Privacy Policy
Last updated: 19 January 2026
1. Privacy commitment
The MARCASPORTUGUESAS.pt platform conducts its activity with transparency and security in the processing of personal data. The privacy and security of the data you entrust to us are a priority.
We process personal data only when necessary, on an appropriate legal basis and with suitable security measures, in accordance with the General Data Protection Regulation (GDPR).
2. Data controller
Casa das Marcas, Unipessoal, Lda., with registered office at Rua de Meães, 38, Vilarinho das Cambas, 4760-762 Vila Nova de Famalicão, Portugal, company number (NIPC) 509 196 411, share capital €5,000, is the controller responsible for the processing of personal data.
3. Contact details
For matters relating to privacy and data protection, you may contact:
- Address: Rua de Meães, 38, Vilarinho das Cambas, 4760-762 Vila Nova de Famalicão, Portugal
- Email: ola@marcasportuguesas.pt
Data Protection Officer (when applicable):
- Email: geral@nuvemdetalento.pt
- Address: same as above
4. Personal data we collect
For the purposes of this Policy, personal data means information relating to an identified or identifiable natural person.
We collect personal data through the website, mainly via forms:
4.1 Contact form
Data collected:
- Name
- Subject
- Message
The form is completed at the user’s initiative, and the data is provided voluntarily.
4.2 Brand registration request form
Data collected:
- Name
- Job title
- Relationship with the company or brand (e.g. owner, agency, legal representative)
- Mobile phone number
- City
- Name of the Portuguese brand
- Website and social media links
- National trademark registration number at INPI
- Year the brand was created
- Category
- Brand email address
- Brand presentation texts in Portuguese and English
4.3 Technical and security data
We may collect technical data essential to the operation and security of the website, such as IP address, date and time of access, pages visited and browser technical information.
5. How and why we use your data and the legal basis
We process personal data in accordance with the purposes below and on the legal bases provided for under the GDPR.
5.1 Responding to user requests
Purpose: to respond to requests submitted via the contact form.
Data: name, email, subject, message.
Legal basis: pre-contractual steps where applicable, or legitimate interest in responding to and following up the request.
5.2 Analysing and managing brand registration requests
Purpose: to assess the application, validate the information received, communicate with the contact person and manage the process.
Data: all fields in the registration form.
Legal basis: pre-contractual steps and, where a contractual relationship exists, performance of a contract, as well as legitimate interest in managing the platform.
5.3 Internal CRM management
Purpose: registration, follow-up and record-keeping of requests, communications and process status.
Data: data submitted via forms and related communications.
Legal basis: legitimate interest in organising and ensuring continuity of the service, and performance of a contract where applicable.
5.4 Newsletter and email communications
Purpose: sending newsletters and communications, when requested by the individual.
Data: email address and, where available, name.
Legal basis: consent, which may be withdrawn at any time, for example via the unsubscribe link included in each email.
Operational note at this stage of the project: the email database is managed internally. Data will only be shared with the E-goi platform when Casa das Marcas uploads the list for sending purposes.
5.5 Security and abuse prevention
Purpose: to protect the website, prevent unauthorised access and reduce form abuse.
Data: technical logs and security data.
Legal basis: legitimate interest in ensuring system security.
6. Whether you are required to provide data
The data requested in the forms is necessary for us to process your request. If essential data is not provided, we may be unable to respond or assess the application.
8. Where data is processed
The website is hosted in Germany by Hetzner, within the European Economic Area.
If, in the future, providers involving data transfers outside the European Economic Area are used, Casa das Marcas will ensure appropriate legal safeguards in accordance with the GDPR.
9. Data retention periods
We retain personal data only for as long as necessary for the purposes described or to comply with legal obligations.
Defined retention periods at this stage of the project:
- Contact form: up to 12 months after the last interaction
- Brand registration request: up to 24 months after completion of the process, unless there is an active relationship, in which case data is retained as necessary for relationship management and legal obligations
- Newsletter: while consent exists, or until unsubscribed
- Technical security logs: between 6 and 12 months, unless required for incident investigation
After the applicable period, data is securely deleted or anonymised.
10. Data subject rights
Under the GDPR, you may exercise your rights, including:
- Access
- Rectification
- Erasure, where applicable
- Restriction of processing
- Objection, where applicable
- Data portability, where applicable
- Withdrawal of consent, where processing is based on consent
To exercise your rights, contact:
- Email: ola@marcasportuguesas.pt
- Address: Rua de Meães, 38, Vilarinho das Cambas, 4760-762 Vila Nova de Famalicão, Portugal
11. Complaints
You may lodge a complaint with the supervisory authority in Portugal, the CNPD.
CNPD contact details:
- Address: Av. D. Carlos I, 134, 1st floor, 1200-651 Lisbon
- Telephone: (+351) 213 928 400
- Email: geral@cnpd.pt
12. Security
We adopt appropriate technical and organisational measures to protect personal data, including access controls, backups, monitoring and internal procedures.
14. Changes to this Policy
We may update this Policy to reflect legal, technical or operational changes. The version published on the website is always the most recent and includes the date of the last update.