Privacy Policy (Portugal) by Seedsummit
Updated 17 October 2025
The Seedsummit Privacy Notice template outlines how a company collects, uses, stores, and protects personal data in compliance with the EU GDPR. It is useful for ensuring legal transparency and helping companies demonstrate accountability and compliance when handling customer data.
Explanatory Notes:
The following privacy policy template is suitable for use by a company collecting, handling andprocessing data of its customers based in Portugal.
The text in square brackets indicates that information needs tobe added or confirmed. Please ensurethat all square brackets are completed and removed prior to making this Privacy Policy available.
This document is not a substitute for legal advice and may need to be tailored to the circumstances toappropriately reflect the specific situation of the company.
Privacy Notice
Who is responsible for processing my information?
We are [company name], acting as a Data Controller for the purposes of the following Privacy Notice. The purpose of this notice is to provide you with the information required in accordance with Regulation (EU) 2016/679, of the European Parliament and of the Council, on the protection of natural persons with regard to the processing of personal data (the “General Data Protection Regulation” or “GDPR”).
Our website may contain links to other websites that are not operated by us. This Privacy Notice does not address the privacy notice and other practices of any third parties, including any third party operating any website or service that may be accessible via a link on our Website. We strongly advise you to review the privacy notice of every site you visit. We have no control over and assume no responsibility for the content, privacy policies or practices of any third-party sites or services.
Our EU representative is [eu representative name], with domicile at [eu representative address] and may be contacted through [eu representative contact].
The optional sentence above is mandatory for non-EEA based companies that (i) offer goods or services to data subjects in the EU; or (ii) monitor the behavior as far as their behavior takes place in the EU, the designation and identification of an EU representative may be required. This is not applicable to non-EU companies where processing is occasional does not include, on a large scale, processing for special categories of data or criminal records and is unlikely to result in a risk to the rights and freedoms of natural persons.
How can I contact you?
If you have any questions about this policy, including any requests to exercise your legal rights, please contact us at [contact email] or by writing to [contact address].
This policy was last updated on [last updated date].
How do you use my data?
Amend the following where applicable for the types of information collected by the Company.
When you create and log into your account we will collect your [type of information collected when creating an account, such as name, email address, phone number, address, company name and address (if applicable) and payment details]. We collect this in order to take steps to enter into a contract with you and allow you to purchase our services. Likewise, if you do not provide us with your data, we may not be able to create you an account.
When you sign up to receive our news updates. We will collect your [type of information collected when signing up, such as name and email address] to provide you with our news updates in line with any preferences you have told us about. When we send you our news updates because you have opted-in to receive them, we rely on your consent to contact you.
You can unsubscribe from our updates at any time by responding to any email you receive from us to tell us you wish to unsubscribe or by emailing [contact email].
When you contact us either by phone, email, via our 'contact us' page or via social media, we will usually collect your [information collected when you contact us, such as name, social media handle and contact details], because it’s in our legitimate interest to make sure we can properly respond to your query.
When you use our website and consent to our use of cookies we will collect information about how you use our website. We use this information to improve our website and to better understand how people use it. More detail on the information we collect and how we do this is set out in our Cookie Policy [hyperlink for or location of cookie policy] [separate document, hyperlinked].
Security. In order to protect our visitors, assets and business against violence, fraud, theft, misuse and other malicious activities, we put in place a range of different security measures (including cookies, tags and other similar technologies) to protect our website. Some of these measures will require collection and processing of personal data.
If our business is sold. We process your personal information for this purpose because we have a legitimate interest to ensure our business can be continued by the buyer. If you object to our use of your personal information in this way, the buyer of our business may not be able to provide services to you.
Legal defense. We have legitimate interest in protecting our rights and our property, or any of our respective affiliates, business partners, employees or customers, for example, in legal proceedings, internal investigations and investigations by competent authorities.
Who do you share my data with?
Business partners, suppliers and subcontractors for the performance of the contract we enter into with them or you.
Regulators/ Authorities/ Enforcement Agencies if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of use and other agreements; or to protect the rights, property, or safety of our clients or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection.
Prospective buyers of our business under our legitimate interest to ensure our business can be continued by the buyer.
Where do you store my data?
We store your data on our servers or third party servers which are based in the EU.
When working with third parties we may need to transfer your personal data outside of the EU.
Whenever we transfer your personal information outside of the EU, we ensure it receives additional protection as required by law. To keep this policy as short and easy to understand as possible, we haven’t set out the specific circumstances when each of these protection measures are used. You can contact us using the details above for more information on this.
How long do you keep my data for?
We will only retain your personal information for as long as we need it unless we are required to keep it for longer to comply with our legal, accounting or regulatory requirements. For further information about our storage periods please contact us by using the contact details above in this notice.
We delete your order information 6 years after your last order with us. Other information related to your account will be deleted 2 years after your account has become inactive.
In some circumstances we may carefully anonymise your personal data so that it can no longer be associated with you, and we may use this anonymised information indefinitely without notifying you. We use this anonymised information to improve the way we work and our services.
What are my rights under the GDPR?
According to GDPR, you may:
access your personal data (also known as a “subject access request”);
in most cases, correct incomplete or inaccurate data we hold about you;
in some circumstances, ask us to erase the personal data we hold about you;
in some circumstances, ask us to restrict our processing of your personal data;
when your data is based on consent or in a contract and is processed under automated means, ask us to transfer your personal data to a third party;
object to how we are using your personal data; and
withdraw your consent.
You also have the right to lodge a complaint with us or before a relevant data supervisory authority. You can find the EU data supervisory authorities here.
About this template
What is this template?
Privacy Policy (Portugal) by Seedsummit is a free, ready-to-use Information law template you can open, customize, and download on GitLaw. It gives you a professionally structured starting point, so you never have to draft from a blank page. The wording is plain and modern, organized into clear sections that are easy to read, edit, and adapt to your own situation before you share or sign it.
When should you use it?
Reach for this Information law template whenever you need a reliable agreement quickly and want to be sure the essentials are covered. It suits individuals, freelancers, startups, and established businesses alike. Instead of paying for a document drafted from scratch, you can start here, tailor the details to your arrangement, and have a polished draft ready in minutes. This version is drafted with Portugal and European Union in mind, though you should always review the final wording against the laws that apply to you.
What's typically included?
A well-drafted Information law usually sets out the parties involved, the scope of the agreement, and each side's rights and responsibilities. Expect sections covering key terms and definitions, how long the agreement lasts, how it can be ended, and what happens if something goes wrong. This template brings those building blocks together in a sensible order, so you can focus on the specifics rather than worrying about what to include. Open it to read the full document, then sign up to edit, negotiate, and e-sign it directly in GitLaw.