Data Protection & Privacy
GDPR compliance: privacy and cookie policies, data processing agreements, data subject rights and incident response.
Provided by VPA — Venture Partners Advogados, a law firm registered with the Portuguese Bar Association, with offices in Lisbon and Rio de Janeiro.
Overview
VPA helps companies and professionals comply with the General Data Protection Regulation (GDPR) and other privacy legislation in Portugal. We draft and review privacy and cookie policies, assess lawful bases and consent, prepare data processing agreements and international transfer clauses, support records of processing and data subject rights, and assist with incident response and dealings with the national data protection authority.
Common processes
- Privacy and cookie policies
- Lawful bases and consent
- Data processing agreements (GDPR)
- International data transfers
- Data subject rights and access requests
- Incident and data breach response
Frequently asked questions
Does my website need a privacy and cookie policy?
If your website or app collects personal data, including through cookies, you generally need a privacy policy and a compliant cookie banner. We prepare both and align them with how you actually process data.
What is a data processing agreement?
It is the contract required under the GDPR between a controller and a processor (for example a supplier that handles data on your behalf). We draft and review these, including international transfer safeguards.
What should we do after a data breach?
There are short deadlines to assess and, where required, notify the authority and affected individuals. We help you evaluate the incident, document it and manage the notifications.
Related areas
Team
Contact
For advice on this service, contact VPA — Venture Partners Advogados, Lisbon.