Tiago Garcia — Imobiliária TGTalk to me

Privacy Policy

Last updated: 11 September 2026

This Privacy Policy explains how your personal data is processed when you visit tiagogarcia.pt, browse properties, or use the contact forms available on the site.

Personal data is processed in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation ("GDPR"), with Portuguese Law no. 58/2019 of 8 August, and with the remaining legislation applicable to real estate mediation and to the prevention of money laundering and terrorist financing.

1. Who is responsible for processing your data

Controller: MVVBP — Sociedade de Mediação Imobiliária, Lda., company number 517302853, with registered office at Rua Alfredo Silva n.º 14, 1.º Dto., Alfragide, 2610-016 Amadora, Portugal, holder of real estate mediation licence AMI no. 21960.

This site is managed by MVVBP — Sociedade de Mediação Imobiliária, Lda., and is used by Tiago Garcia, real estate consultant, in the course of the activity carried out under that licence.

The controller is the entity that decides why and how your personal data is used, and to whom you may address any request concerning that data.

For privacy matters, or to exercise your rights, you may contact:

Email: privacidade@tiagogarcia.pt

Real estate mediation is carried out under licence AMI no. 21960 and within the Keller Williams Portugal network. Any processing of data carried out by the network, where applicable, is governed by the network's own privacy policy, available at www.kwportugal.pt.

Data Protection Officer: no Data Protection Officer has been appointed, as the conditions set out in Article 37 GDPR are not met. Requests concerning personal data are handled directly by the controller, at the contact above.

2. What personal data is collected

2.1. Data you provide through the forms

The site offers two forms:

  • a general contact form;
  • a property enquiry form.

Through these forms, the following may be collected:

  • name;
  • email address;
  • telephone number, where provided;
  • message;
  • property reference, where the enquiry concerns a specific property.

There is no newsletter subscription form.

2.2. Information associated with the form submission

When you submit a form, the following may also be recorded:

  • the address of the page from which the enquiry was sent;
  • UTM campaign parameters, where present;
  • the language used.

The forms include a mandatory tick box through which you confirm that you have read this Privacy Policy. That confirmation does not constitute consent within the meaning of Article 6(1)(a) GDPR, and it does not change the legal basis applicable to each processing operation, set out in the following section.

2.3. Technical access data

The site's hosting records technical data necessary for operation, security and abuse prevention, including the IP address.

This data is not used to build commercial profiles of visitors, nor to track their activity on other websites.

3. Why your data is used and on what legal basis

3.1. Responding to enquiries and requests for information

Your data is used to receive, review and respond to messages sent through the site, including requests for information about properties.

*Legal basis:* steps taken at your request prior to entering into a contract, under Article 6(1)(b) GDPR.

3.2. Handling purchase, sale or letting processes

Where an enquiry develops into a commercial relationship, the necessary data may be processed to handle the corresponding real estate process, including preparing and carrying out the acts required for the purchase, sale or letting.

*Legal basis:* performance of a contract, or pre-contractual steps, under Article 6(1)(b) GDPR.

3.3. Protecting the forms and the site against spam, abuse and automated use

The technical data strictly necessary to protect the site and its forms against spam, automated programs, abusive use and other security risks is processed. Cloudflare Turnstile is used for this purpose.

*Legal basis:* legitimate interest in the security of the site, its systems and its contact channels, under Article 6(1)(f) GDPR.

3.4. Meeting legal obligations relating to real estate mediation and anti-money laundering

Where an enquiry develops into a relationship or transaction covered by the legal obligations applicable to the real estate sector, the data necessary to meet those obligations may be processed. Those obligations may include duties of identification, due diligence, record keeping, retention and reporting required by law in the context of real estate activity and of the prevention of money laundering and terrorist financing.

*Legal basis:* compliance with a legal obligation, under Article 6(1)(c) GDPR.

4. Who your data may be shared with

Personal data is not sold.

To operate the site and to follow up on enquiries, the following processors are used, which process data on behalf of the controller:

  • Cloudflare — site hosting, infrastructure security, and bot protection through Cloudflare Turnstile.
  • Resend — sending the email notification associated with each enquiry submitted through the site.
  • Pipedrive — CRM system, used to record and follow up on enquiries received.
  • Sanity — management of the site's content and hosting of property images.

Where an enquiry develops into a real estate transaction, the necessary data may further be disclosed, depending on the process in question, to:

  • notaries;
  • land and commercial registries;
  • lawyers and solicitors;
  • credit institutions;
  • other licensed real estate agents involved in the transaction;
  • public authorities, where required by law.

Only the data necessary for the purpose in question is disclosed.

5. OpenStreetMap maps

Some property demonstration pages may embed OpenStreetMap maps. When you visit a page containing one of these maps, the map is loaded directly by your browser. That connection involves transmitting to the infrastructure used by OpenStreetMap the technical data needed to answer the request, including the IP address associated with the connection.

