Privacy Policy – Orien – Sociedade de Advogados Multidisciplinar, Lda.
Last update: 09-11-2025
This Privacy Policy describes how Orien – Sociedade de Advogados Multidisciplinar, Lda. processes personal data on its website www.orien.pt, in accordance with the General Data Protection Regulation (GDPR) and Law No. 58/2019 (implementation of the GDPR in Portugal). This policy applies to digital interactions with Orien, including forms, subscriptions, applications and contact requests.

1) Data Controller and Contacts
• Responsible for the Processing: Orien – Sociedade de Advogados Multidisciplinar, Lda. (NIPC: 518897630)
• Headquarters: Avenida da Boavista nº 1203, 2nd floor, Office 208, 4100-130 Porto
• Official Website: www.orien.pt
• General email and privacy: info@orien.pt
• Phone: +351 226003100

2) Categories of Personal Data Processed
• Identification and contact: name, email, telephone, company, function, address.
• Browsing and devices: IP address, device identifiers, session data, technical logs, language, browser type, and operating system.
• Website forms: content of messages submitted, preferences, attachments sent.
• Recruitment: CV, academic/professional history, motivation letters, references and information relevant to the application.
• Newsletters and events: name, email, organization, interests, subscriptions and participation history.
• Clients and cases (outside the website): data processed in the context of the provision of legal services, under professional secrecy and confidentiality duties.

3) Purposes and Legal Bases of Processing
• Management of contacts/requests via website: respond to requests, schedule meetings, send requested information.
Basis: Legitimate interest and/or pre-contractual steps at the request of the holder.
• Provision of legal services and client management: opening of cases, invoicing, communication, document management.
Basis: Contract execution; compliance with legal obligations (e.g., tax and accounting).
• Prevention of money laundering and terrorist financing (where applicable): customer identification and due diligence.
Basis: Compliance with a legal obligation.
• Recruitment: analysis and management of applications, scheduling interviews, communication with candidates.
Basis: Pre-contractual diligences; legitimate interest; consent where required (e.g., extended retention).
• Marketing and institutional communication (newsletter, invitations, publications): sending relevant content and invitations.
Basis: Consent and/or legitimate interest (with the right to object at any time).
• Website security and maintenance: fraud prevention, incident management, technical audits, logs and performance monitoring.
Basis: Legitimate interest; and compliance with legal cybersecurity obligations where applicable.
• Compliance with legal/regulatory obligations: tax, accounting, compliance with orders from authorities.
Basis: Compliance with a legal obligation.

4) Cookies and Similar Technologies
See cookie policy.

5) Sharing Data with Third Parties
• Processors (e.g., hosting, email, security, maintenance, productivity tools), bound by processing agreements and documented instructions.
• Judicial or regulatory authorities when required by legal obligation or legitimate order.
• Co-organization partners for events and webinar platforms, exclusively for registration management and logistics.
Orien does not sell personal data. Any sharing observes the professional secrecy and confidentiality proper to the legal profession.

6) Retention Periods
• Contacts via website: up to 24 months after the last contact, except for a subsequent contractual relationship.
• Clients/legal services: for the duration of the relationship and the applicable legal filing and limitation periods.
• Recruitment: up to 12 months after completion of the process, or longer period with explicit consent.
• Marketing/newsletters: for as long as the subscription is in force or until consent is withdrawn.
After the deadlines, the data is securely deleted or anonymized.

7) Rights of Data Subjects
The holder has the right to:
• Access to your data and information about the processing.
• Rectification of inaccurate or incomplete data.
• Erasure (right to be forgotten), as applicable.
• Restriction of processing in certain circumstances.
• Portability of data provided on the basis of consent or contract.
• Objection to processing based on legitimate interest and direct marketing.
• Withdrawal of consent at any time, without affecting the lawfulness of the previous processing.
To exercise rights: info@orien.pt. Orien will respond within 30 days; identity verification may be required.

8) Information Security
Orien applies appropriate technical and organizational measures, including access control, encryption, profile and privilege management, segregation of environments, internal policies, employee training, incident management and subcontractor assessment, to prevent unauthorized access, loss, alteration or improper disclosure.

9) Professional Secrecy and Confidentiality
All information relating to clients, matters, processes and documents is protected by professional secrecy and the duties of confidentiality proper to the legal profession. The processing of data within the framework of legal services strictly complies with these obligations.

10) Automated Decisions and Profiling
Orien does not make exclusively automated decisions with legal or significantly similar effects on data subjects. Any use of analytics or profiling to improve communications will occur with consent and the right to object.

11) Complaints and Supervisory Authority
If you consider that your data protection rights have been violated, you can file a complaint with the National Data Protection Commission (CNPD), without prejudice to contacting us in advance for a quick resolution.
• CNPD: www.cnpd.pt | Av. D. Carlos I, 134 – 1.º, 1200-651 Lisboa | Tel.: +351 213 928 400

12) Updates to this Policy
This policy may be updated by legal, technological or operational changes.

13) Privacy Contacts
• Email: info@orien.pt
• Address: Avenida da Boavista nº 1203, 2nd floor, Office 208, 4100-130 Porto
• Email subject: “Privacy – Exercise of Rights”