Privacy Policy
This Privacy Policy describes how NOMINAUREA – CONSULTORIA FISCAL E CONTABILIDADE, LDA. (“Nominaurea”), NIPC 507753712, with registered office at Avenida Duque d’Ávila, n.º 141, 1.º esquerdo, 1050-081 Lisbon, phone (+351) 210 539 673 and email geral@nominaurea.pt, processes personal data collected through the website https://www.nominaurea.pt and within the scope of its professional accounting and tax consultancy activities.
Nominaurea ensures that the processing of personal data is carried out in compliance with Regulation (EU) 2016/679 (GDPR) and Law no. 58/2019, of August 8.
1. Data Controller
The data controller is Nominaurea – Consultoria Fiscal e Contabilidade, Lda., the entity that determines the purposes and means of processing the personal data collected.
Contacts:
📍 Avenida Duque d’Ávila, n.º 141, 1.º esquerdo, 1050-081 Lisbon
📞 (+351) 210 539 673
✉️ geral@nominaurea.pt
2. Personal Data Collected
Nominaurea may collect and process the following categories of personal data:
First and last name
Email address
Phone number
Company or entity represented
Tax identification data
Information contained in messages or requests submitted through the contact form available on the website
3. Purposes of Processing
Personal data is processed for the following purposes:
Responding to contact requests, inquiries, or service proposals submitted through the website
Administrative and contractual management of clients and potential clients
Compliance with legal obligations, particularly fiscal and accounting requirements
Institutional or informational communication, when the data subject has expressed interest in receiving it
Nominaurea does not use personal data for direct marketing purposes nor does it carry out automated profiling.
4. Legal Basis
The processing of personal data is based on:
The performance of pre-contractual or contractual steps, when the processing is necessary for the provision of requested services
Compliance with legal obligations, particularly those arising from fiscal and accounting legislation
The consent of the data subject, when applicable (e.g., for sending institutional communications)
5. Data Retention
Personal data is retained only for the period strictly necessary to fulfill the purposes that justified its collection, respecting the legal retention periods established by fiscal and accounting legislation.
After this period, the data will be securely deleted or anonymized.
6. Disclosure of Data to Third Parties
Personal data may be disclosed to external entities only when necessary for:
Compliance with legal obligations (for example, the Tax Authority, Social Security, or other competent public authorities)
The provision of technical support services, web hosting, or IT system maintenance, always under a written contract and in compliance with the GDPR
In certain situations, particularly in the context of payroll processing and/or human resources management services for clients, Nominaurea acts as a subcontractor, processing personal data on behalf of and under the instructions of the client, who assumes the role of data controller.
In these cases, Nominaurea ensures compliance with the obligations set out in Article 28 of the GDPR, including confidentiality, security, purpose limitation, and the return or deletion of data after the termination of the contract.
Nominaurea does not transfer personal data to third parties.
7. International Data Transfers
As a general rule, personal data is not transferred outside the European Economic Area.
If such a transfer becomes necessary, for example in the context of storage or electronic communication services, Nominaurea will ensure that the transfer is carried out based on mechanisms recognized by the GDPR, such as the Standard Contractual Clauses approved by the European Commission.
8. Rights of Data Subjects
The data subject may, at any time, exercise the following rights:
Access to their personal data
Rectification of inaccurate or incomplete data
Deletion of data (“right to erasure”)
Restriction of or objection to processing
Data portability
Withdrawal of consent, where applicable, without affecting the lawfulness of prior processing
The exercise of these rights can be requested in writing at geral@nominaurea.pt.
If the data subject considers that their rights have not been respected, they may lodge a complaint with the National Data Protection Commission (CNPD) – www.cnpd.pt.
9. Data Security
Nominaurea implements appropriate technical and organizational measures to protect personal data against destruction, loss, alteration, unauthorized access, or disclosure.
Access to the data is restricted to employees and partners who need it to perform their duties and who are bound by confidentiality obligations.
10. Updates to the Privacy Policy
Nominaurea may update this Privacy Policy whenever necessary, as a result of legal, technological, or operational changes.
The most recent version will always be available on the website https://www.nominaurea.pt, with the date of the last update indicated at the end of the document.