Data controller
The controller of the personal data collected through this website and the office's contact channels is:
ME&JBA — Advogados
Av. 5 de Outubro, n.º 12, 3.º Dto., 1050-056 Lisbon, Portugal
Phone: +351 213 149 955 · Email: geral@mejba-advogados.com
For any question about the processing of your personal data, you may contact us at the email address above.
What data we process and why
a) Website visits. The server hosting the website automatically logs technical data for each request (IP address, date and time, page requested, browser and operating system). These logs are used only to keep the website running and secure, on the basis of the office's legitimate interest (Article 6(1)(f) GDPR).
b) Contact by email or phone. When you contact us, we process the data you provide (name, contact details and a description of the matter) to reply to your request and, where relevant, to take pre-contractual steps at your request (Article 6(1)(b) GDPR). Please do not send unnecessary sensitive information in that first contact.
c) Clients. Where there is a client engagement, we process the data needed to provide legal services, to invoice and to comply with legal obligations, including those under Law no. 83/2017 of 18 August (anti-money laundering), where applicable (Article 6(1)(b) and (c) GDPR).
d) Subscription to publications. If you subscribe to the office's publications, we process your email address to send you a message whenever a new publication is released, on the basis of your consent (Article 6(1)(a) GDPR). The subscription only becomes active once you confirm it through the link sent to your email. You may withdraw your consent at any time, using the unsubscribe link included in every message or by writing to the office's email address. Messages are sent through the Brevo platform, which may record, for statistical purposes, whether a message was opened and whether its links were used. This data is not used for profiling or any other purpose.
Professional secrecy
Information relating to clients' matters is covered by lawyers' professional secrecy under Article 92 of the Portuguese Bar Association Statute. This duty applies in addition to data protection rules and may limit the exercise of certain rights where the law so provides.
Retention periods
- Server logs: for the period set by the hosting provider, normally no longer than 14 days.
- Enquiries that do not lead to an engagement: up to 12 months after the last contact.
- Subscription to publications: while the subscription is active. After unsubscribing, the email address is kept only on a suppression list, to ensure that no further messages are sent.
- Client files: for the duration of the engagement and thereafter for as long as needed to defend rights and meet legal obligations, including 7 years for records required by Law no. 83/2017 and 10 years for accounting and tax documents.
Who may access the data
Data is not sold or shared for commercial purposes. Access may be given, where necessary, to providers acting on the office's behalf as processors, namely the website and email hosting provider (dominios.pt), the certified accountant and Brevo (Sendinblue SAS, France), which sends the publications to subscribers, with data hosted in the European Union, and to courts and other public bodies where required by law or by the engagement.
No personal data is transferred outside the European Economic Area, with one exception: when a meeting with a client is held remotely through Google Meet, the only Google service used by the office with clients, the data needed for the meeting (name, email address and, during the call, image and voice) is processed by Google, which may transfer it to the United States under the European Commission's adequacy decision on the EU-U.S. Data Privacy Framework (Implementing Decision (EU) 2023/1795). Remote meetings are always optional and may be replaced by an in-person meeting or a phone call.
Your rights
Under Articles 15 to 22 GDPR, you may request access to your data, its rectification or erasure, restriction of processing and data portability, and object to processing based on legitimate interest. Simply write to geral@mejba-advogados.com. We will reply within one month.
You also have the right to lodge a complaint with the Portuguese supervisory authority, CNPD (www.cnpd.pt).
Cookies and third-party services
This website does not use cookies, analytics, advertising or social media tools. Fonts and images are hosted on the website itself, so your visit is not reported to third parties.
The only information stored on your device is your language preference (Portuguese, English or Spanish), saved in the browser's local storage when you choose a language. It is not sent to the office and can be deleted at any time in your browser settings.
The address link opens Google Maps in a new tab; from that point Google's privacy policy applies.
Security
The website is served exclusively over an encrypted connection (HTTPS).
Changes to this policy
This policy may be updated. The version in force is always the one published on this page, with the date of the last update.
Last updated: 10 November 2026.