PRIVACY POLICY

This Privacy Policy aims to inform you how CREINVEST – INVESTIMENTOS IMOBILIÁRIOS, S.A., corporate entity no. 504.508.210, with registered offices at Rua Dr. Prof. António Luciano Pacheco de Sousa Franco, 11A, Moscavide e Portela (hereinafter "CREINVEST") processes Personal Data and ensures its privacy, security, and integrity in the development and performance of its activities. "Personal Data" constitutes information related to the user, which can be used to personally identify him or her (either directly or indirectly).

​

A. Controller of Personal Data

The Controller of Personal Data is CREINVEST, which provides services and/or products, determining for this purpose and without limitation: The Personal Data to be processed in the context of the provision of services and/or products; The Purposes for which Personal Data is processed; and, The means to be used for processing Personal Data.

B. Principles applicable to the processing of Personal Data

Personal Data is processed in accordance with the general principles set forth in the General Data Protection Regulation and other data protection legislation, namely:

• In the context of the relationship with the Data Subject, we ensure that Personal Data will be processed lawfully, fairly, and transparently ("Principle of lawfulness, fairness, and transparency");

• We collect Personal Data for specific, explicit, and legitimate purposes and do not further process the same Data in a manner incompatible with those purposes ("Principle of purpose limitation");

• We ensure that only adequate, relevant, and limited Personal Data is processed to the extent strictly necessary for the purposes for which it is processed ("Principle of data minimization");

• We take appropriate measures to ensure that Personal Data deemed inaccurate, taking into account the purposes of processing, are erased or rectified without delay (“Principle of accuracy”);

• We retain Personal Data in a manner that allows for your identification only for the period necessary for the purposes for which it is processed ("Principle of Retention");

• We ensure that Personal Data is processed in a manner that guarantees its security, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, by adopting appropriate technical or organizational measures ("Principle of Integrity and Confidentiality").

C. Data We Collect

The types of data we may collect about you, depending on your use of our Website, include:

a. name;

b. email address;

c. address (professional and personal);

d. telephone and mobile phone numbers (professional and personal);

e. geographic location (country/territory where you live and/or work);

f. job title and duties, as well as the name of your employer;

g. your CV and cover letter (if you have applied for a position).

h. preference data;

i. information technology usage data;

j. commercial data for the provision of services and/or supply of products;

l. any other information you choose to provide when contacting us on our Website.

D. Lawful Basis

In accordance with the "Principle of Lawfulness" enshrined in current data protection laws, in the development and performance of its activities, CREINVEST only processes Personal Data when there is a lawful basis that legitimizes the processing.

These are the lawful basis:

• Consent: When the Data Subject has given their consent, through a free, specific, informed, and explicit expression of will, by which they accept, by a statement (written or oral) or by an unequivocal affirmative action (by completing an option), that their Personal Data may be processed.

• Pre-contractual steps or performance of a contract: When processing is necessary for the performance of a contract to which the Data Subject is a party or for pre-contractual steps at their request.

• Compliance with a legal obligation: When the processing of Personal Data is necessary to ensure and guarantee compliance with legal obligations to which the Data Controller is subject under the laws of a Member State and/or the European Union.

• Defense of the Data Subject's vital interests: When data processing is necessary to ensure the protection of the vital interests of the Data Subject or another natural person.

• Legitimate Interests: When processing is necessary for the purposes of legitimate interests pursued by the Data Controller, other Controllers, or Third Parties, provided that such processing is not overridden by the interests or fundamental rights and freedoms of the Data Subject.

​​​​

D. Fundamentos de Licitude

Por referência ao «Princípio da Licitude» consagrado nas leis de proteção de dados vigentes, no desenvolvimento e realização das suas atividades, a CREINVEST só trata Dados Pessoais quando existir um fundamento de licitude que legitime o tratamento.

São fundamentos de Licitude:

• Consentimento: Quando o Titular dos Dados tiver dado o seu consentimento, através de uma manifestação de vontade, livre, específica, informada e explícita, pela qual aceita, mediante declaração (por escrito ou oralmente) ou ato positivo inequívoco (através do preenchimento de uma opção), que os Dados Pessoais sejam objeto de Tratamento.

• Diligências pré-contratuais ou a execução de um contrato: Quando o tratamento for necessário para a execução de um contrato no qual o Titular dos Dados é parte ou para diligências pré-contratuais a seu pedido.

• Cumprimento de uma obrigação jurídica: Quando o tratamento de Dados Pessoais for necessário para assegurar e garantir o cumprimento de obrigações jurídicas a que esteja sujeito o Responsável pelo Tratamento perante a legislação de um Estado Membro e/ou da União Europeia.

• Defesa de interesses vitais do Titular dos Dados: Quando o Tratamento de dados for necessário para assegurar a defesa de interesses vitais do Titular dos Dados ou de outra pessoa singular.

• Interesses Legítimos: Quando o tratamento for necessário para efeito de interesses legítimos prosseguidos pelo Responsável pelo tratamento, outros Responsáveis ou Terceiros, conquanto sobre esse tratamento não prevaleçam os interesses ou direitos e liberdades fundamentais do titular dos dados.

​

E. Sharing of Personal Data

• CREINVEST, within the scope of its business, may share data with third parties, however, it will only do so under the terms set forth in this section of the Data Protection and Privacy Policy.

• Subcontractors: Your Personal Data may be shared with service providers. Service providers are bound to CREINVEST by written contract and may only process Personal Data for the specifically established purposes. They are not authorized to process Personal Data, directly or indirectly, for any other purpose, for their own benefit or that of a third party.

• Other Controllers and/or Third Parties: Personal Data may be shared internally with other entities associated with CREINVEST, which will comply with the applicable data protection rules based on the purposes of the processing. Upon request and/or with your consent, your Personal Data may be shared with other entities.

• In compliance with legal and/or contractual obligations, your Personal Data may also be transmitted to judicial, administrative, supervisory or regulatory authorities and also to entities that lawfully carry out data compilation actions, fraud prevention and combat actions, market or statistical studies.