1. About this website
This website presents the professional activity of Leonel Gomes Cá, a lawyer and founding partner of Native Legal, together with his projects, public engagements and social responsibility initiatives.
In relation to personal data submitted through the professional contact channels identified on this website, the data controller is:
Native Gsr Legal, Sociedade de Advogados, SP, Lda.
Hereinafter referred to as “Native Legal”
Professional contact address: Avenida da Liberdade, No. 224, 2nd Floor, 1250-148 Lisbon, Portugal
Email: geral@nativelegal.pt
Native Legal has not appointed a Data Protection Officer, as it is not legally required to do so. Any questions concerning privacy or data protection may be submitted using the contact details above.
2. Personal data processed
The following personal data may be processed through this website:
Browsing data
When you visit the website, certain technical data may be collected automatically, including:
- IP address;
- date and time of access;
- device and browser type;
- pages visited;
- requests submitted to the server;
- technical data required for the operation and security of the website.
Data provided by the user
When you contact Leonel Gomes Cá or Native Legal using the contact details available on the website, the following data may be processed:
- name;
- email address;
- telephone number;
- company or organisation;
- subject and content of the communication;
- any other information you choose to provide.
You should not send confidential documents, special categories of personal data or detailed information concerning legal matters through an initial unsecured communication.
When you use the contact form, the information entered — area of interest, name, email address, telephone number if provided, message and selected language — will be transmitted over HTTPS to the hosting server. After validation, the server will send an email notification through authenticated SMTP over an encrypted connection to geral@leonelgomesca.pt. The sender’s email address will be used as the reply-to address for a direct response. The form does not use a database or any external CRM or marketing service, but the submitted information may be stored in the email inbox and in the technical systems of the hosting and email service provider.
To prevent abuse, the form uses a hidden automated-submission detection field (honeypot) and IP-based rate limiting. Derived IP identifiers and submission timestamps are temporarily stored in private technical files at the hosting provider with deletion scheduled after 48 hours at the next automatic clean-up; if no further form requests arrive, these files may remain longer until the next clean-up or manual removal. Message contents and passwords are not stored in these files. Delivery to the mailbox may also depend on the email provider’s transport and filtering systems.
3. Purposes and legal grounds
Personal data may be processed for the following purposes:
- operating the website and ensuring its stability and security, on the basis of legitimate interests;
- responding to enquiries or requests for information, on the basis of pre-contractual steps or the legitimate interest in responding to communications received;
- complying with legal and professional obligations applicable to legal practice;
- preventing misuse of the website and establishing, exercising or defending legal claims.
Sending a communication does not, in itself, establish a lawyer-client relationship or guarantee that any matter or engagement will be accepted.
4. Disclosure of personal data
Where necessary, personal data may be disclosed to:
- technology and hosting service providers;
- suppliers responsible for the maintenance and security of the website;
- advisers and other professionals subject to confidentiality obligations;
- professional partners, where justified by the nature of the request and supported by an appropriate legal basis;
- courts, public authorities or regulatory bodies, where required by law.
Native Legal does not sell personal data or make it available to third parties for their own commercial purposes.
5. Hosting and external services
This website is available at leonelgomesca.pt and uses a web-hosting service contracted through dominios.pt and managed using cPanel.
Providing the hosting service and protecting the server may involve the processing of technical data such as IP addresses, access dates and times, and requests made to the website. The retention of these logs and the technology services used depend on the configuration and applicable terms of the contracted hosting service.
The website may also load fonts through Google Fonts. Where those resources are loaded directly from Google’s servers, technical data such as the user’s IP address and browser information may be transmitted.
Where possible, these services will be configured to minimise the transmission of personal data.
6. International data transfers
The use of external services, including Google Fonts, may involve the processing of personal data outside the European Economic Area.
Where applicable, these transfers will be based on an adequacy decision, Standard Contractual Clauses approved by the European Commission or another transfer mechanism recognised under the General Data Protection Regulation.
7. Data retention
Personal data will only be retained for as long as necessary for the purposes for which it was collected.
Initial communications may be retained for the period required to review and respond to the relevant enquiry. If the communication gives rise to a professional relationship, the data may subsequently be processed for the periods set out in Native Legal’s general privacy policy and under the laws and professional rules applicable to legal practice.
Technical hosting logs are retained in accordance with the periods and rules established by the relevant service providers.
Personal data may be retained for longer periods where necessary to comply with a legal obligation or to establish, exercise or defend legal claims.
8. Security and confidentiality
Appropriate technical and organisational measures are adopted to protect personal data against loss, unauthorised access, alteration, disclosure or destruction.
Despite these measures, no transmission over the internet is entirely free from risk. Confidential documents or sensitive information should therefore not be sent through channels that have not previously been agreed as secure.
9. Data subject rights
Under applicable data protection law, you may request:
- access to your personal data;
- rectification of inaccurate or incomplete data;
- erasure of your data, where applicable;
- restriction of processing;
- data portability;
- objection to processing;
- withdrawal of consent, where processing is based on consent.
You may exercise your rights by contacting geral@nativelegal.pt.
It may be necessary to verify the requester’s identity before responding to a request.
You also have the right to lodge a complaint with the Portuguese Data Protection Authority — Comissão Nacional de Proteção de Dados — through www.cnpd.pt.
10. External links
The website may contain links to Native Legal’s website, social media platforms, publications or third-party websites.
The use of those pages is subject to the privacy policies of the relevant entities. Native Legal is not responsible for processing independently carried out by third parties.
11. Changes to this policy
This Privacy Policy may be updated to reflect legal, technical or functional changes.
The current version will remain available on this website together with the date of its latest update.