Privacy Policy

1. INTRODUCTION AND SCOPE

CAZOS – Sociedade de Advogados, RL ("CAZOS") is committed to protecting the privacy and personal data of all who interact with us, including clients, prospective clients, suppliers, partners, and website visitors. This Privacy Policy describes how we collect, use, retain, share, and protect personal data, in compliance with applicable legislation in Angola and, when relevant, with the European Union General Data Protection Regulation (GDPR – Regulation (EU) 2016/679). This policy applies to the processing of personal data by CAZOS, regardless of medium (digital, physical, or other), and complements any specific terms agreed in legal service provision contracts. By using the website or contacting CAZOS, you confirm that you have read this Policy.

2. DATA CONTROLLER

3. PERSONAL DATA COLLECTED

3.1. Data categories

Depending on the nature of the relationship, CAZOS may process, among others, the following data:

3.2. Collection sources

Data may be collected: (i) directly from the data subject, (ii) through entities with legitimacy to provide them in the mandate context (e.g., corporate clients, authorities, registries), (iii) by consultation of legally accessible public sources, and (iv) automatically through the website (cookies and technical logs).

4. PROCESSING PURPOSES

CAZOS processes personal data, in particular, for the following purposes:

5. LEGAL GROUNDS

Processing of personal data by CAZOS is based, as applicable, on:

6. DATA RECIPIENTS

6.1. Internal access

Access is limited to strictly necessary by lawyers, jurists, and support staff, subject to confidentiality duties and professional secrecy regime applicable.

6.2. Third parties

CAZOS may share data, as necessary, with:

6.3. Confidentiality and subcontracting obligations

When applicable, third parties are bound by confidentiality and security duties and to process data only according to legitimate instructions and for purposes compatible with the service provided.

7. INTERNATIONAL TRANSFERS

When necessary (e.g., transnational mandates, correspondents outside Angola, or technology providers), international data transfers may occur. In such situations, CAZOS adopts adequate safeguards required by applicable legislation and, when relevant, by GDPR, including appropriate contractual clauses and technical and organizational measures proportional to the risk. Additional information may be requested through privacidade@cazosadvogados.com.

8. DATA RETENTION

CAZOS retains personal data only for the period necessary for the purposes that motivated collection and for additional time required by legal, deontological, accounting/tax obligations, or necessity of rights defense.

Indicative criteria (may vary by case):

After deadlines, data are securely deleted or anonymized, unless retention is necessary by legal obligation or rights defense.

9. DATA SUBJECTS' RIGHTS

Under applicable legislation, the data subject may exercise, as the case may be, rights of access, rectification, limitation, opposition, and erasure, as well as right to portability when legally provided and technically applicable. When processing is based on consent, it may be withdrawn at any time, without affecting lawfulness of previously performed processing.

For exercise of rights: privacidade@cazosadvogados.com.

Response deadline: as a rule, up to 30 days, which may be extended in duly justified cases.

For data subject protection, CAZOS may request reasonable proof of identity before proceeding with the request.

10. SECURITY, CONFIDENTIALITY AND PROFESSIONAL SECRECY

CAZOS adopts appropriate technical and organizational measures to protect personal data against loss, destruction, alteration, disclosure, or unauthorized access, including profile-based access controls, encryption when applicable, backups, recording of relevant activities, and system update and security practices. In addition to data protection, information entrusted to CAZOS is covered by professional secrecy regime and confidentiality duties proper to legal practice.

In case of security incident with relevant impact, CAZOS will act according to applicable legal duties, including, when required, communications to competent authorities and affected data subjects.

11. COOKIES AND SIMILAR TECHNOLOGIES

The website may use cookies and similar technologies to ensure essential functionalities, improve performance, and analyze usage. For details on cookie types and preference management, see our Cookie Policy.

12. MINORS

CAZOS's services and website are not intended, as a rule, for minors under 18 years old. CAZOS does not intentionally collect data from minors without adequate legitimacy. If you have reason to believe that a minor has provided us with data without authorization, contact us.

13. UPDATES

This Policy may be updated to reflect legal, technical, or operational changes. The current version will be available on the website with indication of last update date. In materially relevant changes, we may publish additional notice on the website.

14. COMPLAINTS AND SUPERVISORY AUTHORITY

If you consider that processing of your data violates applicable legislation, you may file complaint with the competent authority in Angola:

When applicable (e.g., in processing covered by GDPR), the data subject may also file complaint with a supervisory authority of a European Union Member State.