Política de Privacidade - DPO Consulting

Privacy Policy

DPO Consulting respects your privacy, and the personal data you provide to us as a data subject are protected in accordance with data protection legislation, namely the General Data Protection Regulation (Regulation (EU) 2016/679) and Law No. 58/2019 of 8 August.

I. INTRODUCTION

The website accessible a https://www.dpoconsulting.pt, has been developed, operated, and maintained by or on behalf of DPO Consulting, a registered trademark of Just Like You, Lda.
DPO Consulting is a consulting services company with multidisciplinary expertise in the areas of Privacy, Data Protection, and Information Security. We are fully committed to protecting the privacy and personal data entrusted to us, and their protection is a priority for us.
In a spirit of transparency, accountability, and fairness towards data subjects, this policy describes the processing of personal data carried out, helping data subjects to understand what personal data is collected, how and why it is used, to whom it is disclosed, and how their privacy is safeguarded.
The collection and processing of data carried out through this website complies with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 – the General Data Protection Regulation (GDPR) – and other applicable legislation.
If you have any doubts, comments, or suggestions regarding our Privacy Policy, please contact us using the contact details provided in section XI of this policy.

II. DATA CONTROLLER

Just Like You, Unipessoal Lda., ner of the DPO Consulting trademark, a legal entity registered under no. 508375266 with its head office at Rua Eugénio de Castro, 370 – H185, 4100-225 Porto, is the entity responsible for processing the personal data associated with its service provision activities.

III. PURPOSES OF PROCESSING

We will only process your personal data in accordance with a specific and legitimate purpose or purposes determined at the time of collection, and will not subsequently process that data in a manner incompatible with those purposes, except for archiving in the public interest, scientific or historical research, or statistical purposes, in which case, under the GDPR, such incompatibility does not apply.
In the course of our activities, we collect and process data by various means, including in person, online, via our website, and by telephone. The data collected is strictly necessary for the purposes for which it is collected.
In particular, the personal data collected may be processed for the following purposes:
- To identify the data subject;
- To provide the requested services or information;
- For invoicing of services provided and accounting management;
- To communicate changes to the terms of the contracted services;
- To comply with legal obligations to which we are subject;
- With the client’s consent, to send promotional materials or special offers on our behalf or on behalf of our group companies and marketing partners;
- To maintain, optimize, and personalize website navigation, as well as to ensure its security;
- To manage the contractual relationship and its execution;
- To adapt the services we provide to the needs and interests of our clients;
- For recruitment and selection of job applicants.

IV. PERSONAL DATA COLLECTED

Personal data means any information, of any kind, relating to an identified or identifiable natural person (the data subject). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier.
In the course of our activities, we may process the following personal data, as necessary and applicable:
- Identification data (such as name, date of birth, identity card information, nationality);
- Contact data (such as address, telephone number, email);
- Professional data (such as job title, position, company, office address, business activities);
- Academic data and professional experience (such as education, qualifications, certifications, languages, CV);
- Billing and expense data (such as fees, expenses, tax identification number);
- Image and audio-visual data (such as photographs and video recordings).
O The personal data we collect shall be subject to electronic processing and stored in databases, in strict compliance with applicable European and national legislation on privacy, data protection, and information security.
As a matter of principle, we do not collect, nor do we intend to collect, personal data of children, in view of the nature of the services we provide.

V. LEGAL BASES FOR PROCESSING PERSONAL DATA

We process your personal data only in accordance with the lawful bases set out in the GDPR, namely, and where applicable:
- The consent of the data subject;
- The performance of a contract with the data subject or the taking of pre-contractual steps at the data subject’s request;
- Compliance with a legal or regulatory obligation to which we are subject;
- The pursuit of legitimate interests, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject.
Where consent is the legal basis for processing personal data, the data subject has the right to withdraw consent at any time, easily and without prejudice, without affecting the lawfulness of processing carried out on the basis of consent previously given, nor subsequent processing of the same data based on another legal basis.

