Privacy Policy (GDPR)
Last updated: October 2026
Data controller
Dava Estate (Porto, Portugal). Contact for privacy matters: geral@davaestate.com.
Data we collect
Through the contact form: your name, email, phone and message. Through measurement tools: aggregated, anonymous usage data.
Purposes and legal bases
Answering your request and providing our services: pre-contractual measures at your request and, where applicable, performance of a contract (Art. 6(1)(b) GDPR). Aggregated audience measurement: legitimate interest in improving the site (Art. 6(1)(f) GDPR). Marketing communications, where applicable: consent (Art. 6(1)(a) GDPR).
Retention
Contact data is kept for as long as needed to handle your request and, at most, 24 months after the last contact, unless a legal obligation or an ongoing contract applies.
Recipients
We do not share your data with third parties for commercial purposes. Data may be shared with strictly necessary providers (e.g. hosting and email delivery) and with authorities where required by law.
Your rights
You may exercise your rights of access, rectification, erasure, restriction, portability and objection, and withdraw consent at any time, by emailing geral@davaestate.com. You may also lodge a complaint with the Portuguese data protection authority (CNPD, www.cnpd.pt).
Security
Appropriate technical and organisational measures protect personal data against unauthorised access, loss or alteration.