Privacy Policy

1. Data Controller

The data controller responsible for your personal data is:

For any questions regarding this Privacy Policy or the processing of your personal data, please contact us using the details above.

2. Scope

This Privacy Policy applies to personal data processed through our website, contact forms, email communications, marketing activities, and any other channels through which you interact with LINKS & TANGENTES — UNIPESSOAL LDA as a data controller.

It does not apply to third-party websites or services that may be linked from our site. We encourage you to review the privacy policies of any external sites you visit.

3. Categories of Personal Data

Depending on how you interact with us, we may process the following categories of personal data:

• Identity and contact data — name, email address, telephone number, company name, job title, and postal address.
• Communication data — messages, enquiries, and correspondence you send to us.
• Technical data — IP address, browser type and version, operating system, device identifiers, referral source, and general location data derived from IP address.
• Usage data — pages visited, time spent on pages, navigation paths, and interaction with site features.
• Cookie and consent data — preferences you express through our cookie banner and similar consent mechanisms.
• Marketing data — your preferences for receiving marketing communications and your engagement with campaigns, where applicable and lawfully permitted.

We do not intentionally collect special categories of personal data as defined in Article 9 of the GDPR (such as data revealing racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data). Please do not submit such information unless explicitly requested and lawfully permitted.

4. Purposes and Legal Bases for Processing

We process personal data only where a valid legal basis under Article 6 of the GDPR applies. The table below sets out our main processing activities:

Where processing is based on legitimate interests, we have assessed that our interests are not overridden by your fundamental rights and freedoms. You may request further information on this balancing test by contacting us.

5. Cookies and Similar Technologies

Our website uses cookies and similar tracking technologies. Cookies are small text files stored on your device that help us operate the site, remember preferences, and — with your consent — analyse usage and support marketing activities.

We classify cookies as follows:

• Essential cookies — necessary for core website functionality, security, and storing your cookie preferences. These do not require consent under applicable ePrivacy rules.
• Analytics cookies — help us understand how visitors use the site. These are placed only with your consent.
• Marketing cookies — used to measure campaign effectiveness and deliver relevant content. These are placed only with your consent.

You can manage your cookie preferences at any time through our cookie banner or by adjusting your browser settings. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal. For more information, see Directive 2002/58/EC (ePrivacy Directive) as transposed into Portuguese law.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements.

• Contact enquiries — retained for up to 24 months after the last interaction, unless a longer period is required for contract performance or legal claims.
• Client project data — retained for the duration of the contractual relationship and for up to 6 years thereafter, in line with Portuguese commercial and tax record-keeping requirements.
• Website analytics data — retained in aggregated or pseudonymised form for up to 26 months, where analytics cookies are accepted.
• Cookie consent records — retained for up to 12 months to demonstrate compliance with consent requirements.

When data is no longer required, we securely delete or anonymise it.

7. Recipients and International Transfers

We may share personal data with trusted third parties who assist us in operating our website and delivering our services, including:

• Hosting and infrastructure providers
• Email and communication platforms
• Analytics and marketing technology providers (only where you have given consent)
• Professional advisers (lawyers, accountants) where necessary
• Public authorities when required by law

All processors act under written data processing agreements compliant with Article 28 of the GDPR and are bound to process data only on our documented instructions.

Where personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission (Article 46 GDPR) or transfers to countries benefiting from an adequacy decision (Article 45 GDPR).

8. Your Rights Under the GDPR

Under the GDPR and Portuguese Law No. 58/2019, you have the following rights in relation to your personal data:

• Right of access (Article 15) — to obtain confirmation of whether we process your data and receive a copy.
• Right to rectification (Article 16) — to request correction of inaccurate or incomplete data.
• Right to erasure (Article 17) — to request deletion where processing is no longer lawful or necessary.
• Right to restriction of processing (Article 18) — to limit how we use your data in certain circumstances.
• Right to data portability (Article 20) — to receive your data in a structured, machine-readable format where processing is based on consent or contract and carried out by automated means.
• Right to object (Article 21) — to object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent (Article 7(3)) — where processing is based on consent, you may withdraw it at any time without affecting prior lawful processing.
• Right not to be subject to automated decision-making (Article 22) — we do not use automated decision-making or profiling that produces legal or similarly significant effects.

To exercise any of these rights, contact us at info@linkstangentes.com. We will respond within one month, as required by Article 12(3) of the GDPR, which may be extended by a further two months for complex requests.

9. Right to Lodge a Complaint

If you believe that the processing of your personal data infringes the GDPR or Portuguese data protection law, you have the right to lodge a complaint with the supervisory authority:

We encourage you to contact us first so that we may address your concerns directly.

10. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction, in accordance with Article 32 of the GDPR. These measures include access controls, encrypted connections (HTTPS), secure hosting environments, and staff awareness of data protection obligations.

While we take data security seriously, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but will notify you and the CNPD of a personal data breach where required by Articles 33 and 34 of the GDPR.

11. Children

Our website and services are directed at businesses and professionals. We do not knowingly collect personal data from individuals under 16 years of age. If you believe we have inadvertently collected data from a minor, please contact us and we will promptly delete it.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or services. The revised version will be published on this page. We encourage you to review this policy periodically.

13. Contact

For any privacy-related questions, requests to exercise your rights, or concerns about our data practices, please contact: