1. Data Controller
The controller responsible for the processing of personal data is Consulstaff — Consultores de Gestão. For questions related to privacy, you can contact us at geral@consulstaff.pt.
2. Data Collected
- Contact data: name, company, e-mail and phone, provided through the site's forms or within the scope of the business relationship.
- Project data: information shared by the client for analysis of the application or provision of services.
- Browsing data: technical information collected through cookies (see Cookie Policy).
3. Purposes
- Responding to contact requests and commercial proposals.
- Providing the contracted consulting services.
- Sending informative communications, subject to consent.
- Compliance with legal and tax obligations.
4. Legal Basis
The processing is based on the performance of a contract, the data subject's consent, compliance with legal obligations and/or the legitimate interest of Consulstaff.
5. Retention Period
Data is retained for the period strictly necessary for the purposes for which it was collected and for the applicable legal obligations, after which it is deleted or anonymised.
6. Data Sharing
Data may be shared with entities managing funding programmes (within the scope of applications), public authorities when required by law, and subcontractors providing services to Consulstaff, always under contract and confidentiality obligations.
7. Data Subject Rights
The data subject may exercise, at any time, the rights of access, rectification, erasure, restriction, portability and objection, as well as withdraw previously granted consent. To do so, contact geral@consulstaff.pt. The data subject also has the right to lodge a complaint with the National Data Protection Commission (CNPD — www.cnpd.pt).
8. Security
Consulstaff adopts appropriate technical and organisational measures to protect personal data against unauthorised access, loss or destruction.
9. Changes
This policy may be updated. The version in force is always the one published on the Site.

