EXCLUSIVE ALGARVE VILLAS

 

PRIVACY POLICY

POLÍTICA DE PRIVACIDADE

Including Cookie Policy / Incluindo Política de Cookies

 

Data Controller / Responsável pelo Tratamento	Regulatory Framework
Exclusive Living Mediaçao Imobilaria trading as Exclusive Algarve Villas.com	RGPD / GDPR (EU) 2016/679
AMI Licence: AMI-7516 · NIF: NIF 507 528 166	Lei n.º 58/2019 (Portugal)
[Full registered address], Algarve, Portugal	Lei n.º 83/2017 (AML / BCFT)
info@exclusivealgarvevillas.com	Leis n.º 41/2004 e 46/2012 (ePrivacy / Cookies)
Supervisory Authority: CNPD — www.cnpd.pt	EU AI Act (Regulation (EU) 2024/1689)

 

Last updated: [DATE]  ·  Version 5.0  ·  Última atualização: [DATA]

 

⚠  This Privacy Policy supersedes all previous privacy notices published at exclusivealgarvevillas.com.     It should be read together with our Terms & Conditions (published separately).   ⚠  Esta Política de Privacidade substitui todos os avisos de privacidade anteriormente publicados em     exclusivealgarvevillas.com. Deve ser lida em conjunto com os nossos Termos e Condições.

 

1. Who We Are — Data Controller

Field	Details
Company	Exclusive Living Mediaçao Imobilaria trading as Exclusive Algarve Villas.com
Registered Address	R. Ernesto Cabrita, Edifício Vales, L/A, 8400-387 Lagoa
NIF	NIF 507 528 166
AMI Licence	AMI-7516 (registered with IMPIC)
Data Protection Email	info@exclusivealgarvevillas.com
Phone	+351 289 321 276 (landline) · +351 918 024 082 (mobile)
Lagos Office	R. Dr. José Francisco Tello Queiroz, Lote 3, Loja R, 8600-707 Lagos
Lagoa Office	R. Ernesto Cabrita, Edifício Vales, L/A, 8400-387 Lagoa
Vilamoura Office	Av. Tivoli, Conj. Varandamar, Corpo B, Bloco 3, R/C Esq, 8125-410 Vilamoura
DPO Status	No DPO appointed — not required under Art. 37 GDPR (no large-scale systematic monitoring or special-category processing as a core activity). Contact point: info@exclusivealgarvevillas.com
Supervisory Authority	CNPD — Comissão Nacional de Proteção de Dados · Av. D. Carlos I, 134, 1.º, 1200-651 Lisboa · www.cnpd.pt

 

2. What Data We Collect

We are the sole owners of the information collected on this site. We only collect information that you voluntarily provide via email, website forms, chat, our AI assistant, WhatsApp, telephone, or direct contact at our offices.

Category	Data Points	Channel
Identification	Full name, nationality, date of birth (AML only)	Forms, email, in person
Contact	Email, telephone/mobile, postal address	Forms, email, phone, WhatsApp
Property Enquiry	Budget, property type, locations, intended use, timeline	Enquiry forms, phone, WhatsApp, AI assistant
Financial (AML/KYC)	Source of funds, proof of funds, passport/ID — transactions ≥ €15,000	Direct submission, in person
Communications	Emails, form submissions, WhatsApp messages, AI assistant conversations, call notes	All channels
Technical	IP address, browser, device, pages visited, time on site, referral URL	Cookies (with consent)
Marketing Preferences	Opt-in/opt-out status, consent records with timestamps	Subscribe forms, WhatsApp opt-in

 

3. Purposes, Legal Bases & Retention

We use your information to respond to the reason you contacted us. We will not share your information with third parties outside our organisation except as described in Section 5.

