Last updated: 21 April 2026
This Privacy Policy describes how iCompliance Europe, a registered trademark and business unit managed by Contemporary Constellation Lda, the entity responsible for the website iCompliance.eu, collects, uses, shares, stores and protects personal data in connection with the use of this website, commercial and institutional contacts, requests for information, meetings, proposals, demonstrations and the provision of services.
iCompliance.eu is committed to protecting privacy and personal data, taking appropriate measures to ensure that such processing is carried out lawfully, fairly, transparently and limited to the purposes strictly necessary.
The data controller is:
Contemporary Constellation Lda
Rua Mouzinho da Silveira, 32
1250-167 Lisbon
Portugal
Email: [email protected]
Telephone: +351 210 210 035
For any queries regarding privacy and data protection, the data subject may contact us at the address indicated above.
This Privacy Policy applies to the processing of personal data carried out in the context of:
This policy does not govern the processing of data carried out by third-party websites or services that may be accessed via external links available on our website.
Depending on the applicable purpose, we may collect and process the following categories of personal data:
Where applicable, we may process data necessary for the conclusion, performance and management of contracts, billing, accounting, support and compliance with legal obligations.
Personal data may be collected:
We process personal data only where there is a legitimate purpose and an appropriate legal basis.
We process data to respond to requests sent by the data subject, provide clarifications, analyse needs and follow up on requests.
Legal basis: pre-contractual steps, execution of measures requested by the data subject and, where applicable, legitimate interest in the management of institutional and commercial contacts.
We process data to organise meetings, demonstrations, presentations and interactions related to our services.
Legal basis: pre-contractual steps and legitimate interest.
We process data to prepare proposals, evaluate requests and conduct commercial interactions prior to contracting.
Legal basis: pre-contractual steps and legitimate interest.
We process data to enter into, perform, monitor and manage the contractual relationship with customers and partners.
Legal basis: performance of a contract.
We process data where necessary to comply with applicable legal or regulatory obligations.
Legal basis: compliance with a legal obligation.
We process data for the purposes of operational management, support, internal control, auditing, risk prevention, and the exercise and defence of rights in judicial, extrajudicial or administrative proceedings.
Legal basis: legitimate interest and, where applicable, compliance with a legal obligation.
We process technical data to ensure website security, prevent unauthorised access, detect incidents, maintain platform availability and ensure the proper functioning of systems.
Legal basis: legitimate interest.
We process browsing-related data to understand website usage, improve content, performance, usability and the user experience.
Legal basis: legitimate interest for strictly necessary metrics and, where legally required, user consent via cookie management.
Where applicable, we may process data to send informative content, newsletters, invitations, and institutional or commercial communications.
Legal basis: consent, where required, or legitimate interest, where there is a prior relationship compatible with applicable legislation and the right to object is always guaranteed.
The provision of certain personal data may be necessary to:
If the data marked as necessary is not provided, we may be unable to respond to the request, provide the desired service or proceed with the commercial, contractual or pre-contractual relationship.
Personal data may be disclosed, to the extent strictly necessary, to the following categories of recipients:
Whenever we use subcontractors, we ensure that appropriate contractual, technical and organisational measures are in place to guarantee the confidentiality, security and compliance of the processing.
As a general rule, we seek to process personal data within the European Economic Area. However, certain services, platforms, embedded content, technical tools or technology providers used on the website may involve the processing of or access to data from third countries.
Where this occurs, we will ensure that such international transfers only take place on the basis of legally valid mechanisms, namely:
Where applicable, additional measures appropriate to the nature of the processing and the associated risk may also be adopted.
Personal data is retained only for the period necessary for the purposes for which it was collected, without prejudice to applicable statutory time limits or the need for retention to exercise or defend rights.
In general terms, we apply the following criteria:
Up to 12 months after the last relevant interaction, unless there is a legal basis or legitimate need for retention for a longer period.
Up to 24 months after the last relevant interaction, unless the relationship progresses to a contract or there is a legitimate basis for a different retention period.
For the duration of the contractual relationship and, subsequently, for the period necessary to comply with legal, regulatory, accounting and tax obligations or to exercise and defend rights.
For the periods required by law.
Until consent is withdrawn, the data subject objects or, in the absence of prolonged interaction, for a maximum period of 24 months from the last relevant interaction, without prejudice to the minimum retention of data strictly necessary to ensure that communications are not resent.
Up to 12 months, unless retention for a longer period is necessary for incident investigation, fraud prevention, information security or the defence of rights.
For the period necessary to demonstrate the collection, management and updating of consent, in accordance with applicable requirements.
At the end of the applicable retention period, the data will be deleted, anonymised or retained in a blocked form, where legally permissible.
The website uses cookies and similar technologies to ensure essential functionality, save preferences, enhance security, manage consent, analyse website usage and support certain features and embedded content.
Some cookies are strictly necessary for the platform to function. Others are only activated following the user’s consent, where legally required.
For more detailed information on cookie categories, purposes, technologies used and how to manage preferences, please consult the website’s Cookie Policy.
We adopt appropriate technical and organisational measures to protect personal data against destruction, loss, alteration, disclosure, unauthorised access or any other form of unlawful or improper processing.
These measures may include, depending on the nature of the processing and the associated risk:
Despite the adoption of appropriate measures, no electronic transmission or storage system can be guaranteed to be absolutely invulnerable. Therefore, users must also adopt appropriate security practices when using their devices and communication channels.
Under applicable legislation, the data subject may exercise, where applicable, the following rights:
Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent previously given.
Data protection rights may be exercised by contacting us at:
Email: [email protected]
The request must identify, as clearly as possible, the right you wish to exercise and the situation to which it relates.
Where necessary, we may request reasonable additional information to confirm the applicant’s identity, in order to protect personal data against unauthorised access.
Requests will be processed without undue delay and, as a rule, within the applicable legal timeframe.
Without prejudice to any other administrative or judicial remedy, the data subject has the right to lodge a complaint with the competent supervisory authority, in Portugal the National Data Protection Commission (CNPD), via its official website, should they consider that the processing of their personal data violates applicable legislation.
As a rule, we do not make decisions based solely on automated processing, including profiling, which produce legal effects concerning data subjects or similarly significantly affect them.
If, in any specific operation, this should occur, additional information will be provided to the data subject in accordance with legal requirements.
The iCompliance.eu website and services are not specifically aimed at minors. We do not knowingly collect personal data from minors without an appropriate legal basis.
If you become aware that data relating to a minor has been transmitted inappropriately, please contact us so that we may assess the situation and, where applicable, take appropriate measures.
The website may contain links to third-party websites, platforms or services. This Privacy Policy does not apply to such external websites or services.
We recommend that you read their respective privacy policies before providing any personal data to third parties.
We reserve the right to update or amend this Privacy Policy at any time, in particular to reflect legal, regulatory, technical, operational or functional changes.
Any relevant changes will be published on this page, indicating the date of the last update.
If you have any questions regarding this Privacy Policy or the processing of your personal data, please contact:
Contemporary Constellation Lda
Rua Mouzinho da Silveira, 32
1250-167 Lisbon
Portugal
Email: [email protected]
Telephone: +351 210 210 035
