How we handle
your data.

GØDN respects your privacy. This policy explains what data we collect when you visit our site, why we collect it, who we share it with, and the rights you have over it, in accordance with the General Data Protection Regulation (GDPR).

1 - Who we are

The data controller is:

GØDN, Sociedade Unipessoal Lda.
Corporate Tax ID (NIPC): 519226992
Rua Alfredo Marceneiro, 2, 4.º D, Vila Fria
Porto Salvo, Oeiras, Portugal
Contact: hello@godn.pt

2 - What data we collect

We only collect the minimum required for the site to function:

• Email - when you join the Drop 001 waitlist via the form on the site.
• Anonymous technical identifier - when you vote on pieces, we generate a unique key from your IP address and browser using a hashing algorithm (SHA-256). This key only serves to prevent duplicate votes and cannot be reversed to identify you personally.
• Basic technical data - our hosting provider (Cloudflare) logs requests to the site for security and operations purposes (IP address, browser type, request time). These logs are managed by Cloudflare under its own policy.

We do not use marketing cookies or third-party tracking tools (Google Analytics, Meta Pixel, etc.).

3 - How and why we use your data

• Waitlist email - to send you updates about the Drop 001 launch, early access and brand-related communications. Legal basis: consent (Art. 6(1)(a) GDPR).
• Anonymous vote key - to ensure each visitor only votes once. Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in the integrity of the collection validation process.
• Hosting technical logs - for site security and operations. Legal basis: legitimate interest.

4 - Who we share your data with

Only with the processors strictly necessary to operate the site:

• Klaviyo Inc. (USA) - manages the waitlist and email sending. Your emails are stored on Klaviyo's servers. See Klaviyo's privacy policy.
• Cloudflare Inc. (USA) - hosts the site, processes requests and stores voting data (only the anonymous key and aggregated count). See Cloudflare's privacy policy.

We do not sell, rent, or share your data with third parties for marketing purposes.

5 - International transfers

Klaviyo and Cloudflare are based in the United States. Data transfers are made under the EU-US Data Privacy Framework, in which both companies are certified, ensuring an adequate level of protection under the GDPR.

6 - How long we keep your data

• Email - as long as you remain on the waitlist. You can unsubscribe at any time via the link in the footer of every email.
• Anonymous vote key - 1 year from the date of the vote, after which it is automatically deleted.
• Technical logs - managed by Cloudflare under its own retention policy.

7 - Your rights

Under the GDPR, you have the right to:

• Access your personal data.
• Rectify incorrect or outdated data.
• Erase your data ("right to be forgotten").
• Restrict processing of your data.
• Portability - receive your data in a structured format.
• Object to processing of your data based on legitimate interest.
• Withdraw consent at any time (without affecting the lawfulness of prior processing).

8 - How to exercise your rights

Send an email to hello@godn.pt indicating the request you wish to make. We respond within 30 days.

9 - Complaints

If you consider that your rights have not been respected, you can file a complaint with the competent supervisory authority in Portugal:

Comissão Nacional de Proteção de Dados (CNPD)
Portuguese Data Protection Authority
Av. D. Carlos I, 134, 1.º - 1200-651 Lisboa, Portugal
www.cnpd.pt

10 - Changes to this policy

We may update this policy from time to time. The current version is always available at this address, with the last updated date shown at the top.