1. Data Controller

The controller of the personal data collected through the website mariotavaresdasilva.com is:

This document has been drawn up in accordance with the General Data Protection Regulation (GDPR — Regulation (EU) 2016/679) and with Portuguese Law no. 58/2019 of 8 August, which implements it in the Portuguese legal system.

---

2. Personal Data Collected

2.1 Data provided directly

• Full name
• Email address
• Telephone or mobile number
• Description of your property needs or interest
• Any other information voluntarily shared through the contact form

2.2 Data collected automatically

• IP address and approximate location data
• Browser type and version and operating system
• Pages visited, duration of visit and browsing path
• Cookie data and similar technologies (see Section 7)

---

3. Purpose of Processing

Personal data is processed for the following purposes:

• Responding to requests for information, contact and real estate service enquiries;
• Providing information on properties, valuations and real estate brokerage services;
• Managing the pre-contractual and contractual relationship in the context of real estate brokerage;
• Sending marketing communications about properties and services, subject to the user's express consent;
• Improving the operation and experience of the website (analytical and statistical purposes);
• Complying with applicable legal obligations, in particular tax and real estate brokerage requirements.

---

4. Legal Basis for Processing

Data processing is based on the following legal grounds set out in Article 6 of the GDPR:

• Consent (Art. 6(1)(a)) — for marketing communications and non-essential cookies;
• Performance of a contract or pre-contractual steps (Art. 6(1)(b)) — to respond to enquiries and manage commercial relationships;
• Compliance with a legal obligation (Art. 6(1)(c)) — to meet legal requirements;
• Legitimate interests (Art. 6(1)(f)) — for security, fraud prevention and service improvement.

---

5. Data Retention Period

Data is retained only for as long as necessary for the purposes for which it was collected:

• Contact data: retained for the duration of the commercial relationship and, after it ends, for a maximum of 5 years;
• Real estate brokerage contract data: retained for the periods required by law, in particular 10 years for tax purposes;
• Browsing data and cookies: according to the period set for each cookie (see Section 7);
• Data for marketing communications: until consent is withdrawn.

Once the retention period has elapsed, data is securely deleted or anonymised.

---

6. Data Subject Rights

Under the GDPR, users have the following rights:

• Access (Art. 15) — to obtain confirmation as to whether their data is being processed and to access it;
• Rectification (Art. 16) — to request the correction of inaccurate or incomplete data;
• Erasure / "right to be forgotten" (Art. 17) — to request the deletion of their data, where applicable;
• Restriction of processing (Art. 18) — to request the suspension of processing in certain circumstances;
• Portability (Art. 20) — to receive their data in a structured, machine-readable format;
• Objection (Art. 21) — to object to processing based on legitimate interests or for direct marketing purposes;
• Withdrawal of consent — at any time, without affecting the lawfulness of processing carried out beforehand.

To exercise any of these rights, please contact us by email at mario.tsilva@remax.pt.

You also have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD) at www.cnpd.pt.

---

7. Cookie Policy

This website uses cookies to improve the browsing experience and analyse user behaviour. Cookies are small text files stored on the user's device.

Types of cookies used

• Essential / technical cookies: necessary for the website to function. No consent required.
• Analytics cookies: allow traffic to be analysed in an aggregated and anonymous way (e.g. Google Analytics). Consent required.
• Marketing cookies: used to present personalised content and relevant advertising. Consent required.

Managing your preferences

Users can manage their preferences through the cookie banner shown on their first visit, as well as through their browser settings. Rejecting non-essential cookies does not affect access to the website.

---

8. Sharing Data with Third Parties

Personal data may be shared with the following categories of recipients:

• REMAX Portugal / REMAX Golden Line II — under the real estate brokerage agreement;
• Technical service providers (web hosting, email, CRM) — as processors, bound by confidentiality obligations;
• Public authorities and regulatory bodies — where legally required;
• Legal or tax advisers — in the context of legal proceedings, where necessary.

We do not sell, rent or transfer your personal data to third parties for those third parties' own commercial purposes.

---

9. Data Security

We adopt appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, alteration or improper disclosure, including encryption in transit (HTTPS), access control and regular backups.

In the event of a data breach that may pose a risk to the rights of data subjects, we will notify the CNPD in accordance with Article 33 of the GDPR.

---

10. International Data Transfers

Data is processed, wherever possible, within the European Economic Area (EEA). Where it is necessary to transfer data to third countries (in particular in the context of tools such as Google Analytics), we ensure that such transfers comply with the safeguards provided for in the GDPR, in particular European Commission adequacy decisions or standard contractual clauses.

---

11. Links to External Websites

This website may contain links to third-party websites, in particular to the REMAX Portugal platform. We are not responsible for the privacy practices of those websites. We recommend consulting their respective privacy policies before providing your data.

---

12. Protection of Minors

This website is not directed at persons under 18 years of age. We do not knowingly collect personal data from minors. Should we become aware that data from minors has been provided without appropriate parental consent, we will delete it immediately.

---

13. Changes to this Privacy Policy

This Privacy Policy may be updated periodically to reflect legal, technological or service changes. The most recent version will always be available on this website, indicating the date of the last update. Significant changes will be communicated prominently.

---

14. Contact

For any questions regarding this Privacy Policy or the exercise of your rights, please contact us via: