SRS Legal (henceforth "SRS"), as responsible for the processing, values your privacy and is concerned with the way your personal information is processed.

SRS advises reading this Privacy Policy and its updates. In case of further changes of this Privacy Policy, the day of the last change, available at the top of this page, is also updated.

This policy addresses:

• The data controllers and the Data Protection Officer
• Which personal information is collected and processed
• How we obtain your personal information
• How your personal information is used
• On what basis we use your personal information
• For how long do we keep your personal information
• With whom we share your personal information
• How your personal information is protected
• To which countries is your personal information transferred
• Your rights regarding your personal information

The data controllers and the Data Protection Officer

SRS is responsible for collecting and processing your personal information, while providing you with legal services and in this context will decide which personal information is collected, the means of processing and the purposes for which the information is used.

SRS also has a Data Protection Officer (DPO), that (i) monitors the compliance of information processing with applicable standards, (ii) is a point of connection with the Client for clarification of issues concerning the processing of their information by SRS, (iii) collaborates with the supervisory authority, (iv) provides information and advises the processor or subcontractor of its obligations regarding privacy and data protection.

The Data Protection Officer can be contacted through the following e-mail address: dpo@srslegal.pt.

Which personal information is collected and processed

Your personal information may be collected during the provision of our services, through the use of our website, by contacting or requesting information about SRS or as a result of the contacts you may have with any of our employees or clients.

Personal information processed by SRS includes:

• Primary information such as your name (including prefix or title), your business, title or title and your connection to an individual person;
• Contact details, such as postal address, e-mail address and telephone numbers;
• Financial information, such as payment-related information;
• Technical information, such as information from your visits to our website or in relation to materials and communications we send to you electronically;
• Information you provide for meeting scheduling or presence at events, including access and dietary requirements;
• Background information provided by you or gathered as part of the client acceptance process;
• Personal information provided by SRS or on behalf of our clients or generated by SRS in the course of, or while providing services to our clients, including special categories of information;
• Any other information that you may  give us. 

How we obtain your personal Information

• We collect information from you as part of the procedure of contracting our services, extending to third parties as necessary, during the provision of legal services;
• Or while monitoring our computer tools and services, including through our website and electronic communications to and from SRS;
• When you provide it, or interact directly with us, such as through contacts with our employees;
• And through other means and sources, such as keeping the contact details we already hold for you accurate and up to date using publically available sources

How your personal information is used

SRS gathers and processes your personal information in a number of ways, including through our website and our services. We use your information to:

• Provide and improve the services we provide, which may include the processing of personal information of third parties on behalf of our clients;
• To promote our services, by sending news and publications, newsletters and details of events;
• Orient and direct our relationship with you and our clients;
• In pursuit of our legal, regulatory and risk management obligations, including in the exercise of rights or in defense of legal proceedings;
• Provide and improve our website, including by auditing and monitoring its use;
• To provide information requested by you;
• For recruitment purposes

Using the SRS website

Several features on our website invite you to submit your personal information, as is the case of the Newsletter Registration at the bottom of the page. The purpose of these functionalities are the ones available on the page and from the moment you provide your personal information, it will be used only for the purpose for which it was submitted.

Marketing and other emails

We collect and process your personal information so that we can contact you with information regarding the services we provide and the activities in which we participate through newsletters and other communications. We can use a relationship management tool to assess the strength of the relationship between SRS individuals and our clients or potential clients based on the frequency of contact by email between them. We use this information to evaluate, assess and improve the services we provide.

Meetings, events and seminars

We collect and process your personal information when you contact our offices or participate in any event or seminar organized or co-organized by SRS. We will only use or process special categories of personal information such as access and dietary requirements so that we can meet your needs and comply with any legal or regulatory obligations. Your personal information may be shared with those responsible for IT, other service providers or partners involved in the organization or as hosts of the event in question.

Legal and other services

We collect, store and use personal information during and in connection with the services provided to our clients. Identification and background information will be processed as part of our new client and subject acceptance processes, financial details, business management and marketing, including for compliance with anti-money laundering and terrorist financing regulations, conflict verification, and application of tax regulations. We also process personal information provided by or on behalf of our clients depending on the services we are hired for. Such information may be disclosed to third parties when reasonably necessary in connection with such work. See also "Who we share personal information with" and "To which countries we transfer personal information" below.

On what basis we use your personal information

We use your personal information on the following grounds:

• With your specific consent;
• In proceedings prior to the formation of the contract or the declaration of negotiation, and in the execution of a contractual obligation, namely through the provision of legal services;
• To attempt, defend and become involved in lawsuits or lawsuits
• To comply with regulatory and legal obligations;
• For legitimate business purposes. Please see "How We Use Your Personal Information" for more details.

