Privacy Policy

1. About Us

InfluentStrategy LDA is a company registered in Portugal, providing business consulting, data analytics, audit technology, software solutions, professional education and related services.

This Privacy Policy describes how we collect, use, store, share and protect personal data in connection with our business activities.

Legal entity: InfluentStrategy LDA
Country: Portugal

Contact email: [email protected]

For the activities where we determine the purposes and means of processing personal data, Influent Strategy LDA acts as the data controller. Where we process personal data on behalf of customers, we may act as a data processor, subject to the applicable contractual arrangements.

2. Scope of This Privacy Policy

This policy applies to personal data processed in connection with:

• Our corporate websites and online services.
• Our software products and technology platforms.
• 300Framework products and related services.
• Professional training, courses and masterclasses.
• Consulting and advisory engagements.
• Customer and prospective customer relationships.
• Marketing communications and professional events.
• Authorized integrations with third-party platforms.
• Other activities conducted by InfluentStrategy LDA.

Where a specific product or service requires additional privacy information, we may provide a supplementary privacy notice.

3. Personal Data We Collect

Depending on the nature of our relationship with an individual, we may process the following categories of personal data:

• Identification information: names, professional titles and organizational affiliations.
• Contact information: business email addresses, telephone numbers, postal addresses and professional profiles.
• Business information: employer, department, professional role, industry and business interests.
• Customer information: contracts, subscriptions, service requests, invoices and transaction records.
• Training information: course registrations, participation, learning progress and certifications.
• Technical information: IP addresses, browser information, device identifiers, application logs and website usage information.
• Communication information: business correspondence, inquiries, meeting records and communications through authorized platforms.

We aim to collect only the information reasonably necessary for specified, legitimate business purposes.

4. Sources of Personal Data

We may obtain personal data:

• Directly from individuals.
• Through website forms and registrations.
• During contractual and business relationships.
• Through training and event participation.
• From professional networking platforms.
• From publicly available business sources.
• Through authorized third-party integrations.
• From customers and business partners.

Where personal data is obtained indirectly, we provide the information required by applicable data protection law, subject to any applicable legal exceptions.

5. Purposes of Processing

We may process personal data for the following purposes:

• Providing products, software and services.
• Managing customer and supplier relationships.
• Administering contracts and subscriptions.
• Delivering training and professional education.
• Responding to inquiries and support requests.
• Managing professional contacts and communications.
• Conducting lawful business development activities.
• Sending marketing communications where permitted.
• Improving our products and services.
• Maintaining information security.
• Meeting accounting, tax and legal obligations.

6. Legal Basis for Processing

Under Article 6 of the GDPR, we process personal data only where an appropriate legal basis applies.

Depending on the processing activity, this may include:

• Contractual necessity: to provide requested products and services or take steps before entering into a contract.
• Legal obligations: to comply with applicable accounting, taxation and regulatory requirements.
• Legitimate interests: to manage business relationships, maintain security, improve services and conduct appropriate business development, where these interests are not overridden by individuals' rights and freedoms.
• Consent: where individuals have provided valid consent for a specific purpose, including certain marketing activities or optional technologies.

Where consent is the legal basis, it may be withdrawn at any time, without affecting processing carried out lawfully before withdrawal.

7. Professional Networking and Third-Party APIs

Our business activities may involve professional networking services and third-party technology platforms, including LinkedIn.

Where permitted by the relevant platform and applicable law, we may process professional contact information, communications and other data made available through authorized integrations.

Such processing may support professional relationship management, communication analysis, internal reporting and other legitimate business purposes.

Where an integration requires user authorization, access will be subject to the relevant authorization process.

We apply data minimization principles and seek to limit processing to information necessary for the specified purpose.

Authorization by a platform user does not automatically establish a lawful basis for processing the personal data of other individuals.

8. Marketing Communications

We may contact individuals regarding our products, services, training, professional events and related business activities where permitted by applicable law.

Recipients may unsubscribe from marketing emails using the unsubscribe mechanism provided in those communications or by contacting us directly.

We respect applicable requirements concerning consent, electronic marketing and objections to direct marketing.

9. Data Sharing

We may share personal data with appropriate third parties where necessary for legitimate business operations, including:

• Hosting and IT service providers.
• Payment and financial service providers.
• Customer relationship management providers.
• Email and communication service providers.
• Professional advisers and auditors.
• Business partners involved in service delivery.
• Public authorities where legally required.

Where third parties process personal data on our behalf, we require appropriate contractual and security safeguards.

We do not sell personal data.

10. International Data Transfers

Our business activities and service providers may involve the processing of personal data outside the European Economic Area.

Where international transfers take place, we apply appropriate safeguards as required by the GDPR.

Depending on the circumstances, these may include adequacy decisions, Standard Contractual Clauses or other lawful transfer mechanisms.

Information about applicable transfer safeguards may be requested using the contact details below.

11. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including applicable legal, contractual and regulatory obligations.

Retention periods are determined according to:

• The nature of the personal data.
• The purpose for which it is processed.
• Applicable statutory retention requirements.
• Contractual obligations.
• Relevant limitation periods.
• Security and operational requirements.

Where personal data is no longer required, we delete or anonymize it in accordance with our applicable retention procedures.

12. Information Security

We implement appropriate technical and organizational measures designed to protect personal data against unauthorized access, accidental loss, alteration, disclosure or destruction.

These measures are determined according to the nature of the data and the risks associated with processing.

They may include access restrictions, authentication, secure communications, controlled data storage, backup procedures and security monitoring.

13. Cookies and Website Analytics

Our websites may use cookies and similar technologies for essential website functionality, security, performance measurement and analytics.

Where legally required, non-essential cookies and similar technologies will be used only after obtaining the appropriate consent.

Users may manage cookie preferences through available website controls or browser settings.

Additional information about specific cookies may be provided through a separate cookie notice.

14. Your Rights Under GDPR

Subject to applicable legal conditions, individuals may have the right to:

• Access their personal data.
• Request correction of inaccurate data.
• Request erasure of personal data.
• Restrict certain processing activities.
• Object to processing based on legitimate interests.
• Object to direct marketing.
• Request data portability where applicable.
• Withdraw consent where consent is relied upon.
• Challenge qualifying automated decisions.

Requests may be submitted using the contact details below. We will respond within the timeframes required by applicable law.

Individuals may also lodge a complaint with the Portuguese data protection authority, Comissão Nacional de Proteção de Dados (CNPD), or another competent supervisory authority.

CNPD website: www.cnpd.pt

15. Automated Decision-Making

Where we use automated processing or analytical technologies, we assess the applicable data protection requirements.

If processing involves solely automated decisions producing legal or similarly significant effects on individuals, we will provide the additional information and safeguards required by applicable law.

16. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our business activities, technology, legal obligations or data processing practices.

The date at the top of this page indicates the most recent revision.

17. Contact Information

For questions about this Privacy Policy or requests concerning personal data, please contact: