Privacy Policy

Privacy Policy

Privacy Policy (Casa & Key Algarve)

Effective Date: October 21, 2025

Casa & Key Algarve respects your privacy and is committed to protecting your personal data. This policy explains how we collect, use, and share your information and your rights under GDPR.

1. Who We Are

Casa & Key Algarve and its brands are owned by Elizabeth Freitas Pimenta Unipessoal LDA.

Data Controller:
Elizabeth Freitas Pimenta Unipessoal LDA

DPO Contact:
Elizabeth Freitas Pimenta
Email: info@casaandkeyalgarve.com
Address: Rua Drummond De Andrade Lote 26 1F, Portimão 8500-610
Phone: (+351) 966 509 048

2. How We Collect Your Data

  • Direct interactions: Forms, emails, calls, consultations, newsletter sign-ups, purchases, promotions, or feedback.

  • Automated technologies: Cookies, server logs, analytics, website interactions.

  • Third parties/public sources: Analytics providers (e.g., Google), social media, advertising networks, and search information providers.

3. Data We Collect

  • Identity Data: Name, username, marital status, title

  • Contact Data: Address, email, phone

  • Marketing & Communications Data: Preferences for receiving marketing

  • Transaction Data: Payments, purchases

  • Technical Data: IP address, browser info, device info

  • Profile Data: Client ID, purchases, interests, feedback

  • Usage Data: Website and service usage patterns

Aggregated Data: May be used for analytics and improvements; anonymized and not considered personal data.

4. How We Use Your Data

  • To provide and manage our services

  • For legitimate business interests, legal obligations, or performance of contracts

  • For marketing communications (with consent)

  • To share with trusted partners when relevant, including Excel Currencies Ltd for follow-ups and services

Opting Out: You can withdraw consent or opt out of marketing at any time via info@casaandkeyalgarve.com

5. Disclosures of Your Data

  • Internal: Our brands and teams

  • External: Professional advisers, regulators, commercial partners, service providers

  • Business Transfers: In case of mergers, sales, or acquisitions

All third parties are required to protect your data and only process it according to our instructions.

6. Data Security

We implement technical and organizational measures to protect your data and limit access to authorized personnel. Suspected breaches are addressed promptly and reported when legally required.

7. Data Retention

  • Data is kept only as long as necessary for legal, contractual, or business purposes

  • Client records are retained for six years for tax purposes

  • You may request deletion where legally permissible

8. Your Legal Rights

You have rights under GDPR:

  • Access: Obtain a copy of your data

  • Correction: Update inaccurate or incomplete data

  • Erasure: Delete your data where permitted

  • Object: To processing, including for marketing

  • Restrict Processing: Suspend processing in certain scenarios

  • Transfer: Receive your data in a portable format

  • Withdraw Consent: Revoke previously given consent

Requests are generally responded to within 1 month, or sooner in urgent situations. Contact: info@casaandkeyalgarve.com

9. Lawful Basis for Processing

  • Legitimate Interest: To provide services and manage business operations

  • Contract Performance: To fulfill contractual obligations

  • Legal Obligations: Compliance with laws and regulations

  • Consent: For marketing communications

10. Third Parties

  • Internal: Brands controlled by Elizabeth Freitas Pimenta Unipessoal LDA

  • External: Lawyers, accountants, auditors, regulators, commercial partners, and service providers