Privacy policy

This policy explains what personal data we process when you visit the TaxAtivo website, join the waiting list or apply as a certified accountant, why, for how long, and what rights you have.

Who processes your data

The controller is Pedro Porto, tax number (NIF) 256647976, with registered office at Praceta Fernando Valle, 1750-489 Lisboa.

For any privacy matter, write to info@taxativo.pt. We have not appointed a data protection officer, because the law does not require TaxAtivo to have one at this stage. This contact reaches the person who decides about your data.

What we process, why and on what legal basis

When you visit the website

• Data: the technical data of each request (IP address, browser, page requested, the page you came from and the time), which the hosting provider logs in order to serve the website, and technical errors, without the content of forms or cookies.
• Why: to run the website, keep it secure and fix errors.
• Legal basis: our legitimate interest in having a secure, working website (Article 6(1)(f) GDPR).
• For now we do not measure visits. If we do, we will ask for your consent first: see the cookie policy.

When you join the waiting list

• Data:
  • your email and the language in which you prefer to be contacted;
  • your referral code and, if you came through a referral, the code of the person who referred you;
  • how many people signed up with your code;
  • where your visit came from: the link or website you came from and your answer to “How did you hear about us?”;
  • the consents you gave: the text and version you accepted, the date and, where applicable, the date you withdrew them;
  • the question you choose to leave us (optional).
• Why:
  • to confirm your email: we send a link, and you only join the list after opening it;
  • to let you know when TaxAtivo opens and to send invitations in batches;
  • to order the list: each person who signs up with your code and confirms their email moves you up, up to 3 people;
  • to understand how people find us;
  • to prevent fake sign-ups and abuse.
• Legal basis:
  • your consent, for being on the list and receiving the notices and invitations (Article 6(1)(a) GDPR and Article 13-A of Law 41/2004). You can withdraw it at any time, through the link in every email or at info@taxativo.pt;
  • our legitimate interest, for measuring where sign-ups come from and preventing abuse (point (f)).
• Your question: we only use it to prepare public answers if you tick the box “You can use my question, rewritten without anything that identifies me”. The box is unticked by default. We rewrite the text, show it to you before publishing it, and you can withdraw your permission whenever you want. Legal basis: your consent (point (a)).
• Against abuse: we keep your IP address only as a hash, with a salt that changes regularly, to limit the number of sign-ups. We do not accept disposable email addresses.

When you apply as a certified accountant

• Data: name; email; registration number with the Order of Certified Accountants (OCC); the topics and languages in which you want to give consultations; where your visit came from; and anything else you write in the application.
• Why: to assess the application, confirm that you are registered with the OCC and talk to you about the next steps.
• Legal basis: steps taken at your request prior to entering into a contract (Article 6(1)(b) GDPR) and our legitimate interest in ensuring that only certified accountants give consultations (point (f)).
• Data that does not come from you: we confirm your registration in the OCC's public register.
• If your application goes ahead, you will receive a separate privacy notice for the accountant account before you create it.

Who we share data with

Only with providers who process it on our behalf, under a data processing agreement (Article 28 GDPR) and solely for the stated purpose:

We do not sell personal data and we do not use it for advertising. We only hand it over to an authority when the law requires it.

Transfers outside the EU

Vercel, Neon (owned by Databricks), Resend and Sentry are US companies and may access the data from there. In those cases, the transfer is based on the European Commission's standard contractual clauses (Implementing Decision (EU) 2021/914) and, where the provider is certified, also on the EU-US Data Privacy Framework (Implementing Decision (EU) 2023/1795). We have assessed each of these transfers and we limit what leaves the EU: logs do not include the content of forms, and emails only carry what is necessary. You can ask for a copy of these safeguards at info@taxativo.pt.

How long we keep data

Your rights

You can ask for access to your data, its rectification, erasure, restriction of processing and portability, and you can object to processing based on our legitimate interest. You can withdraw consent at any time, without affecting what was done before.

Write to info@taxativo.pt. We reply within one month, which is only extended (by up to two more months) for complex requests, and in that case we will let you know.

If you think we have not handled your data properly, you can lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt.

Automated decisions

We do not take decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you (Article 22 GDPR). The waiting list is ordered by confirmation date and by referrals. Applications are decided by a person.

What data is mandatory

On the waiting list, only your email: without it we cannot let you know. In the application, your name, email and OCC registration number: without them we cannot assess it. Everything else is optional.

Age

TaxAtivo is for people aged 18 and over.

Changes

Each version of this policy is dated. If we change something important, we will email everyone signed up before the change takes effect.