Privacy policy
Last updated: 21 October 2026
1. Who is responsible for your data
The nozinvestimentos.com website belongs to the NOZ group, made up of two companies. Each one is the controller of the data of the requests and clients that concern it:
- NOZ Investimentos Imobiliários, Unipessoal, Lda., tax no. (NIPC) 517 748 134, registered office in Braga — real estate investment, investor advisory and asset management.
- Daniel Ferreira Nogueira Unipessoal, Lda. (NOZ Mediação), tax no. (NIPC) 519 231 449, registered office in Vila Nova de Gaia — real estate brokerage, AMI licence no. 26901 (IMPIC).
For any question about your data: geral@nozinvestimentos.com or the form on the contact page (“My data rights”).
2. What data we collect
- When you contact us through the website: name, email, phone (optional only for data-protection rights requests), your message and, where applicable, the property of interest and the preferred viewing date. We also record the date of the request and an irreversible technical code derived from the IP address, used only to prevent abuse.
- When you become a client: the data needed for the service (for example, identification and property details in a brokerage or management contract), including data required by law.
- Usage statistics: see section 6.
3. Purposes and legal bases
- Responding to your request (information, viewing, valuation, quote, contact) — steps taken at your request prior to entering into a contract.
- Providing the contracted services (brokerage, investment advisory, asset management) — performance of a contract.
- Sending property news and opportunities, only with your express consent, which you may withdraw at any time (link in every email or request through the contact page).
- Complying with legal obligations, in particular tax and anti-money laundering obligations applicable to real estate activity.
- Website security and abuse prevention — NOZ’s legitimate interest.
4. How long we keep data
- People who agreed to receive news: contact details (name, email, phone) and stated interests are kept for as long as consent remains in place. If you withdraw it, we stop using them for that purpose and keep the record of consent only to demonstrate that it was given.
- Contact requests and client records with no transaction and no consent to receive news: 5 years after the last contact. Each new contact restarts this period. At the end, the data is anonymised.
- Clients with a contract: for the duration of the contract and then for the legal periods — 7 years for identification data required by anti-money laundering law and 10 years for accounting and tax documents.
- Usage statistics: 13 months, deleted automatically.
- Backups: up to 30 days, encrypted.
5. Who we share data with
We do not sell personal data. Data is only accessible to NOZ staff who need it and to the service providers below, who process it on our behalf and on our instructions:
- Hetzner Online GmbH (Germany) — hosting of the website and backups, in data centres in Finland and Germany (European Union).
- Namecheap, Inc. — email service for the nozinvestimentos.com domain.
- Google (Gmail) — mailbox where NOZ receives notifications of new requests.
Namecheap and Google are based in the United States. Where data is transferred outside the European Economic Area, this is done with the safeguards provided for in the GDPR (for example, standard contractual clauses approved by the European Commission or the EU-US Data Privacy Framework).
Where necessary to complete a transaction, and with your knowledge, data may be disclosed to other parties involved (for example, notaries, solicitors or lenders). We also disclose data to the authorities where required by law.
External services contacted only by your browser: property maps are loaded from OpenStreetMap (which receives your IP address in order to send the map), and YouTube or Vimeo videos are only loaded if you click “Play video”.
6. Usage statistics
We collect, on our own server, aggregated statistics on how the website is used: pages viewed, country estimated from the IP address, language, device type and referring website. The IP address is used only at that moment to estimate the country and is not stored. Legal basis: NOZ’s legitimate interest in understanding how its website is used. Visitor and session identifiers are only used if you accept “Audience measurement” in the cookie notice.
7. Your rights
You have the right of access, rectification, erasure, restriction, portability and objection, and you may withdraw consent at any time without affecting processing carried out before then. You can exercise these rights through the contact page (“My data rights”) or by email to geral@nozinvestimentos.com. We reply within one month.
You also have the right to lodge a complaint with the Portuguese data protection authority (CNPD — www.cnpd.pt).
8. Security
The website uses an encrypted connection (HTTPS). Access to data is restricted by role and logged, and backups are encrypted before leaving the server.
9. Cookies
Please see our cookie policy.
10. Changes
This policy may be updated. The date of the last update is shown at the top of the page.
This translation is provided for convenience; in case of discrepancy, the Portuguese version prevails.