Part I
User Agreement and Privacy Policy
Last updated: July 21, 2026
1. Introduction
This User Agreement and Privacy Policy ("Agreement") describes how GTFI INSTITUTO, UNIPESSOAL LDA ("we," "us," or "our") collects, uses, processes, and protects your personal data when you use our websites, mtfinstitute.com, gtf.pt and edu.gtf.pt ("Services").
By accessing our websites, communicating with us, or using our Services, you acknowledge that you have read and understood this Agreement. Where processing relies on your consent, we request that consent separately and you may withdraw it at any time.
2. Data Controller Information
The entity responsible for the processing of your personal data (the "Data Controller") is:
- Company Name
- GTFI INSTITUTO, UNIPESSOAL LDA
- Tax Identification Number (NIF)
- 517603322
- Head Office Address
- Avenida Duque de Loulé, Nº 12 - 6º, 1050-093 Lisboa, Portugal
- Email for data-related requests
- welcome@gtf.pt
3. Scope of this Agreement
This policy applies to all personal data collected by us through our Services, including but not limited to when you:
- Browse our websites (mtfinstitute.com, gtf.pt and edu.gtf.pt).
- Register for an account or enroll in our educational courses.
- Participate in educational activities, submit assignments, or undergo assessments.
- Contact us via email, contact forms, or other communication channels.
- Subscribe to our newsletters or promotional materials.
4. Personal Data We Collect
We may collect and process the following categories of personal data:
- Identity Data: Full name, username, date of birth, or similar identifier.
- Educational Data: Course progress, attendance records, grades, submitted assignments, and certification details.
- Contact Data: Billing address, delivery address, email address, and telephone numbers.
- Financial Data: Payment card details and bank account information for service transactions.
- Transaction Data: Details about payments to and from you and other details of products and services you have purchased from us.
- Technical Data: Internet protocol (IP) address, login data, browser type and version, time zone setting and location, operating system, and other technology on the devices you use to access our websites.
- Usage Data: Information about how you interact with our website, products, and services, collected via analytics tools after any required consent.
- Marketing and Communications Data: Your preferences in receiving marketing from us and our third parties.
5. Legal Basis for Processing Your Data
We process your personal data based on the following legal grounds established by the General Data Protection Regulation (GDPR) and Portuguese Law (Law 58/2019):
- Consent: Where you have given explicit consent, for example when subscribing to a newsletter or accepting non-essential analytics cookies such as Google Analytics and Yandex Metrica. You can withdraw this at any time.
- Contractual Necessity: Where processing is necessary for the performance of a contract, for example providing educational services and evaluating academic progress.
- Legal Obligation: Where processing is necessary for compliance with a legal obligation, for example tax, accounting, and mandatory educational reporting.
- Legitimate Interests: Where processing is necessary for our legitimate interests, for example securing our IT systems, provided they are not overridden by your fundamental rights.
6. How We Use Your Personal Data
We use your personal data for the following purposes:
- To provide and manage our educational Services, including user registration and account management.
- To track academic progress, issue certificates, and maintain student records.
- To process and deliver your orders and manage payments.
- To communicate with you and respond to your inquiries.
- To analyze website traffic and user behavior via third-party tools, after any required consent, to improve our platform.
- For internal administrative purposes, troubleshooting, and security.
7. Data Sharing and International Transfers
To provide our Services, we may share data with trusted third parties. Some parties may process data outside the European Economic Area (EEA), which can involve international transfers:
- Google Analytics: Used for website traffic analysis after consent. Transfers are handled under applicable safeguards described in Google's data protection terms, including the EU-US Data Privacy Framework or Standard Contractual Clauses where applicable.
- Yandex Metrica and Webvisor: Used for website traffic and interaction analysis after consent. Processing and any international transfers are governed by Yandex's applicable privacy and data-processing terms.
- Service Providers: IT support, payment processors, and hosting services required to operate our educational platform.
8. Data Retention
We will only retain your personal data for as long as necessary to fulfill the purposes for which it was collected. Educational records may be retained for longer periods to allow you to verify your qualifications in the future. Financial data is kept as required by Portuguese tax law, generally for 10 years.
9. Your Rights Under GDPR
Under the GDPR, you have the following rights regarding your personal data:
- The right to be informed: To know how we use your information.
- The right of access: To obtain a copy of your personal data.
- The right to rectification: To correct inaccurate or incomplete data.
- The right to erasure: To request deletion where there is no compelling reason for us to retain the data.
- The right to restrict processing: To restrict further use of your information in applicable circumstances.
- The right to data portability: To reuse your personal data across different services where this right applies.
- The right to object: To object to certain processing, including applicable analytics and marketing activities.
- Rights concerning automated decision-making: Not to be subject to qualifying decisions based solely on automated processing.
10. How to Exercise Your Rights
To exercise any of your rights, or to submit a complaint, please contact us at welcome@gtf.pt. We will respond within one month, subject to any lawful extension or request for information needed to verify your identity.
11. Data Security
We implement technical and organizational security measures designed to prevent unauthorized access, loss, or alteration of personal and educational data.
12. Cookies
Our websites use cookies to distinguish you from other users, including optional third-party analytics cookies. For detailed information, please see the Cookie Policy below or open our concise Privacy & Cookies notice.
13. Governing Law and Jurisdiction
This Agreement shall be governed by and construed in accordance with the laws of Portugal. Subject to any mandatory consumer-protection or other applicable jurisdiction rules, the courts of Lisbon, Portugal will have jurisdiction to settle disputes.