Privacy Policy

Privacy and Data Protection Policy

Account Service is firmly committed to safeguarding the privacy and security of the personal data of its clients, partners and website users, in strict compliance with the General Data Protection Regulation (GDPR - Regulation (EU) 2016/679) and Portuguese Law No. 58/2019 of 8 August.

1. Data Controller

The entity responsible for collecting and processing personal data is:

2. Principles Applicable to Processing

Personal data are processed in accordance with the principles of lawfulness, fairness and transparency; purpose limitation; data minimisation; accuracy; storage limitation; and integrity and confidentiality.

3. Personal Data Collected

We collect only the data needed to carry out our business and provide our services:

• Identification and Contact Data: Name, email address, telephone number and company, provided through contact forms, consultancy requests or material downloads;
• Tax and Billing Data: Tax number (NIF/NIPC), tax address, account details and other information needed to perform accounting service contracts and meet tax obligations;
• Technical and Browsing Data: IP address (encrypted/anonymised), activity logs and browsing data strictly necessary for server security and aggregate analysis, as detailed in our Cookie Policy.

4. Purposes and Lawful Bases

The processing of personal data is based on the following lawful bases:

• Performance of a Contract or Pre-contractual Steps (Art. 6(1)(b) GDPR): Management of business contacts, scheduling of meetings and consultations, quotations and the technical performance of accounting, consultancy and management support services;
• Compliance with Legal Obligations (Art. 6(1)(c) GDPR): Issuing invoices, meeting tax and accounting obligations and responding to requests from the competent judicial or administrative authorities;
• Consent of the Data Subject (Art. 6(1)(a) GDPR): Sending newsletters, periodic communications on tax updates, informative materials or campaigns from Account Service by email; consent may be withdrawn at any time;
• Legitimate Interest (Art. 6(1)(f) GDPR): Maintaining the security of the platforms, preventing cyberattacks and fraud, and continuously improving the quality of the service.

5. Data Retention Periods

Data are kept only for as long as necessary for the purposes for which they were collected:

• Billing and Accounting Data: Kept for the mandatory legal period of 10 years, under Portuguese tax legislation;
• Contact Data and Proposal Requests: Kept for up to 2 years after the last contact, if no contractual relationship is established;
• Newsletter and Campaign Subscription: Kept until the data subject expressly cancels (opt-out).

6. Data Sharing and Processors

ELIELTON SANTANA UNIPESSOAL LDA does not sell personal data to third parties. Data are shared strictly with processors duly bound by confidentiality and data protection agreements (such as web hosting providers within the European Union, certified invoicing platforms and email delivery services), or where required by law before tax or regulatory authorities.

7. Rights of Data Subjects

Under Articles 15 to 22 of the GDPR, data subjects have the following rights:

• Right of Access: To obtain confirmation of the processing of their data and to access their personal data;
• Right to Rectification: To request the correction of incomplete or inaccurate data;
• Right to Erasure ("Right to be Forgotten"): To request the erasure of data, subject to legal retention obligations;
• Right to Restriction of Processing: To request the temporary suspension of processing in the circumstances provided for by law;
• Right to Data Portability: To receive the data in a structured, commonly used and machine-readable format;
• Right to Object: To object to processing based on legitimate interest or for direct marketing purposes;
• Right to Withdraw Consent: To withdraw consent at any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, simply send a written request identifying the data subject to the email address santana@accountservice.pt or by letter addressed to ELIELTON SANTANA UNIPESSOAL LDA, Rua da Saudade, n.º 59, 4.º Piso, Sala 42, 4050-570 Porto.

8. Supervisory Authority and Complaints

Without prejudice to any other administrative or judicial remedy, data subjects have the right to lodge a complaint with the competent supervisory authority in Portugal:
CNPD — Comissão Nacional de Proteção de Dados (Portuguese Data Protection Authority)
Av. D. Carlos I, 134 - 1.º, 1200-651 Lisboa | Website: https://www.cnpd.pt.

9. Data Security

We implement strict technical and organisational measures (including HTTPS/TLS traffic encryption, firewalls, restricted access controls and regular backups) to protect personal data against accidental loss, destruction, unauthorised access or improper disclosure.