Privacy policy

Data controller and contacts

The data controller is Teampartner, Lda., Portuguese legal entity number (NIPC) 510 513 409, with registered office at Rua José Augusto Seabra, n.º 17 B, Escritório C, 1500-675 Lisboa, Portugal.

For privacy questions or to exercise your rights, write to nuno.ribeiro@teampartner.pt. You can also use geral@teampartner.pt or send a letter to the address above.

TeamPartner has not appointed a data protection officer, as its activity does not require one (Article 37 GDPR). Personal data requests are handled through the contacts above.

• Contact us about personal data
• General contact

What data we process

We only process the following data. Visitor analytics are collected only if you accept analytics cookies; the website does not use advertising tools.

• Proposal or contact request (form): name, email, phone number (with its country code), the situation you selected (or the one for the service on that page) and your message; and, if you provide it, your company or project name.
• Request context: the language of the form, the service, the page of the website where you made the request (or the page you viewed before opening the form) and, if you reached the website through a campaign, that campaign's identifiers (the utm parameters in the address, such as the source and campaign name). We do not add other data.
• Contacts by email, phone or WhatsApp: the data you send us, such as your name, contact details and the content of your message.
• Technical browsing data: for security and to fix technical problems, the hosting provider logs data such as the IP address, date and time, the requested page and the type of browser and device.
• Visitor analytics, only if you accept analytics cookies: pages viewed, where the visit came from, type of device and browser, approximate location (country or city), pseudonymised cookie identifiers and, in Microsoft Clarity, how you browse each page (clicks, scrolling and mouse movements), without anything typed into forms.
• Abuse prevention: to stop repeated form submissions, we keep in memory only, for 15 minutes, a pseudonymised code derived from the IP address. The IP address itself is not stored.

Required data and information not to send

The required fields of the form are those we need to understand your request and reply. Without them, we cannot follow up. Optional fields can be left blank.

Please do not include passwords, bank details, health data or copies of documents in your first message. If documents are needed to assess or provide a service, we will explain which ones and how to send them securely.

Why we use the data and on what legal basis

• Replying to your request and preparing a proposal, when you contact us on your own behalf: steps taken at your request before entering into a contract (Article 6(1)(b) GDPR).
• Replying to requests made on behalf of a company and managing business contacts: TeamPartner's legitimate interest in replying to those who contact it and in maintaining business relationships (Article 6(1)(f)). The contact is started by the person, who expects a reply, and we only process the data needed.
• Understanding which pages and campaigns generate requests, to improve the website and how we communicate: legitimate interest (Article 6(1)(f)). We only use the page and campaign identifiers sent with the request, without cookies or measurement tools.
• Website usage analytics (Google Analytics) and heatmaps and browsing replays (Microsoft Clarity), to understand how the website is used and improve it: consent (Article 6(1)(a) GDPR and Article 5 of Law no. 41/2004). You can withdraw it at any time under “Manage cookie preferences”.
• Security and operation of the website, including prevention of abusive form submissions: legitimate interest in keeping the service available and secure (Article 6(1)(f)).
• Compliance with legal obligations, including replying to requests to exercise data protection rights: legal obligation (Article 6(1)(c)).
• Establishing, exercising or defending legal claims: legitimate interest, only when necessary (Article 6(1)(f)).

Marketing communications and automated decisions

Sending a request does not add you to any marketing list. If a newsletter is offered in the future, subscribing will be optional, based on separate consent and easy to cancel.

Requests are read and assessed by people in our team. There are no decisions based solely on automated processing, nor profiling with legal or similarly significant effects (Article 22 GDPR).

Who has access to the data

Only the TeamPartner staff who need the data to reply to and follow up on your request can access it.

We use the following providers, who process data on our behalf, under a data processing agreement (Article 28 GDPR) and only to provide their service:

• Vercel Inc. (United States): website hosting and processing of the form, which runs on servers in the Paris region (France).
• Plus Five Five, Inc., which provides the Resend service (United States): sending the form request by email to TeamPartner's mailbox.
• Microsoft Ireland Operations Limited (Microsoft 365): TeamPartner's email service, where we receive requests and emails.
• Google Ireland Limited (Google Analytics): visitor analytics, only if you accept analytics cookies.

