Data controller: Ricardo Martins Alves, Lawyer (Portuguese Bar Association no. 21507-L), with offices in Lisbon, Almada and Terceira Island (Azores).
Contact: rma@rmarma.com · +351 912 525 737
1. What we collect
- Booking form — name, e-mail, phone number and whatever you choose to tell us about your matter.
- WhatsApp — your number and the messages you send us. WhatsApp is a Meta service and your conversation is also subject to its own terms.
- Client area — access credentials and the status of the cases that concern you.
- Technical data — IP address and access logs, collected automatically by our hosting provider for security purposes.
- During the mandate — the data needed to handle the matter you entrust to us.
2. What we use it for
To reply to you and schedule meetings; to provide the legal services engaged; to give you private access to the status of your case; to comply with legal, tax and professional obligations; and to keep the website secure and running. Nothing else.
3. Legal basis (art. 6 GDPR)
Pre-contractual steps and performance of the mandate; compliance with legal obligations; legitimate interest in website security and firm management; and consent, where applicable — which you may withdraw at any time, without affecting processing already carried out.
4. Professional secrecy
What you tell us stays with us. Information entrusted to a lawyer is covered by professional secrecy (art. 92 of the Portuguese Bar Association Statute) — before, during and after the mandate. Secrecy does not expire.
5. Who it may be shared with
We do not sell or trade your data. We use only strictly necessary providers, bound by contract and confidentiality: website and e-mail hosting (Hostinger); internal firm management tools (Google Workspace), with restricted access; WhatsApp (Meta), when you choose to contact us that way; and courts, registries, experts or other entities when the mandate so requires. Some providers may process data outside the European Economic Area; where that happens, we require the safeguards provided for in the GDPR (adequacy decisions or standard contractual clauses).
6. For how long
For the duration of the relationship and, afterwards, for the legal and professional periods applicable to a lawyer’s files. Contacts that do not lead to a mandate are deleted as soon as they are no longer needed.
7. Your rights
Access, rectification, erasure, restriction, objection and portability — just write to rma@rmarma.com. You may also lodge a complaint with the Portuguese supervisory authority, CNPD (cnpd.pt). Professional secrecy and a lawyer’s legal obligations may, under the law, limit the exercise of some of these rights.
8. Cookies
We use only technical and essential cookies, needed for the website to work and perform. No advertising cookies, no third-party trackers.
9. Security
We apply appropriate technical and organisational measures: encrypted connection (TLS), a client area with individual credentials and restricted internal access.
10. Changes
This policy may be updated. The version in force is the one published on this page.
Last updated: 6 August 2026.