Privacy policy

1. Our commitment

Protecting your privacy is a priority for the Firm. This policy explains how we process personal data collected through the website, in accordance with the General Data Protection Regulation (GDPR).

2. Data controller

The controller is Gonçalo Leite de Campos & Associados, with registered office at Edifício Presidente, Avenida Miguel Bombarda, no. 36, 4th G, 1050-165 Lisbon. For any question about your personal data, please contact us at geral@glc.pt or by post at that address.

3. Data we collect

The website has no forms and collects no registration data. We only process the data strictly necessary for the purposes set out below:

• Technical data: IP address, browser type and pages accessed, recorded by our hosting and content delivery providers.
• Contact: the data you choose to send us by email or phone. These links open your own application and do not go through the website.
• Assistant G: the text you type into the tool, as described in section 5.

4. Purposes and legal basis

Your data is used to:

• Respond to your enquiries and, where applicable, check for conflicts of interest before taking on the matter (pre-contractual steps).
• Provide the website, keep it secure and diagnose faults (legitimate interest).
• Produce Assistant G's answers to the questions you ask (at the user's request).

5. How Assistant G handles your data

Assistant G is an initial support tool. The information you enter into it is handled as follows:

• What is sent: to produce an answer, the content of the current conversation, exactly as you typed it, is sent to OpenAI's language model. Search terms derived from your question are sent to a Portuguese legislation search service.
• What we keep: nothing. The firm does not store conversations, whether in a database or in files. When you close or reload the page, the conversation is lost.
• For what purpose: solely to answer the question asked. The information is not used to contact you or for any other purpose.
• External providers: OpenAI and the legislation search service process the information they receive in order to provide their service, under the terms that apply to them, which may include temporary retention of requests.
• Recommendation: do not enter personal data, third-party data or confidential information. Describe your question in general terms.

6. Sharing of data

We do not sell your data. We only share data with the service providers that keep the website running:

• Vercel (hosting) and Cloudflare (image storage and delivery), which receive browsing data.
• CARTO, which provides the map images on the contact page and receives the IP address of anyone viewing the map.
• OpenAI and the legislation search service, for Assistant G only.
• Some of these providers operate outside the European Economic Area, in particular in the United States. In those cases, data is transferred under the safeguards provided for in the GDPR.

7. Retention and security

We keep personal data only for as long as strictly necessary for the purposes for which it was collected.

Technical logs are kept by the hosting and delivery providers in line with their retention policies. Messages you send us are kept for as long as needed to respond and, if the matter is taken on, for the period required by the applicable legal and professional obligations.

8. Your rights

You may at any time request:

• Access to the data we hold about you.
• Rectification or erasure of your data.
• Restriction of processing, data portability, or you may object to processing.
• To exercise these rights, email us at geral@glc.pt. You also have the right to lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (www.cnpd.pt).