Política de Privacidade

PRIVACY POLICY

Privacy policy
INVISTA knows that the processing of your personal data requires your trust. To that extent, we have developed a privacy policy, subject to the highest standards of security and privacy, where we ensure that they are treated in accordance with their purposes and the rights that the law enshrines.
For INVISTA, the confidentiality and integrity of your data is a major concern, so in order to better understand how your data will be processed.

1) What are personal data?
Information relating to a natural or legal person, of any nature and independent of its support, including sound and image, that identifies or identifies that person.

2) Who is responsible for the processing of your personal data?
INVISTA is responsible for processing the personal data of its customers and / or potential clients, when they contract our Mediation services, formalize a proposal for a lease, acquisition, and consequently a financing proposal, as well as those submitting the Application Form. Consent. Our contacts are as follows:
Invista - Sociedade de Mediação Imobiliária, Lda
E.N.10, Prestige Building, No. 23, 4th Floor, 2615-130 Alverca do Ribatejo
E-mail: provedoria@invistacasa.com

3) What is a Data Protection Officer?
It is a function that was specifically created to monitor compliance with the RGPD and to internally implement at INVISTA a favorable momentum for the protection of its data, as well as the point of contact with the National Data Protection Commission.
You can contact our Data Protection Officer through the following contact:
E-mail: provedoria@invistacasa.com

4) How do we collect your personal data?
Your personal data are collected and processed under the following conditions:
• If you complete and submit your personal data through the Consent Form
• Whenever you enter into a contract with us.

5) For what purposes and on what grounds can your personal data be used?
In general, the data collected is intended for the management of the contractual relationship, the provision of contracted services, the adequacy of our services to their needs and interests.
The RGPD requires that the processing of personal data has at least one legal basis which legitimates its processing.
The grounds for the RGPD are as follows:
• When you have given your consent (consent can be withdrawn at any time);
• When the treatment is necessary in the context of the pre-contractual procedures necessary for the execution of a contract, to which it is a party;
• When treatment is necessary to fulfill a legal obligation to which INVISTA is subject;
• When treatment is necessary for the defense of your vital interests;
• When processing is necessary for the purposes of a legitimate interest pursued by INVISTA, and our reasons for its use prevail over your data protection rights;
• When treatment is necessary for us to testify, exercise or defend a right in legal proceedings against you, us or a third party.

6) What personal data do we collect?
All data that is necessary for the formalization, execution and management of the contract can be collected.
We distinguish the following personal data:
• Contact elements: name; address; email; telephone;
• Personal elements: date of birth; citizen card / identity card number; taxpayer number; bank account number; profession;
• Financial elements: IRS / IRC; maturity receipts; bank statements; others.

7) How do we keep your personal information safe?
INVISTA guarantees the security and privacy of your personal data; for this, we highlight the following measures:
• Physical security measures:
◦ Facility security: entry to the premises (including subcontractors) is restricted to workers and, in exceptional cases, to individuals who are duly authorized by INVISTA;
◦ There is a data protection policy, enshrined in the Code of Conduct, which applies to all its employees.
• Logical safety measures:
◦ Access to computer systems is protected by login and password;
◦ The entire INVISTA computer network is protected by anti-virus, firewall and software monitoring installed;
◦ INVISTA systems are enabled to identify situations where clients object to data processing;
◦ The processing of personal information (eg, data file) is performed through password protection and in certain circumstances by sending encrypted e-mail.

8) How long do we keep your personal information?
For the commercialization of products, your data will be kept up to the maximum term of 18 to 24 months, counted from the date on which the contract ceases, as long as consent has not been withdrawn.
For other purposes legally imposed, INVISTA will keep its data for the period necessary to fulfill the purpose for which the data were collected, namely those provided for in Law 15/2003 of February 8 and Law 83/2017 of 18 of August.
There are legal requirements that require you to keep the data for a minimum period of time, which INVISTA will have to respect.
In any case, once the maximum period of conservation has been reached, your data will be anonymised (anonymised data may be kept) or destroyed in a secure way.

9) With whom do we share your personal data?
INVISTA has access to its data to employees who need them to fulfill the contractual / pre-contractual and legal obligations or diligences.
For the purposes of complying with legal provisions or obligations or contracted services, your personal data may also be transmitted to other third parties, namely:
• Public bodies and institutions (eg IMPIC, Banco de Portugal or Fiscal Authorities), whenever there is a legal or regulatory obligation.
• In the area of ​​prevention of money laundering, terrorist financing and fraud, and for administrative and financial management at group level.
In any case, INVISTA assures its security and privacy policy, with these entities, through a careful choice of the same and the conclusion of contracts that oblige them to adopt the technical and organizational measures, indispensable for the protection of their data , in accordance with the data protection regime in force.

10) How can you change or withdraw your consent?
You may at any time change or withdraw your consent, with future effect, when the processing of personal data depends on it as a basis for lawfulness. For this, you can contact INVISTA directly to the following e-mail address: provedoria@invistacasa.com, or by letter addressed to our address:
E.N.10, Prestige Building, No. 23, 4th Floor, 2615-130 Alverca do Ribatejo
After you have withdrawn all of your statements of consent, you will no longer be contacted and will receive communications for the purposes described in the Privacy Policy.

11) How can you exercise your Rights and ask questions about your data?
Under the terms of the law of personal data protection, the data subject is guaranteed the right to access, rectify, limit or oppose the processing, portability or forgetting of their personal data, by means of a written request addressed to INVISTA, to the email provedoria@invistacasa.com.
The exercise of these rights may be subject to certain limitations, according to the law.
If you exercise any of these requests, we will analyze them and respond within a maximum period of 1 (one) month.

12) How can you complain to your supervisory authority?
We also inform you that you will always have the right to submit a complaint to the supervisory authority (National Commission for Data Protection - CNPD | Rua de São Bento, 148, 3º, 1200-821 Lisboa | Tel .: +351 213 928 400 | Fax : +351 213 976 832 | e-mail: geral@cnpd.pt), and also of the authority that oversees the sector (Instituto de Mercados Públicos, Imobiliário e Construção - IMPIC) Av. Julio Dinis, nº 11, 1069-010 Lisbon | Tel .: +351 217 946 700 | Fax: +351 217 946 799 | e-mail: geral@impic.pt).

13) How can you find out about the privacy policy updates for this privacy?
INVISTA reserves the right at all times to make adjustments or updates to this privacy policy. To be always aware of the rules applicable to the processing of your personal data, consult www.invistacasa.com. The use of the services after these changes implies the acceptance by the client of the privacy policy and future updates.