VI. RETENTION OF PERSONAL DATA

TThe period for which data is stored and retained varies according to the purpose for which the information is processed.
Certain legal requirements oblige us to retain data for a minimum period, in which case such period will be applied.
Where no legal retention period exists, data will be stored and retained only for the minimum time necessary for the purposes for which it was collected and subsequently processed, or until the data subject exercises the right to withdraw consent (where applicable). After this period, the data will be handled appropriately, being either destroyed or anonymized.

VII. RIGHTS OF THE SUBJECTS

Under the provisions of the GDPR, data subjects may exercise, at any time, the rights of access, rectification, erasure, restriction of processing, portability, objection, not to be subject to automated individual decision-making, and the right to lodge a complaint with a supervisory authority (in Portugal, the National Data Protection Commission – CNPD).
Where processing is based on consent, the data subject has the right to withdraw consent at any time, without this affecting the lawfulness of processing carried out on the basis of previously given consent.
To exercise these rights, please send your request to dpo@dpoconsulting.pt, and we will duly process it to ensure the fulfillment of your rights.

VIII. SECURITY OF PROCESSING

We have adopted technical and organizational measures, as well as internal controls, designed to ensure a level of security appropriate to the risk in relation to privacy, data protection, and information security. These measures are periodically reviewed and enhanced and are intended to safeguard and protect your personal data in terms of availability, authenticity, integrity, and confidentiality, as well as to prevent loss, misuse, alteration, unauthorized processing or access, and any other form of unlawful processing.

IX. DATA TRANSFERS

In the course of our activities, we may use processors to process your data on our behalf, which implies access to such data by those entities. Where this occurs, we take appropriate, contractually stipulated measures to ensure that such third parties, subcontractors, partners, or group entities provide sufficient and appropriate guarantees to implement technical and organizational measures and act only in accordance with our instructions.
It may be necessary to communicate personal data to third countries or international organizations. In such cases, we strictly comply with applicable legal provisions and determine the adequacy of the country or organization in question concerning the applicable requirements for such transfers, and we do not carry out international transfers of personal data to entities that do not provide guarantees of maintaining the level of protection required by the GDPR.

X. COOKIES

We use cookies on our website. To learn more about cookies and how we use them, please consult our Cookie Policy.

XI. CONTACTOS

Should you have any questions or concerns regarding the collection and processing of personal data, or should you wish to exercise your rights as a data subject, you may contact us via email at dpo@dpoconsulting.pt.

XII. REVIEW OF THIS PRIVACY POLICY

We reserve the right to amend this Privacy Policy without prior notice, with immediate effect upon publication on the website.
After publication, the user will be bound by the new terms when browsing our website and should therefore consult the most recent version whenever accessing it.

September 2025.

Privacy Policy

Privacy Policy

I. INTRODUCTION

II. DATA CONTROLLER

III. PURPOSES OF PROCESSING

IV. PERSONAL DATA COLLECTED

V. LEGAL BASES FOR PROCESSING PERSONAL DATA

VI. RETENTION OF PERSONAL DATA

VII. RIGHTS OF THE SUBJECTS

VIII. SECURITY OF PROCESSING

IX. DATA TRANSFERS

X. COOKIES

XI. CONTACTOS

XII. REVIEW OF THIS PRIVACY POLICY

Contactos

Contact Details

Privacy Policy

Privacy Policy

I. INTRODUCTION

II. DATA CONTROLLER

III. PURPOSES OF PROCESSING

IV. PERSONAL DATA COLLECTED

V. LEGAL BASES FOR PROCESSING PERSONAL DATA

VI. RETENTION OF PERSONAL DATA

VII. RIGHTS OF THE SUBJECTS

VIII. SECURITY OF PROCESSING

IX. DATA TRANSFERS

X. COOKIES

XI. CONTACTOS

XII. REVIEW OF THIS PRIVACY POLICY

Subscribe to our newsletter and communications

Contactos

Contact Details

This site uses Cookies

Configure the Cookies