In this privacy statement we explain what personal data we process, for what purposes and with whom we share it, as well as your rights with regard to your data and who you can contact for further information. I. Who does it apply to and what does it cover? 1. This privacy statement applies to DPC Legal, with office at Rua Sacadura Cabral, nº 102, LJ 63, 2765-349 Estoril, Portugal. 2. We are committed to protecting your privacy and handling your information in an open and transparent manner. 3. This privacy statement identifies how we collect, handle, store and protect your personal data when: a) we are providing services to you or our clients; b) uses "our site"; or c) carries out any other actions within the scope of our activity, as described below. 4. When we refer to "our site" or "this site" in this policy, we are talking about the specific DPC Legal page with a URL starting with www.dpclegal.pt. 5. Through this privacy statement we also inform you about when we share your personal data with external service providers. 6. Within the scope of this privacy statement, your information may be referred to as "personal information" or "personal data". We may sometimes refer to the handling, collection, protection and retention of your personal data as "processing" of that personal information. II. What data do we collect? 7. Through this privacy statement we also inform you about when we share your personal data with external service providers. 8. We may collect and obtain your personal data in the course of our provision of services to you or our clients, for validation within the scope of our services (or discussion of possible services we may provide), as well as as as a user of this site. 9. We process your personal data because it is provided directly by you (for example, in a form on our website) or by other people (for example, your employer or consultant or suppliers) or because it is publicly available. 10. We may also process your personal data because we observe or infer it through the way you interact with us or with others. Further information on how we use cookies and other tracking technologies and how you can control them can be found in the Cookie Policy. 11. The personal data we process may include: name; age; date of birth; gender; email address; address; country of residence; lifestyle and social circumstances (e.g. your hobbies); family circumstances (e.g. your marital status and dependents); employment and education details (e.g. the organization you work for, job title and your education details); financial and tax information (e.g. your bank account, income and tax residency); social media applications and services we may provide; IP address; browser type and language; access times; complaint details; details of how you use our products and services; details of how you like to interact with us and other similar information. 12. The personal data we process may also include so-called "sensitive data" or "special data", such as details about: nutritional needs (for example, when you are invited for lunch), health (for example, so that we can provide suitable means for your presence on our premises) and sexual orientation (for example, if you send us details of your spouse or partner) and minors (for example, if you provide us with details of your children). 13. The types of personal and/or special data we process may vary depending on the nature of the services we provide to you or our clients, your interaction with us or the way you use our website. In some circumstances, we may also process other personal data because it is provided by you or because we are required to do so by law. 14. Where we receive personal data about you from a client of ours, we will take care to include clauses in the contract with that client to ensure that it complies with the relevant privacy laws and regulations; this may include, for example, that the client has obtained your consent to the processing under the terms of this privacy statement. 15. We understand the importance of protecting children's privacy. Our website and services are not intended for or intentionally targeted at children. It is our policy not to intentionally process children's personal data. III. How do we process your personal data? A. Use of personal information to provide services to our clients 16. We use your personal data to provide services to you or our customers. For this reason, we may use your personal data in the course of correspondence exchanged in connection with the services. Such correspondence may be with you, our customers, external service providers, suppliers, regulators or competent authorities. We may also use your personal data to confirm, verify and evaluate our services. 17. Since we provide different types of services, the way we use personal data in relation to our services varies. For example, we may use personal data: a) A client's legal representatives or employees working abroad when we assist them in complying with their tax obligations; b) Legal representatives, employees and clients of a client, in the course of an audit (or similar activity) for a client; c) From a client when we support them in preparing a tax return. B. Use of personal information for other tasks within the scope of our activity 18. In the course of our business, we may use your personal data for the following purposes: a) Compliance with applicable legal or regulatory requirements (e.g. for the purposes of complying with the money laundering regime); b) Response to requests and communications from the competent authorities; c) Creation of customer records and other administrative purposes; d) Tax consultancy; e) Customer relations, including: (i) sending you communications or details of our services that we believe may be of interest to you; (ii) contacting you to receive feedback on our services; and (iii) contacting you for market research or survey purposes. In these cases you have the opportunity to decline our invitations, communications or requests at any time. In specific cases, if necessary, for example if you have never been our client, we may ask for your consent before sending you communication materials or other marketing requests; f) Recruitment and business development (for example, interviews of a client's professionals may be used as part of our recruitment and business development materials with the permission of that professional); g) Protecting our rights and the rights of our customers. C. Use of personal information collected through our website 19. In addition to the above purposes, we may also use the data we collect through our website to: a) manage and improve our website; b) personalize the content of our site to allow a more targeted experience and draw your attention to information about our services that may be of interest to you; c) to manage and respond to any request you send through our website. IV. What are the legal grounds for processing personal information? 