The present Privacy Policy sets the principles which govern the activities of processing personal data carried out by the law firm Pedro Pinto, Reis, Alexandre Jardim & Associados, Sociedade de Advogados, SP, RL ("pbbr"), while responsible for such. This policy also implements a privacy management system that guarantees a high and adequate level of protection of the personal data processed by pbbr within the development of its activities, in strict compliance with the applicable legislation.
This Privacy Policy is governed by the provisions of applicable legislation on privacy and personal data protection, most specifically, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 ("GDPR").
pbbr reserves the right to amend this Privacy Policy, when such amendment is necessary in view of the activities it undertakes and if required by the applicable legal framework.
Data Controller
pbbr, is the entity that determines the objectives and the means employed in the processing of personal data it carries out, within its activities and is deemed the data controller of such data.
The identification details of pbbr are:
Name: Pedro Pinto, Reis, Alexandre Jardim & Associados, Sociedade de Advogados, SP, RL;
Taxpayer number: 509 516 246;
Head office: Avenida da Liberdade, ner. 110, 6thfloor, 1250-146 Lisbon;
Tel: +351 21 326 4747;
E-mail address: dataprivacy@pbbr.pt
Principles governING personal data processing
The treatment of personal data carried out by pbbr is governed by the following principles:
- Lawfulness of processing of personal data, loyalty and transparency vis-à-vis the holders of personal data;
- Limitation of the purposes of processing, which must be specified, explicit and legitimate;
- Adequacy and limitation of the personal data collected to what is strictly necessary, taking into consideration the purposes for which they were collected;
- Accuracy and updating of personal data, through the adoption of appropriate measures to this effect;
- Retention of personal data for no longer than necessary to fulfil the purposes for which they were collected; and
- Integrity and confidentiality of personal data, by adopting appropriate technical and organisational measures to ensure their safety.
WHAT DATA DO WE PROCESS?
pbbr processes a variety of categories of personal data of data holders, who are essentially the lawyers and other professionals working with the firm, applicants, clients of pbbr or legal representatives / collaborators / clients / suppliers / business partners of the aforementioned, external lawyers with whom the lawyers working with pbbr interact, personal data of suppliers or contact persons of companies supplying pbbr.
Within the scope of its activities, pbbr processes the following types of personal data:
a) Identification data (such as name, address, contact details, taxpayer number);
b) Data concerning education and professional qualifications (e.g. curriculum vitae, educational certificates and of professional experience);
c) Details of professional activity (e.g. category, position, company);
d) Accounting and financial data (e.g. fees and expenses);
e) Sound and image data (e.g. photographs and video).
HOW AND WHEN DO WE COLLECT DATA?
pbbr collects your personal data directly in several circumstances, including, (i) when you send us your curriculum vitae or submit your professional application, (ii) when you send us an email or any other written communication, or respond to a request, or (iii) when you give us your personal or business card.
Your personal data may also be collected indirectly, in particular (i) if made available by entities that are pbbr clients for the provision of the advice requested by the clients, or (ii) if disclosed by, or known to, public information sources.
FOR WHAT PURPOSE AND ON WHAT BASIS IS THE TREATMENT CARRIED OUT?
pbbr may process your personal data on the following grounds:
a) Execution of a contract or performance of preliminary steps prior to the conclusion of a contract, namely for:
- The provision of legal services by pbbr;
- The execution of mandates by pbbr professionals;
- The formulation of a proposal for the provision of legal services;
- The collection of amounts due in the context of the provision of legal services;
- Compliance with and management of the contractual relationships it maintains with its lawyers, other professionals who work with pbbr as well as with its employees;
- The execution and fulfilment of contracts that ppbr maintains with all its suppliers;
b) Where it has a legitimate interest in doing so, in particular:
- To submit newsletters and e-mails to clients and other contacts in its database, with a view to disseminating legal information on current issues;
- To manage events in which it participates, promotes or organises with a view to disseminate legal information, if deemed relevant by pbbr for such recipients.
- For the management of professional relationships with lawyers working with other law firms, or within the framework of strategic partnerships with other lawyers or law firms;
- To promote the security of its information systems;
- To ensure the safety of its premises and people;
- For the submission of references in lawyer directories;
- For the recruitment and selection of employees.
c) Consent of the data subject
For other purposes to be identified when asking the data subject for consent.
d) Compliance of legal obligations, namely:
- In the fulfilment of its legal obligations as an employer in relation to the persons with whom pbbr has an employment relationship;
- In all activities related to the invoicing of fees for services provided by pbbr that involve the processing of personal data, as well as their accounting, financial and tax processing in accordance with the applicable rules;
- In complying with its regulatory obligations in the context of the prevention and detection of fraud and money laundering.
What are your rights?
