Last updated on: 6 July 2026
This Privacy Policy (the “Policy”) sets out how CS Associados – Sociedade de Advogados, SP, RL (“CS’Associados” or the “Data Controller”) processes the personal data of users (“User” or “Users”) collected in connection with their interactions with CS’Associados, including when using the csassociados.pt website (the “Website”).
This Privacy Policy is supplemented by the Cookie Policy.
This Privacy Policy includes information regarding:
Your personal data is processed by CS Associados – Sociedade de Advogados, SP, RL, a company with registered office at Avenida da Liberdade, no. 249, 8th floor, 1250-143 Lisbon, in its capacity as data controller (“Data Controller”).
Access to and use of the Website do not require the User to provide personal data. Personal data may, however, be provided by the User or collected and processed by the Data Controller, specifically whenever:
CS’Associados may also process data generated as a result of the User’s technical use of the Website, including access logs, IP addresses, and other browsing data, where such processing is necessary to ensure the security and proper functioning of the Website.
Personal data may also be collected where the User:
In the course of the User’s interactions with CS’Associados, personal data may be collected and processed to the extent necessary for each situation and in accordance with the corresponding legal bases.
The table below identifies the categories of personal data processed, the purposes for which such data is used, and the corresponding legal basis for the processing.
| Personal Data Processed | Purpose of Processing | Legal Basis for Processing |
| Provision of legal services | ||
| Identification, contact, and professional background data | Opening, organizing and managing client matters and files; managing the professional relationship; and conducting a preliminary assessment of requests for legal services, including conflicts of interest and independence checks. | CS’Associados has a legitimate interest in evaluating and responding to Users’ requests. |
| Information and documentation provided in connection with the matters entrusted to CS’Associados, including relevant communications and any information necessary for legal analysis. This may include special categories of personal data (such as health data or trade union membership) and personal data relating to criminal convictions and offences, where necessary | Providing, managing and performing the agreed legal services, including advice, representation, and litigation management. | Ensuring the performance of the contract for the provision of legal services and compliance with legal and ethical obligations. |
| Personal data processed in connection with the provision of services | Filing, retaining and organizing documentation and records relating to the services provided. | CS’Associados’ has a legitimate interest in ensuring the proper management of its documentation. |
| Identification and contact information; tax, professional, financial, and banking data; information regarding the purpose and nature of the professional relationship, the origin and destination of funds or other assets; as well as other information required under the applicable anti-money laundering and terrorist financing legislation |
Compliance with client identification duties, due diligence, examination, record-keeping, reporting, cooperation, abstention, refusal, and confidentiality obligations applicable to CS’Associados as a regulated entity, when and to the extent that such duties apply in the context of the provision of legal services. |
Compliance with legal obligations, namely those arising under Law no. 83/2017, of 18 August, as amended, regarding the prevention of money laundering and terrorist financing. |
| Procurement of services | ||
| Identification and contact information of service providers, as well as information regarding their proposals | Identifying, assessing and selecting suppliers and business partners necessary for the operations of CS’Associados. Executing, performing and monitoring contracts entered into with suppliers. |
Pre-contractual due diligence. Performance of the services agreement. |
| Billing and accounting | ||
| Identification and contact details relating to legal services provided; tax information; invoicing and payment details | Issuing invoices, managing collections, maintaining accounting records and complying with applicable tax and legal obligations. | Compliance with legal obligations. |
| Communications | ||
| Name and email address | Sending newsletters, publications, CS Insights, and other institutional communications regarding the activities of CS’Associados. | Obtaining the consent of the data subjects. |
| Identification and contact information, as well as the content of communications sents | Processing and responding to requests for contact, inquiries, or requests submitted through the Website. | CS’Associados has a legitimate interest in managing incoming communications and responding to requests. |
| Identification and contact information | Maintaining professional relationships with former clients, employees and other institutional contacts. | CS’Associados has a legitimate interest in maintaining its professional network and institutional relationships. |
| Identification, contact, country of residence, and professional background information | Managing communications with the members of the CS’Associados alumni network. | Obtaining the consent of the data subjects. |
| Organization and management of events | ||
| Identification, contact, and academic or professional information | Managing registrations, attendance, logistics and communications relating to events, seminars, conferences, or webinars. | CS’Associados has a legitimate interest in promoting the institution and developing its activity. |
| Identification data, academic and professional, image and/or voice recordings | Promoting events and initiatives organized by CS’Associados through internal and external communications. | Obtaining the consent of the data subjects. |
| Identification data and images captured through video surveillance systems | Protecting the safety of individuals and safeguarding CS’Associados’ premises and assets. | CS’Associados has a legitimate interest in ensuring the security of its premises, personnel and visitors. |
| Recruitment and job applications | ||
| Identification, contact, and academic and professional background information. | Assessing job applications. | Pre-contractual due diligence at the request of the data subject. |
| Use of the Website | ||
| Data related to User’s interaction with the website of CS’Associados. For further information, please refer to our Cookie Policy. | Operating the Website and analyzing its use and User’s interaction with it. | Legitimate interests of CS’Associados or obtaining consent of the data subject, as applicable. |
CS’Associados does not disclose Users’ personal data to third parties except where such disclosure is permitted by applicable law.
