Update: October 8, 2026. This policy covers the website and the private area of Maria Manuela Nunes Ferreira Advogados, RL (MNF).
Data controller and contact details
MNF is the controller for the processing it determines. Contact mnfadvogados@gmail.com or write to Rua Simões de Castro, n.º 132, 1.º Esq., 3000-387 Coimbra, Portugal. You can use this address for privacy requests; it does not identify a formally appointed data protection officer.
Data we use
A request may include your name, email address, phone number and message. The private area also processes login details, approvals and security logs. Our team reviews requests and checks availability and conflicts of interest. An initial review may involve pre-contractual steps you have asked us to take. We may rely on legitimate interests for security and abuse prevention, subject to your rights. Legal and professional duties have their own legal grounds. We use consent for optional analytics, not as a blanket basis for all processing.
Public forms in the current version do not confirm delivery to a receiving service. Do not treat a success message as proof that we received your request; confirm it by email or phone. Do not send health information, criminal-case information, documents or another person’s data until we provide a suitable channel. If we take on a matter, we will provide specific information about purposes, legal grounds and confidentiality.
Service providers and international transfers
Neon provides database and authentication services; Resend handles access notifications. Optional analytics through PostHog and Google Tag Manager require configuration and consent. YouTube and Google Maps receive technical information when you use their services, including requests for YouTube thumbnails. These providers may process your IP address and other data needed to deliver their services.
Hosting and supplier access may involve other countries. Before any further transfers, MNF must confirm destinations, contracts and the safeguards required by law, such as adequacy decisions or permitted contractual guarantees. We do not assume that every provider or destination has equivalent authorisation. You can ask us about recipients and safeguards using the contact details above.
Retention and security
We retain data only as needed for the relevant purpose, legal and professional duties, and the defence of legal rights. MNF still needs to confirm retention periods for each category; this policy does not invent them. You can ask which period or criterion applies to your data. Access to the private area requires authentication and approval. No system offers absolute security. We assess incidents and notify authorities and affected people when the law requires it.
Your rights and applicable jurisdictions
Where applicable, you may ask for information, access, rectification, erasure, restriction or portability, object to processing, or withdraw consent for future use. MNF may ask you to verify your identity and explain limits imposed by other duties. Under the GDPR, the usual response period is one month, subject to a lawful extension. Under Brazil’s LGPD, a complete declaration confirming processing or granting access is due within 15 days. Other requests follow the deadlines in the applicable law.
In Portugal and the EEA, the GDPR and Portuguese law may apply. Brazil’s LGPD applies when its legal criteria are met. In Cabo Verde, the personal-data regime includes amendments made by Law No. 121/IX/2021. Depending on jurisdiction, you may complain to Portugal’s CNPD, Brazil’s ANPD or Cabo Verde’s CNPD, or seek a court remedy. The site does not make solely automated decisions with legal effects. We do not deliberately collect children’s data; requests involving children require a separate assessment.
