Privacy and Data Protection Policy
1. Data Controller
Illusionarium, Lda (hereinafter “Illusionarium”) is the controller of personal data collected through the website neonia.com and in the course of providing its services.
VAT: PT516628925
Address: NEONIA — Rua de Ceuta 116, 4050-190 Porto, Portugal
Tel: +351 22 32 69 500 | Email: info@neonia.com
2. Principles governing data processing
Illusionarium processes personal data in accordance with the General Data Protection Regulation (GDPR — EU Regulation 2016/679), observing the following principles:
Lawfulness, fairness and transparency — data is processed lawfully and transparently.
Purpose limitation — data is collected for specified, explicit and legitimate purposes.
Data minimisation — only data strictly necessary for the stated purposes is processed.
Accuracy — inaccurate data is corrected or erased without delay.
Storage limitation — data is retained only for as long as necessary.
Integrity and confidentiality — appropriate safeguards against unauthorised access, loss, or destruction.
3. Personal data processed
Depending on the nature of your interaction with Illusionarium, the following categories of data may be processed:
– Contact data: name, surname, address, telephone number, e-mail address.
– Commercial data: information relating to service provision, invoicing, and payments.
– Usage data: browsing information collected via cookies (see Cookie Policy).
– Recruitment data: CV and professional information in the context of job applications.
You are not obliged to share your personal data. However, in some cases, refusing to do so may prevent Illusionarium from providing the requested service.
4. Purposes and legal bases for processing
Personal data is processed for the following purposes, with the corresponding legal bases under the GDPR:
Service provision and contract performance — necessary for the performance of a contract (Art. 6(1)(b) GDPR).
Administrative, tax and accounting management — compliance with a legal obligation (Art. 6(1)(c) GDPR).
Marketing and communications — based on your consent or legitimate interests (Art. 6(1)(a) and (f) GDPR).
Recruitment — based on the candidate’s consent or pre-contractual steps.
Website analytics (Google Analytics) — based on your consent (Art. 6(1)(a) GDPR).
5. Retention periods
Personal data is retained only for the period necessary for the purposes for which it was collected, or for the period required by law. Retention periods are determined by factors such as:
– Legal obligations to retain data (e.g. tax records — 10 years).
– Applicable limitation periods.
– Existence of pending disputes.
6. Sharing of personal data
Illusionarium may share your data with:
– Subcontractors: service providers acting on behalf of Illusionarium, bound by contract and prohibited from using the data for their own purposes.
– Public authorities: when legally required (tax, judicial or regulatory authorities).
– Other entities: with your explicit consent.
Illusionarium does not sell, rent, or otherwise make personal data commercially available to third parties.
7. International transfers
Some of our service providers (in particular Google LLC, for analytical purposes) operate outside the European Economic Area. Such transfers take place under appropriate legal safeguards, including the EU-U.S. Data Privacy Framework. Further information: https://policies.google.com/privacy.
8. Your rights
As a data subject, you have the following rights under the GDPR:
Right of access (Art. 15) — to know what data we process and how.
Right to rectification (Art. 16) — to have inaccurate or incomplete data corrected.
Right to erasure (Art. 17) — the ‘right to be forgotten’, subject to applicable legal exceptions.
Right to restriction of processing (Art. 18) — to temporarily block use of your data.
Right to data portability (Art. 20) — to receive your data in a structured, machine-readable format.
Right to object (Art. 21) — to object to processing based on legitimate interests.
Right to withdraw consent (Art. 7(3)) — at any time, without retroactive effect.
To exercise any of these rights, please contact us in writing: info@neonia.com | Rua de Ceuta 116, 4050-190 Porto, Portugal.
To manage or withdraw your cookie consent at any time, use the cookie settings link in the footer of the website.
You also have the right to lodge a complaint with the Portuguese data protection supervisory authority (CNPD): www.cnpd.pt
9. Security
Illusionarium implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, or accidental disclosure, including access controls, secure storage, and internal information security procedures. Whilst we apply best-practice security measures, the transmission of information over the internet cannot be guaranteed to be entirely secure.
10. Cookies
Illusionarium uses cookies on its website. For detailed information on the cookies used, their purposes, duration, and how to manage your preferences, please refer to our Cookie Policy: https://neonia.com/en/cookie-policy/
11. Updates to this Policy
This Privacy Policy may be updated periodically to reflect changes in law or our practices. The current version will always be available on this page.
Date: 11 March 2026
