Version of September 11, 2021
We care about protecting your privacy, ensuring the processing of your personal data in compliance with the applicable legal provisions on data protection.

In this regard, we recommend reading this Privacy Policy and its updates. If the Privacy Policy is modified, the date of the last change, available at the top of this page, will also be updated.

This policy covers:

• The data controller

• What personal data is collected and processed

• How personal data is obtained

• How personal data is used

• The legal basis for using personal data

• How long personal data is retained

• With whom personal data is shared

• How personal data is protected

• To which countries personal data is transferred

• Your rights regarding your personal data

The Data Controller

The entity responsible for collecting and processing your personal data is Dr. Leonice Cover Lopes, with registration number 60696L with the Lisbon Regional Council of the Portuguese Bar Association.

If you wish to contact our Privacy Officer, you should send a written communication to the contacts provided in this policy.

What Personal Data is Collected and Processed

"Personal data" refers to any information, of any nature and in any format, related to an identified or identifiable individual. An individual is considered identifiable if they can be directly or indirectly identified, for example, through their name, identification number, location data, electronic identifier, or other elements that allow their identification, such as specific details of their physical, physiological, genetic, or economic identity.

We may collect your personal data during the provision of our services, through the use of our website, or as a result of interactions with our staff or clients.

The personal data processed includes:

• Identification data, such as your name (including prefix or title), company, job title, or position, and your connection to a specific person;

• Contact data, such as mailing address, email address, and phone numbers;

• Financial information, such as tax identification number or payment methods;

• Technical information, such as data on your visits to our website or materials and communications sent electronically;

• Data provided for meeting scheduling or event attendance, including accessibility restrictions;

• Background information, provided by you or collected as part of client acceptance processes, including financial, administrative, and business marketing details;

• Case-related information;

• Personal data obtained in our name or generated by our clients as part of service provision, including special categories of data;

• Data collected through our website usage, including cookies; and

• Any other data you may provide us with.

How Personal Data is Obtained

We collect your data in various ways, including:

• During the hiring process of our services, which may extend to third parties when necessary, during service provision;

• Through our IT tools and applications, including our website and electronic communications;

• When you provide it to us or interact directly with us, such as through contact with our coworkers;

• Through other sources, including publicly available data used to keep your information up to date.

How We Use Your Data

We collect and process your personal data in various ways, including through the use of our website and services. We use your data:

• To provide our services, which may include processing third-party personal data on behalf of our clients;

• To provide information you request from us;

• To promote our services, by sending news, publications, and/or newsletters;

• To promote events and/or seminars organized or co-organized by our office;

• To manage and direct our relationship with you;

• To comply with tax laws, anti-money laundering, and counter-terrorism financing regulations, as well as for conflict verification;

• To comply with legal obligations, regulatory compliance, and risk management, including exercising rights or defending cases in courts;

• To provide and improve our website, including auditing and monitoring its usage;

• For recruitment purposes.

Legal Basis for Processing Personal Data

We process your data:

• With your consent, given in writing, orally, or by validating an option, provided it is free, informed, specific, and unequivocal;

• As part of pre-contractual steps or contractual obligations, including the provision of legal services;

• To initiate or defend legal actions;

• To comply with regulatory and legal obligations;

• For legitimate business purposes. Please refer to “How We Use Your Data” for more details.

Providing your personal data is entirely voluntary. However, it is a mandatory requirement for the provision of our services.

How Long We Retain Your Data

We process and store your personal data according to the purposes for which they are processed or when there is a specific legal and/or regulatory obligation for their retention.

Additionally, data is retained in accordance with limitation periods for filing legal claims.

Once the maximum retention period is reached, your personal data will be irreversibly anonymized (with anonymized data being retained) or securely destroyed.

With Whom We Share Your Personal Data

Your data may be shared with:

• Governmental and judicial authorities, such as courts or tax authorities;

• Our professional consultants and auditors;

• Service providers we hire for support services, such as text processing, translations, copying, and document review;

• IT service providers;

• Third parties involved in the services we provide to clients, with their prior consent, such as lawyers, enforcement agents, local consultants, and others;

• Entities involved in organizing or co-hosting events or seminars.

Whenever your data is transmitted to subcontractors, we take the necessary contractual measures to ensure that they respect and protect your personal data, only engaging subcontractors who provide adequate guarantees for implementing technical and organizational measures for this purpose.

When necessary, or for the reasons outlined in this policy, personal data may also be shared with regulatory authorities, courts, and official entities. In rare cases, we may be required to disclose your data to comply with legal requirements.

We may use social networks such as LinkedIn and Twitter. If you use these services, you should review their privacy policies to understand how they handle your personal data.

WE DO NOT SELL, RENT, OR COMMERCIALLY SHARE PERSONAL DATA WITH THIRD PARTIES.

How We Protect Your Personal Data

We use a variety of technical and organizational security measures to help protect your personal data from destruction, loss, alteration, disclosure, and unauthorized access, in accordance with applicable data protection laws.

To Which Countries We Transfer Your Personal Data

To provide our services, it may be necessary to transfer your personal data to locations outside Portugal.

Therefore, we may transfer your personal data to a third country outside the European Economic Area (EEA) that is not included in the list of countries deemed to have adequate data protection levels by the European Commission. In such cases, we will ensure that data transfers comply strictly with applicable legal standards, specifically Chapter V of the GDPR.

Your Rights Regarding Your Personal Data

As the data subject, you may exercise the following rights at any time, within legal limits, by sending a written communication to leonicelopes-60696l@adv.oa.pt:

• Right of Access – to obtain confirmation of which personal data is processed and related information;

• Right to Rectification – to request the correction of inaccurate personal data or the completion of incomplete data;

• Right to Erasure – to request the deletion of personal data, provided there are no valid grounds for retention;

• Right to Data Portability – to receive data in a commonly used digital format or request its direct transmission to another entity;

• Right to Withdraw Consent – to withdraw consent at any time, without affecting the legality of prior processing;

• Right to Object – to object to data processing when legitimate interests do not override personal rights and freedoms;

• Right to Restriction of Processing – to request the limitation of data processing in certain circumstances.