Privacy Policy

1. Introduction

ABRS Advogados is committed to protecting the privacy and personal data of website visitors, clients and other contacts. This Privacy Policy explains how personal data is collected, used, stored and protected in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and Law 58/2019.

2. Data Controller

3. Personal Data Collected

We may collect and process the following categories of personal data:

3.1. Data provided directly by you

• Full name
• Email address
• Phone number
• Message or description of the matter submitted
• Preferred language (Portuguese, English or Spanish)

3.2. Data collected automatically

• IP address
• Browser and device type
• Date and time of access
• Visited pages
• Cookies (please see the cookies section below)

4. Purposes of Processing

Personal data may be processed for the following purposes:

• Handling requests for information: to review and respond to contact requests or messages submitted through the website
• Professional communication: to contact you regarding the matter or information request submitted
• Client and contact management: to organise communications and records through the firm's CRM tools
• Website improvement: to analyse and improve the website's functionality, usability and security
• Compliance with legal and professional obligations: to comply with legal, regulatory and professional duties applicable to the legal profession in Portugal

5. Legal Basis for Processing

The processing of personal data relies on one or more of the following legal bases:

• Consent: where you submit data through the contact forms and consent is requested
• Performance of pre-contractual steps or a contract: where processing is necessary to assess or manage a professional matter
• Legitimate interests: for the secure management of communications, records and website operations
• Legal obligation: where processing is required by law or by applicable professional duties

6. Sharing Data with Third Parties

Personal data may be shared with third-party service providers or authorities where this is necessary and subject to appropriate safeguards.

• CRM and communication providers: such as HubSpot, for the management of contact requests and communications
• Hosting and infrastructure providers: such as Amazon Web Services (AWS), for website hosting and related technical infrastructure
• Competent authorities: where disclosure is legally required, including courts, regulators or other public authorities

ABRS Advogados does not sell, rent or disclose personal data to third parties for their own marketing purposes without an appropriate legal basis.

7. Data Retention Period

Personal data is kept only for the period necessary for the purposes for which it was collected, including:

• Requests that do not lead to an ongoing matter: up to 2 years after the last relevant contact, unless a different period is required or justified
• Client data and matter-related records: for the duration of the professional relationship and, where applicable, for the additional period required by law or professional duties
• Data retained for legal compliance: for the period established by the applicable legislation or regulatory requirements

After the relevant retention period ends, the data is deleted or securely anonymised unless longer retention is required by law.

8. Your Rights

Under the GDPR, you may have the following rights in relation to your personal data:

To exercise any of these rights, please contact us at general@abrs-advogados.pt, +351 923 241 549 or WhatsApp.

9. Data Security

Appropriate technical and organisational measures are used to protect personal data against unauthorised access, loss, destruction or alteration, including:

• SSL/TLS encryption for data transmission
• Secure storage on protected servers
• Restricted access to personal data
• Regular backups
• Internal data-protection procedures

10. Cookies

This website uses cookies to improve the browsing experience and to support technical, analytical and preference-related functions. Cookies are small text files stored on your device that help recognise your browser in later visits.

Types of cookies used

• Essential cookies: required for the basic operation of the website
• Preference cookies: used to store language or similar browsing preferences
• Analytics cookies: used to understand how visitors interact with the website

You may configure your browser to refuse cookies or to alert you when cookies are being sent. Some parts of the website may not function properly without them.

11. International Data Transfers

Some service providers used by ABRS Advogados, including certain CRM, analytics or infrastructure providers, may process data outside the European Economic Area (EEA). Where that happens, appropriate safeguards are adopted in accordance with applicable data-protection law.

• Adequacy decisions, where available
• Standard contractual clauses approved by the European Commission, where relevant
• Additional technical and organisational safeguards, where appropriate

12. Children's Data

This website is not intended for children under the age of 16. We do not knowingly collect personal data from children. If you believe that a child has provided personal data through the website, please contact us so that appropriate measures can be taken.

13. Right to Lodge a Complaint

If you believe that the processing of your personal data breaches the GDPR or other applicable data-protection law, you may lodge a complaint with the competent supervisory authority, including:

14. Changes to This Policy

This Privacy Policy may be updated from time to time to reflect changes in legal requirements, internal procedures or website functionality. The latest version will be published on this page together with the updated revision date.

15. Contact

For questions about this Privacy Policy or about the processing of personal data, please contact us using the following details: