Privacy policy

1. Data controller

This website is operated by Prime Villas Ltda, registered under CNPJ no. 58.402.519/0001-86 and with CRECI-RJ nº 12130, with headquarters at Av. Nossa Senhora de Copacabana, 1126, Copacabana, Rio de Janeiro, RJ, 22060-002, acting as the controller of the personal data processed through it, under Brazilian Law no. 13,709/2018, the General Data Protection Law (LGPD).

2. Personal data collected

Website forms (visit requests, contact, property valuation and buyer profile): name, email, phone or WhatsApp, country, message and the information provided by the data subject about the property sought or about the property he or she owns, such as destination, property type, investment range, time frame, city and area. In the new properties sign-up, only the email address, confirmed through a link sent to it; requests that are not confirmed are discarded after 48 hours.

Browsing: the website stores on the user’s device only the display preference between the light and the dark version, and the currency chosen for prices. Without the user’s authorization, no advertising or tracking cookies are used. Visits and clicks on the contact buttons are counted in aggregate and anonymously, without cookies and without recording the IP address. Maps are loaded from the MapTiler service, with OpenStreetMap data, which receives the IP address of the device in order to display them. The server records technical access data, such as IP address, date and time, for the period required by the Brazilian Internet Civil Framework (Law no. 12,965/2014). During the visit, and only while the browser tab is open, the site keeps the properties viewed and the last search, to suggest similar properties, and the origin of the visit (campaign, ad or referring site), which is recorded with the contact when the data subject sends a form.

Phrase search: the text typed in the description line of the search is sent to an artificial intelligence provider (Google), without email addresses or phone numbers, solely to be turned into search filters. The text is not stored; only the resulting filters are recorded, with no information about who searched. Personal data should not be entered in this line.

WhatsApp and email: communications through these channels include the sender’s phone number or email address and the content of the messages.

3. Purposes of processing

• Handling the data subject’s requests, including the scheduling and follow-up of visits.
• Sending property options that match the profile provided.
• Valuation and marketing of properties, when the data subject is an owner who engages the services of Prime Villas.
• Handling offers, negotiations and the documentation of purchases, sales or rentals.
• Compliance with the legal and regulatory obligations of the real estate business, including those related to the prevention of money laundering.
• Website security and fraud prevention.
• Sending new properties by email to those who signed up and confirmed their address; the sign-up can be cancelled at any time through the contact channels.
• Identifying the origin of contacts (campaigns and ads), to assess the promotion of the site.

4. Legal bases

Processing is based on the consent of the data subject, given through the authorization box of the forms; on the performance of preliminary procedures related to a contract, at the request of the data subject, such as visits and offers; on compliance with a legal or regulatory obligation; and on the legitimate interest of Prime Villas in keeping the website secure and improving its service, with due regard to the fundamental rights and freedoms of the data subject.

5. Sharing

Prime Villas does not sell personal data. Data is shared only as necessary for the purposes described, with:

• the owner of the property or his or her representative, in the case of a visit request or an offer;
• lawyers, notary offices, financial institutions and translators involved in purchases, sales or rentals;
• companies of the same economic group that take part in the service;
• service providers that operate the website and email, such as hosting and message delivery, bound by contract and by a duty of confidentiality;
• public authorities, when required by law or court order.

6. International transfer

Some service providers and group companies may store or access personal data outside Brazil. In these cases, the safeguards set out in articles 33 to 36 of the LGPD are adopted.

7. Retention period

Contact data is kept during the service and for up to five years after the last contact, to maintain the history and to allow the regular exercise of rights in judicial, administrative or arbitration proceedings. When the law requires a longer period, the legal period prevails. At the end of the period, the data is deleted or anonymized.

8. Rights of the data subject

Under article 18 of the LGPD, the data subject may at any time request: confirmation that processing takes place and access to the data; correction of incomplete, inaccurate or outdated data; anonymization, blocking or deletion of unnecessary or excessive data, or of data processed in breach of the law; portability; deletion of data processed on the basis of consent; information about the entities with which the data has been shared; and withdrawal of consent. The data subject may also object to processing carried out on another legal basis, in case of non-compliance with the law.

Requests should be sent to info@primevillas.com and will be answered within 15 days. The data subject may also file a petition with the Brazilian National Data Protection Authority (ANPD).

9. Data protection officer

The officer in charge of personal data processing can be contacted at info@primevillas.com.

10. Information security

Technical and administrative protection measures are in place, such as encrypted connections, access to the website administration restricted to authorized people with strong passwords and a limit on login attempts, a record of form submissions and continuous system updates. In the event of a security incident that may result in relevant risk or damage to data subjects, Prime Villas will notify the affected data subjects and the ANPD, as required by law.

11. Minors

This website is intended for persons over 18 years of age. Prime Villas does not knowingly collect personal data from children or adolescents.

12. Changes to this policy

This policy may be updated at any time. The version in force is the one published on this page, with the date of its last update.