Privacy Policy

ZuGruppe — Mediação Imobiliária, Lda. ("ZuGruppe", "we" or the "data controller") respects the privacy of users of zuhaus.pt and all clients and contacts who interact with our real estate brokerage business. This policy explains how we collect, use and protect your personal data in accordance with the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and Portuguese Law no. 58/2019.

1. Data controller

• Company: ZuGruppe — Mediação Imobiliária, Lda.

• AMI/IMPIC: 11355

• GDPR email: rgpd@zugruppe.com

2. Data we collect

We collect the following categories of personal data:

• Identification: name, email and telephone number provided through contact forms, information requests or website registration.

• Property search data: property preferences (bedrooms, location and budget), properties viewed or saved, and viewing history.

• Communications: the content of messages exchanged with us (email, WhatsApp and website forms) and records of contacts made.

• Technical data: IP address, device type, browser, cookies and browsing data for analytics and security purposes.

3. Purposes of processing

• Responding to property enquiries and contact requests.

• Real estate brokerage: presenting offers, arranging viewings and supporting purchases, sales and rentals.

• Property marketing: sending opportunities and news with your consent.

• Complying with legal obligations, including invoicing, accounting and anti-money laundering requirements.

4. Legal basis for processing

• Contract performance / pre-contractual steps: responding to requests and providing real estate brokerage services.

• Consent: sending marketing communications.

• Legitimate interests: demand analysis, website security and service improvement.

• Legal obligation: retaining tax and accounting documents.

5. Data sharing

Your data may be shared with:

• Partner property portals (for example idealista, Supercasa and Casa Sapo) for publishing properties presented to you.

• Service providers: our CRM platform, email provider and communication tools (WhatsApp Business), strictly to deliver the service.

We never sell your personal data. Data processors act only on our instructions and are subject to contractual confidentiality safeguards.

6. Retention periods

We retain data for as long as necessary for the stated purposes. Property search and marketing data are retained while a legitimate interest or consent remains valid; consent may be withdrawn at any time. Tax and accounting documents are retained for the applicable statutory period, generally 10 years.

7. Cookies

The zuhaus.pt website uses:

• First-party technical cookies: essential for the website to function and not subject to consent.

• Analytics cookies: used to measure and improve website use, activated only with your consent.

You can manage your cookie preferences at any time using Manage Data in the footer.

8. Your rights under the GDPR

You may exercise the following rights over your personal data at any time:

• Access to the data we hold about you.

• Rectification of inaccurate or outdated data.

• Erasure (the "right to be forgotten").

• Restriction of processing.

• Data portability.

• Objection to processing, including marketing.

• Lodging a complaint with the supervisory authority, CNPD, the Portuguese Data Protection Commission.

9. How to exercise your rights

To exercise any of these rights, email rgpd@zugruppe.com. We will respond within 30 days. You may also lodge a complaint with the CNPD.