Privacy Policy

1. What personal data we collect

• Contact details: name, email, phone number, country of residence, nationality (if provided)

• Inquiry details: message content, preferred destination(s), timeline, and any information you share about your situation

• Service-related data (if you become a client): identification and immigration/residency information (e.g., passport details, civil status, address history), tax-related information (e.g., tax residency, income types), and other information necessary to provide the requested services

• Payment and billing data: invoicing details and payment status (we typically do not store full payment card details if a payment processor is used)

• Technical and usage data: IP address, device/browser type, pages visited, time spent, referral source, and similar analytics data

• Cookies and similar technologies

2. Legal bases for processing (GDPR/EEA)

Where GDPR applies, we rely on one or more of the following legal bases:

• Consent (e.g., newsletter signup; where required for certain data types)

• Contract (processing necessary to provide services or take steps at your request before entering a contract)

• Legitimate interests (e.g., responding to inquiries, improving operations, preventing fraud), balanced against your rights

• Legal obligation (e.g., accounting, regulatory obligations)

• Legal claims (processing necessary for establishment, exercise, or defence of legal claims)

• For special category data, we only process it where necessary and where a relevant condition applies (such as explicit consent, legal claims, or other lawful grounds depending on the context and applicable law).

3. How we share your data

We may share personal data with:

• Service providers acting on our instructions (e.g., website hosting, analytics, CRM, email tools, scheduling tools, cloud storage)

• Professional partners involved in delivering the service, where needed (e.g., accountants, notaries, lawyers or advisors in other jurisdictions, translators, immigration agents), either as independent controllers or processors depending on the situation

• Authorities and institutions when required or requested as part of your process (e.g., government bodies, consulates, banks), and only as necessary

• Legal/regulatory bodies when we must comply with law or protect rights

• We do not sell your personal data.

Our current service providers (data processors) include:

• Cloudflare, Inc. (United States) — website hosting and content delivery

• Calendly, LLC (United States) — appointment scheduling (loaded only with your consent)

Where data is transferred outside the EEA (including to the United States), we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission or the EU-US Data Privacy Framework, as applicable.

4. Data retention

We keep personal data only as long as necessary for the purposes described above, including:

• Leads/inquiries: typically, up to 24 months after last contact

• Clients: for the duration of the engagement and afterwards as required for legal, accounting, and compliance purposes (typically 10 years, depending on applicable rules)

• Marketing: until you opt out or we no longer consider communications relevant, subject to legal requirements

• Retention may be longer if needed for disputes, compliance, or legal obligations.

5. Your rights

Depending on your location (and particularly under GDPR), you may have the right to:

• access your personal data

• rectify inaccurate data

• request deletion (where applicable)

• restrict processing

• object to processing (including direct marketing)

• request portability of data

• withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, please contact us at info@magwind.eu. We will respond within 30 days of receiving your request. You also have the right to lodge a complaint with Portugal's supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt.

6. Cookies and third-party services

This Website uses the following cookies and third-party services:

• Strictly necessary: a cookie consent preference stored in your browser (localStorage) to remember your choice. No personal data is collected.

• Functional (with consent): Calendly scheduling widget. When you accept cookies, Calendly may set cookies and process your IP address to provide the scheduling service. Calendly Inc. is based in the United States and processes data under Standard Contractual Clauses. See Calendly's Privacy Policy.

We do not use analytics, tracking, or marketing cookies. You can manage your cookie preferences through the banner displayed on your first visit, or by clearing your browser's localStorage.

7. Security

We use reasonable technical and organisational measures designed to protect personal data, including access controls and secure storage. However, no system can be guaranteed 100% secure.

8. Children

Our Website and services are not intended for children, and we do not knowingly collect personal data from children without appropriate authorisation.

9. Third-party links

Our Website may contain links to third-party websites. We are not responsible for their privacy practices and encourage you to review their policies.

10. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date indicates when changes were made. Material changes may be communicated more prominently where appropriate.