Purpose	Legal Basis (GDPR Art. 6)	Retention
Responding to property enquiries	Art. 6(1)(b) pre-contractual; Art. 6(1)(f) legitimate interest	Until consent withdrawn
Scheduling and conducting viewings	Art. 6(1)(b) pre-contractual	Until consent withdrawn
Newsletters, property alerts, market updates (double opt-in)	Art. 6(1)(a) — consent	Until consent withdrawn
WhatsApp property communications (opted-in)	Art. 6(1)(a) — consent	Until consent withdrawn
AI assistant conversations (see Section 7)	Art. 6(1)(a) consent; Art. 6(1)(b) pre-contractual	Until consent withdrawn
AML/KYC — transactions ≥ €15,000	Art. 6(1)(c) — legal obligation (Lei 83/2017)	Minimum 7 years
Tax, regulatory and court-ordered obligations	Art. 6(1)(c) — legal obligation	As required by law (min. 10 years tax)
Corporate restructuring (sale/merger) with website notice	Art. 6(1)(f) — legitimate interest	Duration of process
Establishing or defending legal claims	Art. 6(1)(f) — legitimate interest	Proceedings + 3 years
Website analytics (consented cookies)	Art. 6(1)(a) — consent	Per cookie settings
Retargeted advertising Meta/Google (consented cookies)	Art. 6(1)(a) — consent	Per cookie settings
Service improvement (anonymised/aggregated)	Art. 6(1)(f) — legitimate interest	Indefinite (anonymised)

 

4. Marketing Communications

Unless you indicate otherwise, where you have given consent we may contact you by email about property opportunities, market updates, new services, or changes to this policy. Every marketing email contains an unsubscribe link in the footer; unsubscribing takes effect immediately. Our email platform operates a double opt-in policy and allows your data to be accessed, edited, and deleted in a simple and transparent way.

 

5. Who We Share Data With

We will not sell or disclose your information to third parties for their own commercial purposes. We may share data with:

•     IT, hosting, and CRM providers maintaining our digital infrastructure — bound by Art. 28 GDPR Data Processing Agreements;

•     Email marketing platform (double opt-in subscribers only) — bound by DPA;

•     Anthropic PBC (USA) — AI processing for our virtual assistant (see Section 7) — bound by Anthropic's Data Processing Addendum;

•     Meta Platforms Ireland Ltd. — WhatsApp Business API and Facebook/Instagram advertising;

•     Google Ireland Ltd. — Google Analytics and Google Tag Manager (GTM-546SMZKK);

•     Our advisors — lawyers, accountants, notaries — for legal and regulatory compliance;

•     Legal and notarial partners directly involved in a transaction you initiate;

•     Portuguese tax authorities (AT), IMPIC, and AML authorities (DCIAP) where legally required;

•     Courts and law enforcement in response to valid legal process;

•     Successor entities in a sale, merger, or reorganisation of EAV — with prior notice posted on this website, with any successor bound by this Privacy Policy.

A full list of current processors is available on written request to info@exclusivealgarvevillas.com.

 

6. International Data Transfers

Some processors operate outside the EEA. We only permit transfers with appropriate safeguards under Chapter V GDPR:

•     Anthropic PBC (USA) — AI assistant processing. Standard Contractual Clauses (SCCs) apply per Anthropic's Data Processing Addendum;

•     Meta Platforms, Inc. (USA) — via Meta Platforms Ireland Ltd., SCCs per Commission Decision 2021/914;

•     Google LLC (USA) — via Google Ireland Ltd., SCCs per Commission Decision 2021/914.

Details of specific safeguards are available from info@exclusivealgarvevillas.com.

 

7. AI Virtual Assistant — Data Processing Disclosure

Our website and WhatsApp channels may feature an AI-powered virtual assistant ('Sofia'). In accordance with the EU AI Act transparency requirements and GDPR:

•     You are always clearly informed at the start of a conversation that you are interacting with an AI system;

•     Conversation content is processed by Anthropic PBC (USA) as our AI processor, under SCCs and a Data Processing Addendum;

•     The assistant does not provide legal, tax, immigration, or financial advice — such topics are automatically referred to human staff;

•     You may request transfer to a human agent at any time;

•     Consent is requested before any personal data is collected in the conversation;

•     Conversations are retained for 12 months for service quality and legal purposes, then anonymised or deleted;

•     No automated decisions producing legal or similarly significant effects are made by the assistant.

