RM Trainer respects your privacy and is committed to protecting your personal data. This policy explains how we collect, use, share, and protect your personal data, in accordance with the General Data Protection Regulation (GDPR – EU Regulation 2016/679) and applicable Portuguese legislation.

1. Data Controller
   The entity responsible for processing your data is RM Trainer, based at Rua do Alportel, no. 212, 8005-542 Faro, Portugal.
   Email: info@rm-trainer.pt
2. What personal data we collect
   We only collect the data strictly necessary to provide our services, namely: full name, address, phone number, email address, tax identification number (NIF), citizen card number (when legally required), and IBAN (only for payment purposes).
3. Purposes and legal basis for processing
   Personal data is processed for the following purposes:
   • Provision of training and personalized support services (legal basis: contract performance)
   • Issuance of invoices and fulfilment of legal obligations (legal basis: legal obligation)
   • Communication with the client within the scope of service provision (legal basis: legitimate interest)
   • Response to requests, complaints, or suggestions (legal basis: legitimate interest)
   • Sending marketing communications, if consent has been given (legal basis: consent)
4. How we collect your data
   Data may be collected directly from the client by phone, email, in person, through the website, or via contact forms.
5. Data sharing with third parties
   RM Trainer does not share your data with third parties, except when required by law, necessary for the performance of services, or with your explicit consent.
6. Data retention period
   Personal data will be retained only for as long as necessary for the purposes for which it was collected or as required by law. After this period, it will be securely deleted.
7. Rights of data subjects
   Under the GDPR, you have the right to access, rectify, update, erase, restrict, or object to the processing of your personal data, as well as the right to data portability. You can exercise these rights by emailing info@rm-trainer.pt. You also have the right to lodge a complaint with the Portuguese Data Protection Authority (www.cnpd.pt).
8. Security measures
   RM Trainer implements appropriate technical and organizational measures to protect your data against loss, unauthorized access, or misuse, including restricted access, secure systems, and data backups.
9. Data breaches
   In the event of a data breach that may compromise your rights or freedoms, RM Trainer will notify the supervisory authority and affected data subjects, as required by the GDPR.
10. Automated decision-making
    RM Trainer does not carry out automated decision-making that produces legal or significant effects on data subjects.
11. Changes to this privacy policy
    RM Trainer reserves the right to update this privacy policy whenever necessary. Any relevant changes will be communicated on the website or by email, when applicable. Additional information about cookies can be found at: https://rm-trainer.pt/politica-de-cookies-ue/ Information about alternative dispute resolution (ADR) is available at: https://rm-trainer.pt/en/litigation/