Last updated: 1 October 2026
1. Data controller
The controller of the personal data collected through the website www.cespi.pt is CESPI - Consultores, Unipessoal Lda., company registration and tax number (NIPC) 518452344, with registered office at Centro de Empresas, Edifício Náutico, S.2, 7580-509 Alcácer do Sal, Portugal.
For any question about your personal data, you can contact us by email at geral@cespi.pt or by phone on +351 917 264 464.
This is a translation. In the event of any discrepancy, the Portuguese version prevails.
2. Scope
This policy applies to the personal data processed through the website, including the funding search, the contact form and job applications.
Data processed in the course of the services CESPI provides to its clients, such as preparing applications, is governed by the relevant contract.
3. Contact form and emails
When you write to us through the contact form, we process your first name, last name, email, phone number and message. The same applies to messages you send us directly by email.
We use this data to answer your request and, where relevant, to prepare a proposal for you.
The legal basis is taking steps at your request prior to entering into a contract, and our legitimate interest in replying to those who contact us (Article 6(1)(b) and (f) GDPR).
We keep the data for as long as needed to answer and follow up on your request. If the contact leads to a proposal or a contract, we keep it for the duration of that relationship and for the periods required by law, such as tax rules.
4. Job applications
The CVs and other information you send us by email, for a vacancy or as an open application, are used to assess your application.
The legal basis is taking steps at your request prior to entering into a contract (Article 6(1)(b) GDPR).
We keep your application for the duration of the recruitment process. After that, we only keep it for future opportunities if you allow us to, and you can withdraw that permission at any time.
5. Visit statistics
To understand which pages are visited and to improve the website, we record technical data such as the page viewed, the referring page, the type of browser, operating system and device, the language and the country.
This is done by a tool hosted by CESPI itself, which does not use cookies, does not store IP addresses and does not allow visitors to be identified.
The legal basis is our legitimate interest in improving the website (Article 6(1)(f) GDPR).
6. Server logs
As on any website, the server records technical data about each request, such as the IP address, the date and time, the page requested and the browser. The contact form also uses the IP address to limit repeated submissions and prevent abuse.
This data is used only to protect the website and diagnose problems. The legal basis is our legitimate interest in the security of the website (Article 6(1)(f) GDPR), and it is kept only for the short period these purposes require.
7. Funding search
The search requires no registration. The searches and filters you choose stay in the page address, in your browser, and are not linked to any person.
The artificial intelligence used in the search reads the documents of the calls, not data about the people who visit the website.
9. Who we share data with
We do not sell personal data or pass it on to third parties for marketing purposes.
We use service providers that process data on our behalf, under contract and only on our instructions:
- the website's hosting provider, with servers in Portugal;
- the email delivery provider that delivers the messages sent through the contact form;
- CESPI's email service provider.
We may also disclose data to the competent authorities where the law requires it.
10. Transfers outside the European Economic Area
Some of these providers may process data outside the European Economic Area. In that case, the transfer only takes place with the safeguards provided for in the GDPR, such as a European Commission adequacy decision or standard contractual clauses.
11. Your rights
Under the GDPR, you have the right to:
- access your personal data;
- have it corrected if it is inaccurate or incomplete;
- have it erased;
- restrict its processing;
- receive the data you provided to us in a structured, commonly used format (portability);
- object to processing based on our legitimate interest;
- withdraw any consent you have given, without affecting the processing carried out before that.
To exercise any of these rights, write to geral@cespi.pt. We will reply within one month, which may be extended in the cases provided for in the GDPR.
You also have the right to lodge a complaint with the Portuguese data protection authority (CNPD) at www.cnpd.pt.
12. Automated decisions
We do not make decisions about people based solely on automated processing, and we do not carry out profiling.
13. How we protect data
The website always runs over an encrypted connection (HTTPS), and access to personal data is limited to those who need it for the purposes described in this policy.
14. Changes to this policy
We may update this policy, for example when the website starts processing data in a different way. The version in force is the one published on this page, with the date of the last update shown at the top.