In accordance with the applicable legislation, the owners of data being processed by pbbr have several rights regarding the way in which their data are processed and retained and pbbr undertakes to provide adequate conditions for the exercise of these rights by the owners of said data.
pbbr does not create unjustified obstacles to the exercise of rights by data subjects. However, to ensure the security of these data, pbbr will request from those submitting requests for the exercise of rights, information that will enable the identity of the petitioner to be validated, reserving the right to not process such requests where the identification of the data subject is not possible.
pbbr will respond to requests from data subjects within a period not exceeding 1 month, unless the complexity of the request or the volume justifies an extension for a period not exceeding 2 months. In such case, pbbr will communicate such extension and its motives to the data subject within 15 days from the date of receipt of the request.
As a data subject you have the rights of access, rectification, deletion, limitation, and opposition.
a) Access
As the holder of personal data, you have the right to obtain confirmation as to whether, or not, data concerning you are being processed and, where appropriate, access to your personal data and to the other information required by law.
b) Rectification
As a data subject you have the right to obtain, without undue delay, the rectification of inaccurate personal data concerning you. With regards to the purposes of the processing, you have the right to have your incomplete personal data amended, including by means of an additional declaration.
c) Deletion
As the data subject, you have the right to request the deletion of your data without undue delay, and pbbr is required to delete personal data without undue delay where one of the following grounds applies:
(i) The personal data is no longer necessary for the purpose for which it was collected or processed;
(ii) Withdrawal of consent for data processing (in cases where processing is based on consent) and there is no other ground for such processing.
d) Limitation of processing
The data subject has the right to obtain from pbbr the limitation of the processing, if one of the following situations applies:
(i) The data subject disputes the accuracy of the personal data for a period that allows pbbr to verify their accuracy;
(ii) pbbr no longer requires the personal data for processing purposes, but the retention of the data is required by the data subject for the establishment or exercise of a right or for the defence of legal claims.
e) Opposition
The data subject shall have the right to object at any time, on grounds relating to their situation, to the processing of personal data concerning them, particularly in the context of the legitimate interests pursued by pbbr.
pbbr shall cease the processing of personal data, unless it provides compelling legitimate reasons for such processing which override the interests, rights, and freedoms of the data subject, or for the establishment or exercise of a right or for the defence of legal claims.
Where data processing is based on the provision of consent, the data subject shall have the right to withdraw the consent previously granted at any time. Nevertheless, this right shall not affect the lawfulness of the processing carried out based on the consent previously provided nor the further processing of the same data based on another legal ground.
WITH WHOM DO WE SHARE YOUR DATA?
The personal data processed by pbbr may be shared with the following recipients:
- Entities to whom the data must be communicated by pbbr as legally required (e.g., social security, tax authorities, etc.);
- Third parties (e.g., service providers / suppliers) in whom pbbr relies for the pursuit of its activities, to the extent that the sharing of data is necessary for the execution of the services or supply concerned (e.g., IT service providers, or translation companies);
- Third parties that are entities related to the object of the advice provided by pbbr to its clients, to the strict extent that such sharing is necessary within the scope of the provision of such legal services;
- Courts and other public entities or of public interest, in the context of the exercise of legal advice and/or sponsorship services to clients;
- In the context of events that pbbr organises or promotes, where your data may be passed on to the event organiser and other participants;
- Entities organising and promoting new editions of legal professional directories, to whom pbbr provides names and contact details to enable validation of its professional information.
DATA RETENTION PERIOD
The data will be kept for the period necessary to fulfil the purposes for which they were collected.
Personal data processed by pbbr shall be kept (i) for the duration of the contractual relationship established between the data subject and the law firm, without detriment to additional conservation for the legal term applicable at each moment to the conservation of financial and accounting information, and to the legal statute of limitation of rights arising from the contractual relationship; (ii) for the period for which the data subjects have consented to the processing (without detriment to the possible periodic renewal of the consent granted); and (iii) for as long as the purpose which determined the collection and subsequent processing of data continues or, alternatively, for such other period as may be required by law.
Data Security
pbbr is committed to the security and confidentiality of your data, having implemented appropriate and necessary technical and organisational measures to ensure such commitment.
pbbr periodically monitors its systems, practices, and policies to ensure that your personal data is protected and to prevent unauthorised access to it.
QUESTIONS?
If you have any questions or wish to exercise any of your rights, you may contact us, by writing to:
a) dataprivacy@pbbr.pt (by email);
b) Avenida da Liberdade, ner 110, 6th, 1250-146 Lisboa (by letter).
As a data subject, you may also lodge a complaint with the National Commission for Data Protection (Comissão Nacional de Protecção de Dados) .
We recommend that you revisit this Policy periodically as it may change from time to time.