Privacy Policy

1. Data Controller

Victrix Legion Lda is the data controller responsible for your personal data. For any queries or to exercise your rights, contact us at info@victrixlegionlda.com or Av. Eng. Arantes de Oliveira, R/C ESQ, 1900-221 Lisbon, Portugal.

2. Personal Data We Collect

We collect the following categories of personal data:

• Full name
• Email address
• Phone number
• Curriculum vitae (CV)

3. Legal Bases for Processing

We process your personal data on the following legal bases:

• Legitimate interest — to respond to general enquiries and contacts.
• Pre-contractual measures — to process job applications.

4. Retention Periods

We retain your personal data for the following periods:

• General contact form data: 12 months.
• CVs and application data: 24 months.

5. Data Sharing

Your personal data may be shared with:

• Internal HR and management team.
• IT service providers supporting our operations.
• Competent authorities when required by law.

6. Your Rights

Under the GDPR, you have the right to:

• Access your personal data.
• Rectification of inaccurate data.
• Erasure of your data ("right to be forgotten").
• Restriction of processing.
• Data portability.
• Object to processing.
• Withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at info@victrixlegionlda.com.

7. Right to Lodge a Complaint

You have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD): www.cnpd.pt | +351 213 928 400.

8. International Data Transfers

Some personal data may be transferred outside the European Economic Area (EEA). This occurs because our hosting infrastructure is based in the United States, and because Victrix Legion works with NATO-affiliated organizations that may operate outside the EEA. Such transfers are carried out with appropriate safeguards in place, in compliance with applicable data protection legislation, including Standard Contractual Clauses where required.