Privacy Policy

1. DATA CONTROLLER IDENTIFICATION

Name: Cordial Consulting (hereafter “Cordial” or “we”)
Address: Av. Barbosa du Bocage, 37, 1000-071 Lisbon
Tax ID : PT 279474458
Email: info@socordial.com
Website: https://www.socordial.com

2. LEGAL FRAMEWORK AND INFORMATION DUTY

Cordial Consulting acts in full compliance with the General Data Protection Regulation (GDPR – Regulation (EU) 2016/679) and Portuguese Law No. 58/2019, ensuring the protection of individuals’ personal data and their lawful processing.

“Personal data” means any information relating to an identified or identifiable natural person — such as name, Tax ID (NIF), Social Security ID (NISS), address, e-mail, or other details required to provide Cordial’s services.

By using our website and services, you acknowledge that you have been informed about how your data is processed under this Privacy Policy.

3. PURPOSES OF DATA PROCESSING

Cordial collects and processes personal data solely for legitimate and specific purposes, including:

a) Providing contracted services — obtaining NIF, registering as “trabalhador independente”, submitting IRS/VAT/Social Security declarations, and other administrative support;
b) Contract management — communication, scheduling, invoicing, and payments;
c) Legal and fiscal obligations — compliance with Portuguese authorities;
d) Administrative communications related to active services;
e) Marketing communications and newsletters, only with explicit consent;
f) Anonymous, aggregated analysis to improve our services;
g) Fraud prevention and information security.

⚠️ Important: In some cases, Cordial may request temporary login credentials (e.g. for the Finanças or Social Security portals) strictly to perform authorised tasks on your behalf.
Such credentials are used only once, for the specific purpose, and are not stored after the service is completed.

4. LEGAL BASIS

Cordial processes personal data on the following legal grounds:

i) Performance of a contract or pre-contractual steps;
ii) Legal obligation;
iii) Explicit consent (for marketing or newsletters);
iv) Legitimate interest (e.g., ensuring security and preventing fraud).

5. DATA RETENTION

Cordial retains data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Examples include:

  • Contractual and tax records: up to 10 years;

  • Newsletter contacts: until withdrawal of consent;

  • Temporary access credentials: deleted immediately after service completion.

6. DATA SHARING

Your data may be shared, only when necessary, with:

  • Portuguese authorities (AT, Social Security, IEFP, etc.);

  • Professional partners (accountants, lawyers) involved in your service;

  • Technical service providers (website hosting, billing software).

All partners are bound by confidentiality and data protection obligations.
Cordial never sells or rents your personal data.

7. INTERNATIONAL TRANSFERS

All data are processed within the European Economic Area (EEA).
Any transfers outside the EEA will only occur to countries with an adequate level of data protection or with appropriate safeguards as required by GDPR.

8. SECURITY MEASURES

Cordial adopts appropriate technical and organisational measures to safeguard your data, including:

  • Encrypted communication and secure storage;

  • Restricted access to authorised personnel only;

  • Secure deletion after service completion.

Despite these efforts, you acknowledge that no system is completely risk-free on the Internet.

9. DATA SUBJECT RIGHTS

Under GDPR, you have the right to:

  • Access your data;

  • Request correction or deletion;

  • Restrict or object to processing;

  • Request data portability;

  • Withdraw consent at any time.

Requests should be submitted to:
Email: info@socordial.com

10. SUPERVISORY AUTHORITY

You may lodge a complaint with the Portuguese Data Protection Authority (CNPD) if you believe your rights have been violated:
www.cnpd.pt

11. THIRD-PARTY LINKS

Our website may contain links to external websites. Cordial is not responsible for their content or privacy practices.
We recommend reviewing each site’s privacy policy before providing any personal data.

12. CHANGES TO THIS POLICY

Cordial may update this Privacy Policy at any time to reflect legal or operational changes.
The latest version will always be available on our website and take effect upon publication.

Last updated: 31 October 2025