Legal & Compliance

Report InfoSec Weakness, Event, Incident and Personal Data Breaches

• If you suspect an Information Security incident, including Personal data breach, immediately report it through: 

  • Service Desk: Security & Data Privacy > Information Security Weakness / Event / Incident, or 

  • ✉️ pt.it.security.incident@devoteam.com

Legal 

Employees can seek assistance with:

• Reviewing and drafting contracts and agreements (e.g., client contracts, supplier/service providers agreements, NDAs).

• Understanding applicable legal requirements.

• Resolving disputes or managing legal risks.

• Addressing intellectual property (IP) rights.

• Navigating cross-border transactions or operations.

• Handling claims, notifications, or legal notices received by Devoteam Portugal.

• Any other legal queries or issues relevant to business operations.

To ensure a prompt response, include:

• A clear subject line identifying the nature of the request.

• Relevant background details or context.

• Any specific deadlines or required response times.

Contact:

• Rute Reizinho, Compliance Director & Data Protection Officer (DPO)

• Legal Advisor

• ✉️ pt.legal@devoteam.com / Service Desk > Service Provider & Contingent Worker

Compliance

Employees can seek assistance with:

• Third-party compliance assessments, including ISO 9001, ISO 27001, GDPR, and Cybersecurity.

• Understanding and adhering to corporate policies, standards, and IMS.

• Guidance on legal and regulatory requirements related to compliance.

• Support with certifications and audits (internal and external).

• Addressing data protection and information security issues.

• Conducting risk analysis and identifying improvement opportunities.

• Reporting and managing compliance-related concerns.

• Any other compliance-related queries or support needs.

Contact:

• Rute Reizinho, Compliance Director & Data Protection Officer (DPO)

• Carlos Gamito, Chief Information & Innovation Officer

• ✉️ pt.compliance@devoteam.com 

GDPR

For GDPR matters, employees can seek guidance on:

• Handling data subject rights requests (e.g., access, rectification, erasure).

• Conducting Data Privacy Impact Assessments (DPIAs) for new projects or processes.

• Managing and reporting data breaches in compliance with GDPR requirements.

• Drafting, reviewing, and monitoring third-party data processing agreements.

• Managing consent and ensuring lawful processing of personal data.

• Navigating cross-border data transfers and ensuring compliance with international regulations.

• Maintaining and updating records of processing activities.

• Conducting GDPR compliance assessments for third parties.

• Receiving general advice on GDPR compliance and best practices.

Contact:

• Rute Reizinho, Compliance Director & Data Protection Officer (DPO)

• ✉️ pt.compliance@devoteam.com 

• Service Desk: Security & Data Privacy > GDPR Clarification

 Whistleblowing Channel

• BOLDINT, S.A.  Whistleblowing Channel

• EDOTOUTFIT, LDA.  Whistleblowing Channel

IMS, Industry Standards & Certifications

For inquiries or support related to our IMS, industry standards compliance and Devoteam Portugal certifications, please reach out to the IMS Management Team using the contact details below. 

Contact:

• IMS Management Team

• ✉️ pt.compliance@devoteam.com 

To report a finding regarding Devoteam Portugal IMS performance, please contact the IMS Management Team at ✉️ pt.compliance+complaints@devoteam.com 

Innovation Department

• Governance and steering body for all Innovation activities, including R&D, where Devoteam Portugal participates.

• Main contact point for all agencies and entities involved in Innovation / R&D incentives (e.g. ANI).

• Please involve the Innovation Department from the start:

  • In all business opportunities and projects that have potential to be (or are already) included in national or international funding / incentive programmes processes. This can include:

    • • Consortiums where DVT PT will be / is a leader, member or supplier.

      • Contacts and partnerships with entities / clients towards future joint participation.

• Client with their own SIFIDE submissions, where DVT PT will be / is a supplier.

• Before starting any Master's/Ph.D. partnership or project involving Devoteam Portugal, it must first be validated by both Legal & Compliance Team, for Legal commitments (contracts, declarations, IP ownership, potential revenues) and Innovation Team, for Project feasibility, technological aspects, and collaboration strategy.

Contact:

• Innovation Team: pt.innov@devoteam.com  

Occupational Safety and Health (OSH)

For Occupational Safety and Health (OSH) matters, employees can reach out to the designated contacts for guidance and support on workplace safety, health regulations, and related concerns to ensure a safe working environment.

Contact:

• Sara Marques, Safety & Compliance Specialist

• ✉️ pt.osh@devoteam.com