Privacy Policy

Limites Apurados, with its registered office at Rua Dr. João Afonso de Almeida, No. 436, 4800-045, Azurém – Guimarães, processes the personal data of its employees, service providers, clients, and suppliers in strict compliance with privacy and personal data protection rules set out in the General Data Protection Regulation (hereinafter referred to as “GDPR”), approved by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016.

This Privacy Policy aims to inform you about the way and purposes of data processing, how long data will be retained, as well as to inform you of the rights of data subjects and the ways to contact Limites Apurados.

Data Controller

Limites Apurados is the data controller, as it determines the purposes and means of processing personal data of its employees, suppliers, clients, and service providers.

Types of Personal Data Processed

Personal data is any information relating to an identified or identifiable natural person. An identifiable person is one who can be identified, directly or indirectly, particularly by reference to an identifier such as a name, an identification number, location data, electronic identifiers, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

On the Limites Apurados website, we only collect identification data necessary to contact you, namely, name, email, and phone number.

Limites Apurados collects the personal data of its clients necessary for the execution of contracts at the time of hiring our services.

Purposes of Personal Data Processing and Legal Basis

When you fill in the “Contact Us” form on our website, Limites Apurados collects your personal data and processes it solely to respond to your inquiries, requests, or to provide the information you requested. The legal basis for processing your data is the execution of a contract or pre-contractual steps at the request of the data subject, as well as legitimate interest.

If you register for any of our events, workshops, seminars, conferences, or training sessions, your personal data will be used only for registration and record-keeping purposes. Some of your personal data may be shared with entities organizing the event. The legal basis for processing your data is the execution of a contract, as well as legitimate interest.

When hiring our services, Limites Apurados may contact you for marketing purposes, provided you have given consent for the processing of your personal data for this purpose. The legal basis for processing your personal data is your consent.

Retention Periods of Personal Data

Our policy is to retain personal data only for the period necessary for the purposes for which the data is processed.

Personal data (name, email, and phone) processed to respond to information requests will be retained for two years if there is no further contact from the data subject or the company does not become a client. Data will not be shared with third parties.

Personal data collected during registration for events, conferences, workshops, or training sessions will be retained for 2 years from the date of contact or participation if there is no further contact or participation in another event by the data subject.

Personal data collected for marketing and advertising purposes will be retained for 10 years.

Data for invoicing and accounting purposes will be retained for 10 years.

Once the maximum retention period is reached, personal data will be irreversibly anonymized or securely destroyed.

Sharing of Your Personal Data

Limites Apurados does not share your personal data with third parties, except where necessary for the provision of services by Limites Apurados, such as IT, technical, or operational support, or when required to comply with legal obligations applicable to Limites Apurados.

Rights of Data Subjects

At any time, data subjects have the right to request:

a. Access to personal data concerning them
Data subjects have the right to obtain confirmation as to whether personal data concerning them is being processed and, if so, to access their personal data and information provided under the GDPR.

b. Rectification of inaccurate personal data
Data subjects have the right to obtain from Limites Apurados the rectification of inaccurate or incomplete personal data.

c. Erasure of personal data (“Right to be Forgotten”)
Data subjects have the right to request Limites Apurados to erase personal data from its records, and Limites Apurados is obliged to erase personal data when one of the following applies:

  • Personal data is no longer necessary for the purposes for which it was collected or processed;

  • The data subject has withdrawn consent for the processing of personal data (where processing is based on consent) and there is no other legal basis for processing;

  • The data subject objects to processing and there are no overriding legitimate grounds for processing;

  • Personal data has been unlawfully processed.

d. Restriction of personal data processing
Data subjects have the right to request Limites Apurados to restrict the processing of their data if one of the following applies:

  • Contest the accuracy of personal data, during a period that allows Limites Apurados to verify its accuracy;

  • Processing is unlawful and the data subject opposes the erasure of personal data and requests restriction of its use instead;

  • Limites Apurados no longer needs the personal data for processing purposes, but the data is required by the data subject for declaration, exercise, or defense of a right in legal proceedings;

  • The data subject has objected to processing until Limites Apurados’ legitimate grounds prevail.

e. Data portability
Data subjects have the right to receive personal data concerning them which they provided to Limites Apurados, in a structured, commonly used, and machine-readable format, and the right to transmit this data to another controller without hindrance. They also have the right to have their data transmitted directly between controllers when technically feasible, where:

  • Processing is based on consent or a contract; and

  • Processing is carried out by automated means.

f. Objection to personal data processing
Where personal data processing is based on Limites Apurados’ legitimate interests or for direct marketing purposes or profiling, data subjects have the right to object at any time.

g. Withdrawal of consent
Where processing depends on consent, data subjects have the right to withdraw consent at any time. Withdrawal does not affect the lawfulness of processing based on prior consent, nor the subsequent processing based on another legal basis, such as contract compliance, legal obligation, or Limites Apurados’ legitimate interests.

To exercise any of these rights, data subjects should contact Limites Apurados by email at limitesapurados@outlook.pt or by mail addressed to the DPO.

Proof of identity may be requested to ensure that personal data is only provided to its rightful owner.

Limites Apurados will provide information on measures taken to comply with the request within one month of receipt.

If the request is submitted electronically, the information will, whenever possible, be provided electronically, unless the data subject requests otherwise.

If a legal provision or obligation overrides the above rights, the request may not be granted. In such a case, Limites Apurados will inform the data subject within one month, stating the basis.

Data subjects also have the right to lodge a complaint with the National Data Protection Commission: https://www.cnpd.pt/.

Personal Data Security

Limites Apurados has implemented technical and organizational measures to ensure the protection of personal data and prevent security breaches.

Changes to the Privacy Policy

Limites Apurados reserves the right to modify this Privacy Policy at any time. Any changes will be duly announced on our website.

Last updated: 9 January 2025