Privacy Policy
Last updated: 1 July 2026
1. Data Controller
The controller responsible for processing the personal data collected through this website (hereinafter, the "Website") is IMOLEGAL — Arantes, Quintela, Arriaga, Cabral & Associados, Sociedade de Advogados e Consultores, SP, RL (hereinafter, "IMOLEGAL" or "we"), identified as follows:
- Company name: IMOLEGAL — Arantes, Quintela, Arriaga, Cabral & Associados, Sociedade de Advogados e Consultores, SP, RL
- Tax ID (NIF): 519201876
- Registered office: Edifício A' Tower, Av. Conselheiro Fernando de Sousa, no. 11 A, 1070-072 Lisbon, Portugal
- General contact email: geral@imolegal.pt
- Data protection email: privado@imolegal.pt
- Phone: +351 211 337 216
- Office hours: Monday to Friday, 09:00 – 19:00
2. Personal Data Processed and Purposes
IMOLEGAL processes personal data in different contexts as set out in the table below:
| Activity | Data processed | Purpose | Legal basis | Retention period |
|---|---|---|---|---|
| Contact and information requests (web form) | Name, email, phone (optional), company (optional), subject, message | Responding to the information or contact request submitted by the user | Legitimate interest [Art. 6(1)(f) GDPR] / Pre-contractual measures [Art. 6(1)(b)] | 12 months after the last contact or closure of the matter |
| Unsolicited job applications (Careers) | Name, email, CV, cover letter and any other submitted documents | Reviewing and evaluating applications for potential integration into the team | Applicant's consent [Art. 6(1)(a) GDPR] | 12 months; renewable with new consent |
| Provision of legal services / contractual relationship | Identification details, contact information, financial data and any other data required for the service | Performance of the service agreement; compliance with legal obligations (accounting, invoicing, professional ethics) | Performance of a contract [Art. 6(1)(b) GDPR]; Legal obligation [Art. 6(1)(c)] | 10 years after termination of the contractual relationship (accounting and professional ethics obligations) |
| Website browsing / Analytical cookies | IP address (anonymised), pages visited, time on site, device | Statistical analysis of Website usage and improvement of content | Consent [Art. 6(1)(a) GDPR] — only after acceptance in the cookie banner | As set out in the Cookie Policy (typically 13 months) |
| Marketing communications (newsletter) | Name, email | Sending communications about IMOLEGAL services, publications and events | Consent [Art. 6(1)(a) GDPR] | Until consent is withdrawn; 3 years without interaction |
Note on sensitive data: IMOLEGAL does not intentionally request or process special categories of personal data (health data, racial origin, political beliefs, etc.) through the Website. Should such data be voluntarily provided by the user, it will be processed on the basis of explicit consent and with enhanced protective measures.
3. Recipients of Personal Data
Personal data processed by IMOLEGAL may be shared with the following categories of recipients, only where strictly necessary and always with appropriate safeguards in place:
- Technology service providers (processors): web hosting, website management, email tools, CRM and analytics providers — bound by data processing agreements compliant with the GDPR;
- Regulatory bodies and public authorities: the Portuguese Bar Association, Tax Authority and other bodies, when required by law or court order;
- External professionals: consultants, experts or other professionals involved in service delivery, subject to confidentiality obligations;
- Other law firms or correspondent firms: in the context of cooperation on matters requiring it, under equivalent confidentiality obligations.
IMOLEGAL does not sell, assign or transfer personal data to third parties for commercial or advertising purposes.
4. International Data Transfers
As a general rule, personal data processed by IMOLEGAL is stored on servers located within the European Economic Area (EEA). However, some of the technology tools used (in particular analytics tools or social media platforms) may involve the transfer of data to third countries.
In such cases, IMOLEGAL ensures that:
- The transfer is based on an adequacy decision issued by the European Commission, or
- Appropriate safeguards are in place, in particular Standard Contractual Clauses approved by the European Commission, and, where necessary, supplementary measures ensuring a level of protection essentially equivalent to that within the European Union.
