Privacy Policy

Forma Flaga operates through COORDENADA GENEROSA - LDA, NIPC 519625072, Portugal.

The controller of personal data is COORDENADA GENEROSA - LDA. Privacy enquiries and rights requests: info@formaflaga.com.

This policy covers this website, its forms, requested materials and correspondence with our team by email or your chosen channel. We receive information directly from you and technical information about your visit. Third-party websites and messaging services have their own policies.

If a particular service requires additional documents or information about other people, the relevant processing information is provided separately before collection. Do not submit passport copies, health information or criminal-record information through general enquiry forms.

Acknowledging this policy in a form does not subscribe you to marketing. Analytics and advertising pixels load automatically when the site opens; the current cookie notice does not obtain prior consent or control their loading.

Staff who need information to handle your enquiry may access it. Technical recipients include Vercel (hosting), Resend (email delivery) and Bitrix24 (CRM, where configured). Web analytics and advertising attribution services load automatically when a page opens.

Google Fonts provides website fonts. Your browser requests them from Google and transmits technical request information, including its IP address. This separate external request is not controlled by the analytics-cookie choice.

Agreed services may require relevant lawyers, property specialists and other partners to receive data. The scope and purpose depend on the particular service; a general enquiry does not authorise unlimited disclosure or partners' independent marketing. Authorities may receive information where required by law.

Some providers or partners may process data outside the European Economic Area. Opening a page sends requests to web analytics and advertising attribution providers. CRM processing locations depend on the particular Bitrix24 account and configuration.

GDPR requires a separate lawful transfer mechanism: an applicable adequacy decision or appropriate safeguards, such as standard contractual clauses, together with the necessary transfer assessment. Dismissing the cookie notice is not consent and does not replace these requirements. You may request details of the applicable mechanism and a copy of safeguards relevant to your data at info@formaflaga.com.

Enquiries and correspondence are retained while necessary to handle your request and related next steps. Necessity is assessed against the enquiry's status, the last meaningful contact and any contract or dispute; obsolete information is to be deleted or anonymised.

Contractual and accounting records are kept for the applicable mandatory period. Optional mailing data is used until consent is withdrawn; minimal suppression information may be retained to prevent re-subscription without permission. Choice and confirmation records are retained only as necessary to demonstrate lawfulness.

Acknowledgement of the cookie notice is stored in this browser for 180 days. It is not tracking permission. Technical-log and third-party retention depends on the relevant settings and obligations; you may ask us about particular data.

Where applicable, you may obtain access and a copy, rectification, erasure, restriction, portability and object to processing based on legitimate interests. You may object to direct marketing at any time. Consent can be withdrawn without affecting the lawfulness of previous processing.

Email info@formaflaga.com with your request and the contact you used. Requests are normally free and answered within one month. Complex or numerous requests may require up to two further months; we will explain any extension within the first month. Identification is requested only where there are reasonable doubts and only to the extent necessary.

You may complain to Portugal's CNPD or the competent authority where you habitually live, work or believe an infringement occurred. Erasure may be limited by mandatory retention or the need to establish, exercise or defend legal claims.

Analytics and advertising scripts load automatically when a page opens. Cookie information in the footer reopens the notice; it does not disable scripts. You can restrict tracking and delete cookies using browser controls or a content blocker. This does not replace the website’s duty to obtain prior consent where required by law.

Required fields are needed to send requested materials or respond. Other information is voluntary. Optional cookies and marketing subscriptions are not conditions of a consultation.

The website does not make solely automated decisions with legal or similarly significant effects. Calculators provide indicative results; an adviser assesses individual routes and consultations. Advertising providers may use browser events for attribution and profiling under their own rules when advertising pixels load automatically.

The current date and version are published here. Changes to processing purposes, providers or permission categories are reflected in this information, and fresh consent is requested where necessary.