Privacy Policy

1. Introduction

Portal360 respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we process your personal data when you visit our website or use our platform, as well as your privacy rights and how the law protects you, in accordance with the General Data Protection Regulation (GDPR).

2. Data we collect

We may collect, use, store and transfer different categories of personal data about you, which we have grouped as follows:

• Identity data: They include name, surname, tax identification number (NIF) and organization data (NIPC).
• Contact details: This includes email address, phone numbers, and physical address.
• Financial data: This includes information relating to payments, IBAN, transactions, invoices and receipts.
• Technical data: These include IP address, login data, browser type and version, time zone, and approximate location data.

3. Integrations with external platforms

A nossa plataforma disponibiliza integrações via API com plataformas externas para facilitar a gestão de dados, serviços e operações. Ao ligar a sua conta a estas plataformas através do Portal360, autoriza o acesso aos seguintes dados:

• User profile information and registration data.
• Data on services performed, revenue, and performance indicators.
• Payment history and financial statements.
• Information on registered resources and related documentation.

This data is used exclusively for management purposes, report generation, payment processing, and compliance with tax and legal obligations. We do not share data from these platforms with unauthorized third parties. Access is granted via secure tokens and can be revoked at any time.

4. How we use your data

We only process your personal data when permitted by law. In particular, we use your data in the following situations:

• To provide, operate, and maintain the platform and its functionalities.
• To process payments, generate receipts, and issue tax documents.
• To comply with applicable legal and regulatory obligations, including labor and tax legislation.
• To inform you about changes to the service, features, or terms.
• To enable participation in the platform's interactive features.
• To provide customer support and technical assistance.
• To conduct analyses and gather information with a view to continuously improving the service.
• To detect, prevent, and resolve technical or security incidents.

5. Data security

We have implemented appropriate technical and organizational measures to protect your personal data against accidental loss, unauthorized access, misuse, alteration, or disclosure. Data is stored on secure, encrypted servers, and access is restricted to employees and service providers who require access for operational purposes, all of whom are subject to confidentiality obligations. We also have procedures in place for managing security incidents and, when legally required, we will notify data subjects and the competent authorities.

6. Data retention

We retain your personal data only for the period necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting obligations. In determining retention periods, we consider the nature, sensitivity, and volume of the data, the associated risks, and applicable legal requirements. For example, tax-related data is retained for 10 years, in accordance with Portuguese law.

7. Your legal rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:

• Right of access: to obtain confirmation about the processing and access to your personal data.
• Right of rectification: to request the correction of inaccurate or incomplete data.
• Right to erasure: request the deletion of your personal data, under certain circumstances.
• Right to restriction of processing: request the restriction of the processing of your personal data, under certain conditions.
• Right to object: to object to the processing of your personal data in certain situations.
• Right to data portability: to receive the personal data you have provided to us in a structured and commonly used format, or to request its transmission to another entity.
• Right to withdraw consent: when processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us via the support email address provided on the platform.

8. Cookies and similar technologies

We use cookies and similar technologies to improve your experience, analyze platform usage, and personalize content. You can manage your cookie preferences in your browser settings. Disabling cookies may affect the functionality of some features.

9. Sharing with third parties

We do not sell your personal data. We may share data with service providers who support us in operating the platform (such as hosting, payment processing, and customer support), who are bound by confidentiality obligations and only process the data for the defined purposes. We may also disclose data to legal or regulatory authorities when legally required to do so.

10. Changes to this policy

We may update this Privacy Policy from time to time. The most recent version will be posted on this page, with an updated "Last updated" date. We recommend that you review this policy regularly.

11. Contact

For clarification regarding this Privacy Policy, our data protection practices, or to exercise your rights, please contact us through the following means: