Privacy Policy

The Data Controller responsible for the processing of personal data is Carina de Sousa Mealha (who also uses the name Carina Isabel de Sousa Mealha), CSM-LEGAL, holder of tax identification number 257 707 050, with professional address at Rua 1.º de Dezembro n.º 13, 8100-615 Loulé, and tax address at Barreiros Brancos CP 321P, 8100-228 Loulé, holder of professional licence number 71041F, and contact email general@csm-legal.pt.

Your personal data may be processed for the following purposes:

• Sending institutional and commercial communications: based on the legitimate interest in keeping you informed about services, events or legal news, or with your consent, where applicable.

• Responses to requests, inquiries, or complaints: based on the legitimate interest in providing a quality service and, where applicable, in carrying out pre-contractual due diligence at your request.

• Event management: based on a legitimate interest in organizing events related to legal, scientific-legal, or cultural activities.

• Recruitment: based on the fulfillment of pre-contractual due diligence at your request, legal obligations, legitimate interest or, in certain cases, your consent.

• Provision of legal and consulting services: based on contractual performance and a legitimate interest in providing a service tailored to your needs.

• Billing and administrative management: based on contract execution and compliance with legal obligations.

• Compliance with legal obligations: arising from applicable legislation in tax, labor, administrative, regulatory or other matters.

• Exercising or defending rights: in administrative, judicial, or extrajudicial proceedings, based on legitimate interest.

Depending on the purpose, we may process the following categories of personal data:

• Identification details: name, date of birth, gender, address, contact details, identification documents, nationality.

• Academic information: academic qualifications, certifications, CV.

• Professional information: position, responsibilities, work history, company, experience.

• Legal or contractual activity data: information relating to proceedings, due diligence, contracts or other documents necessary for legal advice.

The data retention period will depend on the purpose:

• Commercial communications: until objection or revocation of consent.

• Requests and complaints: until they are no longer necessary for that purpose.

• Event management: during the period necessary for registration, execution, and evaluation.

• Recruitment: during the recruitment process or until consent is revoked.

• Provision of legal services: during the term of the contractual relationship and, after its termination, for a period of 20 years.

• Billing and administrative management: 10 years.

• Compliance with legal obligations: for the time required by law.

• Exercise or defense of rights: until the final judgment or definitive resolution of the dispute.

Your data will not be shared with third parties, except:

• When required by law;

• When necessary for the execution of contracted services (e.g., technology, accounting, or communications service providers), always through a subcontracting agreement that guarantees the protection of personal data.

As a data subject, you may exercise the following rights:

• Access: confirm whether your data is being processed and view that information.

• Correction: to correct or update inaccurate or incomplete data.

• Deletion: Request the deletion of your data, where applicable.

• Objection: to object to the processing of your data in certain situations.

• Limitation: requiring that treatment be limited in specific circumstances.

• Portability: receiving data in a structured, commonly used, and automatically readable format, or transmitting it to another entity.

You can exercise your rights by emailing: geral@csm-legal.pt.

We have adopted appropriate technical and organizational measures to protect personal data against loss, misuse, unauthorized access, alteration, or destruction.

CSM-LEGAL reserves the right to update this Privacy Policy at any time, with any changes being published on this website.

This Privacy Policy is governed by Portuguese law and the General Data Protection Regulation (GDPR).