Spear Legal. Estratégia, rigor e confiança.

1. Introduction

Spear Legal respects the privacy of its website users and is committed to protecting the personal data entrusted to it.

This Privacy Policy describes how users’ personal data is collected, used, and protected, in accordance with the General Data Protection Regulation (GDPR), applicable national legislation—including implementing legislation and specific legislation on electronic communications—and the guidelines of the supervisory authority.

2. Data Controller

The entity responsible for processing personal data is Spear Legal - Sociedade de Advogados, SP, LDA., with its registered office at Avenida da Liberdade 245, 4th Floor A, 1250-143 Lisbon, NIPC 518 954 609, hereinafter “Spear Legal”.

For any questions regarding the processing of personal data or this Privacy Policy, users may contact Spear Legal at the following email address: info@spearlegal.pt.

3. Personal Data Collected

Spear Legal may collect personal data such as:

1. Identification and contact information: name, email address, phone number, company or organization you represent, job title or position, as well as the content of messages sent through the website.
2. Data related to interactions with Spear Legal: data associated with contact requests, requests for information, event registrations, responses to invitations, newsletter subscriptions, or other communications.
3. Technical and usage data: IP address, date and time of access, device type, operating system, browser type, pages visited, and actions taken on the website.
4. Event-related data: where applicable, data associated with participation in events or initiatives organized by Spear Legal, including, subject to consent where required, images and audio recordings captured during such events.

This data is collected, in particular, when the user:

1. Fill out contact forms;
2. Submit requests for information;
3. Signs up for events, conferences, or other initiatives organized by Spear Legal;
4. Subscribes to newsletters or other communications;
5. Browse the website and use its features, including through the use of cookies and similar technologies.

4. Purposes of the Processing

The personal data collected may be processed for the following purposes:

1. Contact and inquiry management: responding to contact requests or inquiries submitted through the website or other channels.
2. Professional relationship management: managing relationships with clients, prospects, partners, suppliers, and other professional contacts.
3. Sending informational and marketing communications: sending newsletters, legal publications, invitations, and information about Spear Legal’s events, initiatives, and services.
4. Event organization and management: registration management, communication with participants, issuance of certificates of participation, and event logistics management, including, where applicable, the use of images and audio for institutional promotional purposes.
5. Compliance with legal and regulatory obligations: compliance with the legal obligations to which Spear Legal is subject.
6. Website security and operation: ensuring security, monitoring and improving the website’s performance and functionality, preventing fraud and abuse, and ensuring the integrity of the systems.

Spear Legal does not use personal data for fully automated decisions that produce legal effects on the data subject or that significantly affect the data subject in a similar manner.

5. Legal Basis

Spear Legal’s processing of personal data is based, depending on the circumstances, on the following legal grounds:

1. Performance of pre-contractual measures or a contract: when processing is necessary to respond to contact requests, prepare proposals, or enter into or perform contracts with customers, partners, or suppliers.
2. Compliance with legal obligations: when processing is necessary to comply with legal obligations applicable to Spear Legal’s activities, including those related to tax, accounting, anti-money laundering, or other matters.
3. Legitimate interest: when processing is necessary for the purposes of Spear Legal’s legitimate interests, namely: a) Website management and information security; b) Management of institutional relations and institutional communication; c) Improvement of services and understanding of website usage; without prejudice to the fundamental rights and freedoms of data subjects.
4. Consent: when processing is based on the data subject’s consent, specifically: a) Sending newsletters and electronic marketing communications; b) Use of images and voice recordings for the purpose of promoting Spear Legal’s activities (e.g., in publications, on the website, or on social media), where required by applicable law; c) Use of cookies that are not strictly necessary, including analytical or marketing cookies.

Spear Legal will clearly indicate, whenever necessary, in which situations the provision of personal data is a legal or contractual obligation, or a necessary requirement for entering into a contract, as well as the possible consequences of failing to provide such data.

6.Data Retention

Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected, in accordance with applicable law, or until the data subject withdraws their consent (when processing is based on consent) or exercises their right to object, where applicable.

Without prejudice to specific deadlines to be determined internally by Spear Legal, the following criteria generally apply:

1. Contact information and inquiries: retained for the period necessary to process the request and, where applicable, for the duration of any subsequent business relationship and for the applicable statute of limitations periods.
2. Customer data, prospect data, and case files: retained for the duration of the contractual relationship and for the limitation and statute of limitations periods applicable by law to the relevant liabilities and obligations.
3. Data used for sending newsletters and marketing communications: retained until consent is withdrawn or the right to object is exercised, without prejudice to the retention of proof of the existence of consent and its withdrawal for the duration of the applicable statute of limitations.
4. Data necessary to comply with legal obligations (e.g., tax and accounting obligations): retained for the periods required by law.

Spear Legal may retain certain data for longer periods when necessary to assert, exercise, or defend a right in judicial or administrative proceedings, or as required by law.

7. Data Sharing

Spear Legal does not sell or disclose personal data to third parties for commercial purposes.

Personal data may be shared with:

1. Service providers acting on behalf of Spear Legal (subcontractors), specifically in areas such as web hosting, cloud services, IT systems, communication tools, newsletter management, event management, or consulting, who will process data in accordance with Spear Legal’s documented instructions and applicable law.
2. Public entities, judicial, administrative, or regulatory authorities, when required by law or necessary to comply with legal obligations or legitimate orders from authorities.
3. Partners involved in organizing events or initiatives promoted by Spear Legal, when necessary for the management of such events, with the data subject being informed, where applicable, of the categories of recipients concerned.

In all cases where data is shared with third parties, Spear Legal will ensure that such parties provide adequate safeguards for the protection of personal data and, when acting as data processors, that they are bound by a written contract setting forth the obligations required by applicable law.