 

8. Automated Processing & Lead Scoring

EAV's internal lead management system assigns indicative priority scores based on stated budget, preferences, and engagement. This is used solely for internal follow-up prioritisation, produces no legal or significant effects, and is always subject to human review. You may object at any time via info@exclusivealgarvevillas.com.

 

9. Your Rights

Right	Description	How to Exercise
Access (Art. 15)	Copy of all personal data we hold about you	Email privacy@ — response within 30 days
Rectification (Art. 16)	Correction of inaccurate or incomplete data	Email info@exclusivealgarvevillas.com
Erasure (Art. 17)	Deletion — subject to legal retention duties. Note: deleting certain data may prevent us providing services that legally require it.	Email info@exclusivealgarvevillas.com
Restriction (Art. 18)	Limit processing in certain circumstances	Email info@exclusivealgarvevillas.com
Portability (Art. 20)	Receive data in structured, machine-readable format	Email info@exclusivealgarvevillas.com
Object (Art. 21)	Object to legitimate-interest processing or direct marketing	Email privacy@ — marketing objections actioned immediately
Withdraw Consent (Art. 7(3))	Withdraw any consent at any time	Unsubscribe link, or email privacy@
Complaint	Lodge a complaint with the supervisory authority	CNPD — www.cnpd.pt · Av. D. Carlos I, 134, 1.º, 1200-651 Lisboa

To check what data we hold on you, email info@exclusivealgarvevillas.com. We respond within 30 days; complex requests may take up to 90 days with notification. Identity verification may be required.

 

10. Security

Ensuring the confidentiality, integrity, and availability of customer data is a commitment we make to all our customers and users. We follow best information security management practices and require our employees to comply with strict security standards. Measures include encrypted transmission (HTTPS/TLS), role-based access controls, staff data protection training, and secure document disposal.

Please be aware that data circulating on the Internet is not fully protected against misuse; you are responsible for safeguarding your own passwords and credentials.

In the event of a breach likely to result in risk to individuals, we will notify the CNPD within 72 hours (Art. 33 GDPR) and affected individuals without undue delay where a high risk exists (Art. 34 GDPR).

 

11. Cookie Policy

We may store cookies on your device while you use this website. We use cookies for authentication and session management, user preferences, anonymous and aggregate analytics, performance analysis, and retargeting. Consent is required for all categories except Strictly Necessary.

 

Category 1 — Strictly Necessary (no consent required)

Cookie	Provider	Purpose	Duration
cookiefirst-consent	CookieFirst	Stores your consent preferences	1 year
PHPSESSID	exclusivealgarvevillas.com	Session management	Session
lang	exclusivealgarvevillas.com	Language preference	1 year
cf_clearance	Cloudflare	Security / DDoS protection	1 year

 

Category 2 — Analytics (consent required)

Cookie	Provider	Purpose	Duration
_ga	Google Analytics (Google Ireland Ltd.)	Unique user identification, traffic analysis	2 years
_ga_[ID]	Google Analytics	GA4 session state	2 years
_gid	Google Analytics	User distinction	24 hours
_gat_gtag	Google Tag Manager (GTM-546SMZKK)	Request throttling	1 minute

 

Category 3 — Marketing & Retargeting (consent required)

Cookie	Provider	Purpose	Duration
_fbp	Meta Platforms Ireland Ltd. (Pixel ID: 1149057678801966)	Browser identification for ad delivery/measurement	3 months
_fbc	Meta Platforms Ireland Ltd.	Ad conversion attribution	2 years
fr	Meta Platforms Ireland Ltd.	Ad targeting, frequency capping	3 months