Privacy Policy

1. Introduction

This Privacy Policy sets out the commitment of BOM SUCCESSO regarding the protection of personal data. BOM SUCCESSO strictly adheres to the principles described in this policy, the Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR), and the applicable data protection legislation, in all personal data processing activities for which it is responsible.

2. Data Controller

Our Data Protection Officer (DPO) can be contacted via:

  • Email: geral@bomsucesso-realestategroup.pt

3. Personal Data We Collect

3.1. Data provided directly

  • First and last name
  • Email address
  • Phone number
  • Message or additional information entered in forms

3.2. Data collected automatically

  • IP address
  • Browsing data
  • Device type
  • Operating system
  • Unique device identifiers
  • Google Analytics data (with prior consent)

4. Purposes and Legal Basis for Processing

4.1. Contact Forms

  • Purpose: Responding to requests for information or contact
  • Legal basis: Consent (Article 6(1)(a) of the GDPR)
  • Retention period: Duration necessary to respond to the request + 6 months

4.2. Google Analytics

  • Purpose: Website usage analysis and improvements
  • Legal basis: Consent (Article 6(1)(a) of the GDPR)
  • Retention period: 12 months

5. Data Recipients

Your personal data may be shared with:

  • Service providers:
    • Web hosting services
    • Analytics services (Google Analytics)
  • Competent authorities: When legally required

6. International Transfers

Some of our service providers, such as Google Analytics, may process data outside the European Economic Area (EEA). In such cases, we ensure that:

  • Transfers are made to countries with a European Commission adequacy decision; or
  • Appropriate safeguards are in place, including:
    • Standard Contractual Clauses (SCCs)
    • Additional technical and organizational measures

7. Your Rights

You have the right to:

  • Access: Obtain confirmation of the data being processed and access it
  • Rectification: Correct inaccurate or incomplete data
  • Erasure: Request the deletion of your data
  • Restriction: Restrict the processing of your data
  • Objection: Object to the processing of your data
  • Withdraw consent: Where applicable

To exercise your rights, contact us through the means indicated in Section 2.

8. Security Measures

We have implemented appropriate technical and organizational measures to protect your data, including:

  • Data encryption in transit and at rest
  • Strict access controls
  • Regular system monitoring

9. Cookies and Similar Technologies

We use cookies and similar technologies on our website. For more information, please refer to our Cookie Policy.

10. Complaints

You have the right to file a complaint with the competent supervisory authority:

National Data Protection Commission (CNPD)

  • Website: www.cnpd.pt
  • Address: Av. D. Carlos I, 134, 1st floor, 1200-651 Lisbon
  • Phone: +351 213 928 400
  • Email: geral@cnpd.pt

11. Changes to the Privacy Policy

We reserve the right to update this policy periodically.