CS’Associados may disclose your data:
Where necessary for the purposes described in this Policy and in the absence of an adequacy decision adopted by the European Commission, CS’Associados may transfer personal data to recipients located in third countries (countries outside the European Union or the European Economic Area) or to international organizations. In such cases, CS’Associados will ensure that appropriate safeguards are implemented to protect the confidentiality and security of the personal data.
The use of certain functionalities of the Website may also involve the transfer of data outside the European Economic Area, where the User consents to the use of specific categories of cookies — namely analytical or advertising cookies — involving the disclosure of data to entities located in third countries.
CS’Associados makes considerable efforts to implement technical and organizational security measures to protect Users’ personal data against unauthorized access, including restricted-access systems, procedures, permissions, and physical security measures for facilities and servers. Notwithstanding the security measures implemented by CS’Associados, Users are responsible for adopting appropriate security measures, including safeguarding their devices and preserving and recovering the data stored in such devices, maintain the confidentiality of login credentials, protecting the security and integrity of communications and information transmitted or received via the Internet, and/or preventing viruses, malware and worms.
CS’Associados retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, as described in the following table of retention periods:
| Purpose of Processing | Retention Period |
| Managing contacts and responding to requests submitted through the Website | Up to 2 years after the last relevant interaction |
| Managing registrations, participation, and communications related to events organized or promoted by CS’Associados | Up to 2 years after the event takes place, unless retention is required by law or the User has consented to future communications |
| Administrative management and billing | 10 years |
| Use of video surveillance systems | 30 days after collection |
| Provision of Legal Services | During the relationship with the Data Controller, plus 20 years, without prejudice to cases where the data is also processed during the term of the mandate, plus 20 years, without prejudice to cases where personal data is also processed in connection with compliance with legal obligations regarding the anti-money laundering and terrorist financing, in which case the 7-year retention period established for the purpose of compliance with legal obligations shall apply, calculated as specified therein. |
| Recruitment | 5 years, counted from the date of submission of the application, if the candidate is not selected. |
| Processing of requests for information regarding legal services and requests for proposals submitted through the Website | Up to 2 years after the last contact, unless the User objectsr |
| Preliminary assessment of the absence of conflicts of interest for the potential provision of services | Up to 6 months after the conclusion of the preliminary review, unless it results in the contracting of services or retention is required by legal or ethical obligations |
| Establishment, exercise, or defence of CS’Associados’ rights in judicial, administrative, or arbitration proceedings | Until the decision becomes final or the proceedings are concluded, plus any applicable statutory limitation periods |
| Sending informational communications | Until consent is withdrawn |
| Management of access to the Restricted Area | For the duration of access; deletion up to 6 months after account closure |
| Recording of consents provided through the Website | 5 years after consent is withdrawn or the last contact, for evidentiary purposes |
| Technical data and cookies | As defined in the applicable Cookie Policy |
| Use of the Website | As defined in the applicable Cookie Policy |
Users hold the following rights in relation to the processing of personal data:
The User’s withdrawal of consent will not affect the lawfulness of any processing carried out prior to such withdrawal.
Users may exercise these rights, free of charge and at any time, by contacting CS’Associados in writing at privacidade@csassociados.pt, or by post (for example, with the subject line “Processing of Personal Data”) to:
CS'Associados
Av. da Liberdade, 249, 8.º
1250-143 Lisboa
Portugal
The exercise of the rights mentioned above does not preclude the User’s right to lodge a complaint with the supervisory authority, the Portuguese National Commission for the Protection of Personal Data.
CS’Associados may amend and update this Privacy Policy from time to time. Any and all changes will be duly published on the Website. Where changes are substantial, CS’Associados will make reasonable efforts to inform Users of such changes through its intranet.