Other recipients and external services

If you choose to contact us on WhatsApp, the conversation takes place on that service, provided by WhatsApp Ireland Limited, which processes data under its own terms and privacy policy. The same applies to other websites you open from this one, such as maps or the Portuguese electronic complaints book.

If you accept analytics cookies, Microsoft Ireland Operations Limited processes visit data in Microsoft Clarity (heatmaps and browsing replays), under the Clarity terms and the Microsoft Privacy Statement.

We may disclose data to public authorities or courts when required by law.

We do not sell personal data or share it with third parties for advertising purposes.

Transfers outside the European Economic Area

Vercel and Resend are United States companies, and Resend sends emails from that country. Microsoft may also access data from the United States to provide its service. If you accept analytics cookies, Google and Microsoft may process that data in the United States.

These transfers rely on the European Commission's adequacy decision on the EU-U.S. Data Privacy Framework (Implementing Decision (EU) 2023/1795 of 10 July 2023), for certified organisations, and on the standard contractual clauses approved by the European Commission, included in these providers' data processing agreements.

You can ask us for more information about these safeguards, or for a copy, through the privacy contacts.

How long we keep the data

We keep data only for as long as needed for its purpose and then delete or anonymise it. We only keep it longer if it is needed to establish, exercise or defend legal claims, and only for that period.

Retention periods we apply:

• Requests and messages that do not lead to a contract: up to 2 years after the last contact, unless you ask us to delete them sooner.
• Requests that lead to a contract: for the duration of the contract and then for the legal periods applicable to our activity (for example, 10 years for accounting and tax records), which we explain when you hire us.
• Copy of each message in the email service (Resend): 30 days.
• Hosting technical logs: up to 30 days.
• Visitor analytics in Google Analytics: 14 months.
• Recordings in Microsoft Clarity: 30 days; heatmaps and a sample of recordings: up to 9 months.
• Your cookie choice: 6 months, in your browser.
• Pseudonymised abuse-prevention code: 15 minutes, in memory only.

Your rights

Under the GDPR, you can:

• Access your data and obtain a copy.
• Correct inaccurate or incomplete data.
• Ask for your data to be erased.
• Ask for processing to be restricted.
• Object to processing based on legitimate interest, on grounds relating to your particular situation, and object at any time to the use of your data for direct marketing.
• Receive the data you provided in a structured, commonly used format (portability), when processing is based on a contract or on consent and is automated.
• Withdraw your consent at any time, where processing is based on it, without affecting processing already carried out.
• Lodge a complaint with a supervisory authority.

How to exercise your rights and complain

Send your request to nuno.ribeiro@teampartner.pt or geral@teampartner.pt, stating the right you wish to exercise. If we have reasonable doubts about your identity, we may ask only for the additional information needed to confirm it.

Exercising your rights is free of charge. We reply without undue delay and within one month, which may be extended by two further months when the complexity or number of requests justifies it; in that case, we will tell you within the first month. Manifestly unfounded or excessive requests may be refused or subject to a reasonable fee, as provided by law.

You can lodge a complaint with the Portuguese data protection authority, Comissão Nacional de Proteção de Dados (CNPD), Av. D. Carlos I, 134, 1.º, 1200-651 Lisboa, or with the supervisory authority of the country where you live or work.

• CNPD rights and contacts (in Portuguese) (External link)

Security

We apply technical and organisational measures appropriate to the risk: encrypted connections (HTTPS with HSTS), security headers on the website, requests delivered without being stored in a website database, access limited to the people who need the data, and providers with contractual security commitments.

If a personal data breach poses a risk to your rights, we will notify the CNPD and, where required by law, the people affected.

Minors

Our services are aimed at businesses and adults. We do not knowingly collect data from minors through this website.

Cookies and changes to this policy

This website uses one necessary cookie to remember your cookie choice and, only with your consent, analytics cookies. The cookie policy lists each cookie with its purpose and duration and explains how to change your choice.

We update this policy whenever there are relevant changes to how we process data. The date at the top of the page shows the version in force.

• Read the cookie policy
• Read the terms of use