Privacy Policy

The controller of your personal data is Chave 100 Demora [full legal name, NIPC and registered office to be confirmed], a company that manages condominiums, rented properties and short-term lets on the south bank of the Tejo.

For any question about this policy, or to exercise your rights, email condominios.chave@gmail.com.

This policy covers the data we collect through this website and when you first get in touch with us, whether to ask a question or to request a management proposal.

If you become a client, the data of owners, tenants and guests that we handle while managing a condominium, rental or short-term let is processed under the management agreement and the information we provide in that context. The client portal is a separate service with its own terms.

We only collect what you choose to send us, plus limited technical data about how the website is used:

• Proposal request formName, email, phone (optional), address or locality of the property, type of service (condominium, rental or short-term let), number of units or properties, and your description of the current needs.
• Contact formName, email, phone (optional), your profile (owner, company, landlord or other) and your message.
• Email, phone and WhatsAppYour contact details and the content of any message you send us through these channels.
• Website usagePages visited, approximate time on each page, the site you came from, language, type of device and browser, and clicks on contact buttons. Our Cookie Policy explains how this is measured.

Messages about a building sometimes mention other people, such as a neighbour, a tenant or a previous administrator. Please share only what we need in order to help, and leave out health details and other sensitive information.

• Answering your enquiry and preparing a proposalSteps taken at your request before entering into a contract (Article 6(1)(b) of the GDPR).
• Following up on a proposal and organising our contacts with youOur legitimate interest in responding to prospective clients (Article 6(1)(f) of the GDPR).
• Google Analytics statistics, which use cookiesYour consent (Article 6(1)(a) of the GDPR and Law no. 41/2004), which you can withdraw at any time.
• Cookie-free statistics, website performance and securityOur legitimate interest in keeping the website working, secure and useful.
• Accounting and tax obligations, if you become a clientCompliance with our legal obligations (Article 6(1)(c) of the GDPR).

We do not send newsletters or marketing messages, we do not sell your data, and we do not make automated decisions or build profiles about you.

We rely on a small number of service providers, who process data on our behalf and only on our instructions:

• FormspreeReceives the website form submissions and delivers them to us.
• VercelHosts the website and processes technical request data, such as IP addresses, to serve pages and protect against abuse.
• GoogleProvides Google Analytics and the map shown on the Contacts page.
• Insights (getinsights.io)Provides aggregated, cookie-free page statistics.

If you message us on WhatsApp or visit our Instagram page, those services are provided by Meta under its own privacy terms. We may also disclose data when required to do so by law, a court or another competent authority.

Some of these providers are based in the United States or use infrastructure there. When personal data leaves the European Economic Area, the transfer relies on the EU-US Data Privacy Framework, where the provider is certified under it, or on the Standard Contractual Clauses approved by the European Commission.

• Enquiries and proposals that do not lead to a contractUp to 12 months after our last contact, so that we can follow up on the same request.
• Client dataFor as long as the management agreement lasts, and afterwards for the periods required by law. Accounting records, for example, are kept for 10 years.
• Google Analytics dataUp to 14 months. The cookies themselves expire after 2 years at most.

When these periods end, the data is deleted or anonymised.

The website is only served over encrypted connections (HTTPS). Form submissions can only be accessed by the people at Chave 100 Demora who handle enquiries, and our providers are bound by confidentiality and security obligations.

You can ask us to give you access to your data, correct it or delete it, restrict or object to how we use it, and send you the data you gave us in a portable format. Where we rely on your consent, you can withdraw it at any time; this does not affect anything done before.

To exercise any of these rights, email condominios.chave@gmail.com. We reply within one month, free of charge, and may ask you to confirm your identity first.

If you believe your data has been mishandled, you can complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (www.cnpd.pt).

Our services are aimed at owners, landlords, companies and building administrations. We do not knowingly collect data from children.

We will update this policy when our website or our practices change. The date at the top of the page shows the latest revision.