OpenStreetMap is not used by this site for advertising, remarketing or tracking users across other websites.

6. International data transfers

Some of the technology providers identified in this Policy may, depending on their infrastructure and how the service is organised, involve processing of or access to data from countries outside the European Economic Area.

Whenever there is an international transfer of personal data subject to Articles 44 and following of the GDPR, that transfer is covered by a legally valid mechanism, namely an applicable adequacy decision or standard contractual clauses approved by the European Commission.

You may request further information about the safeguards applicable to each provider through the contact given in section 1.

7. How long your data is kept

Personal data is kept only for as long as necessary to fulfil the purpose for which it was collected, without prejudice to retention periods imposed by law.

7.1. Enquiries that do not develop into a client relationship

Data relating to enquiries that do not develop into a client relationship is kept for five years from the last contact.

After that period, the data is deleted or anonymised, unless another legal basis justifies keeping it.

7.2. Client files and real estate transactions

Where there is a contractual relationship or a real estate transaction, the necessary data is kept for the periods required by applicable legislation.

In particular, the anti-money laundering legislation applicable to real estate activities provides, for certain documents, records and items relating to identification, due diligence and transactions, a retention period of seven years, under the terms legally applicable.

Other retention periods may apply where these arise from specific legal obligations or from the need to keep material relating to judicial or administrative proceedings.

7.3. Technical security data

Technical access data is kept only for as long as necessary for security, abuse prevention and the operation of the infrastructure, in line with the retention periods applicable to the hosting service.

7.4. Record in the event of a delivery failure

If, because of a technical failure, the notification associated with your enquiry cannot be delivered, the content of that enquiry is recorded in the technical logs of the hosting platform, so that your request can be recovered and answered rather than lost. This does not happen in normal operation.

These logs are deleted automatically by the hosting platform at the end of the retention period applicable to the service, and are not used for any other purpose. The purpose and legal basis are those set out in section 3.1.

8. Your rights

Under the GDPR, and within the limits applicable to each situation, you may exercise the following rights:

  • the right of access to your personal data;
  • the right to rectification of inaccurate or incomplete data;
  • the right to erasure;
  • the right to restriction of processing;
  • the right to object to processing based on legitimate interest;
  • the right to data portability, where applicable.

Some of these rights may not apply where keeping or processing the data is necessary to comply with a legal obligation, or to establish or defend legal claims.

You may exercise your rights, free of charge, through the contact given in section 1.

You may be asked for additional information to confirm your identity, where that is necessary to ensure that data is only released or amended at the request of the person it belongs to.

Your request is answered within one month of its receipt. That period may be extended by two further months where the request is particularly complex, in which case you will be informed of the extension and of the reasons for it, under Article 12(3) GDPR.

9. Right to lodge a complaint

If you consider that the processing of your personal data infringes applicable law, you have the right to lodge a complaint with the Portuguese supervisory authority:

Comissão Nacional de Proteção de Dados (CNPD)
Av. D. Carlos I, 134, 1.º — 1200-651 Lisbon, Portugal
Telephone: (+351) 213 928 400
Email: geral@cnpd.pt
www.cnpd.pt

The right to lodge a complaint does not affect your ability to use any other administrative or judicial remedy available under the law.

10. Cookies, analytics and user tracking

This site was designed to keep tracking of visitors to a minimum.

At present:

  • the site does not use its own cookies;
  • it does not use Google Analytics;
  • it does not use advertising pixels;
  • it does not use remarketing systems;
  • it does not track your activity on other websites;
  • it does not use localStorage or sessionStorage to track visitors;
  • the fonts used by the site are hosted on the site's own domain and generate no requests to Google;
  • links to social networks and WhatsApp are plain outbound links, with no widgets from those platforms embedded in the site.

Cloudflare Turnstile, used to protect the forms against automated use, may set a strictly necessary cookie to distinguish a person from an automated program.

The site may use Cloudflare Web Analytics to obtain aggregate statistical information about how the site is used. If that feature is enabled, it will be used in its cookieless mode, without collecting personal data.

No analytics mechanism intended to identify an individual visitor, or to follow their browsing across different sites, is used.

11. Data security

Technical and organisational measures are in place to protect personal data against unauthorised access, loss, alteration, improper disclosure or destruction. These measures include the use of hosting infrastructure and of mechanisms designed to protect the site and its forms against abuse and automated access.

No computer system can guarantee absolute security. The measures adopted are therefore reviewed in light of the risks and of technological developments.

12. Changes to this Privacy Policy

This Policy may be updated where there are legal or technical changes, or changes in the way the site processes personal data. The version in force will always be available on this page, together with the date it was last updated.

Talk to me on WhatsApp