1. Introduction

This Privacy Policy explains how [Company Name] (“we”, “us”, or “our”) collects, uses, and protects your personal data when you visit [Website URL] (the “Website”). We are committed to protecting your privacy and to processing your personal data in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) and applicable Portuguese data protection law.

By using the Website, you acknowledge that you have read and understood this Privacy Policy.

2. Data Controller

The entity responsible for processing your personal data (the “data controller”) is:

• Entity: [Company Name]
• Registered office: [Registered office address]
• Legal person / tax number (NIPC/NIF): [Company registration number]
• Email: [Contact email address]
• Telephone: [Contact telephone number]
• Data Protection Officer (if appointed): [DPO name and contact, or “Not applicable”]

3. What Personal Data We Collect

Depending on how you interact with the Website, we may collect the following categories of personal data:

• Contact data you provide voluntarily — for example, when you fill in a contact form or send us an email — such as your name, email address, telephone number, and the content of your message.
• Technical and usage data collected automatically when you browse the Website, such as your IP address, browser type and version, device information, operating system, referring pages, and information about how you use the Website.
• Cookie data collected through cookies and similar technologies, as described in Section 6.

We do not intentionally collect any special categories of personal data (such as data revealing health, religious beliefs, or political opinions) through the Website.

4. How We Collect Your Data

We collect personal data:

• Directly from you, when you contact us or submit information through the Website;
• Automatically, through cookies and similar technologies when you use the Website;
• From third-party services, such as analytics providers, where applicable.

5. Purposes and Legal Bases for Processing

We process your personal data for the following purposes and on the following legal bases under Article 6 of the GDPR:

• To respond to your enquiries and communicate with you — legal basis: your consent, or our legitimate interest in responding to messages you send us.
• To operate, maintain, and improve the Website — legal basis: our legitimate interest in ensuring the Website functions correctly and securely.
• To analyse how the Website is used — legal basis: your consent (for non-essential analytics cookies).
• To comply with legal obligations — legal basis: compliance with a legal obligation to which we are subject.

Where processing is based on your consent, you may withdraw that consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

6. Cookies and Analytics

The Website may use cookies and similar technologies to ensure it functions properly, to remember your preferences, and to understand how visitors use the Website. Non-essential cookies are only used with your consent. For detailed information about the cookies we use and how you can manage them, please see our [Cookie Policy]([Cookie Policy URL]).

7. Who We Share Your Data With

We do not sell your personal data. We may share your personal data with:

• Service providers (processors) who perform services on our behalf, such as website hosting, email, and analytics providers, and who are contractually bound to process personal data only on our instructions and to keep it secure;
• Public authorities or third parties where we are required to do so by law, or to protect our legal rights.

8. International Data Transfers

Your personal data is generally processed within the European Economic Area (EEA). Where a service provider processes personal data outside the EEA, we ensure that appropriate safeguards are in place in accordance with the GDPR — such as an adequacy decision by the European Commission or the use of Standard Contractual Clauses.

9. How Long We Keep Your Data

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. When your personal data is no longer needed, we will securely delete or anonymise it.

• Contact enquiries: [e.g., retained for X months/years after the enquiry is resolved].
• Technical/analytics data: [e.g., retained for the period defined in our Cookie Policy].

10. Your Rights

Under the GDPR, you have the following rights in relation to your personal data:

• Right of access — to obtain confirmation of whether we process your data and a copy of it;
• Right to rectification — to have inaccurate or incomplete data corrected;
• Right to erasure — to request deletion of your data in certain circumstances;
• Right to restriction of processing — to request that we limit how we use your data;
• Right to data portability — to receive your data in a structured, commonly used, machine-readable format;
• Right to object — to object to processing based on legitimate interests;
• Right to withdraw consent — where processing is based on consent.

To exercise any of these rights, please contact us using the details in Section 13. We will respond within the timeframes required by law.

If you believe that our processing of your personal data infringes data protection law, you have the right to lodge a complaint with the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD) — www.cnpd.pt.

11. How We Protect Your Data

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

12. Children’s Privacy

The Website is not directed at children, and we do not knowingly collect personal data from children. If you believe that a child has provided us with personal data, please contact us so that we can take appropriate action.

13. Links to Third-Party Websites

The Website may contain links to third-party websites. This Privacy Policy does not apply to those websites, and we are not responsible for their privacy practices. We encourage you to read the privacy policy of any website you visit.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will take effect as soon as they are published on the Website, and the “Last updated” date above will be revised accordingly. We encourage you to review this page periodically.

15. Contact Us

If you have any questions about this Privacy Policy or about how we handle your personal data, please contact us at:

• [Company Name]
• Email: [Contact email address]
• Address: [Registered office address]

This Privacy Policy is provided as a general template for an informational website and does not constitute legal advice. You should have it reviewed by a qualified professional before publishing, to ensure it accurately reflects your actual data processing activities and meets all applicable legal requirements.