Privacy Policy

1. Data Controller

JM Advocacia Internacional is the entity responsible for processing personal data collected through the website advogadajheymilematos.com, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and applicable national legislation.

For any questions related to the processing of your personal data, you can contact us at: privacidade@jheymilematos.com

2. Personal Data Collected

JM Advocacia collects personal data in the following situations:

2.1 Contact Forms

• Full name

• Email address

• Telephone number (when provided)

• Description of the situation or information request

2.2 Browsing Data

• IP address

• Browser type and version

• Pages visited and duration of visit

• Cookie data (as per consent given)

3. Purposes and Legal Bases of Processing

The personal data collected is processed for the following purposes:

• Responding to requests for information and contact — legal basis: carrying out pre-contractual steps (Article 6, paragraph 1, point b) of the GDPR);

• Provision of legal services — legal basis: performance of a contract (Article 6(1)(b) of the GDPR);

• Compliance with legal and ethical obligations — legal basis: legal obligation (Article 6(1)(c) of the GDPR);

• Sending legal marketing communications, when consented to — legal basis: consent (Article 6(1)(a) of the GDPR);

• Website improvement and statistical analysis — legal basis: legitimate interests (Article 6(1)(f) of the GDPR).

4. Data Retention

Personal data is retained for the period strictly necessary to achieve the purposes for which it was collected, respecting the following criteria:

• Data relating to clients with a contractual relationship: during the term of the contract and for the legally applicable limitation period (generally 20 years);

• Data from contact requests without effective contracting: up to 2 years after the last contact;

• Browsing data and cookies: as specified in the Cookie Policy;

• Data processed based on consent: until its revocation.

5. Sharing Data with Third Parties

JM Advocacia does not sell, transfer or share personal data with third parties for commercial purposes. Data may be shared in the following situations:

• With technology service providers acting as subcontractors, through the signing of data processing agreements in accordance with the GDPR (e.g., web hosting, email services);

• With judicial, regulatory, or administrative authorities, when required by legal obligation;

• With the Portuguese Bar Association, within the scope of compliance with deontological obligations.

Whenever data is transferred to countries outside the European Economic Area, the Firm ensures the adoption of adequate safeguards under the GDPR.

6. Data Subject Rights

Under the GDPR, the data subject has the right to:

• Access — obtain confirmation as to whether their data is being processed and access it;

• Rectification — request the correction of inaccurate or incomplete data;

• Erasure ("right to be forgotten") — request the deletion of data, under legally permissible terms;

• Restriction of processing — request the suspension of processing in certain circumstances;

• Portability — receive their data in a structured and commonly used format;

• Objection — to object to processing based on legitimate interests or for direct marketing purposes;

• Withdrawal of consent — to withdraw consent given, without prejudice to the lawfulness of the previous processing.

To exercise any of your rights, you may contact us at: privacidade@jheymilematos.com

The Firm undertakes to respond to requests within 30 days, extendable by a further 60 days in case of complexity or a high number of requests.

You also have the right to lodge a complaint with the competent supervisory authority — in Portugal, the National Data Protection Commission (CNPD): www.cnpd.pt

7. Data Security

JM Advocacia implements appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure or destruction, including:

• HTTPS protocol throughout the Website;

• Access control to internal systems;

• Internal procedures for managing security incidents.

In the event of a data breach that may affect your rights and freedoms, the Office will notify the CNPD (National Data Protection Commission) within the legally prescribed timeframe and, where applicable, will communicate the incident to the affected data subjects.

8. Cookies

The Website uses cookies to improve the browsing experience. For detailed information about the cookies used and the available configuration options, please consult our Cookie Policy, available in the Website footer.

9. Minors

This website is not directed at individuals under 18 years of age. JM Advocacia does not knowingly collect personal data from minors. If it becomes aware that it has collected data from a minor without parental consent, it will proceed with its immediate deletion.

10. Changes to the Privacy Policy

JM Advocacia reserves the right to update this Privacy Policy at any time, in accordance with legislative changes or its activity. The updated version will always be available on the Website, indicating the date of the last revision.