This policy explains what personal data we collect on this site, why we collect it, who we share it with and how long we keep it. It is written to be read, not skipped.
It covers www.ilidiodomingos.com and the forms we run on Facebook and Instagram. It does not cover third party sites we may link to.
The Portuguese version is the authoritative one. This is a translation.
Who handles your data
The data controller is ILÍDIO DOMINGOS UNIPESSOAL LDA, company number 516 172 026, registered at Rua do Campo da Bola, Nº 4, Casalinhos de Alfaiata, 2560-435 Silveira, Torres Vedras, Portugal.
For anything to do with personal data, including the rights set out below, write to ilidiosdomingos@gmail.com or call +351 914 329 355.
Given the size and nature of what we do, we are not required to appoint a data protection officer and we have not appointed one. Requests are handled directly by the company management.
What we collect and why
We only collect data you give us through one of our forms, plus what the site records while you browse. We do not buy lists and we do not gather data about you from other sources.
| Where | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Viewing request | Name, email, phone, property, preferred date and time, message, browsing language | Arranging and holding the viewing, and talking to you about the property | Steps taken at your request before entering a contract | 24 months after the last contact |
| Mortgage enquiry | Name, email, phone, property, amount sought and the monthly income you state | Preparing a financing estimate and, with your permission, putting your case to a credit intermediary or a bank | Steps taken at your request before entering a contract. Passing your case to third parties requires your express consent | 24 months after the last contact |
| Contact form | Name, email, phone, message | Answering your question | Pre-contractual steps, or our legitimate interest in replying to people who write to us | 24 months after the last contact |
| PDF guide download | Name and email | Sending you the document you asked for | Consent | Until you withdraw consent, and no more than 24 months |
| Facebook and Instagram forms | Name, email, phone, expected purchase timing and financing method | Contacting you about the advertised property | Steps taken at your request before entering a contract | 90 days on Meta. After that, in our own records only, 24 months |
| Browsing the site | IP address, device and browser type, pages visited, where the visit came from | Keeping the site secure, understanding which pages are useful, and measuring how our advertising performs | Legitimate interest for security. Consent for measurement and advertising | Up to 14 months |
The mortgage enquiry is the only form where we ask about money. We ask because without the income and the amount, an estimate is worthless. That data is used for the estimate and is not passed to any bank or broker unless you expressly tell us to.
The mortgage calculator on the site runs entirely in your browser and sends us nothing. The figures it shows are indicative and are not an offer of finance.
Who we share it with
We do not sell personal data and we do not hand it to third parties for their own marketing. We share it only with the providers who need to process it for the site and the business to run, always under a data processing agreement.
- Vercel Inc., which hosts the site and keeps technical access logs.
- Amazon Web Services, which sends the form emails and stores viewing requests, on servers inside the European Union.
- Cloudflare, which provides the anti-bot check on the viewing form.
- Google Ireland Limited, for Google Analytics, the site fonts and the maps.
- Meta Platforms Ireland Limited, for the contact forms on Facebook and Instagram and for advertising measurement.
- Credit intermediaries and banks, only when you expressly authorise us to put your case to them.
- Our certified accountant and, where needed, our lawyers, under professional confidentiality.
- Public authorities, where the law requires us to provide the information.
Transfers outside the European Union
Some of the providers above are United States companies or run infrastructure outside the European Economic Area. Where data is transferred outside the EEA, the transfer relies on standard contractual clauses approved by the European Commission or on the adequacy decision for the EU to US Data Privacy Framework.
You can ask us for a copy of the safeguards that apply, using the contact details at the top of this policy.
How long we keep it
The periods are in the table above. The general rule is that we delete the data of people who contacted us and did not go ahead, 24 months after the last contact.
Where the contact leads to a contract, the data we need is then kept for the period required by Portuguese tax and commercial law, which is ten years.
Where we rely on consent, we delete as soon as consent is withdrawn, unless another ground requires us to keep it.
Your rights
In relation to the data we hold about you, you have the right to:
- Know what we hold and get a copy of it.
- Have incorrect or incomplete data corrected.
- Ask for it to be deleted, where there is no ground for us to keep processing it.
- Ask us to restrict processing while accuracy or lawfulness is being sorted out.
- Receive the data you gave us in a machine readable format, or have us send it to someone else.
- Object to processing that relies on legitimate interest.
- Withdraw consent at any time, without affecting what was lawfully done before.
To exercise any of these, write to ilidiosdomingos@gmail.com. We answer within one month. If the request is complex we may need longer, and we will tell you so within that month. We may need to confirm your identity first, so that we do not hand your data to someone else.
If you believe we have not handled your data properly, you can complain to the Portuguese data protection authority: Comissão Nacional de Proteção de Dados, Av. D. Carlos I, 134, 1.º, 1200-651 Lisboa, www.cnpd.pt.
Security
The site runs entirely over an encrypted connection. Access to the management area is limited to authorised accounts and protected by authentication. The forms have anti-bot checks and submission limits to stop abuse.
No system is completely safe. If a personal data breach ever happens that is likely to affect you, we will meet the notification duties the law imposes.
Children
This site is aimed at adults looking to buy a house. We do not knowingly collect data from anyone under 18. If we learn that we have received data from a minor without parental authorisation, we delete it.
Automated decisions
We do not make automated decisions with legal effects about you, and we do not profile you for that purpose. The mortgage calculator is a calculator, not a decision. Banks decide on finance, using their own criteria.
Changes to this policy
If we change how we handle data, we update this page and change the date at the top. It is worth looking back now and then. If a change is significant and we have a way to reach you, we will tell you.