Privacy policy
Grant Thornton Portugal is committed to protecting the privacy and personal data of users of this website. This Privacy Policy explains how we collect, use, store, share, and protect personal data when you visit our website, contact us, request information, access publications, subscribe to communications, or otherwise interact with us through this website.
This Privacy Policy is intended to comply with the General Data Protection Regulation (Regulation (EU) 2016/679), Portuguese Law No. 58/2019 of 8 August, and all other applicable Portuguese and European legislation governing personal data protection and privacy.
1. Data Controller
The data controller responsible for processing personal data collected through this website is Grant Thornton Portugal.
For any questions regarding personal data protection, users may contact Grant Thornton Portugal at:
gta.rgpd@pt.gt.com
2. Personal Data We May Collect
Depending on how users interact with this website, Grant Thornton Portugal may collect the following categories of personal data:
Name;
Email address;
Telephone number;
Job title or professional role;
Company or organisation;
Information included in contact forms, messages, enquiries, or requests;
Subscription preferences relating to newsletters, events, publications, or other communications;
Technical and usage data, including browser information, device data, pages visited, dates and times of access, cookie identifiers, and similar online identifiers, where applicable.
Grant Thornton Portugal only collects personal data that is necessary, appropriate, and relevant for the purposes described in this Privacy Policy.
3. How Personal Data Is Collected
Personal data may be collected when users:
Submit a contact form;
Request information about services;
Download or request publications;
Subscribe to newsletters, alerts, or communications;
Register interest in events or initiatives;
Send emails or other communications to Grant Thornton Portugal;
Browse the website and interact with cookies or similar technologies, where applicable.
Certain technical data may also be collected automatically when users access or use the website, subject to the applicable cookie settings and legal requirements.
4. Purposes and Legal Bases for Processing
Grant Thornton Portugal may process personal data for the following purposes:
Responding to Enquiries and Requests
Personal data may be processed to respond to enquiries, requests for information, contact forms, or other communications submitted through the website. The legal basis for this processing is the performance of pre-contractual steps requested by the user and/or Grant Thornton Portugal's legitimate interest in responding to enquiries and requests.
Providing Publications, Events, and Communications
Personal data may be processed to provide publications, invitations, newsletters, alerts, events, or other content requested by the user. The legal basis may be consent, the provision of a requested service, or Grant Thornton Portugal's legitimate interest, depending on the communication involved.
Marketing and Business Development
Where permitted by law, Grant Thornton Portugal may use personal data to send information about services, publications, events, legal updates, insights, or other professional content that may be relevant to users. The legal basis for this processing is consent, where required, or the legitimate interest in maintaining professional and business relationships. Users may opt out of marketing communications at any time.
Website Operation, Security, and Improvement
Technical and usage data may be processed to ensure the proper operation, security, and performance of the website, prevent misuse, diagnose technical issues, and improve the user experience. The legal basis is Grant Thornton Portugal's legitimate interest in operating a secure and effective website and, where applicable, the user's consent for non-essential cookies or similar technologies.
Compliance with Legal and Regulatory Obligations
Personal data may be processed where necessary to comply with legal, regulatory, tax, accounting, audit, professional, or other obligations applicable to Grant Thornton Portugal. The legal basis is compliance with legal obligations.
Protection of Rights and Legal Claims
Personal data may be processed where necessary to establish, exercise, or defend legal rights or claims, or to protect the rights, business, users, or third parties. The legal basis is Grant Thornton Portugal's legitimate interest and/or compliance with legal obligations.
5. Cookies and Similar Technologies
This website may use cookies and similar technologies to ensure its proper operation, improve performance, analyse website usage, and, where applicable, support personalised content or marketing activities.
Strictly necessary cookies may be used to provide the website and its essential functionality. Non-essential cookies, including analytics, preference, or marketing cookies, will only be used where legally permitted and, where required, after obtaining the user's consent.
