Native Gsr Legal, Sociedade de Advogados, SP, Lda (“Native Legal”) values the privacy, confidentiality and protection of the personal data of its clients, contacts, partners, suppliers, candidates and website users.
This Privacy Policy explains how we collect, use, store and protect personal data in the course of our activity, in accordance with the General Data Protection Regulation (“GDPR”), Law No. 58/2019 of 8 August, and other applicable data protection legislation.
As a law firm, Native Legal also acts in accordance with the duties of professional secrecy, confidentiality, independence and other legal and professional rules applicable to the practice of law.
For the purposes of data protection legislation, the entity responsible for the processing of personal data is:
Native Gsr Legal, Sociedade de Advogados, SP, Lda
Rua Carlos Reis, 123, R/C
2750-558 Cascais e Estoril
Email: geral@nativelegal.pt
This contact may be used for general enquiries, as well as for the exercise of rights relating to personal data protection.
In the course of our activity, we may process different categories of personal data, depending on the relationship with the data subject and the specific purpose of the processing.
We may collect and process, in particular:
a) Identification and contact details, such as name, address, email address, telephone number, civil identification number, tax identification number, nationality and signature;
b) Professional data, such as position, role, company, organisation, professional contact details and business sector;
c) Data relating to clients, matters and legal files, including information contained in documents, contracts, communications, proposals, files, transactions, negotiations or judicial, administrative or extrajudicial proceedings;
d) Financial, accounting and billing data, including bank details, payment information, fees, expenses, invoices and other supporting documents;
e) Communication data, such as emails, messages, contact requests, replies to invitations, event registrations or communications exchanged with Native Legal;
f) Candidate data, such as curriculum vitae, academic and professional background, qualifications, experience, languages, certifications and other information provided in the context of an application;
g) Browsing data, such as information collected through cookies or similar technologies, where applicable;
h) Images, photographs or recordings, when collected in the context of events, meetings, conferences, training sessions or other initiatives promoted by Native Legal.
In certain situations, and only where necessary for the provision of legal services or compliance with legal obligations, we may process special categories of personal data or sensitive data. This may occur, for example, where such data is relevant to the analysis of a legal matter, case, contract, dispute or transaction.
We may collect personal data directly from the data subject or through third parties.
We collect data directly when, for example, the data subject:
a) Contacts Native Legal by email, telephone, form or any other means;
b) Requests information or the provision of legal services;
c) Enters into, or intends to enter into, a professional relationship with Native Legal;
d) Sends documents or information relating to a particular matter;
e) Subscribes to communications, newsletters or legal alerts;
f) Participates in events, training sessions or initiatives promoted by Native Legal;
g) Submits a professional application;
h) Uses or interacts with the Native Legal website.
We may also collect personal data through third parties, including clients, counterparties, legal representatives, courts, public authorities, registries, notaries, administrative or regulatory entities, suppliers, partners or publicly available sources.
Whenever data is collected indirectly, Native Legal will provide the legally required information where applicable, without prejudice to duties of professional secrecy, confidentiality, judicial secrecy or other applicable legal and professional limitations.
Native Legal processes personal data for specific, legitimate purposes connected with its professional activity.
We may use personal data to:
a) Provide legal services and represent our clients’ interests;
b) Open, organise and manage clients, matters, files and dossiers;
c) Prepare, review, negotiate and execute contracts, legal documents, opinions, communications and other instruments required for the provision of services;
d) Communicate with clients, counterparties, lawyers, courts, public authorities, administrative bodies, suppliers and other parties involved;
e) Comply with legal, tax, accounting, regulatory and professional obligations;
f) Issue invoices, manage payments, control expenses and ensure the administrative and financial management of our activity;
g) Prevent conflicts of interest, comply with compliance duties and ensure compliance with the rules applicable to the legal profession;
h) Send institutional communications, legal news, newsletters, legal alerts or invitations to events, where there is a legal basis for doing so;
i) Organise events, training sessions, conferences, webinars or other initiatives;
j) Manage recruitment and selection processes;
k) Manage relationships with suppliers, partners and service providers;
l) Exercise, defend or enforce the rights of Native Legal, its clients or third parties;
m) Ensure the operation, security and improvement of the Native Legal website.
Native Legal only processes personal data where there is a legal basis allowing it to do so.
Depending on the case, processing may be based on one or more of the following legal bases:
a) Performance of a contract or pre-contractual steps, where processing is necessary to provide legal services, respond to requests, prepare proposals or manage professional relationships;
b) Compliance with legal obligations, where processing is necessary to comply with tax, accounting, regulatory, professional or other legally applicable duties;
c) Legitimate interest, where processing is necessary for the management of Native Legal’s activity, the efficient provision of services, the defence of rights, the prevention of conflicts of interest, security, institutional communication or professional relationship management, provided that the fundamental rights and freedoms of the data subject do not prevail;
d) Consent, where processing depends on the data subject’s authorisation, for example in certain marketing communications, the use of non-essential cookies or the capture/disclosure of images in certain contexts;
e) Exercise or defence of legal claims, namely in judicial, administrative, arbitration or extrajudicial proceedings.
Native Legal retains personal data only for the period necessary to fulfil the purposes for which it was collected, unless a legal, regulatory, professional or legitimate ground justifies retention for a longer period.
In particular:
a) Data processed in the context of legal services is retained during the professional relationship and for the period necessary to comply with legal, tax, accounting, professional or ethical duties, or for the defence of rights;
b) Billing and accounting data is retained for the legally required period;
c) Data processed for the purpose of sending communications is retained until the data subject objects, unsubscribes or withdraws consent, where applicable;
d) Data processed in the context of contact requests is retained for the period necessary to respond to and manage the request;
e) Recruitment data is retained for the period necessary to manage the recruitment process, unless there is consent or a legitimate ground for retention for a longer period;
f) Data processed in the context of disputes, claims or debt recovery is retained until the matter has been finally resolved and for the period necessary for the defence of rights;
g) Browsing and cookie data is retained in accordance with the applicable Cookie Policy.
When personal data is no longer necessary, it will be deleted, anonymised or retained only where there is a legal basis allowing it.
Native Legal does not sell or make personal data available to third parties for those third parties’ own commercial purposes.
However, we may share personal data where this is necessary for the provision of our services, compliance with legal obligations or pursuit of the purposes set out in this Policy.
Personal data may be shared with:
a) Courts, public authorities, administrative, tax, regulatory or police authorities;
b) The Portuguese Bar Association or other professional bodies, where applicable;
c) Registries, notaries, financial institutions, insurance companies or other entities required for the execution of transactions or proceedings;
d) Counterparties, lawyers, consultants, auditors, experts, mediators or other parties involved in legal matters;
e) Native Legal’s suppliers and service providers, including providers of IT services, data hosting, communications, archiving, accounting, billing, translation, marketing, website management or other support services;
f) Professional partners or law firms in other jurisdictions, whenever necessary to provide international or cross-border legal services.
Native Legal requires third parties processing personal data on its behalf to adopt appropriate security, confidentiality and data protection measures, and to process such data only in accordance with the instructions received and as legally permitted.
In certain cases, the provision of legal services may involve the transfer of personal data to entities located outside the European Economic Area, namely where international clients, cross-border transactions, foreign jurisdictions, local partners or international service providers are involved.
Whenever international transfers of personal data occur, Native Legal will ensure that such transfers are carried out in accordance with applicable law, including through an adequacy decision of the European Commission, the execution of standard contractual clauses approved by the European Commission or any other legally admissible mechanism.
Native Legal adopts appropriate technical and organisational measures to protect personal data against destruction, loss, alteration, disclosure, unauthorised access or any other form of unlawful or abusive processing.
These measures may include, in particular:
a) Access controls to systems and documentation;
b) Use of protected IT systems;
c) Internal confidentiality measures;
d) Appropriate physical and digital archiving;
e) Limitation of access to personal data to those who need it for the performance of their duties;
f) Confidentiality and security obligations imposed on service providers and partners;
g) Internal procedures for information management, organisation and security.
Despite the measures adopted, no system is completely free from risk. If you become aware of any situation that may compromise the security of your personal data, you should contact Native Legal through the means indicated in this Policy.
Under applicable law, data subjects may exercise the following rights:
a) Right of access, allowing them to obtain confirmation as to whether their data is being processed and to access their personal data and information about the processing;
b) Right to rectification, allowing them to request the correction of inaccurate, incomplete or outdated data;
c) Right to erasure, allowing them to request the deletion of their personal data in certain situations;
d) Right to restriction of processing, allowing them to request that the processing of their data be restricted in certain circumstances;
e) Right to object, allowing them to object to processing based on legitimate interest, on grounds relating to their particular situation;
f) Right to data portability, where applicable, allowing them to receive the data they have provided in a structured, commonly used and machine-readable format;
g) Right to withdraw consent, where processing is based on consent, without affecting the lawfulness of processing carried out before consent was withdrawn;
h) Right to lodge a complaint with the competent supervisory authority.
In Portugal, the competent supervisory authority is the Comissão Nacional de Proteção de Dados — CNPD.
The exercise of these rights may be limited where there are legal obligations, duties of professional secrecy, judicial secrecy, third-party rights or other legally admissible grounds.
Data subjects may exercise their rights through the following contacts:
Email: geral@nativelegal.pt
Address: Rua Carlos Reis, 123, R/C, 2750-558 Cascais e Estoril
Native Legal may request additional information to confirm the identity of the data subject, in order to ensure that personal data is not disclosed to anyone who is not entitled to receive it.
