Privacy Policy

Last updated: April 2026

PFC Consulting, Lda. (hereinafter "PFC Consulting") is committed to protecting the personal data of users of this website, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation, GDPR) and Portuguese Law No. 58/2019 of 8 August.

1. Data controller

The data controller for personal data collected through this website is:

PFC Consulting, Lda.
VAT: PT516223771
Registered office: Avenida Natália Correia, 6A, 2910-735 Setúbal, Portugal
Contact for exercising rights: via the contact form

2. Personal data collected

Through this website, PFC Consulting may collect the following personal data:

Data provided directly by the user: name, email address, subject and message content, when submitted through the contact form.

Data collected automatically: IP address, browser type, operating system, pages visited, date and time of access, and other browsing data collected through cookies or similar technologies (see cookies section).

3. Purposes of processing

Personal data collected is processed for the following purposes: responding to contact requests and information enquiries; managing relationships with potential clients; improving the website's functionality and browsing experience; compliance with applicable legal obligations.

4. Legal basis for processing

Consent (Article 6(1)(a) GDPR), when the user submits the contact form or accepts non-essential cookies.

Legitimate interest (Article 6(1)(f) GDPR), to ensure the security and proper functioning of the website.

5. Data retention

Personal data is retained only for as long as necessary for the purpose for which it was collected. Contact data is retained for a maximum of 12 months after the last interaction, unless a contractual relationship justifies a different period. Browsing data is retained for a maximum of 13 months.

6. Data sharing

PFC Consulting does not share, sell or transfer personal data to third parties, except where necessary to comply with legal obligations or where sub-processors act on behalf of PFC Consulting, bound by a data processing agreement under Article 28 GDPR.

7. International transfers

Personal data is processed and stored on servers located in Portugal / European Union. Should any transfer outside the European Economic Area be necessary, PFC Consulting will ensure appropriate safeguards under Articles 46 to 49 GDPR.

8. Data subject rights

Under the GDPR, data subjects have the following rights: right of access; right to rectification; right to erasure ("right to be forgotten"); right to restriction of processing; right to data portability; right to object; right to withdraw consent at any time.

To exercise any of these rights, please use the contact form.

9. Cookies

This website may use cookies to improve the browsing experience. For more information, see our Cookie Policy.

10. Security

PFC Consulting adopts appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction or alteration, in accordance with information security best practices and standards.

11. Complaints

Without prejudice to any other remedy, data subjects have the right to lodge a complaint with the competent supervisory authority:

Comissão Nacional de Protecção de Dados (CNPD)
www.cnpd.pt

12. Changes to this policy

PFC Consulting reserves the right to update this privacy policy at any time. The date of the last update is indicated at the top of this document.