Privacy Policy

Percentagem Envolvente LDA
Last Updated: February 18, 2026

1. Data Controller

The data controller responsible for your personal data is:

  • Percentagem Envolvente LDA

  • Legal Representative: Barbara Santos

  • Registered Address: Rua Arieiro 12, 2460‑821 Montes, Alcobaça, Leiria, Portugal

  • Email: privacy@percentagemenvolvente.com

  • NIF: 517 102 790

2. Legal Basis for Processing (GDPR)

We process personal data under the following legal bases:

  • Consent: You have given clear consent to process your data.

  • Contract: Processing is necessary to perform a contract or to take steps at your request prior to entering a contract.

  • Legal Obligation: Processing is necessary to comply with legal obligations.

  • Legitimate Interests: Processing is necessary for our legitimate interests, provided your interests and fundamental rights do not override those interests.

3. Personal Data We Collect

We may collect:

  • Contact Data: Name, email address, phone number, postal address and company details.

  • Consulting Data: Business and financial information provided for consulting services.

  • Technical Data: IP address, browser type and version, device identifiers, pages visited and time spent on our site.

  • Payment Data: Billing and invoicing information. Payment card details are handled by secure third‑party payment processors.

  • Cookies: Information stored through cookies (see Section 9).

We do not knowingly collect data from individuals under 16 years of age.

4. Purpose of Processing

We use your data to:

  • Provide consulting services and fulfil contractual obligations.

  • Communicate with you about your projects and our services.

  • Issue invoices, process payments and comply with accounting requirements.

  • Analyse Website performance, troubleshoot issues and improve our services.

  • Send marketing communications when you have opted in.

  • Comply with legal and regulatory obligations.

5. Data Retention

We retain personal data for as long as necessary:

  • To fulfil the purposes for which it was collected.

  • To satisfy legal, accounting or reporting requirements (usually up to 10 years under Portuguese law).

  • Until you withdraw consent for marketing communications.

6. Data Sharing

We do not sell or rent your personal data. We may share data with:

  • Service Providers: IT hosts, analytics providers, legal advisers, accountants and payment processors, who must adhere to confidentiality and data protection obligations.

  • Authorities: Regulatory or law enforcement agencies, if required by law.

When sharing data with processors or sub‑processors outside the EEA, we ensure appropriate safeguards such as Standard Contractual Clauses (SCCs) or adequacy decisions.

7. International Transfers

Your personal data may be transferred to countries outside the European Economic Area (EEA). We ensure that transfers are made in compliance with the GDPR, using adequate safeguards.

8. Data Subject Rights

Under the GDPR, you have the right to:

  • Access: Request a copy of the personal data we hold about you.

  • Rectify: Correct inaccurate or incomplete data.

  • Erase: Request deletion of your data (“right to be forgotten”).

  • Restrict: Limit processing of your data under certain circumstances.

  • Object: Object to processing based on legitimate interests or direct marketing.

  • Portability: Obtain your data in a structured, commonly used and machine‑readable format.

  • Withdraw Consent: Withdraw consent at any time without affecting the lawfulness of prior processing.

  • Complain: File a complaint with the Portuguese Data Protection Authority (CNPD).

To exercise these rights, contact us via privacy@msnmanagement.com.

9. Cookie Policy

9.1 What Are Cookies?

Cookies are small text files stored on your device to enhance your browsing experience.

9.2 Types of Cookies We Use

  • Strictly Necessary Cookies: Essential for website functionality.

  • Analytical/Performance Cookies: Help us understand how visitors use the Website (e.g. Google Analytics).

  • Marketing Cookies: Enable targeted advertising and remarketing (used only with your consent).

9.3 Consent Requirements

Under the EU ePrivacy Directive and GDPR, non‑essential cookies require explicit consent. We use a cookie banner to obtain your consent. You can withdraw or modify your cookie preferences at any time.

9.4 Managing Cookies

Most browsers allow you to manage cookies via settings. Disabling cookies may affect Website functionality. Our cookie banner lets you accept or reject cookies and change your preferences.

10. Data Security

We implement technical and organizational measures to safeguard your personal data, including:

  • Encryption of communications (SSL/TLS)

  • Access controls and authentication

  • Regular security audits

  • Internal data protection policies

Despite our efforts, no system is entirely secure. We cannot guarantee absolute security of data transmitted to or through our Website.

11. Automated Decision‑Making

We do not use automated decision‑making or profiling in our services.

12. Updates to This Policy

We may update this Privacy Policy at any time. Updated versions will be posted on this page, and material changes will be highlighted where appropriate.

13. Contact Us

For any questions about this Privacy Policy, or to exercise your data subject rights, please contact us at:

  • Email: privacy@msnmanagement.com

  • Postal Address: Rua Arieiro 12, 2460‑821 Montes, Alcobaça, Leiria, Portugal

We aim to respond to all legitimate requests within one month.

14. Supervisory Authority

If you believe our processing of your personal data infringes data protection law, you have the right to lodge a complaint with:

Comissão Nacional de Proteção de Dados (CNPD)
Avenida D. Carlos I, 134 – 1º, 1200‑651 Lisbon, Portugal
Website: www.cnpd.pt