This Privacy Policy describes how WebOffice, Lda collects, uses and protects the personal data of users of this website and of clients of its business centre services, in accordance with the General Data Protection Regulation (GDPR — EU Regulation 2016/679) and Portuguese Law no. 58/2019 of 8 August.
1. Owner and Data Controller
The controller of your personal data is:
- WebOffice, Lda
- Company number (NIPC): 509655700
- Registered office: Rua Pinto Bessa n.º 522, R/C Esquerdo, 4300-428 Porto, Portugal
- Email: info@weboffice.pt
- Phone: +351 225 899 800 (national landline rate)
2. Personal Data Collected
WebOffice collects the following types of personal data, either provided directly by you or gathered automatically as you use the website:
2.1. Data you provide directly
- First name and surname
- Email address
- Phone number
- Company name and tax number (where applicable)
- The message or enquiry sent through the contact forms
2.2. Data collected automatically
- IP address
- Browser type and version
- Operating system
- Pages visited and time spent on them
- Cookie data (see section 8)
3. How and Where Data Is Processed
Data is processed by automated and manual means, with technical and organisational security procedures and measures appropriate to prevent unauthorised access, disclosure, alteration or destruction. Data is processed at WebOffice's operational premises and at any other location where the processors involved are based, all of whom are bound by confidentiality obligations.
4. Purposes of Processing
The data collected is used for the following purposes:
- Responding to enquiries and quotation requests
- Providing the services contracted (virtual offices, coworking, private offices, business lounge)
- Managing the contractual relationship and invoicing
- Meeting legal and tax obligations
- Sending news, content and offers (only with your express consent)
- Continuous improvement of the website and services (anonymised statistical analysis)
- Security and fraud prevention
5. Legal Basis for Processing
The processing of personal data rests on the following legal bases, depending on the purpose:
- Performance of a contract or pre-contractual steps (Art. 6(1)(b) GDPR)
- Compliance with a legal obligation (Art. 6(1)(c) GDPR) — for example, tax obligations and client identification
- Consent of the data subject (Art. 6(1)(a) GDPR) — for marketing communications and non-essential cookies
- Legitimate interest (Art. 6(1)(f) GDPR) — for network security, fraud prevention and usage analysis
6. Retention Period
Personal data is kept only for as long as is strictly necessary to fulfil the purposes for which it was collected, namely:
- Commercial contact data (forms): up to 24 months after the last contact
- Active client data: for the duration of the contract and up to 5 years after it ends, unless longer legal periods apply
- Tax documents: 10 years (Art. 123 of the Portuguese Corporate Income Tax Code and Art. 52 of the VAT Code)
- Data used for marketing: until consent is withdrawn
7. Your Rights
Under the GDPR, you have the right to:
- Access your personal data
- Rectification of inaccurate or incomplete data
- Erasure of your data (the "right to be forgotten"), on the grounds provided by law
- Restriction of processing
- Portability of your data
- Object to the processing, including for direct marketing purposes
- Withdraw consent at any time, without affecting the lawfulness of processing carried out beforehand
- Not be subject to automated decision-making, including profiling
These rights can be exercised by email to info@weboffice.pt, stating clearly which right you wish to exercise and providing proof of identity.
8. Cookies
This website uses first-party and third-party cookies to make the site work, analyse traffic and personalise your experience. For details of the cookies used and how to manage your preferences, see the Cookie Policy.
9. International Transfers
Where necessary, WebOffice may use service providers (web hosting, email or traffic analysis, for example) that process data outside the European Economic Area. In those cases, we ensure such transfers meet the appropriate safeguards set out in Chapter V of the GDPR, including, where applicable, European Commission adequacy decisions or standard contractual clauses.
10. Data Security
WebOffice applies technical and organisational measures appropriate to the risk, including TLS encryption on the website, access controls, regular backups and data protection training for staff, in order to protect personal data against loss, destruction, unauthorised access or accidental disclosure.
11. Changes to This Policy
WebOffice reserves the right to update this Privacy Policy at any time. Changes will be published on this site, showing the date they were last updated. We recommend checking this page from time to time.
12. Contact and Complaints
For any question about the processing of your personal data, contact us at info@weboffice.pt.
If you believe the processing of your data infringes the GDPR, you also have the right to lodge a complaint with the competent supervisory authority:
- Comissão Nacional de Proteção de Dados (CNPD), the Portuguese data protection authority
- Av. D. Carlos I, 134 — 1.º, 1200-651 Lisboa, Portugal
- Phone: +351 213 928 400
- Email: geral@cnpd.pt
- Web: www.cnpd.pt
