Privacy Policy
1. Who We Are
Atlantic Bridge, located at Rua José Maria Pedroto, 11 R/C, 4200-351 Porto, specializes in consultancy services in the areas of internationalization and migration within the European Union, offering advisory services related to visas, investments, and citizenship.
Atlantic Bridge is the Controller in accordance with Regulation (EU) 2016/679 (GDPR) and the applicable personal data protection legislation in the countries where we operate.
We and our employees are committed to using your personal data only for the purposes communicated to you and always in a secure and responsible manner.
We aim to explain how we use your information (your 'personal data') when you use our services or apply for a job.
If you have any questions about this Privacy Policy, please contact us at personaldata@atlanticbridge.pt
Our website may contain links to third-party sites. We recommend that you read their privacy policies to understand how these companies handle your data before providing any personal information.
2. Personal Data
In this Privacy Policy, "Personal Data" refers to the set of information that relates to you and allows us to identify you, directly or indirectly. Your personal data may include, for example, your name, tax identification number, telephone contact, email address, and your interactions with us. We collect some of your personal data, for example, when you contact us.
We may also receive your personal data from other companies, specifically when they collect, process, or store it as part of the service they provide us.
3. Personal Data we process
3.1. When you contact us or use our services
What do we do?
When you contact us, we will process your personal data to respond to your queries or to clarify our services. You can reach us through the questionnaire/form or via the contact means disclosed on our site. We will collect your name, email address, telephone number, country of residence, profession, and message, so that we can identify you and thus provide accurate and tailored information. If you use a mobile network in the USA, by providing your phone number, you agree to receive text messages from Atlantic Bridge. Message and data rates may apply. Message frequency varies. Atlantic Bridge will not share your contact phone number with any other parties.
Should you become our customer, we will process the necessary information to provide our services and for billing purposes.
Where do we store the information and with whom do we share it?
We use service providers that enable us to create the necessary infrastructure to conduct our business.
Among the business solutions we have contracted for this purpose are Google, Typeform, Pipedrive, CloudTalk, and WhatsApp Business, specifically for information storage and management and communications. Check the Privacy Policy of these companies to understand how they handle your personal data.
Should you become our customer, depending on the services contracted, your personal data may also be processed directly by our partners in the provision of their services – such as banks and law firms - which will be properly and timely informed.
In the course of our activities, the information we process will be shared with our bank, our accounting service providers, and public administration entities such as the Tax Authority.
We will retain your information until the legal retention period expires or until the purposes for which it was collected are exhausted, whichever is applicable.
Lawful Basis
When we collect information through our contact form/questionnaire, our lawful basis is our 'Legitimate Interest' to process the personal data you enter into the form, in accordance with Article 6(1)(f) GDPR.
When there is any collection of information resulting from pre-contractual inquiries (service clarification or negotiation) or from the provision of the contracted service itself, our lawful basis is 'Pre-contractual inquiries/Contract execution' to process the necessary personal data, in accordance with Article 6(1)(b) GDPR.
When we need to comply with certain legal requirements arising from applicable legislation (e.g., billing or mandatory communications to regulators or administrative authorities), our lawful basis is the 'Legal Obligation' to process the relevant information, in accordance with Article 6(1)(c) GDPR.
3.2. Newsletter
What do we do?
If you are our client or contact us expressing interest in our services, you may subsequently receive email communications related to services similar to those previously provided or in which you have expressed interest.
If you are not our client, or if you are but the communications relate to different services than those previously provided or to which you have expressed interest, we will only send communications with your consent.
Where do we store the information and with whom do we share it?
We use Google, Pipedrive, and Mailchimp to store your identification and contact data and to manage the sending of our communications. You should consult the Privacy Policy of these companies to understand how they handle your personal data.
We will keep your personal data for this purpose as long as you are our client or as long as you maintain your consent, as applicable.
You may 'unsubscribe' from the newsletter at any time, using the respective button available at the footer of our emails.
Lawful Basis
To process your personal data for sending our newsletters, if you are our client and only for communications related to services similar to those previously provided or in which you have expressed interest, our lawful basis is our 'legitimate interest,' in accordance with Article 6(1)(f) GDPR.
If you are not our client, or if the communications relate to different services, we will rely on your 'consent,' in accordance with Article 6(1)(a) GDPR.
3.3. When You Apply for a Job
What do we do?
When you apply for one of our job vacancies or make a spontaneous application, we process your information to analyze whether your professional profile is suitable for the position and the organization. The information in question may include your identification data (e.g., full name; contact details, such as phone number and/or email address); and professional information that makes up your resume or cover letter.
Where do we store the information and with whom do we share it?
We use Google applications to store your data. We will not share your personal information with third parties unless it is necessary to obtain references or confirm your professional history. Regardless of the outcome of your application, we will keep your information in our systems for one month, after which it will be deleted.
Lawful Basis
To analyze your application, our lawful basis is 'Pre-contractual inquiries,' so we can process the necessary personal data, under Article 6(1)(b) GDPR.
4. Information Security
We treat your personal information with the utmost care and respect for your rights. We implement appropriate security measures to prevent loss, misuse, or unauthorized access, alteration, or disclosure of your personal data. We also limit access to your information to only employees, service providers, and other third parties who have an operational need to process said information, and if they are subcontractors, they will only process your personal data following Atlantic Bridge's instructions and will be subject at all times to a confidentiality obligation.
5. Information Retention
We will retain your information whenever we collect or process your personal data until the applicable legal retention period expires or until the purposes for which it was collected are exhausted. Once the respective retention period has ended, your information will be completely deleted or anonymized.
6. How to Exercise Your Rights
You have the right to request:
- Access to your information processed by us, free of charge;
- The rectification of your personal data when they are incorrect, outdated, or incomplete;
- The erasure of data we hold about you, under specific circumstances, notably when you withdraw your consent and we do not have any predominant legitimate interest, or when the purpose that motivated the collection of the information is exhausted;
- The portability of your data to another organization;
- The restriction of processing of your personal data, under specific circumstances, notably when we are considering an objection you have raised;
- To object to the processing of your personal data, under specific circumstances, notably when you remove your consent, or when you oppose for reasons related to your particular situation;
- That we do not use your personal data in the context of direct marketing activities.
To exercise any of the rights mentioned above, please contact us via email at personaldata@atlanticbridge.pt
7. How to Contact the Regulator
If you are dissatisfied with our use of your personal data or with our response to your request to exercise your rights, you may file a complaint with the Comissão Nacional de Proteção de Dados (CNPD), using the form available at www.cnpd.pt
8. Questions?
If you have any questions or need further clarification, please contact us via personaldata@atlanticbridge.pt