Lawful basis for processing

White Dream processes personal data on the following lawful bases under GDPR Article 6:

• Consent — for newsletter subscriptions and analytics cookies
• Contract — for processing contact form enquiries when a service is requested
• Legitimate interests — for retaining contact form messages for correspondence purposes

Data processing register

We maintain an internal register of all data processing activities as required by GDPR Article 30. This register is available to supervisory authorities on request.

Data transfers

White Dream is based in Portugal (EU). Where we use third-party services that process data outside the EU — such as email service providers — we ensure that appropriate safeguards are in place (Standard Contractual Clauses or adequacy decisions).

Data Protection Officer

As a small organisation, we are not required to appoint a Data Protection Officer under GDPR. Privacy and data protection matters are handled directly by the founders. Contact: [email protected]

Supervisory authority

The supervisory authority for White Dream is the Comissão Nacional de Proteção de Dados (CNPD) in Portugal. You have the right to lodge a complaint with them if you believe your personal data has been processed unlawfully.

Cookie consent

We implement a cookie consent mechanism that blocks analytics cookies until consent is given. Essential functionality (the platform itself) works without any cookies beyond the localStorage entry that stores your consent preference.

Your rights

Under GDPR, you have the rights described in our Privacy Policy. To exercise them, contact [email protected]. We will verify your identity before processing any request and respond within 30 calendar days.