Privacy
Policy

1. Owner and contact details

• Website owner and data controller: Hugo Alexandre Sampaio de Andrade Isidoro, operating as an individual under the 3Solutions brand.
• Portuguese tax identification number: 204250323.
• Address: Av. Acácias nº 52, 5º B, 2775-342 Parede, Portugal.
• Email: consultoria@3solutions.pt.
• Telephone: +351 918 880 051.

You can use these contact details for privacy enquiries and to exercise your rights.

2. Website information and terms of use

The site presents consulting, training, sales, management, human resources and marketing services. Published information is general in nature. The scope, price and terms of each service are set out in the relevant proposal or contract.

Using the site does not authorise unauthorised access to systems or data, the introduction of malicious code or the use of content in breach of third-party rights. Rights in text, images, brands and other materials belong to their respective owners. Reproduction or use requires the appropriate permission or legal basis.

External links provide access to services managed by third parties. Read their privacy information before providing them with data. These terms do not exclude liabilities or rights that cannot be waived under applicable law.

3. What data is processed

Depending on the channel used, data may include identification and contact details, company, professional role, service needs, message contents and documents provided by the individual. For applications, professional information in the CV and communications relating to the selection process are processed.

Browsing generates technical data, such as IP address, browser information, device details and logs needed to provide and protect the service. Measurement and advertising services may process identifiers and browsing information according to their configuration and privacy choices.

Only provide necessary data. Do not include passwords, banking details, health information or other particularly sensitive data in forms or in the assistant.

4. Purposes and legal bases

• Responding to service enquiries and preparing proposals: taking requested pre-contractual steps where the individual is a party to a possible contractual relationship. For contacts made by company representatives, professional communications rely on the legitimate interest in managing that relationship, subject to the relevant balancing assessment and the right to object.
• Providing services and managing clients: performing the contractual relationship where applicable and meeting associated legal obligations, including tax and accounting obligations.
• Managing applications: assessing an application in the process it relates to, using the legal basis appropriate to that selection relationship. Consideration for other processes requires information and a separate basis; a specific application is not automatically added to a general talent pool.
• Responding to assistant messages: providing initial guidance and managing the requested contact. Where contact details are provided, they are used to follow up that request.
• Security and operation: maintaining and protecting the site on the basis of applicable legitimate interests, while meeting specific requirements for device access and tracking technologies.
• Analytics and advertising: measuring site use and campaign conversions in accordance with required consent choices and tool configuration.

Requesting information, sending a CV or using the assistant does not by itself mean accepting advertising. Any promotional communication must have a valid basis and provide a simple way to object or unsubscribe.

Data needed to respond to or manage a request will be identified in the relevant channel. Without that data, it may not be possible to respond.

5. CVs and applications

Applications may be received by email or through channels made available on the site.

Applications for a specific vacancy: the CV is used only for the process the person applied to. It is not reused for other vacancies without an additional basis. At the end of the process, data that is no longer needed is deleted; only the minimum documentation necessary to meet obligations or defend claims may be retained with restricted access.

Unsolicited applications: these are considered for opportunities matching the profile, within the purpose communicated when received, for a maximum of six months from receipt. They are then deleted or an informed renewal is requested where appropriate. An application for a specific vacancy is likewise not kept for more than six months on that basis alone, without prejudice to justified legal obligations.

Sending an unsolicited CV does not authorise uses unrelated to selection or unlimited retention. Where inclusion in a talent pool is based on consent, that consent must be specific, informed and capable of being withdrawn.

If selection is carried out for another entity, this and the relevant recipients must be disclosed before the CV is shared. Information on this page does not authorise indiscriminate distribution of applications.

6. Website assistant

The assistant is an automated channel for initial guidance. It does not replace a proposal, a professional assessment or a human decision about purchasing services.

When you send a message, the site receives its contents and the address of the page it is sent from. If the system detects an email address or telephone number, the code is configured to forward the message and its context to consultoria@3solutions.pt to facilitate human contact.

Closing the window does not guarantee deletion: a message forwarded by email may remain in the mailbox, and technical logs may exist. This channel is not used to make automated decisions with legal effects on applicants or clients.

The technical integration with OpenAI is currently prevented by a configuration condition identified during the review. Putting it into operation requires a prior review of information about recipients, transfers and retention. This policy does not claim that the service has zero retention or that closing the browser deletes data on external servers.

7. Cookies, local storage and Google services

The site includes Google Tag Manager and Google Analytics 4 and Google Ads tags. These tools manage tags, analyse site use and measure conversions. The presence of tags does not mean all processing takes place on every visit: user choices and technical configuration also apply.

The panel preference is saved in browser local storage under the identifier ts_cookie_consent_v1. The code treats it as valid for a maximum of 180 days. This period applies to the preference, not to all provider data or cookies.

You can accept, reject optional categories or configure your choices in the site panel, and reopen it using the cookie control. Withdrawal affects future uses based on that consent; you can also delete earlier storage through your browser. Deleting cookies may require choosing your preferences again.

The site uses Google Consent Mode. A denied storage signal does not by itself prove that no technical communications with Google take place. Storage of identifiers must be distinguished from sending cookieless signals, depending on the service configuration.

The durations and functions of Google technologies depend on the applicable tag and configuration. See Google's information about cookies and its privacy policy.

8. Providers and recipients

Web hosting and email are provided through the supplier identified by the owner as Hosting Portugal. Google is involved in the configured measurement and advertising services. Other recipients may include authorities or bodies where there is a legal obligation, or professionals necessarily involved in providing the relevant service.

Messages sent to consultoria@3solutions.pt, including contacts forwarded by the assistant, are accessible to those managing that communication within the business. External services used voluntarily, such as WhatsApp, apply their own processing terms.

Identifying a provider does not by itself establish that all processing takes place in Portugal or within the European Economic Area.

9. International processing

Using technology providers may involve processing or access from other countries. Transfers outside the European Economic Area require a valid mechanism under the GDPR, such as an adequacy decision covering the recipient or appropriate contractual safeguards, with any necessary additional measures.

You can request information about recipients and the relevant safeguards at consultoria@3solutions.pt. Provider certification, a specific contract or exclusively European processing is not assumed without checking the terms actually agreed.

10. Retention

Applications follow the limits in section 5. For information requests and business contacts, the criterion is the time necessary to resolve the request and carry out justified follow-up. If this leads to a contractual relationship, retention applicable to that relationship and to legal obligations applies.

Tax, contractual or claims-related documents are kept for the legally applicable periods, with restricted access when they should no longer be used in day-to-day business. The existence of an email or backup does not justify indefinite retention for any purpose.

Assistant messages forwarded by email follow the criterion for the contacts they contain. The cookie panel preference is valid for a maximum of 180 days. Retention in external services must follow each service's configuration and terms.

11. Your rights

You can request access, rectification, erasure, restriction, objection and portability, where applicable, by writing to consultoria@3solutions.pt. You can withdraw consent without affecting earlier lawful processing and object to direct marketing.

Requests are generally answered within one month. Where the complexity or number of requests justifies it, this may be extended by a further two months, with notice of the extension within the first month. Additional identification information will only be requested proportionately where there are reasonable doubts.

You can complain to a supervisory authority, particularly in your place of habitual residence, place of work or the location of the alleged infringement: Portugal's CNPD or, where applicable, Spain's AEPD.

12. Security and updates

Data management must apply technical and organisational measures proportionate to the risk, with access limited to authorised people. No internet service can promise absolute security.

This information must be updated when processing or services change. Different language versions do not change the owner's country of establishment or remove applicable mandatory rights.