PRIVACY POLICY OF THE REAL ESTATE INTERMEDIATION PROCESS
INTRODUCTION
The protection of personal data is one of the values of execuPROP Lda. (Engel & Völkers Leiria). Compliance with the regulations regarding the protection of personal data in force is a priority objective for us.
The purpose of this policy is to explain how we are going to treat the personal data that you provide us through the different forms and other channels for entering personal data present in the real estate intermediation process.
The following personal data is processed in this relation:
• Personal data (such as email address, first name, last name, login username, hereinafter referred to as “data” or “personal data”).
• Personal data transmitted by the user's internet browser each time they access the website
includes: IP address (internet protocol address) of the accessing computer; the name of the page accessed; date and time of access; referral URL from which the user accesses the page; the number of transmitted data; status message for successful access; session ID number. This data is stored in log files, which are also known as server log files.
Purpose of processing
As the responsible body, E&V processes website users’ personal data for the following purposes:
• User Authentication and the administration of user rights and permissions
• Technical management of the application and its operational functions, including technical problem solving, statistical analysis, testing and research;
• To prevent fraudulent activities and/or abuse on, or in relation to the application;
• To comply with the requirements of applicable laws, to protect the safety of an individual and the rights and property of E&V; and to prevent deception and possible security or technical problems.
The legal basis for processing personal data is GDPR Article 6, a, b and f. The legitimate interest of E&V in accordance to GDPR Article 6 and f comes from the interest of processing data within the Group.
Processing procedures
Users’ personally identifiable data is only processed where necessary and is processed exclusively electronically, in particular by collection, registration, organisation, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, access and communication, blocking, deletion and destruction of data. Processing operations can be performed electronically and non-electronically.
Access to data
The personal data is processed by E&V, in particular by:
• employees and consultants who are entitled to administer the application and provide the related services (such as the IT Department);
• third-party companies (such as IT service providers, hosting providers, etc.) to which E&V has outsourced services with processing operations as part of order processing.Information regarding data
As the responsible body, we can provide information about your personally identifiable data. This information can only be provided for the following purposes:
• For fulfilment of legal obligations or obligations under regulations and directives of national or European legislation;
• For defence in court in the case of legal dispute.
Transfer of data
E&V will not pass on your personal data beyond the above-listed parties or use cases.
Transfer of data to non-EEA countries
In general, E&V does not transfer personal data to non-EEA countries. The servers used by E&V are
located within the European Union. In cases where personal data is transferred to countries that do not offer the same level of protection as is offered within the European Union and you have not expressly consented to the transfer of your data to those countries, E&V will ensure that certain contractual obligations are met in accordance with applicable data protection law (including the implementation of the standard contractual clauses approved by the European Commission) with each service provider unless E&V can invoke other legal grounds for the transfer of personal data.
Storage or deletion of data
E&V stores personal data for the time necessary to fulfil the purposes for which said data is collected and processed, including any retention period required by applicable law (e.g. retention of accounting records).
Data subjects’ rights
You are entitled to receive information about the processing of your personally identifiable data (for example the origin of this data, the purpose of the processing, the modalities of data processing).
Furthermore, you are entitled at any time to object to the processing of data for the future, to restrict it, or to demand the deletion of the data. Finally, you can prevent the sending of promotional material or the execution of market research or commercial communications at any time.
To summarise, you have a right to:
- information
- rectification
- deletion (or to be forgotten)
- limitation of data processing
- data portability
- object to the processing of your personal data
- complain to supervisory authorities
If you have a complaint regarding the way that we process your data, you have the opportunity to submit a complaint to the supervisory authority. This is:
Comissão Nacional de Protecção de Dados
Av. D. Carlos I, 134 – 1º , 1200-651 Lisboa,
Tel: +351 213928400 / Fax: +351 213976832
Email: geral@cnpd.pt
https://www.cnpd.pt/home/rgpd/rgpd.htm
https://www.cnpd.pt/