Requests will be answered within the legally applicable time limits. In cases of particular complexity or a high number of requests, the response period may be extended in accordance with the law.
The exercise of rights is, as a rule, free of charge. However, Native Legal may refuse requests that are manifestly unfounded, excessive or repetitive, or charge a reasonable fee where legally permitted.
The Native Legal website may use cookies or similar technologies to ensure its operation, improve the browsing experience, analyse website usage and, where applicable, personalise content.
The use of non-essential cookies will depend on the user’s consent.
For further information, please see Native Legal’s Cookie Policy.
Native Legal may update this Privacy Policy whenever necessary, including to reflect legal, regulatory, technical, organisational or functional changes.
The updated version will be published on the Native Legal website, indicating the relevant date of update.
We recommend that you consult this Policy regularly to remain informed about how we process personal data.
For any question relating to this Privacy Policy or the processing of your personal data, you may contact us through the following means:
Native Gsr Legal, Sociedade de Advogados, SP, Lda
Rua Carlos Reis, 123, R/C
2750-558 Cascais e Estoril
Email: geral@nativelegal.pt
This contact may be used for general enquiries, as well as for the exercise of rights relating to personal data protection.
Last updated: 17/06/2026
🍪 Cookies
Política de Cookies
A cookie is a small text file that a website, when visited by a user, asks the browser to store on the user’s device, in order to save certain information about browsing activity, preferences or use of the website.
This Cookie Policy explains how Native Gsr Legal, Sociedade de Advogados, SP, Lda (“Native Legal”) uses cookies and similar technologies on its website.
The use of cookies may allow us, in particular, to ensure the proper functioning of the website, improve the browsing experience, analyse website usage and, where applicable, remember user preferences.
The user may, at any time, accept, refuse, configure or delete cookies through the cookie management panel available on the website or through the settings of the relevant browser. However, disabling certain cookies may partially or fully affect the functioning of some website features.
The Native Legal website may use different types of cookies, depending on their purpose.
1.1. Strictly necessary cookies
These cookies are necessary for the website to function properly and cannot be disabled in our systems.
They are usually set in response to actions taken by the user, such as setting privacy preferences, filling in forms, browsing the website or using essential functionalities.
These cookies do not require the user’s consent, as they are necessary to provide the requested service.
1.2. Preference cookies
These cookies allow the website to remember choices made by the user, such as language, region or other browsing preferences.
Their purpose is to provide a more personalised experience adapted to the user’s preferences.
Where these cookies are not strictly necessary for the functioning of the website, their use will depend on the user’s consent.
1.3. Performance and analytics cookies
These cookies allow us to collect information on how users interact with the website, including which pages are most visited, how long users remain on the website and whether browsing errors occur.
The information collected through these cookies is used to measure and improve the performance of the website.
Where these cookies make it possible to identify or single out users, directly or indirectly, their use will depend on the user’s consent.
1.4. Third-party cookies
Some cookies may be installed by third-party entities, namely where the website uses external services, such as analytics tools, maps, embedded videos, social media, forms, consent management platforms or other integrated services.
These third parties may process personal data in accordance with their own privacy and cookie policies.
When accessing the Native Legal website, the user may be presented with a cookie notice or management panel allowing them to accept, refuse or configure the use of non-essential cookies.
The use of non-essential cookies depends on the user’s free, specific, informed and unambiguous consent.
The user may change or withdraw their consent at any time through the cookie management panel available on the website, where applicable.
Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent previously given.
In addition to the cookie management panel available on the website, the user may manage, block or delete cookies through the settings of the relevant browser.
The user may, in particular, configure the browser to:
a) Block all cookies;
b) Allow only certain cookies;
c) Delete cookies already stored;
d) Receive a warning before a cookie is installed.
Disabling certain cookies may affect the functioning of the website or prevent the use of some features.
The use of cookies may involve the processing of personal data, namely online identifiers, IP address, device information, browsing data or information about the user’s interaction with the website.
Whenever the use of cookies involves the processing of personal data, such processing will be carried out in accordance with Native Legal’s Privacy Policy and applicable personal data protection legislation.
For further information on how we process personal data, please see our Privacy Policy.
Native Legal may update this Cookie Policy whenever necessary, including to reflect legal, regulatory, technical or functional changes to the website.
The updated version will be published on the Native Legal website, indicating the relevant date of update.
We recommend that you consult this Policy regularly to remain informed about the use of cookies on the website.
For any question relating to this Cookie Policy or the use of cookies on the Native Legal website, you may contact us through the following means:
Native Gsr Legal, Sociedade de Advogados, SP, Lda
Rua Carlos Reis, 123, R/C
2750-558 Cascais e Estoril
Email: geral@nativelegal.pt
Last updated: 17/06/2026