Users may manage or withdraw their cookie preferences at any time through the cookie settings available on this website. Users may also configure their browser to block or delete cookies, although doing so may affect certain website functionalities.
For further information, users should consult the Cookie Policy available on this website.
6. Recipients of Personal Data
Personal data may be accessed or shared, where necessary and in accordance with applicable law, with the following categories of recipients:
Authorised employees of Grant Thornton Portugal;
Other Grant Thornton member firms, where necessary to respond to enquiries or provide services involving international or network support;
IT, hosting, website maintenance, cloud, CRM, email, analytics, and communications service providers;
Professional advisers, auditors, insurers, and legal representatives;
Public authorities, courts, regulators, or supervisory bodies, where required by law or necessary to protect legal rights.
Where third-party service providers process personal data on behalf of Grant Thornton Portugal, they are required to process such data only in accordance with documented instructions, applicable law, and appropriate confidentiality and security obligations.
7. International Transfers
In certain circumstances, personal data may be transferred to, or accessed from, countries outside the European Economic Area (EEA), including where Grant Thornton member firms or service providers are located outside the EEA.
Where such transfers occur, Grant Thornton Portugal will ensure that appropriate safeguards are in place in accordance with applicable data protection legislation, including adequacy decisions adopted by the European Commission, Standard Contractual Clauses, or other recognised legal transfer mechanisms.
Users may contact Grant Thornton Portugal to request further information regarding the safeguards applicable to international transfers of their personal data.
8. Data Retention
Grant Thornton Portugal will retain personal data only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law.
Generally:
Contact enquiries and requests will be retained for the period necessary to respond to and manage the request;
Marketing communication data will be retained until the user withdraws consent or objects to receiving such communications;
Personal data processed for legal, regulatory, tax, audit, or compliance purposes will be retained for the period required by applicable law;
Technical and cookie-related data will be retained in accordance with the retention periods defined in the Cookie Policy.
When personal data is no longer required, it will be securely deleted, anonymised, or archived, as appropriate.
9. Security
Grant Thornton Portugal implements appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, unauthorised access, and other unlawful forms of processing.
These measures may include access controls, confidentiality obligations, secure systems, monitoring, backup procedures, and internal policies designed to protect the integrity, availability, and confidentiality of personal data.
However, no internet transmission or electronic storage system can be guaranteed to be completely secure.
10. Data Subject Rights
Subject to the conditions set out in applicable data protection legislation, users may exercise the following rights:
- Right of access to personal data;
- Right to rectify inaccurate or incomplete personal data;
- Right to erasure;
- Right to restriction of processing;
- Right to data portability;
- Right to object to processing based on legitimate interests;
- Right to object to direct marketing at any time;
- Right to withdraw consent where processing is based on consent, without affecting the lawfulness of processing carried out before its withdrawal.
Users may exercise these rights by contacting Grant Thornton Portugal at:
gta.rgpd@pt.gt.com
Grant Thornton Portugal may request information necessary to verify the user's identity before responding to any request.
11. Complaints
If users believe that their personal data has been processed in breach of applicable data protection legislation, they have the right to lodge a complaint with the Portuguese supervisory authority, the Portuguese Data Protection Authority (Comissão Nacional de Proteção de Dados – CNPD).
Users are encouraged to contact Grant Thornton Portugal first so that any concerns can be reviewed and addressed.
12. Links to Third-Party Websites
This website may contain links to websites operated by third parties, including other Grant Thornton member firms or external partners. This Privacy Policy applies solely to this website and does not apply to third-party websites.
Grant Thornton Portugal is not responsible for the privacy practices, content, or security of third-party websites. Users are encouraged to read the privacy policies of any third-party websites they visit.
13. Changes to This Privacy Policy
Grant Thornton Portugal may update this Privacy Policy from time to time to reflect changes in its practices, legal requirements, or website functionality.
The latest version will always be published on this website.