Privacy Policy
PART II – Privacy & Confidentiality Terms
Purpose & Legal Basis
Personal data are processed solely to perform the Services, under GDPR Article 6(1)(b) (contract), Article 6(1)(c) (legal obligation), and—where required—Article 6(1)(a) (explicit consent, e.g., creating an e mail account in the Client's name).
Categories of Data
Identification data, contact details, travel / immigration records, professional and financial information, biometric data on official documents, and any visa related paperwork provided by the Client.
Processing Activities
Data are collected, digitised, stored in encrypted EU based cloud repositories, organised, and transmitted to competent authorities or their contractors (e.g., VFS Global).
AI assisted document analysis platforms hosted within the EEA—or in jurisdictions affording adequate protection—are used to verify completeness and consistency of the application file. Such platforms operate under contracts guaranteeing confidentiality and full GDPR compliance.
Upon consent, an e mail account may be created on the Client's behalf exclusively for immigration purposes.
Data Sharing
Data are never disclosed to third parties for marketing or unrelated purposes.
Data may be shared only with:
- immigration authorities, consular posts, VFS Global, or comparable entities indispensable to the Services;
- trusted IT, cloud service, and AI platform providers bound by written data processing agreements under Article 28 GDPR;
- entities where disclosure is required by law or court order.
A register of sub processors is kept and made available to the Client upon request.
Data Subject Rights
Access, rectification, erasure, restriction, portability, objection, and withdrawal of consent may be exercised free of charge via the contact in §10; answered within one (1) month.
Retention
Data are retained for the engagement's duration plus five (5) years, or longer if legally required, with pseudonymisation or encryption whenever feasible.
Confidentiality
All documents and information are confidential and used exclusively to deliver the Services. Staff, subcontractors, and AI platform providers are bound by contractual secrecy obligations.
Contact / DPO
E mail: rgpd@advogadoszr.com
Address: Rua Fialho de Almeida, 14, 2.º esq, Esc. DP5, 1070-129, Lisbon, Portugal
Complaints may be lodged with the Portuguese Data Protection Authority (CNPD) or the supervisory authority of the data subject's residence.
Updates
Material changes will be notified in advance. Continued use of the Services after notification constitutes acceptance.
Annex I – Documents We Handle (Digital Nomad Visa)
(Indicative – additional documents may be required by the authorities.)
- Personal statement
- Two colour photographs (35 mm × 45 mm)
- Passport and notarised biographical page copy
- Valid travel insurance
- Certificate of criminal records
- Proof of accommodation in Portugal
- Proof of current address abroad
- Recent bank statements
- Employment or service contracts
- Employer / client letter authorising remote work from Portugal
- Pay stubs, payslips, invoices, or dividend statements
- Certificate of incorporation or business registration extract
- Document attesting fiscal residence
- Any additional documents subsequently requested by Portuguese or foreign authorities to assess the application
These items are processed under the safeguards described in PART II.