Privacy Policy
Compliance with the GDPR (Portugal) and the LGPD (Brazil)
This Privacy Policy explains how Rui F. Correia, Lawyer, collects, uses, stores and protects the personal data of users of the website lexatlantica.com.
This document was drafted in strict compliance with the General Data Protection Regulation (GDPR - Regulation (EU) 2016/679), Portuguese Law No. 58/2019 and the Brazilian General Data Protection Law (LGPD - Law No. 13.709/2018).
1. Data Controller
The controller of your personal data is:
- Name: Rui F. Correia, Lawyer
- Professional registration: Ordem dos Advogados (Portugal), licence no. 7638P; OAB (Brazil), registration no. 20635/CE
- Address: Praceta Palácio da Justiça, 6, 4580-057 Paredes, Portugal
- Contact email: ruif.correia@lexatlantica.com
2. Personal Data Collected
We only collect the data strictly necessary for the intended purposes:
- Identification and contact data: name, email and phone/WhatsApp, provided by you through the contact form or directly by email, phone or WhatsApp.
- Professional or case data: information you voluntarily choose to share with us when describing your legal matter.
- Browsing data: IP address and browser type, logged by the website host for technical and security reasons. This website does not use advertising or analytics cookies; your browser only stores your language choice if you change it manually.
3. Purposes and Legal Bases for Processing
We process your data on the following legal grounds under the GDPR (Art. 6) and the LGPD (Art. 7):
| Purpose | Legal basis (GDPR - Portugal) | Legal basis (LGPD - Brazil) |
|---|---|---|
| Answering questions and contact requests | Consent or pre-contractual steps | Consent or preliminary contractual procedures |
| Providing contracted legal services | Performance of a contract / mandate | Performance of a contract |
| Meeting legal and tax obligations | Compliance with a legal obligation | Compliance with a legal or regulatory obligation |
4. Professional Secrecy and Data Sharing
All data relating to consultations or legal matters is strictly protected by lawyers' professional secrecy, under the rules of the Ordem dos Advogados (Portugal) and the Ordem dos Advogados do Brasil (OAB).
We do not sell your data. It is shared with third parties only with:
- Subcontracted technology service providers (website hosting, email, CRM, invoicing systems) that meet security standards.
- Judicial, tax or administrative authorities, only when required by law or strictly necessary to carry out a legal mandate.
5. International Data Transfers
Because our office operates between Portugal and Brazil, the data collected may be stored or accessed from both jurisdictions. We ensure that any international data transfer follows the safeguards required by the European Union and the ANPD, providing a level of protection equivalent to that required by law.
6. Data Retention Period
- General enquiries: kept for a maximum of 2 years after the last contact if no contractual relationship is formed.
- Client data (mandates): kept for the duration of the contract and, after the matter closes, for the legal and limitation periods of each country (which may reach 10 years in Brazil and 20 years in Portugal for civil liability purposes).
7. Data Subject Rights
Whether you are in Portugal or Brazil, you may exercise the following rights:
- Access and confirmation: find out whether we process your data and obtain a copy of it.
- Rectification: correct incomplete, inaccurate or outdated data.
- Erasure: request deletion of your data, unless there is a legal obligation to retain it.
- Anonymisation or restriction: restrict the processing of unnecessary or excessive data.
- Withdrawal of consent: withdraw authorisation previously given for processing.
To exercise any of these rights, email ruif.correia@lexatlantica.com. You also have the right to lodge a complaint with the local supervisory authority:
- In Portugal: CNPD (Comissão Nacional de Proteção de Dados).
- In Brazil: ANPD (Autoridade Nacional de Proteção de Dados).
8. Security and Updates
We adopt technical security measures, such as SSL encryption and firewalls, to prevent unauthorised access. This policy may be reviewed periodically.
Last updated: 6 November 2026.