Privacy Policy

Last updated: 01 December 2025

SFBA – Sousa Ferreira, Borges, Amaral – Sociedade de Advogados, SP RL (“SFBA”) is committed to protecting the privacy and personal data of its Users. This Policy explains how we collect, use, store and protect personal data, in accordance with Regulation (EU) 2016/679 (GDPR) and other applicable legislation.

1. Data Controller

Data Controller:

SFBA – Sousa Ferreira, Borges, Amaral – Sociedade de Advogados, SP RL
Corporate registration and taxpayer number: 518755878
Registered office: Alameda Bonifácio Lázaro Lozano, no. 15, 2nd Floor, Office G, 2780-125 Oeiras, Portugal

2. Personal Data Collected

We may collect the following personal data:

Name
Email address
Telephone number
Information provided through contact forms
Technical data (IP address, device type, browser, cookies)
Data necessary for scheduling consultations
We do not intentionally collect special categories of personal data through the website.

3. Purposes of Processing

Personal data is processed for the following purposes:

Responding to contact requests or enquiries
Scheduling meetings or legal consultations
Sending information related to legal services, where authorised
Improving website functionality and user experience
Complying with legal or regulatory obligations applicable to law firms

4. Legal Basis for Processing

Processing is based on:

Consent (e.g. contact forms)
Performance of pre-contractual steps (e.g. consultation requests)
Compliance with legal obligations
Legitimate interests (website improvement, security)

5. Data Sharing with Third Parties

Personal data may be shared with:

Technology service providers (e.g. Webflow hosting services)
Subcontractors responsible for website or IT system management
Judicial or regulatory authorities, where legally required
All subcontractors comply with GDPR requirements and implement appropriate security measures.

6. Transfers Outside the EU

Where tools or service providers are located outside the European Economic Area (e.g. Webflow in the United States), Standard Contractual Clauses approved by the European Commission or equivalent safeguards will be applied.

7. Data Retention Periods

Personal data will be retained only for the period necessary for the purposes for which it was collected:

Contact requests: up to 12 months without interaction
Prospective client data: until the pre-contractual relationship ceases
Cookie data: in accordance with the Cookies Policy

8. Data Subject Rights

Users may exercise the following rights at any time:

Right of access
Right to rectification
Right to erasure (“right to be forgotten”)
Right to object
Right to restriction of processing
Right to data portability
Right to withdraw consent
Requests should be sent to: geral@sfba.pt
Users also have the right to lodge a complaint with the CNPD – Portuguese Data Protection Authority.

9. Security

SFBA implements appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure or destruction.

10. Amendments to the Privacy Policy

This Privacy Policy may be updated periodically. The version in force will always be published on the website.

11. Privacy Contact

For any questions or requests relating to personal data protection:
Email: geral@sfba.pt
Address: Alameda Bonifácio Lázaro Lozano, n.º 15, 2º G, 2780-125 Oeiras