Your personal data.
With respect and clarity.

Controller

DataPartners, AGG Consulting Agency, Lda. (“DataPartners”) is the controller for the personal data covered by this policy.

We process personal data in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, “GDPR”) and Portuguese Law No. 58/2019 of 8 August. We apply technical and organisational measures appropriate to the risk to protect personal data against unauthorised access or use, loss, alteration or improper disclosure.

You can contact us at geral@agg-datapartners.com. The company’s details are set out in the Identification section of the Terms and Conditions.

Scope of the policy and personal data

This policy informs website users and people who contact DataPartners about how their personal data is used. It covers contact in a personal capacity or on behalf of an organisation, correspondence, management of the professional relationship, invoicing, compliance with legal obligations and email marketing communications sent with your consent.

Depending on the purpose, we use the name, email address, telephone number and other contact details provided to us, the content of messages and the data needed to manage the professional relationship and invoicing. The organisation represented and the role held are considered where relevant to the contact.

Personal data is information relating to an identified or identifiable natural person. This policy concerns DataPartners’ use of that data in the situations described here; it does not govern processing carried out by the entities to which we provide consultancy or Data Protection Officer services.

Contact and information requests

We use the data you provide by email, telephone or in writing to assess your request, respond and follow up on the information requested. You may contact us in a personal capacity or on behalf of an organisation.

Include only the information necessary for your request. Avoid sending sensitive personal data or third parties’ personal data that is not needed for the contact.

Professional relationship and provision of services

When contact leads to a professional relationship, we use the data needed to prepare proposals, manage our work together and communicate about the services.

In relationships with organisations, this includes the contact details and professional information of their representatives and points of contact, to the extent necessary to coordinate the work.

Invoicing and legal obligations

We use the data needed to issue invoices, administer the services and comply with applicable tax, accounting and other legal obligations.

Where invoices are issued to an organisation, its identification and invoicing details are distinct from the personal data of the representatives or points of contact involved in that relationship.

Legal bases for processing

Personal data is processed on the legal basis corresponding to each purpose:

• Responding to general information requests and managing correspondence: DataPartners’ legitimate interest in following up on the enquiries received.
• Preparing proposals or performing services where the data subject is a party to the contract: steps taken at the data subject’s request before entering into a contract, or performance of the contract.
• Contact with organisations’ representatives and points of contact: the legitimate interests of DataPartners and the organisation in preparing and managing the professional relationship and coordinating the provision of services.
• Invoicing and compliance with tax, accounting or other statutory duties: compliance with the applicable legal obligations.
• Sending email marketing communications: the data subject’s consent.

Processing based on legitimate interests is limited to what is necessary for the stated purposes and does not override the data subject’s interests or fundamental rights and freedoms that require protection of their personal data.

How the form works

The form prepares a message on your device for you to review. Completing it does not send the message to DataPartners.

Name, email and message are required to prepare the draft; the other information fields are optional. Without the required details, the draft cannot be prepared. Providing them is not a legal obligation.

When you select “Open in my email”, the message is passed to your email application. You decide whether to send it from that application. DataPartners receives the data included in the message when it is sent to us.

If you use the marketing option, the message includes your choice, the option’s wording and its version. The option remains voluntary.

Email marketing communications

With your consent, we use your email address to send communications about DataPartners’ services and initiatives.

The choice is voluntary and does not affect the response to your enquiry or the provision of services. You can withdraw your consent at any time, free of charge, by contacting dpo@agg-datapartners.com or the contact specified in the communications you receive.

Withdrawal ends the use of your address for this purpose and does not affect the lawfulness of processing carried out before withdrawal.

Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, observing retention periods required by law.

Data relating to the professional relationship is retained for the period necessary to provide the services and manage that relationship, taking into account the applicable legal obligations.

For enquiries that do not lead to an engagement, retention is limited to the period necessary to assess, respond to and follow up on the request, subject to applicable legal obligations.

For email marketing, we retain the data while consent remains in place. After withdrawal, we retain only the information strictly necessary to demonstrate consent and its withdrawal and to prevent further communications for that purpose, for as long as necessary to achieve those aims.

Once the applicable retention period has ended, personal data is deleted or anonymised.

Rights and Data Protection Officer

Subject to the conditions set out in the GDPR, you can request access to, rectification or erasure of your personal data, or restriction of its processing.

Portability applies to data you have provided to us where processing is based on consent or a contract and is carried out by automated means. In those circumstances, you can receive the data in a structured, commonly used and machine-readable format and transmit it to another controller. You can request direct transmission where technically feasible.

You can object to processing based on legitimate interests on grounds relating to your particular situation. You can object at any time to the use of your data for marketing. Where processing is based on consent, you can withdraw it without affecting the lawfulness of earlier processing.

To exercise your rights or ask questions about data protection, contact the Data Protection Officer at dpo@agg-datapartners.com. Exercising your rights is generally free of charge.

We respond without undue delay and normally within one month of receiving the request. Where the complexity or number of requests justifies an extension of two further months, we inform you of the extension and the reasons within the initial period.

You can lodge a complaint with the Portuguese National Data Protection Commission (CNPD).

Disclosure of data and external links

DataPartners does not sell or exchange personal data. Hosting and email services may involve the storage and technical processing of personal data by their providers, to the extent necessary to make those services available and maintain them. Access to and use of the data are subject to the applicable confidentiality, security and data protection obligations.

Personal data may also be disclosed to the competent authorities where legally required.

Links to official sources, social media and other websites provide access to third-party services. Use of those services is governed by their respective terms and privacy policies.

Information on cookies and similar technologies is set out in the Cookie Policy.

Updates to this policy are published on this page with the date shown. Where a change requires additional information to be provided to data subjects, that information is provided as required by law.

Last updated: October 2026.