Privacy Policy

1. Data Controller

The controller responsible for processing your personal data is:

CNST – CONSALT Business & Finance, Lda.
Rua do Fontanário 35
2640-410 Mafra, Portugal
NIPC: 519129709

Email: ola@consalt.pt
Phone: +351 223 221 460

2. Personal Data We Process

Depending on how you interact with us, we may process the following personal data:

• Identification and contact details, such as your name, email address and telephone number.
• Information you provide through forms on our website, by email, by telephone or through other direct communications.
• Information relating to enquiries, proposals and the services you request or receive.
• Billing and payment information where necessary to provide our services or meet legal obligations.
• Website usage and cookie information, as described in our Cookies Policy.

Please do not send sensitive personal data unless it is necessary for your request or our services.

3. Purposes and Legal Bases

We process personal data for the following purposes:

• To respond to enquiries and communicate with you. The legal basis is taking steps at your request before entering into a contract, or our legitimate interest in responding to business communications.
• To prepare proposals and provide the services you request or contract. The legal basis is taking steps at your request before entering into a contract or performing a contract with you.
• To manage our client relationship and provide customer support. The legal basis is performance of a contract or our legitimate interest in managing and supporting our business relationships.
• To issue invoices, process payments and maintain accounting records. The legal basis is performance of a contract and compliance with legal obligations.
• To meet our tax, accounting and other legal or regulatory obligations. The legal basis is compliance with a legal obligation.
• To send newsletters or other marketing communications where you have given consent or where otherwise permitted by law. Where processing is based on consent, you may withdraw it at any time.
• To operate, maintain, protect and improve our website and services. The legal basis is our legitimate interests, or your consent where required, for example for non-essential cookies.

4. Data Sharing and Service Providers

We may share personal data with service providers that support our operations, such as providers of website hosting, email, customer support, billing, payment processing and data storage.

These providers may process personal data on our behalf and under appropriate contractual safeguards. We will identify the providers actually used by CONSALT where required and keep this information up to date.

We may also disclose personal data where required by law, by a competent authority or to establish, exercise or defend legal claims.

5. International Data Transfers

Some of our service providers may process personal data outside the European Economic Area. Where personal data is transferred outside the European Economic Area, we will ensure that an appropriate transfer mechanism is in place, such as an adequacy decision or Standard Contractual Clauses, where required by applicable data protection law.

[Confirm whether CONSALT’s current providers process personal data outside the European Economic Area and add the relevant countries or transfer safeguards where applicable.]

6. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy, including to meet legal, accounting and tax obligations.

The applicable retention period depends on the type of data and the reason for processing. Client, invoicing and accounting records are retained for the periods required by applicable law. Enquiry data is retained for [insert period or criteria]. Newsletter data is retained until you withdraw your consent or unsubscribe, except for limited information that may be kept to record and respect your choice.

7. Your Data Protection Rights

Subject to the conditions and limitations set out in applicable law, you may have the right to:

• Request access to your personal data.
• Request correction of inaccurate or incomplete personal data.
• Request erasure of your personal data.
• Request restriction of processing.
• Object to processing based on our legitimate interests.
• Request the portability of personal data you have provided to us, where the right applies.
• Withdraw your consent at any time where processing is based on consent.

Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise your rights, contact us at ola@consalt.pt. You also have the right to lodge a complaint with the Portuguese Data Protection Authority, Comissão Nacional de Proteção de Dados (CNPD).

8. Whether You Must Provide Personal Data

Where we need personal data to take steps at your request, provide a contracted service or comply with a legal obligation, we will explain which information is required. If you do not provide information that is necessary for these purposes, we may be unable to respond to your enquiry, prepare a proposal or provide the relevant services.

9. Cookies

We use cookies and similar technologies on our website. Some cookies may be necessary for the website to function, while others may be used to improve the website or understand how visitors use it.

Please see our Cookies Policy for details about the cookies used, their purposes and how you can manage your preferences.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our processing activities or legal requirements. The latest version will be published on this page together with its effective date.

11. Contact

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

Email: ola@consalt.pt
Phone: +351 223 221 460