Privacy notice

Controller

Yan Dobromyslov, Portugal, is the controller for this information. Privacy requests can be sent to info@realseoestate.com.

What the form collects

The form records the fields you enter: your name, email address, website, business type, form location, and message. Required fields are needed to receive and assess the enquiry; submitting the form is optional.

Cloudflare Turnstile separately processes network, browser, and request signals to distinguish people from automated abuse. Its token is verified and is not stored in the enquiry record or event log.

Purpose and legal basis

The information is used to assess and reply to a voluntary business enquiry and protect the form from abuse. The legal basis is legitimate interests under Article 6(1)(f) GDPR.

Enquiry data is not used for unrelated marketing. Automated anti-abuse checks may reject likely spam, but they do not make a legal or similarly significant decision about a person.

Processors and international processing

Local SQLite storage, Proton Drive, Cloudflare, and Google process and deliver the form: the active record lives in a private local SQLite database; Proton Drive stores end-to-end encrypted backup copies; Cloudflare protects and relays the form; and Google delivers the acknowledgement and minimal operator notification and hosts the contact mailbox used for replies and rights requests.

These providers and their subprocessors may process information outside the European Economic Area. Depending on the provider and destination, applicable safeguards include European Commission standard contractual clauses, adequacy decisions, and the EU-US Data Privacy Framework. A copy of the applicable safeguards can be requested at the address above.

Retention

The submitted form record is deleted 12 months after submission. It may be deleted sooner when it is invalid, a test, contains inappropriate sensitive information, is no longer needed for the stated purpose, or a valid deletion or objection request applies. If work begins, only information needed for that work moves to separately governed client records.

Technical consult-event records contain no form contents and are deleted after 30 days. Google mailbox messages have no fixed automatic deletion schedule. Deleted information can remain temporarily in restricted disaster-recovery backups until the relevant backup expires; those copies are not used for ordinary operations.

Your rights

Depending on the circumstances, you may request access to, correction or deletion of your information, restriction of processing, or object to processing based on legitimate interests. Portability applies where its legal conditions are met. Identity may need to be verified before a request is completed.

You may also complain to Portugal's Comissão Nacional de Proteção de Dados or the data-protection authority where you live or work.