8. International Data Transfers

In certain cases, personal data may be processed by entities located outside the European Economic Area (EEA), such as information technology service providers or communication platforms.

In such situations, Spear Legal will ensure that transfers are carried out in accordance with applicable law, specifically:

1. For countries or international organizations for which the European Commission has issued an adequacy decision; or
2. By adopting appropriate safeguards, such as standard contractual clauses approved by the European Commission or other legally permissible mechanisms.

The data subject may request additional information regarding international transfers and obtain a copy of the applicable safeguards, if any, by submitting a request to the contacts listed in this Policy.

9. Data Subjects' Rights

Under applicable law, data subjects have the right to:

1. Access your personal data and obtain information about its processing;
2. Request the correction of data that is inaccurate or incomplete;
3. Request the erasure of your personal data, in the cases provided for by law;
4. Request the restriction of the processing of your personal data, in accordance with the law;
5. Object to the processing of your personal data when the processing is based on legitimate interests or is carried out for direct marketing purposes, including profiling related to such marketing;
6. Request data portability in cases where the processing is based on consent or the performance of a contract and is carried out by automated means;
7. Withdraw consent at any time, when the processing is based on consent, without this affecting the lawfulness of the processing carried out based on the consent previously given.

You may exercise these rights by submitting a written request to Spear Legal at the contact information provided in this Policy (specifically, to the email address info@spearlegal.pt).

Spear Legal will review and respond to requests without undue delay, within a maximum of one month from receipt; this period may be extended in exceptional cases, in accordance with applicable law. The exercise of rights is, as a rule, free of charge; however, a reasonable fee may be charged or the request may be denied if it is manifestly unfounded or excessive, in accordance with the law.

The data subject also has the right to lodge a complaint with the competent supervisory authority, which in Portugal is the National Data Protection Commission (CNPD).

10. Third-Party Data

If the user provides Spear Legal with personal data belonging to third parties (e.g., employees, representatives, or other contacts), the user warrants that they have been previously authorized to do so and that such disclosure complies with applicable data protection laws.

You agree to ensure the accuracy, currency, and lawfulness of the data transmitted to Spear Legal, as well as to inform the respective data subjects about the processing of their data by Spear Legal, when required to do so.

11. Data Security

Spear Legal implements appropriate technical and organizational measures to protect personal data against unauthorized access, improper disclosure, loss, destruction, or accidental or unlawful alteration, taking into account the state of the art, the costs of implementation, the nature, scope, context, and purposes of the processing, as well as the risks to the rights and freedoms of data subjects.

These measures include, in particular, access controls, encryption or pseudonymization, where appropriate, access logging mechanisms, information security policies, employee training, and internal procedures for managing security incidents.

12. Cookies

The Spear Legal website uses cookies and similar technologies to ensure it functions properly, improve your browsing experience, and analyze website usage.

The use of cookies that are not strictly necessary for the website to function depends on the user’s consent, which is collected via the cookie banner displayed on the website, in accordance with applicable data protection and electronic communications laws.

You can configure your preferences in the cookie banner by accepting or rejecting cookies by category (for example, analytics or marketing cookies) and may, at any time, change or withdraw your consent.

12.1. What are cookies?

Cookies are small text files stored on a user’s device when they visit a website. These files allow the website to recognize the user’s device on subsequent visits and store certain information related to their browsing, such as preferences or previous actions.

12.2. Types of cookies used

Spear Legal may use, in particular:

1. Strictly necessary cookies: cookies that are essential for the website to function and to enable navigation and the use of its basic features. These cookies do not require consent.
2. Performance or analytics cookies: cookies that allow us to obtain aggregated information about website usage (e.g., most visited pages, usage patterns) in order to improve performance and the user experience.
3. Functionality cookies: cookies that allow us to remember user preferences (e.g., language or other settings) and personalize the experience.
4. Marketing or third-party cookies: cookies used to deliver personalized content or advertising or to measure the effectiveness of campaigns, as well as third-party cookies (e.g., traffic analysis tools or social media platforms).

Detailed information about the cookies used, their purpose, duration, and whether they are first-party or third-party cookies is available in the specific cookie policy, which can be accessed via the cookie banner or a dedicated link on the website.

12.3. Cookie Management

The user may, at any time:

1. Set your preferences via the cookie banner by accepting or rejecting cookies by category;
2. Change or withdraw your consent using the options available on the website;
3. Configure your browser to reject some or all cookies or to delete previously stored cookies.

Disabling certain categories of cookies, particularly strictly necessary cookies, may affect the functioning of some website features or the quality of your browsing experience.

12.4. Third-party cookies

The website may use third-party services, such as traffic analytics tools, social media platforms, or other providers, which may place cookies on the user’s device.

In such cases, the processing of personal data associated with these cookies is carried out in accordance with the privacy policies of those entities, without prejudice to Spear Legal’s obligations as the data controller with respect to the data it collects and processes.

12.5. Updates

Spear Legal may update this cookie policy at any time, particularly to reflect changes in the cookies used or in applicable legal requirements. Any changes will be duly posted on the website.

13. Changes to the Privacy Policy

Spear Legal may update this Privacy Policy at any time, particularly to reflect changes in applicable law, recommendations from supervisory authorities, or the way in which it processes personal data.

Any relevant changes will be posted on the website and, where appropriate, communicated directly to data subjects via the available contact information.

We recommend that you review this Privacy Policy periodically.

14. Contacts

If you have any questions regarding this Privacy Policy or the processing of personal data, please contact:

Spear Legal
Avenida da Liberdade 245, 4.º A
Lisboa 1250-143
Portugal

Email: info@spearlegal.pt

Last updated: April 8, 2026