Privacy Policy

Effective Date: 1 February 2026

This Privacy Policy describes how I&A Legal and Consulting (the “Company”, “we”, “us”, or “our”) collects, processes, stores, and protects personal data in accordance with applicable Portuguese data protection legislation and the General Data Protection Regulation (“GDPR”).

By accessing or using our website, you acknowledge that you have read and understood this Privacy Policy.

1. DATA CONTROLLER

For the purposes of Article 4(7) of the GDPR, the data controller is:

I&A Legal and Consulting
Rua Manuel Teixeira Gomes
Estrada de Vale do Lobo, Apartado 3006
8135-016 Almancil
Portugal

2. CATEGORIES OF DATA COLLECTED

We may collect and process the following categories of personal data:

a) Identification and Contact Data:
Including name, email address, telephone number, and any other information voluntarily provided through contact forms or communications.

b) Technical and Usage Data:
Including IP address, browser type and version, device identifiers, operating system, referring URLs, pages visited, access dates and times, and other diagnostic data.

c) Cookies and Similar Technologies:
Information collected through cookies, pixels, and similar tracking technologies to enhance functionality, analyze performance, and improve user experience.

We do not intentionally collect special categories of personal data unless explicitly required and lawfully obtained.

3. PURPOSE OF PROCESSING

Personal data is processed for the following purposes:

• To respond to inquiries and provide requested information, products, or services; 
• To manage and improve our website, services, and user experience;
• To comply with applicable legal and regulatory obligations;
• To establish, exercise, or defend legal claims where necessary. 

We do not subject personal data to automated decision-making, including profiling, within the meaning of Article 22 of the GDPR.

4. LEGAL BASES FOR PROCESSING

In accordance with Article 6 of the GDPR, we process personal data only where a lawful basis exists, including:

• Consent (Article 6(1)(a) GDPR);
• Performance of a contract or pre-contractual measures (Article 6(1)(b) GDPR);
• Compliance with a legal obligation (Article 6(1)(c) GDPR); 
• Legitimate interests pursued by the Company (Article 6(1)(f) GDPR), provided such interests are not overridden by the data subject’s fundamental rights and freedoms. 

Where processing is based on consent, such consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5. DATA SHARING AND TRANSFERS 

We do not sell, rent, or otherwise commercialize personal data.

Personal data may be disclosed to:

• Service providers and processors acting on our behalf under written data processing agreements compliant with Article 28 of the GDPR;
• Competent public authorities, regulatory bodies, or law enforcement agencies where required by law or legal process. 

Where personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are implemented in accordance with Chapter V of the GDPR.

6. DATA RETENTION 

Personal data is retained only for the period necessary to fulfill the purposes for which it was collected, including for the satisfaction of any legal, accounting, or reporting requirements.

Upon expiration of the applicable retention period, personal data will be securely deleted or anonymized.

7. DATA SUBJECT RIGHTS 

Pursuant to the GDPR, data subjects have the following rights:

• Right of access (Article 15);
• Right to rectification (Article 16);
• Right to erasure (“right to be forgotten”) (Article 17);
• Right to restriction of processing (Article 18);
• Right to data portability (Article 20);
• Right to object to processing (Article 21);
• Right to withdraw consent at any time (where processing is based on consent). 

Data subjects also have the right to lodge a complaint with the competent supervisory authority in Portugal, the Comissão Nacional de Proteção de Dados (CNPD).

To exercise any of the above rights, please contact us at the below email addresses.

8. COOKIES

Our website uses cookies and similar technologies to ensure proper functionality, enhance user experience, and analyze website traffic.

Users may manage or disable cookies through browser settings or via our website’s cookie management tool. Further information is available in our Cookie Policy.

9. AMENDMENTS 

We reserve the right to amend or update this Privacy Policy at any time to reflect legal, regulatory, or operational changes.

Any modifications will be published on this page with a revised effective date.

10. CONTACT INFORMATION

For any questions regarding this Privacy Policy or the processing of personal data, please contact:

ines@ialegal.eu

agnes@ialegal.eu