For how long do we keep personal information

SRS processes and stores your personal information according to the purposes for which they are processed. There are cases in which the law requires the processing and storage of data for a minimum period of time, namely for 10 years, the data necessary for informing the Tax Authorities regarding accounting, tax purposes or information related to commercial bookkeeping, as well as for 7 years for the purpose of fighting money-laundering and terrorist financing. Likewise, SRS will keep the information according to the deadlines applicable for taking legal action.

But, when there is no specific legal obligation, the information will be processed only for the necessary period of time to fulfil the purposes that led to their treatment and preservation and always in accordance with the law, guidelines and decisions of the CNPD – Comissão Nacional de Protecção de Dados.

Therefore:

SRS will process and maintain your personal information for the period during which we have a contractual relationship.

As far as video surveillance of your premises is concerned, SRS will only keep recordings of images and personal information for a maximum period of 30 days. SRS may keep other personal information for periods longer than the extent of the contractual relationship, whether based on your consent, or to ensure rights or duties related to the contract, or because it has legitimate interests that justify it, but always for the period strictly necessary to the fulfilment of the respective purposes and in accordance with the guidelines and decisions of the CNPD.

With whom we share your personal information

We may share your personal information with third parties in accordance with contractual provisions in force, including:

• Our professional consultants and auditors;
• Suppliers with whom SRS contracts certain support services, such as word processing, translations, copies, document reviews;
• IT service providers;
• Third parties involved in the course of services we provide to clients and with their prior consent, such as lawyers, enforcement agents, local consultants and others;
• Entities involved in the organization of events or seminars or co-hosts thereof

Where necessary, or for the reasons set forth in this policy, personal information may also be shared with regulatory authorities, courts, and official entities. While it is unlikely, we may be required to disclose your data to comply with legal or regulatory requirements. We will make reasonable efforts to notify you prior to such sharing, unless we are legally prevented from doing so.

If, in the future, we reorganize or transfer all or part of our business, we may need to transfer your personal information to new entities linked to SRS or to third parties through which SRS services will be provided.

SRS can use social networks like LinkedIn and Twitter. If you are a user of these services, you should review their privacy policy for more information about how they handle your personal information.

SRS does not commercially sell, rent or dispose of personal information to any third party except with your prior permission.

How your personal information is protected

We use a variety of technical and organizational measures to help protect your personal information from unauthorized access, disclosure, modification, loss or destruction in accordance with applicable data protection laws.

To which countries is your personal information transferred

In order to provide our services, it may be necessary to transfer your personal information to places outside the jurisdiction in which you have given them or in which you are while viewing this website.

Therefore, SRS may have to transfer its personal information to a third country outside the European Union and not included in the list of countries that the European Union has already considered to meet adequate levels of personal information protection. In such cases, SRS will ensure that data transfers are carried out in strict compliance with applicable legal standards.

Your rights regarding your personal information

The General Regulation on Data Protection of the European Union and other applicable data protection laws protect certain rights for data subjects. In particular:

Right of Access - right to obtain confirmation of which of your personal information is processed and information about it, for instance, which are the purposes of the processing, what are the conservation periods, among others.

Right of Rectification - right to request modification of your personal information that is inaccurate or request incomplete personal information, such as the address, VAT, email, telephone contacts, or others.

Right to Erasure or "right to be forgotten" - right to erase your personal information, provided that there are no valid grounds for its retention, for example in cases where SRS has to keep the data to comply with legal obligation or because a court case is in progress.

Right to Data Portability - right to receive the data you have provided us
in a digital format of current use and automatic reading or to request the direct transmission of your data to another entity that becomes the new responsible for your personal information, however only if technically possible.

Right to Withdraw Consent or Right of Opposition - right to object or withdraw consent at any time to data processing, for example in the case of data processing for marketing purposes, provided that no legitimate interests exist prevailing over your interests, rights and freedoms, such as defending a right in a judicial process.

Right of Limitation - right to request the limitation of the processing of your personal information, in the form of: (i) suspension of processing or (ii) limitation of the scope of processing to certain categories of data or purposes of processing.

Right to object and automated individual decision-making - When the processing of personal information, including the processing for the definition of profiles, is exclusively automatic (without human intervention) and may have effects in your legal sphere or significantly affect it, the Client shall have the right not to remain subject to any decision based on such automatic processing, except as otherwise provided by law and shall have the right that SRS take appropriate measures to safeguard its rights and freedoms and legitimate interests, including the right to have human intervention in decision making by SRS, the right to express its point of view or contest the decision taken on the basis of automated individual information processing.

Right to complain - right to complain to the supervisory authority, CNPD, in addition to SRS.

The exercise of rights is free of charge, except in the case of a manifestly unfounded or excessive request, in which case a reasonable fee may be charged regarding its costs.

The information must be provided in writing, but may be given orally if requested. In this case, SRS should verify your identity by means other than oral.

The response to requests should be provided within a maximum of 30 days, unless it is a particularly complex request.

You can do so through the following e-mail address: dpo@srslegal.pt