Privacy notice

Controller

Yan Dobromyslov, Portugal, is the controller for this information. Privacy requests can be sent to info@realseoestate.com.

What the form collects

The form records the fields you enter: your name, email address, website, the clients or searches you want more of, your monthly budget, and the form's location. Required fields are needed to consider the application and reply to it; submitting the form is optional.

Cloudflare Turnstile separately processes network, browser, and request signals to distinguish people from automated abuse. Its token is verified and is not stored in the inquiry record or event log.

Purpose and legal basis

The information is used to consider an application, reply to a voluntary business inquiry and protect the form from abuse. The legal basis is legitimate interests under Article 6(1)(f) GDPR.

Inquiry data is not used for unrelated marketing. Automated anti-abuse checks may reject likely spam, but they do not make a legal or similarly significant decision about a person.

Processors and international processing

Local SQLite storage, Proton Drive, Cloudflare and Google process and deliver the form: the active record lives in a private local SQLite database; Proton Drive stores end-to-end encrypted backup copies; Cloudflare protects and relays the form; and Google delivers the acknowledgement and your application to the operator's mailbox, and hosts the contact mailbox used for replies and rights requests.

These providers and their subprocessors may process information outside the European Economic Area. Depending on the provider and destination, applicable safeguards include European Commission standard contractual clauses, adequacy decisions, and the EU-US Data Privacy Framework. A copy of the applicable safeguards can be requested at the address above.

Retention

The submitted form record is deleted 12 months after submission. It may be deleted sooner when it is invalid, a test, contains inappropriate sensitive information, is no longer needed for the stated purpose, or a valid deletion or objection request applies. If work begins, only information needed for that work moves to separately governed client records.

Technical consult-event records contain no form contents and are deleted after 30 days. Google mailbox messages have no fixed automatic deletion schedule. Deleted information can remain temporarily in restricted disaster-recovery backups until the relevant backup expires; those copies are not used for ordinary operations.

Your rights

Depending on the circumstances, you may request access to, correction or deletion of your information, restriction of processing, or object to processing based on legitimate interests. Portability applies where its legal conditions are met. Identity may need to be verified before a request is completed.

You may also complain to Portugal's Comissão Nacional de Proteção de Dados or the data-protection authority where you live or work.