Privacy Policy

Who is responsible

Aliança Portuguesa para a Migração por Investimento, known as PIMA, is the controller for the personal data processing described in this policy. Contact privacy@pima.com.pt or write to Avenida da Liberdade, 110, 1.º andar, 1269-046 Lisboa, Portugal.

This policy covers pima.com.pt, its enquiry forms and related correspondence. A separately engaged professional is responsible for explaining their own use of personal data.

Enquiries and professional participation

We receive the information you choose to provide. A specialist enquiry may contain your name, email, nationality, country of residence, enquiry topic, timeframe, optional telephone number and message. A participation enquiry may include your organisation, professional area, website and registration details. Required fields are marked on the form; without suitable contact details we cannot respond.

The form sends the information through our protected server endpoint to the designated PIMA mailbox. It does not publish your message or create a public profile. Please do not submit passport copies, bank statements, medical information, criminal record details or sensitive case documents.

We use enquiries to understand the request, respond and manage correspondence, based on our legitimate interest in operating a useful enquiry service. If you request a professional introduction, we identify the intended recipient and obtain your consent before forwarding your personal information. We do not treat an enquiry as consent to marketing.

Website delivery and security

Cloudflare provides hosting, website delivery and form protection. Technical information can include IP address, request time, browser information, the requested address and security signals. Turnstile helps distinguish genuine form requests from automated abuse.

We use this processing for our legitimate interests in providing a reliable website, preventing spam and protecting communications. Cloudflare also explains its own processing for improving Turnstile in its privacy notice. PIMA does not include enquiry contents in application diagnostic logs.

Optional analytics

With your consent, PostHog receives a limited set of events to help us understand which pages are useful, how visitors navigate and whether enquiry forms work. Events can include a page path, language, selected navigation or form actions, a submission outcome and a temporary session identifier.

We do not send your name, email, telephone number, nationality, free-text message or other form answers to analytics. Session recording and automatic capture of page interactions are disabled. Technical identifiers can nevertheless be personal data; this is not described as anonymous tracking.

Analytics is blocked until you accept. Rejecting it does not prevent browsing or submitting an enquiry. Use Privacy settings in the footer to withdraw consent and stop further analytics collection. Withdrawal does not undo processing that was lawful before it.

Recipients and international processing

Access to enquiries is limited to people handling PIMA correspondence and the service providers necessary to host the website, protect the form and deliver or store email. PostHog processes optional analytics. A proposed professional receives your details only after the introduction has been explained and you have agreed.

PIMA uses the US Cloud region of PostHog for optional analytics. This involves processing in the United States. PIMA requires the applicable data-processing terms and international-transfer safeguards for this service.

Technology providers may process information outside the European Economic Area. Where a restricted transfer is involved, we require an applicable adequacy decision or appropriate safeguards, such as the European Commission’s standard contractual clauses. You can request information about the relevant providers and safeguards through privacy@pima.com.pt.

How long information is kept

Routine enquiries and participation correspondence are retained for up to 12 months after the last substantive interaction. If a continuing relationship, legal obligation or specific dispute requires longer retention, the relevant records are kept only for that purpose and the applicable period.

Security records are kept for the period needed to operate the relevant protection service and investigate or resolve incidents. Enquiry content is not stored in the form endpoint’s own database.

For duplicate-submission protection, the endpoint keeps a keyed fingerprint and delivery status for up to 24 hours. This technical record does not contain the enquiry body, email address or IP address.

Analytics records are retained while needed to compare website performance and assess improvements, with their continuing need reviewed at least annually. A provider’s analytics query window is not a promise of automatic deletion. The duration of storage on your device is set out in the Cookie Policy.

Your rights and choices

You may request access, correction, erasure, restriction or portability where applicable, and object to processing based on legitimate interests. Where consent is the basis, you may withdraw it. PIMA does not use enquiries to make solely automated decisions with legal or similarly significant effects.

Send requests to privacy@pima.com.pt with enough information to locate the relevant correspondence. We may need proportionate information to verify your identity. You may complain to the Comissão Nacional de Proteção de Dados or another competent supervisory authority.