20. We use your personal data based on the following legal grounds: a) to fulfill the contract for the provision of our services with you or with our customers or suppliers, as the case may be; b) to comply with legal and regulatory obligations to which we are subject; c) to defend legitimate interests in the effective and lawful exercise of our activity, provided that such interests are not overridden by your interests. 21. The processing of your sensitive data for any purpose described above will be carried out on the basis of: i) your explicit consent to process such data; ii) the legal obligation to collect personal data for compliance with money laundering law (or other legal obligations imposed on us); iii) compliance with our obligations in matters of employment law, social security or social protection; iv) the exercise or defense of legal claims; or v) the data you have published. 22. The personal data we process when providing certain marketing content will only be shared after collecting your explicit, free, informed and unambiguous consent, where this is required by law. In each piece of marketing content, you can click on the option to unsubscribe from the communication (opt out) or unsubscribe in response to the e-mail or address, as the case may be. V. Who do we disclose your personal data to? ​ 23. For the purposes set out in the "How do we process your personal data?" section, we may disclose details about you to: third parties who provide services to us and/or our employees; competent authorities (including courts and regulators); employer and/or advisors; counselors; or other entities that require access to personal data relating to you. 24. Some of the recipients of your personal data mentioned above may be located in third countries whose laws may not offer the same level of data protection. In such cases, we will ensure that adequate safeguards are in place to protect your personal data in accordance with our legal obligations. Where the recipient of the data is external to DPC Legal, a data transfer agreement will be concluded with the recipient, based on standard contractual clauses approved by the European Commission for transfers of personal data to third countries. 25. In certain cases, we are obliged to disclose your personal data due to legal or regulatory requirements or in the course of legal proceedings. 26. Conversely, we may share non-personal information, including anonymized, masked and aggregated data for various purposes, including data analysis, surveys, studies and promotional purposes. VI. How do we protect your personal data? 27. We use physical, electronic and management security measures to guarantee the confidentiality and security of your personal data. These measures include: a) Relevant training to ensure compliance with privacy obligations when handling personal data; b) Administrative and technical controls to limit access to personal data; c) Technological security measures, including firewalls, encryption and antivirus software. 28. Although we use appropriate security measures once we have received your personal data, we remind you that data transmission over the Internet (including by e-mail) is never completely secure. We strive to protect personal data, but we cannot guarantee the security of the data you transmit to us or transmitted by us by this means. VII. How long do we keep your data? 29. We keep your personal data for the longer of the following periods: i) as long as necessary for the provision of the relevant services and for the agreed minimum period; ii) in the course of carrying out our business for the retention periods required by law or the retention and archiving policy in force, as the case may be; or iii) at the end of the litigation or investigation process relating to the underlying relationship. VIII. Rights 30. Of the wide range of rights you have in relation to the processing of personal data, we would point out, in particular, the right to: a) Access your personal data and request a copy of it; b) Request the updating, correction or alteration of their data that they believe to be incorrect or incomplete; c) Request the deletion of your personal data or limit the way we process it; d) Withdraw consent to processing (insofar as such processing has been consented to); e) Receive a copy of your data in a structured format, where applicable, as well as the right to portability (where processing has been consented to or contracted); f) Oppose the processing of your personal data. 31. To exercise any of your rights or if you have any other questions about the processing of your personal data, please contact us by e-mail at info@dpclegal.pt or by post at Rua Sacadura Cabral, nº 102, LJ 63, 2765-349 Estoril, Portugal. 32. If you wish to make a complaint about the way we process your data, you can use the same means. IX. Right to complain 33. Whenever you want to complain about the processing of personal data or have any questions about the privacy of your data, you should exercise your rights with the Data Protection Authority in your jurisdiction. X. Changes to the privacy statement 34. This privacy statement may be modified over time. 35. In order for you to be informed of the changes made, we will change the revision date at the top of this page. The new privacy statement applies from the date of revision. We encourage you to periodically review this statement in order to stay informed about it.