do not knowingly collect personal data from minors. If you become aware that we have collected data from a minor, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy periodically. The date of the last update is indicated at the top of this page. We recommend that you review this policy regularly to stay informed about how we protect your data.

14. Contact and Complaints

If you have questions about this Privacy Policy or about the processing of your personal data, you may contact us:

Email: [email protected]
Telephone: +351 923 365 660

You also have the right to lodge a complaint with the Comissão Nacional de Proteção de Dados (CNPD) if you believe that the processing of your personal data violates applicable legislation:

CNPD
Rua de São Bento, n.º 148, 3.º
1200-821 Lisboa
Telephone: +351 213 928 400
Email: [email protected]
Website: www.cnpd.pt

← Back to home