Privacy Policy
and Personal Data Protection
The privacy and personal data protection policy of Best Investments aims to inform users and data subjects about the general rules governing the processing of personal data and special categories of personal data.
All such data is collected and processed in strict compliance with the applicable data protection legislation, particularly Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016 (hereinafter referred to as the GDPR).
Best Investments adheres to the highest standards in data security and personal data protection, having implemented the necessary technical and organizational measures to ensure compliance with the GDPR and to guarantee that the processing of personal data and special categories of personal data is lawful, fair, transparent, and limited to authorized purposes.
Through this privacy and data protection policy, Best Investments seeks to ensure and protect the rights of users and visitors to its domain and subdomains, particularly regarding the privacy of personal data, by clearly outlining procedures and responsibilities.
The data collected will not be processed for purposes other than those specified herein.
Best Investments reserves the right to update or modify its privacy and data protection policy at any time, namely to adapt it to legislative changes.
Additionally, this privacy and data protection policy extends to subcontractors who, within the scope of service provision, require access to data, ensuring compliance with the GDPR.
By visiting our website at www.bestinvestments.pt or any of its subdomains, you are consenting to the terms of this Privacy Policy.
Scope
This privacy policy applies to the personal data and special categories of personal data collected either in person or during navigation on the website www.bestinvestments.pt.
It does not extend to any other entities unrelated to Best Investments’ legal entity.
Personal Data
Under the GDPR, personal data refers to any information, of any nature and regardless of format (including sound and image), relating to an identified or identifiable natural person.
An identifiable person is one who can be identified, directly or indirectly, particularly by reference to a name, identification number, location data, online identifiers, or one or more factors specific to their physical, physiological, genetic, mental, economic, cultural, or social identity.
Special Categories of Personal Data
Under the GDPR, special categories of personal data include information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic data, biometric data for unique identification, and data concerning health, sexual life, or sexual orientation.
Types of Data Collected
Information recorded by Best Investments falls into two general categories:
- Automatically collected data (e.g., cookies)
- Data voluntarily provided by users on the website and/or in person.
Cookies are text files containing digital information stored on a user’s hard drive after accessing a webpage. When the user revisits the same page, the file signals their presence.
Best Investments uses cookies to store information such as user preferences when visiting our website. This may include simple pop-ups or links to various services we provide.
Users may disable cookies in their browser settings or through antivirus tools such as Norton Internet Security; however, this may affect how they interact with our website or other websites, potentially limiting access to certain features or services.
The data requested from users — such as name, phone number, email address, and inquiry details — are recorded and processed via computer systems.
Manual data collection occurs only upon the explicit consent of the data subject, provided in written form.
Additionally, Best Investments, as required by law, records and processes data for accounting, operational, and commercial purposes, in compliance with the GDPR.
Data Controller
Best Investments is the entity responsible for collecting and processing personal data.
Data Processing
The processing of personal data and special categories of personal data refers to any operation performed — automated or otherwise — including collection, registration, organization, structuring, storage, adaptation, retrieval, consultation, use, disclosure, dissemination, comparison, interconnection, restriction, erasure, or destruction.
Data processing by Best Investments follows the principles of lawfulness, fairness, and transparency, with full respect for the privacy and fundamental rights of data subjects.
Best Investments undertakes to maintain the confidentiality of all data collected and to implement technical and organizational measures to prevent loss, misuse, or unauthorized access.
Personal data is collected for the management of processes and in accordance with the law.
Within its business activities, Best Investments processes personal data necessary for the provision of its services — such as name, phone number, and email address.
Data Sharing
Best Investments ensures that personal data will not be shared, transferred, or disclosed to third parties for purposes other than those specified herein.
Exceptions include sharing data with subcontractors and partners within the scope of service management or to comply with legal obligations, namely with police, judicial, tax, or regulatory authorities.
All subcontractors engaged by Best Investments comply with the requirements of Article 28(1) of the GDPR and ensure full legal and technical compliance for the secure processing of data.
Data Retention
The retention period for personal data varies according to its purpose and applicable legal requirements.
When no specific legal requirement exists, data will be stored by Best Investments for a minimum of ten (10) years from the date of last use or interaction with the data subject, or for as long as necessary to fulfill the purpose for which it was collected, in accordance with the law.
Data Subject Rights
Users of Best Investments are guaranteed the right to access, rectify, update, restrict, and delete their personal data and special categories of personal data (except where retention is legally required).
They also have the right to object, withdraw consent (without affecting prior lawful processing), and request data portability.
To exercise these rights, users may contact Best Investments by email or in writing at the company’s registered office.
Requests for erasure (“right to be forgotten”) will be handled as quickly as possible, within a maximum of 15 days.
Best Investments reserves the right to retain minimal identifying information when legally required.
Security
Best Investments implements all available security measures, within reasonable technical and organizational means, to protect electronic communications and personal data.
However, the company cannot guarantee absolute system inviolability.
While internet communications may be encrypted, they remain vulnerable to malicious attacks. The transmission of data over the internet is never completely secure.
Policy Updates
Best Investments reserves the right to modify this privacy and data protection policy without prior notice.
Any significant changes will be communicated as soon as possible, especially when they materially affect the use of our services.
Right to Complain
Without prejudice to the right to contact Best Investments directly (via email or in person), users may also lodge a complaint with the Supervisory Authority — the Portuguese Data Protection Commission (CNPD) — through the contact details available at www.cnpd.pt.
Legal Framework
General Data Protection Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016.
Last Update
5 August 2025