Privacy Policy

Last update [06/10/2026]

1. Introduction

This Privacy Policy explains how the website inestito.com (“inestito”, “site”, “we”) collects, uses, maintains and protects personal data of its visitors and users.

Inestito is a blog dedicated to disseminating information about psychology and mental health, specifically about emotions, behaviors, and scientific research in psychology.

Protecting the privacy of our visitors is a priority. We seek to collect only the personal data necessary for the operation of the website and for the purposes described herein.

2. Responsible for treatment

The controller of personal data processed through this website is:

inestito.com
Email: hello@inestito.com
Website: https://inestito.com

For questions related to the protection of personal data, the email address above can be used.

If a legally appointed Data Protection Officer exists, their contact details will be available on this page.

3. What personal data is collected?

Depending on website usage, the following may be processed:

  • name or username;
  • email address;
  • content of messages sent through contact forms;
  • IP address;
  • tehcnical information about the devise and browser;
  • information regarding the use and navigation of the website;
  • information collected through cookies and similar technologies.

Inestito does not intend to collect health-related data or other special categories of personal data.

For this reason, users are advised to do not submit clinical information, diagnoses, mental health history, or other sensitive data not necessary for contacting us through contact forms or other means provided on the website..

4. Purposes of treatment

Personal data may be processed for:

a) respond to messages and contact requests;

b) to ensure the technical operation and security of the site;

c) to analyze and improve the functioning and content of the website, when such processing is carried out legitimately;

d) manage content subscriptions, newsletters or other communications, when these exist and have been requested by the user;

e) comply with applicable legal obligations;

f) to prevent, detect or investigate abusive, fraudulent or illegal uses of the website.

The data will not be used for purposes incompatible with those for which it was collected.

5. Legal basis

The processing of personal data may be based, depending on the specific situation, on:

  • consent of the data subject;
  • execution of a request made by the data subject;
  • compliance with a legal obligation;
  • pursuit of the controller's legitimate interests, when these do not prevail over the fundamental rights and freedoms of the data subject.

When the basis for processing is consent, it may be withdrawn at any time. Withdrawal of consent does not affect the legality of processing carried out previously.

Consent must be freely given, specific, informed, and unambiguous, through a positive expression of will.

6. WordPress

Inestito uses WordPress as a content management system.

Using WordPress involves certain technical processes necessary for the site's operation, security, and administration. Depending on the specific hosting configuration, installed plugins and services, technical data such as IP address, browser information, access date and time, or information related to server requests may be processed.

The website administrator is responsible for keeping plugins, themes, and components up-to-date and limiting data collection to what is strictly necessary.

7. Contact forms

When a user fills out a contact form, the data provided will be used to respond to their request.

Providing the necessary contact information is voluntary, but it may be essential for us to respond to your request.

The data will be kept for the period necessary to process and monitor the contact and, subsequently, for the period that may be necessary to comply with legal obligations or to exercise and defend rights.

8. Cookies

Inestito uses cookies and similar technologies.

Cookies may be used to ensure essential website functionalities, save certain preferences, improve the user experience or, when authorized, obtain statistical information about website usage.

Cookies that are not strictly necessary for the operation of the website should only be activated after obtaining the user's consent, when legally required.

The user can consult detailed information at Cookie Policy of inestito.

The National Data Protection Commission considers that website owners must ensure adequate information is provided and obtain consent when required, particularly regarding cookies used for analytics.

9. Third-party services

O funcionamento do website poderá envolver prestadores de serviços tecnológicos, nomeadamente:

  • web hosting;
  • secutiry services;
  • email delivery services;
  • statistical analysis services;
  • spam protection services;
  • services used to embed external content.

The use of these services may involve the processing of personal data by the respective providers.

Whenever applicable, the legally necessary instruments will be executed to regulate the processing of data by third parties acting as subcontractors.

Some providers may be established outside the European Economic Area. In these cases, the requirements applicable to international data transfers will be observed.

10. Data preservation

Personal data will only be kept for the period necessary for the purposes for which it was collected or for the period required by law.

The specific retention periods may vary depending on the purpose and nature of the data.

When no longer needed, the data will be deleted or anonymized, whenever applicable.

11. Data subject rights

Under applicable legislation, in particular the GDPR, the data subject may exercise, where applicable, the following rights:

  • access to your personal data;
  • rectification of incorrect or incomplete data;
  • erasure of data;
  • restriction of processing;
  • data portability;
  • objection to processing;
  • withdrawal of consent, where processing is based on consent.

The exercise of these rights may be requested by:

hello@inestito.com

The GDPR provides for these rights and stipulates that certain information, including purposes, data categories, recipients and retention periods, must be made available to data subjects.

Requests will be processed within the legally applicable timeframes.

12. Complaint to the supervisory authority

The data subject has the right to lodge a complaint with the competent supervisory authority.

In Portugal, the supervisory authority is:

National Data Protection Commission (CNPD)

Website: cnpd.pt

The right to lodge a complaint with a supervisory authority is part of the information that must be made available to data subjects.

13. Security

Appropriate technical and organizational measures are adopted to protect personal data against unauthorized access, loss, destruction, alteration, or improper disclosure.

Despite the measures adopted, no system connected to the Internet can guarantee absolute security.

14. External links

The website may contain links to third-party websites.

Inestito is not responsible for the privacy policies, practices, or content of these sites. It is recommended to consult their respective policies before providing personal data.

15. Changes to the Privacy Policy

This Privacy Policy may be updated whenever necessary, especially as a result of legal, technical changes or changes in how the site works.

The updated version will be published on this page with an indication of the respective update date.

16. Contact

For questions regarding this Privacy Policy or the processing of your personal data:

Email: hello@inestito.com

Website: https://inestito.com