Third-party cookies that may involve international transfers are identified in the Cookie Policy. Users may refuse such cookies via the preference manager available on the Website.
5. Data Retention
Personal data is retained only for as long as necessary for the purposes that justified its collection, or as required by law, as indicated in the table in section 2.
The criteria used to determine retention periods include:
- The period necessary to respond to the request or provide the service;
- Statutory retention periods for accounting, tax and professional ethics documentation;
- The duration of the consent given by the data subject;
- The existence of a pending dispute or claim that justifies retention.
Once the applicable retention period has elapsed, data is permanently deleted or irreversibly anonymised.
6. Data Subject Rights
Under the GDPR, users have the following rights regarding their personal data:
| Right (GDPR) | What it allows | How to exercise it |
|---|---|---|
| Access (Art. 15) | Obtain confirmation that your data is being processed and, if so, access a copy of it and information about the processing. | Written request to the data protection email |
| Rectification (Art. 16) | Request correction of inaccurate or incomplete data. | Written request to the data protection email |
| Erasure (Art. 17) | Request deletion of your data ("right to be forgotten"), where applicable. | Written request; subject to legal exceptions |
| Restriction (Art. 18) | Request that processing be restricted to certain purposes, in certain circumstances. | Written request to the data protection email |
| Portability (Art. 20) | Receive your data in a structured, machine-readable format or request its transmission to another controller. | Applies to data processed on the basis of consent or contract |
| Objection (Art. 21) | Object to processing based on legitimate interest or for direct marketing purposes. | Written request; immediate effect for marketing |
| Withdrawal of consent | Withdraw consent at any time, without affecting the lawfulness of prior processing. | By email or through the cookie settings |
| Complaint | Lodge a complaint with the CNPD (www.cnpd.pt) if you believe your data is being processed unlawfully. | Directly with the CNPD — Portuguese Data Protection Authority |
Response timeframe: IMOLEGAL will respond to requests within 30 days, which may be extended by a further 60 days in complex cases, with prior notice to the data subject.
7. Cookies
The Website uses cookies and similar technologies. For detailed information on the types of cookies used, their purposes, retention periods and how to manage your preferences, please refer to our Cookie Policy, available in the Website footer.
8. Data Security
IMOLEGAL implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, alteration or unlawful disclosure. These measures include, among others:
- Data transmission via HTTPS protocol with TLS encryption;
- Access controls and authentication on internal platforms;
- Data backup and recovery procedures;
- Staff training and awareness on data protection matters;
- Periodic review of security measures in place.
Notwithstanding the above, no data transmission or storage system can be guaranteed as absolutely secure. Should you detect any vulnerability or security incident on the Website, please notify us immediately using the contact details provided in section 9.
9. Contact and Exercise of Rights
To exercise any of the rights described in section 6, or for any question relating to data protection, you may contact IMOLEGAL through the following means:
- Email (data protection): privado@imolegal.pt
- General email: geral@imolegal.pt
- Phone: +351 211 337 216
- Address: Edifício A'Tower, Av. Conselheiro Fernando de Sousa, no. 11 A, 1070-072 Lisbon, Portugal
Requests must identify the data subject and the right(s) to be exercised. Additional documentation may be requested to verify identity.
Supervisory Authority: Comissão Nacional de Proteção de Dados (CNPD) · Rua de São Bento, 148-3rd floor, 1200-821 Lisbon · Tel: +351 213 928 400 · www.cnpd.pt · geral@cnpd.pt — Data subjects have the right to lodge a complaint with the CNPD at any time, without prejudice to any other legal remedy.
10. Automated Decision-Making and Profiling
IMOLEGAL does not use solely automated decision-making processes that produce legal effects or similarly significantly affect data subjects, nor does it carry out profiling with such effects.
11. Changes to This Privacy Policy
This Privacy Policy may be updated periodically to reflect legislative, organisational or processing practice changes. The updated version will be published on the Website with the revision date indicated. We recommend that you consult this Policy regularly. In the event of materially significant changes, IMOLEGAL will notify data subjects by email where possible. The version currently in force is dated 1 July 2026.