PortuguêsVIRTUDE Group is committed to protecting your personal data and respecting your privacy. This Privacy and Cookie Policy explains how we collect, use, store, and protect your personal information when you visit our website or interact with our services, in full compliance with Regulation (EU) 2016/679 (GDPR) and Portuguese Law No. 58/2019 of 8 August.
1. Data Controller
The entity responsible for the processing of personal data is VIRTUDE Group (hereinafter referred to as “VIRTUDE”), with registered address Travessa Travessa da Queiró 79, 5000-063 Vila Real, NIF/NIPC 519138023. For any matter relating to data protection, you may contact our Data Protection Officer at clotilde@virtudegroup.com.
2. Personal Data Collected
In the context of the use of our services and website, VIRTUDE may collect the following categories of personal data: identification and contact data, such as name, email address, and telephone number; service and contract data, including information relating to proposals and agreements entered into; financial data necessary for the conclusion and performance of contracts; content of messages and enquiries submitted via contact form or email; and navigation and technical data, such as IP address, browser type, and session information, collected automatically through cookies and analytics tools.
The provision of certain data may be required for the conclusion or performance of a service agreement. Failure to provide it may prevent the delivery of the requested services. VIRTUDE does not collect special categories of sensitive data as defined under Article 9 GDPR, nor personal data from persons under 16 years of age.
3. Purposes and Legal Basis for Processing
Personal data is processed for the following purposes: management of service enquiries and contact requests; preparation and performance of service proposals and contracts; compliance with applicable legal, fiscal, and accounting obligations; sending of commercial communications and marketing activities, subject to prior and unambiguous consent; and continuous improvement of the quality and personalisation of the services offered.
Processing is carried out on the following legal bases under Article 6 of the GDPR: performance of a contract or pre-contractual steps at the request of the data subject (Art. 6(1)(b)); compliance with a legal obligation (Art. 6(1)(c)); consent of the data subject, where applicable (Art. 6(1)(a)); and legitimate interests of VIRTUDE, where such interests are not overridden by the rights and freedoms of the data subject (Art. 6(1)(f)). VIRTUDE will not process personal data in a manner incompatible with the purposes for which it was originally collected.
4. Data Sharing and Transfers
VIRTUDE does not sell, rent, or trade personal data. Data may be disclosed to trusted service providers acting as data processors on our behalf – such as IT, hosting, accounting, or marketing services – bound by data processing agreements that ensure confidentiality and security; to partner entities where necessary for the performance of contracted services; and to public authorities, including the CNPD, where required by applicable law or court order.
In the event of any transfer of personal data to third countries outside the European Economic Area, adequate legal safeguards will be ensured in accordance with the GDPR, including Standard Contractual Clauses approved by the European Commission where required.
5. Data Retention
Personal data will be retained only for as long as necessary to fulfil the purposes for which it was collected, or for the periods required by applicable law. Contact and enquiry data is generally retained for a period of three years. Data relating to service contracts, fiscal records, and accounting documentation is retained for ten years in accordance with Portuguese commercial and tax law. Analytics and navigation data collected via cookies is retained for a maximum of twenty-six months. Data processed on the basis of consent is retained until that consent is withdrawn. Upon expiry of the applicable period, data will be securely deleted or anonymised.
6. Rights of the Data Subject
Under the GDPR and Law No. 58/2019, you have the right to access your personal data; to request its rectification where inaccurate or incomplete; to request its erasure where there is no legitimate ground to continue processing; to request restriction of processing in certain circumstances; to receive your data in a portable format; to object to processing based on legitimate interests or for direct marketing purposes; and to withdraw consent at any time, without affecting the lawfulness of processing carried out prior to such withdrawal.
To exercise any of these rights, please send a written request to privacy@virtudegroup.com. We will respond within thirty calendar days of receipt of your request, in accordance with Article 12 of the GDPR.
7. Data Security
VIRTUDE implements appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure, alteration, or destruction, taking into account the nature of the data and the risks associated with its processing. All staff and partners with access to personal data are subject to confidentiality obligations and receive appropriate guidance on data protection requirements.