Privacy Policy

GoFact, Tecnologias de Informação, S.A., (the Provider) is the entity responsible for the collection and processing of personal data, and may, within the scope of its activity, use subcontracted entities to pursue the purposes indicated here.

The Provider primarily collects data relating to companies, however, because companies are necessarily represented by natural persons, it collects personal data of these holders, only to the strict extent of what is necessary for the pursuit of the purposes indicated below, the Provider assuming that the personal data was provided by the data subject or that they have given authorisation for this purpose and presumes that the data is true and kept up to date by the data subject.

The following data is collected directly on the Site:

- Name
- Address
- Tax Identification Number
- Email
- Phone contact

On an optional basis, for the subscription of specific and optional features within the Site, which by their nature and legal imperative require additional documents (e.g.: Bank of Portugal requirements for prevention against fraud and money laundering; when activating collection tools; communication of invoicing to the Tax Authority via Webservice, among others), the user may submit additional identification documents, such as:

- Citizen Card
- Proof of address
- Declaration of start of activity
- User credentials on the Tax Authority portal
- Bank account identification number
- Bank statements

The user is not obliged to provide this data. In return, features that require it by legal imperative cannot be subscribed to. In each additional feature activation process that involves the communication of data to third parties, the user will be informed about which data will be used and which entity will process it.

The Provider guarantees that the User's personal data is collected with the strict purpose of good interaction with the Service and the Provider, namely for the purposes of commercial management between the User, the commercial activity they represent, and the Provider, as well as for the purposes of using the management features and services included in the Service. The Provider collects data about partners, clients and suppliers, as well as contacts of collaborators in the commercial activity represented by the User.

The User expressly authorises the Provider to send information about products and services that may be of interest to them using their personal data for the purposes of direct marketing through any communication channel, namely through the use of email, telephone, SMS, MMS or other forms of automatic calls.

The Provider does not share User data with third parties, except with the User's consent, at the time such sharing occurs, or by convention of a feature subscribed by the User.

The User authorises the Provider to provide their data and the data of their activity to third parties, when strictly necessary for the activation, contracting, sale of goods or provision of services provided by third parties that are incorporated in the portal / mediated by the Site.

The Provider will provide the User's account data to the competent authorities where required by Law or the Provider is notified or judicially ordered to do so. The Provider may also communicate their data to third parties, in the event of non-compliance with the TCS, in the exercise of the Provider's rights in civil, administrative or criminal liability.

At any time the user may update or change their personal data, and may exercise their rights of access, rectification, deletion, limitation and/or portability through written communication, accompanied by a document proving their identity and/or the data to be rectified, if applicable, which must be sent to the email address:

The Provider is the entity responsible for the collection and processing of personal data, deciding the categories of data collected, the processing thereof and the purposes for which they are used. The Provider integrates in its organisational structure a Data Protection Officer (DPO) who will be available to provide any information relating to the processing of their personal data by the Controller, including the list of our subcontractors in matters of personal data protection.

It is possible to contact the DPO by sending an email to .

The Provider stores your personal data in a data centre located in national territory and in data centres located in European Union territory.

This data and respective infrastructure is protected and maintained in accordance with high security standards and in order to comply with applicable privacy laws, being periodically subjected to testing and auditing by external entities.

The storage period of data varies according to the purpose for which the information is processed, and there may be regulations requiring storage for a minimum period of time.

In accordance with the GDPR, data subjects, in this case the Site Users, are granted the following rights:

- Right to rectification of their personal data;
- Right to access their personal data;
- Right to portability of their personal data;
- Right to erasure.

The User has the right to request the Provider, at any time, access to their personal data, its update or deletion, under the terms of the Regulation. They also have the right to request the limitation of processing of their personal data, in accordance with the provisions of Article 18 of the Regulation, as well as the right to obtain their personal data in a structured, commonly used and machine-readable format, in the cases provided for in Article 20 of the Regulation.

Users also have the right, if their requests regarding personal data are not satisfied, to file a complaint with the National Data Protection Commission.

The Site may contain links to other Internet sites. The Provider is not responsible for the privacy policies and/or practices of other Internet sites or services.

The Site contains cookies to improve the navigation of Users. The cookies used by the Site observe the principles of anonymity and confidentiality and have the sole purpose of recognising the User, not being used for the collection of personal data.

Our cookies may be session cookies (temporary cookies that identify and track users on our websites, applications or services and that are deleted when you close your browser or leave your session in the application or service) or persistent cookies (cookies that allow our websites, applications or services to "remember" who you are, as well as your preferences on our websites, applications or services, and that remain on your computer or device after you close your browser or leave your application in the application or service).

We use the following different types of cookies:

Strictly necessary cookies: For the correct operation of applications or services.

Performance and analytics technology cookies: To collect information about how our visitors and users use our applications and services. These cookies do not collect information that identifies a visitor or user. We only use these cookies to improve the functioning of the Service.

Functionality cookies: allow our applications and services to remember your choices (such as preferred browsing options) and provide enhanced, more personalised features. They may also be used to provide the services you have requested. The information collected by these cookies may be anonymised; on the other hand, these cookies cannot track your browsing activity on other websites.

IP address and traffic data: We maintain a record of traffic data automatically recorded by our servers, such as your Internet Protocol (IP) address, device and browser information. We also collect some site, application and service statistics, such as access rates, page visits and page views. We are not able to identify any person from traffic data or site statistics.

Third-party cookies - Google Analytics: Google Analytics uses "cookies" to help the website analyse how users use websites, applications or services. The information generated by the cookie about your use of websites, applications or services (including your IP address) will be transmitted to Google, in the United States of America, where it is stored on servers. Google will use this information for the purpose of evaluating our use of websites, applications or services, compiling reports on website activity for website operators and for providing other services related to website activity and internet use. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on behalf of Google. Your IP address will not be associated with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser or application. However, it is important to note that if you do so, you may be unable to use all the features of this website. By using our websites, applications or services you are giving your consent to the processing of data about you by Google in the manner and for the purposes set out above. For more information, see "How Google uses data when you use our partners' sites or apps" (available at www.google.com/policies/privacy/partners/, or any other URL that Google may from time to time make available).

How to disable cookies: If you wish, you can configure your browser or our website, application or service to restrict cookies or block all cookies. However, if you disable cookies, your ability to use certain parts of our website, applications or services may be affected. For more information about cookies and instructions on how to adjust your browser settings to accept, delete or reject cookies, see allaboutcookies.org

The Provider reserves the right to change these clauses relating to the service privacy policy at any time. The Provider will notify the User of changes by email/notification on the Site.

These conditions aim to guarantee the User a safe and effective use of the service provided by the Provider.

Any doubts and questions regarding this privacy policy can be sent to .