Evolon Consulting

1. Scope of Application

This Privacy Policy applies to the processing of personal data carried out by Evolon Consulting in the course of its consultancy activity, including services in the areas of:

  • Strategic and management consultancy
  • Healthcare consultancy and optimization of healthcare units
  • Professional training and capacity building
  • Innovation, funding and investment projects
  • Business and operational support services

This policy applies to Clients, Partners, Employees, Candidates, Suppliers and any other data subjects with whom Evolon Consulting engages.

2. Data Controller

The entity responsible for processing personal data is:
Evolon Consulting
Email: geral@evolonconsulting.com (mailto:geral@evolonconsulting.com)

3. Data Processing Principles

Evolon Consulting undertakes to process personal data in accordance with the General Data Protection Regulation (GDPR), ensuring:

  • Lawfulness, fairness and transparency
  • Purpose limitation
  • Data minimization
  • Accuracy and updating
  • Storage limitation
  • Integrity and confidentiality

4. Personal Data Collected

4.1 Clients and Leads

  • Name and contact details
  • Email and telephone
  • Company and role
  • Tax identification number (NIF) and billing data
  • Bank details (where applicable)

4.2 Employees and Candidates

  • Identification and contact data
  • Qualifications and professional experience
  • Contractual and salary data
  • Data necessary for legal compliance

4.3 Partners and Suppliers

  • Identification and contact
  • Tax and bank data
  • Contractual information

5. Purposes of Processing

Evolon Consulting processes personal data for:

  • Performance of consultancy contracts
  • Project and client management
  • Compliance with legal obligations
  • Recruitment processes
  • Training activities
  • Institutional communication and marketing (when authorized)
  • Financial management and billing

Processing is based on:

  • Performance of a contract
  • Compliance with legal obligations
  • Legitimate interest
  • Consent of the data subject (where applicable)

7. Data Retention

Personal data is retained:

  • For the period necessary for the purpose of the processing
  • For as long as applicable legal obligations exist
  • Until consent is withdrawn (where applicable)

After this period, the data will be deleted or anonymized.

8. Data Sharing

Evolon Consulting may share data with:

  • Service providers (IT, cloud, accounting)
  • External consultants
  • Financial institutions and insurers
  • Public authorities (where legally required)

All third parties are subject to confidentiality and data protection obligations.

9. International Transfers

Data will not be transferred outside the European Union without adequate safeguards, such as:

  • Standard contractual clauses
  • Adequacy decisions

10. Rights of Data Subjects

Data subjects may exercise the following rights:

  • Access
  • Rectification
  • Erasure ("right to be forgotten")
  • Restriction of processing
  • Objection
  • Data portability
  • Withdrawal of consent

Requests should be sent to: geral@evolonconsulting.com (mailto:geral@evolonconsulting.com)

11. Complaints

The data subject may lodge a complaint with the
National Data Protection Commission (Comissão Nacional de Proteção de Dados).

12. Data Security

Evolon Consulting implements technical and organizational measures to:

  • Prevent unauthorized access
  • Ensure integrity and confidentiality
  • Monitor risks and incidents

13. Changes to the Policy

Evolon Consulting reserves the right to update this Privacy Policy, with any changes being communicated through appropriate means.