1. Identity of the Data Controller
Crystal Indexarium, operating at R. António Saúde 11, 1500-048 Lisboa, Portugal, is the data controller for personal data collected through this website (CrystalIndexarium.info). You may contact us at [email protected] or by telephone at +351 217 248 610 with any data protection enquiries.
2. Legal Basis and Applicable Law
This Privacy Policy is prepared in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, "GDPR"), as implemented in Portugal through Law No. 58/2019 of 8 August 2019, and any other applicable Portuguese data protection legislation. The supervisory authority for data protection in Portugal is the Comissão Nacional de Proteção de Dados (CNPD), Rua de São Bento, 148-3°, 1200-821 Lisboa.
3. What Personal Data We Collect
We collect the following categories of personal data when you interact with our website or contact us:
- Contact information: Full name, email address, telephone number
- Property information: Property type, location, and details you choose to share in your enquiry message
- Technical data: IP address, browser type and version, device type, pages visited, time and date of visit — collected automatically through server logs and, where consented, through cookies
- Communication records: The content of messages you send us via the contact form or by email
We do not collect sensitive personal data (as defined under Article 9 GDPR) through this website.
4. Purposes and Legal Bases for Processing
We process your personal data for the following purposes:
- Responding to enquiries (Article 6(1)(b) GDPR — performance of a contract or pre-contractual steps): When you contact us through the contact form or by email, we use the information you provide to respond to your enquiry and discuss the services you are interested in.
- Service delivery (Article 6(1)(b) GDPR): If you engage our services, we process your contact and property information to deliver the agreed services.
- Legal compliance (Article 6(1)(c) GDPR): We may process and retain certain data to comply with legal obligations under Portuguese and EU law, including tax and accounting requirements.
- Legitimate interests (Article 6(1)(f) GDPR): We process technical data for website security, fraud prevention, and to understand how our website is used, where this does not override your rights.
- Consent (Article 6(1)(a) GDPR): Where you have provided consent through our cookie consent mechanism, we process data for analytics and marketing cookies as described in our Cookie Policy.
5. How Long We Retain Your Data
We retain personal data only for as long as necessary for the purposes for which it was collected:
- Enquiry data where no service engagement follows: up to 12 months from the date of enquiry
- Client data where services are engaged: up to 6 years from the end of the service engagement, for legal and accounting compliance purposes
- Technical and cookie data: as specified in our Cookie Policy, typically 13 months maximum
6. Who We Share Your Data With
We do not sell your personal data to third parties. We may share your data with:
- Service providers: Third-party providers who assist us in operating our website and delivering services (such as email hosting and website hosting providers), who process data only on our instructions under data processing agreements
- Professional advisers: Lawyers and accountants where necessary for legal compliance
- Public authorities: Where required by law or court order
Where personal data is transferred outside the European Economic Area, we ensure appropriate safeguards are in place in accordance with Chapter V of the GDPR.
7. Your Rights Under GDPR
You have the following rights regarding your personal data:
- Right of access (Article 15): You may request a copy of the personal data we hold about you.
- Right to rectification (Article 16): You may request correction of inaccurate or incomplete data.
- Right to erasure (Article 17): You may request deletion of your data where no legal basis for retention exists.
- Right to restriction of processing (Article 18): You may request that we restrict processing of your data in certain circumstances.
- Right to data portability (Article 20): You may request your data in a structured, machine-readable format where processing is based on consent or contract.
- Right to object (Article 21): You may object to processing based on legitimate interests.
- Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
- Right to lodge a complaint: You have the right to lodge a complaint with the CNPD (www.cnpd.pt).
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
8. Cookies
We use cookies on this website. Please refer to our Cookie Policy for full details of the cookies we use, their purposes, and how to manage your preferences.
9. Website Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. However, no internet transmission is entirely secure, and we cannot guarantee absolute security.
10. Links to Other Websites
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The date at the top of this page indicates when it was last revised. We encourage you to review this policy periodically.
12. Contact
For any questions about this Privacy Policy or our data practices, please contact us at:
Crystal Indexarium
R. António Saúde 11, 1500-048 Lisboa, Portugal
Email: [email protected]
Tel: +351 217 248 610