Legal information

Privacy Policy

Last updated: 6 September 2026

This Privacy Policy describes how the personal data of the users of this website and of those who contact the firm are processed, in accordance with Regulation (EU) 2016/679 (GDPR), Law No. 58/2019 of 8 August, Law No. 41/2004 of 18 August, and other applicable legislation.

1. Data controller

The controller of your personal data is:

Paulo Silva Silva — Advogado
Portuguese Bar Association · Professional ID No. 46829-P · NIF 228319528
Lagoas Park, Edifício 7, 1.º piso (ala Sul), 2740-244 Porto Salvo · Oeiras
E-mail: geral@advpaulosilvasilva.com · Phone: 916 055 901

2. What data we collect

  • Contact details you provide voluntarily: name, e-mail address and the content of the message you send us through the contact form, by e-mail or by telephone.
  • Data provided in connection with a legal matter: the information you provide to us for the purpose of analysing or handling your case.
  • Browsing data: technical data collected automatically by the server and by embedded third-party content (for example, IP address and browser information), to the extent necessary for the operation and security of the website.
  • Measurement data: only with your consent, data on the pages visited, the source of the visit and the interaction with the website, as well as the occurrence of contact requests originating from advertisements. Point 4 describes this processing.
  • Record of consent: the record of the choice you make in the cookie notice, described in detail in point 4.

We do not collect special categories of data through the website and we ask that you not include such data in initial contact messages.

3. Purposes and lawful bases

Your data are processed for the following purposes, on the following bases (Article 6 of the GDPR):

  • Responding to contact and consultation requests — on the basis of your consent [Article 6(1)(a)] and/or pre-contractual steps requested by you [(b)].
  • Provision of legal services, should a mandate be established — on the basis of performance of the contract [(b)] and compliance with legal obligations [(c)].
  • Security, operation and improvement of the website — on the basis of the controller's legitimate interest [(f)].
  • Measuring the use of the website and the effectiveness of advertising campaigns — on the basis of your consent [(a)].
  • Demonstrating the consent given — on the basis of compliance with a legal obligation [(c)], imposed by Article 7(1) and Article 5(2) of the GDPR.

4. Cookies, measurement and record of consent

The website uses cookies and equivalent technologies. Those strictly necessary to provide the service you request do not require consent, under Article 5(2)(b) of Law No. 41/2004 of 18 August, as amended by Law No. 46/2012 of 29 August. All others — statistics and advertising — are only stored or read after you consent to them, under Article 5(1) of that same statute and Article 6(1)(a) of the GDPR.

  • Statistics — if you consent to this category, the website collects, through Google Analytics 4, data on the pages visited, the source of the visit and the interaction with the website.
  • Advertising — if you consent to this category, the website reports to Google Ads the occurrence of contact requests originating from advertisements, so as to measure the effectiveness of the campaigns.

Until you consent, none of these tags is loaded and no information is transmitted to Google.

Record of consent. When you accept, refuse or change your cookie preferences, the website keeps a record of that choice, made up of an identifier generated in your browser, the truncated IP address, the region, the categories accepted or refused, the collection method and the date and time. The record is kept in the website's own database and serves exclusively to enable the controller to demonstrate consent, under Article 7(1) and Article 5(2) of Regulation (EU) 2016/679. It is retained for three years and is not used for any other purpose.

You may withdraw or change your consent at any time, as easily as you gave it, through the "Manage consent" option, permanently visible on the website (Article 7(3) of the GDPR). Withdrawal does not affect the lawfulness of processing carried out on the basis of consent previously given. The Cookie Policy identifies each cookie used.

5. Retention period

  • Contacts that do not give rise to a mandate: retained for a maximum period of 12 months after the last contact and, once that period has elapsed, deleted.
  • Client data: retained for the duration of the mandate and, after its termination, for the period necessary to comply with the legal, contractual, tax and professional-conduct obligations applicable to the legal profession, including the statutory periods for document retention and limitation.
  • Measurement data in Google Analytics 4: event data, 2 months; user data, 14 months from the last activity.
  • Record of consent: 3 years.

6. Disclosure to third parties and processors

We do not sell or transfer your data. The following processors and providers may access the data, strictly to the extent necessary:

  • Hostinger — hosting of the website, the database and e-mail. It is on this hosting that the messages submitted through the site's form and the record of consent are stored.
  • Google — Google Analytics 4 and Google Ads, for the measurement purposes described in point 4, and Google Maps, when the site displays the map. None of these services is loaded before you consent to it.

Data may also be disclosed to public authorities where there is a legal obligation, always safeguarding the lawyer's professional secrecy.

7. International transfers

Some providers, in particular Google, may process data outside the European Economic Area. Such transfers, where they occur, rely on the mechanisms provided for in Chapter V of the GDPR, namely the EU-US Data Privacy Framework adequacy decision or standard contractual clauses approved by the European Commission.

8. Professional secrecy

The data you entrust to us within a client relationship are protected not only by data-protection law but also by the lawyer's professional secrecy, an essential and permanent duty of the legal profession.

9. Your rights

You may, at any time, exercise the rights of access, rectification, erasure, restriction, portability and objection (Articles 15 to 21 of the GDPR), as well as withdraw the consent given, without affecting the lawfulness of processing carried out beforehand. To do so, contact us using the details indicated in point 1.

You also have the right to lodge a complaint with the supervisory authority: National Data Protection Commission (CNPD) — www.cnpd.pt.

10. Security

We adopt appropriate technical and organisational measures to protect your data against unauthorised access, loss, alteration or disclosure.

11. Changes

This Policy may be updated. The version in force is the one published on this site, with the date indicated at the top.

PT·EN
Book a callWhatsApp