Privacy Policy

Privacy Policy — iCompliance.eu

Last updated: 21 April 2026

Quick summary — just the essentials, without having to read the whole thing:
  • The data controller is Contemporary Constellation Lda, the operator of the iCompliance Europe brand.
  • We process contact, professional and browsing data solely for the purpose of responding to enquiries, preparing quotations, providing services and complying with legal obligations.
  • We do not sell personal data to third parties. We only share it with essential service providers (hosting, security, accounting) and the authorities where required by law.
  • You may exercise your rights (right of access, erasure, objection and data portability) at any time by emailing the address below.

1. Introduction

This Privacy Policy describes how iCompliance Europe, a registered trademark and business unit managed by Contemporary Constellation Lda, which is responsible for the iCompliance.eu website, eu, collects, uses, shares, stores and protects personal data in connection with the use of this website, commercial and institutional contacts, requests for information, meetings, proposals, demonstrations and the provision of services where applicable.

iCompliance.eu is committed to protecting privacy and personal data, and takes appropriate measures to ensure that such data is processed lawfully, fairly, transparently and limited to the purposes strictly necessary.

2. Data Controller

The data controller is:

Contemporary Constellation Lda
Rua Mouzinho da Silveira, 32
1250-167 Lisbon, Portugal

Email: [email protected] · Phone: +351 210 210 035

For any enquiries regarding privacy and data protection, the data subject may contact us at the address given above.

3. Scope of Application

This Privacy Policy applies to the processing of personal data carried out in the context of browsing the website, completing forms, submitting contact requests, booking meetings or demonstrations, requesting commercial quotations, exchanging business communications, providing services, and complying with legal, regulatory and contractual obligations.

This policy does not cover the processing of data by third-party websites or services accessed via external links available on our website.

4. Categories of Personal Data Processed

4.1. Identification and contact details

Name, email address, telephone number, company, job title or role.

4.2. Professional and business details

Information relating to the applicant’s organisation, job description, the content of commercial, technical or institutional requests, and information required for the analysis of needs and the preparation of proposals.

4.3. Information contained in the communications

The content of messages sent via forms, email or other means of contact; interaction history; records relating to order management, support or sales follow-up.

4.4. Technical and navigation data

IP address, technical identifiers, date and time of access, pages visited, source of access, device type, operating system, browser, language, cookie preferences and consents, interactions with features embedded in the website.

4.5. Administrative, contractual and billing data

Where applicable, data required for the conclusion, performance and management of contracts, invoicing, accounting, support and compliance with legal obligations.

5. Method of Data Collection

Personal data may be collected directly from the data subject via forms on the website, communications by email, telephone or other professional channels; automatically through browsing and cookies; or in the context of the preparation, conclusion or performance of contractual or pre-contractual relationships.

6. Purposes of the Processing and Legal Basis

PurposeLegal basis
Management of contacts and enquiriesPre-contractual steps and legitimate interest
Booking meetings and demonstrationsPre-contractual steps and legitimate interest
Preparation of tendersPre-contractual procedures and legitimate interest
Service provision and contract managementPerformance of a contract
Legal, tax and accounting obligationsCompliance with legal obligations
Administrative management, support and the protection of rightsLegitimate interest and, where applicable, a legal obligation
Website security and operationLegitimate interest
Statistical analysis and website optimisationLegitimate interest and/or consent (cookies)
Informative communications and direct marketingConsent or legitimate interest, with the right to object

7. Whether Data is Mandatory or Optional

The provision of certain data may be necessary in order to respond to enquiries, assess requests, arrange meetings, prepare proposals, enter into and perform contracts, and comply with legal obligations. If the necessary data is not provided, we may be unable to respond to the enquiry or provide the requested service.

8. Recipients and Data Sharing

Personal data may be disclosed, to the extent strictly necessary, to: hosting and infrastructure providers; security and monitoring providers; form and contact management tools; consent management and statistical analysis tools; web development and content providers; consultants, solicitors, accountants and auditors; and public authorities where there is a legal obligation to do so.

Whenever we use subcontractors, we put in place appropriate contractual, technical and organisational measures to ensure confidentiality, security and compliance.

9. International Data Transfers

As a general rule, we endeavour to process personal data within the European Economic Area. Where certain technology providers involve processing outside the EEA, we ensure that such transfers take place on the basis of adequacy decisions by the European Commission, standard contractual clauses, or another legally permissible mechanism under the GDPR.

10. Data Retention

Data is retained only for as long as is necessary for the purposes for which it was collected:

Data typeRetention period
Enquiries and requests for information without a contractUp to 12 months after the last interaction
Commercial enquiries, quotations and pre-contractual communicationsUp to 24 months after the last interaction
Contract and service provision detailsContract duration + applicable statutory time limits
Invoicing and accountingStatutory deadlines
Informative communications and marketingUntil consent is withdrawn or after 24 months of inactivity
Technical and security logsUp to 12 months, unless an investigation is ongoing
Consent recordsFor as long as necessary to demonstrate compliance

At the end of the applicable retention period, the data will be deleted, anonymised or retained in a blocked format, where legally permissible.

11. Cookies and Similar Technologies

The website uses cookies and similar technologies for essential functionality, security, consent management and usage analysis. Some cookies are strictly necessary; others are only enabled once consent has been given, where legally required. For full details, please see the Cookie Policy.

12. Data Security

We have implemented appropriate technical and organisational measures — access control, role-based access control, authentication, monitoring, regular backups and system updates — to protect data against destruction, loss, alteration or unauthorised access. No system is completely invulnerable; we also recommend that users follow good security practices.

13. Rights of Data Subjects

In accordance with the applicable legislation, you may exercise the following rights: the right of access, rectification, erasure, restriction of processing, objection, data portability, withdrawal of consent, and the right not to be subject to decisions based solely on automated processing. Withdrawal of consent does not affect the lawfulness of processing carried out prior to such withdrawal.

14. Exercising Rights

You may exercise your rights by emailing [email protected], specifying the right you wish to exercise. We may request reasonable additional information to verify the identity of the applicant. Requests are dealt with without undue delay and within the applicable legal timeframe.

15. Complaints

You have the right to lodge a complaint with the relevant supervisory authority — in Portugal, the National Data Protection Commission (CNPD) — if you believe that the processing of your data breaches the applicable legislation.

16. Automated Decisions and Profiling

As a general rule, we do not make decisions based solely on automated processing that have significant legal effects on data subjects. Should this occur in a specific instance, further information will be provided in accordance with legal requirements.

17. Data relating to minors

The website and services are not intended for minors. We do not knowingly collect data from minors without an appropriate legal basis. If you become aware of any data relating to a minor that has been provided in error, please contact us so that we can assess the situation and take appropriate action.

18. Links to third-party websites

The website may contain links to third-party websites. This Policy does not apply to those websites; we recommend that you read their respective privacy policies.

19. Changes to the Privacy Policy

We may update this Policy at any time, in particular to reflect legal, regulatory, technical or operational changes. Significant changes will be published on this page, along with the date of the update.

20. Contact

Contemporary Constellation Lda
Rua Mouzinho da Silveira, 32
1250-167 Lisbon, Portugal

Email: [email protected] · Phone: +351 210 210 035