Introduction
NETIMOVEIS INTERNET S/A ("Netimoveis", "we", "us" or "our") operates the website netimoveis.site and provides digital real estate intelligence and property market services throughout Brazil. We are a legal entity incorporated under Brazilian law, registered under CNPJ 20.529.737/0001-03, with registered offices at Avenida Getulio Vargas, 258, 14th Floor, Funcionários, Belo Horizonte – MG, Brazil.
This Privacy Policy explains what personal data we collect from visitors and users of our website, why we collect it, how we process and protect it, and the rights you hold over your information. It applies to all personal data processed in connection with our website, marketing communications, and any other direct interaction you have with Netimoveis.
We comply with the Lei Geral de Proteção de Dados Pessoais (LGPD) — Brazil's Federal Law No. 13.709/2018 — and, to the extent applicable to visitors located in the European Economic Area, with the General Data Protection Regulation (GDPR) (EU) 2016/679. We also observe the guidance of Brazil's national data protection authority, the Autoridade Nacional de Proteção de Dados (ANPD).
By continuing to browse netimoveis.site, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of it, please discontinue use of the website.
Information We Collect
We collect personal information through different channels and for different purposes. The categories below describe precisely what we gather and, crucially, on what legal basis.
2.1 — Information You Provide Directly
When you contact us by email, telephone, or any other direct channel, you may voluntarily provide personal information such as:
- Your full name and, where relevant, your company name or professional title.
- Email address and telephone number, so that we can respond to your enquiry.
- The content of your message or enquiry, including any attachments you choose to send.
- Correspondence records maintained as part of our customer service obligations.
Providing this information is always voluntary. However, without minimum contact details (such as a working email address), we may not be able to respond to your request adequately.
2.2 — Information Collected Automatically
When you visit netimoveis.site, certain technical data is automatically recorded by our web servers and third-party analytics tools:
- Log data: IP address, browser type and version, operating system, referring URL, pages visited, date and time of access, and the duration of each page visit.
- Device data: Screen resolution, device type (desktop, tablet, mobile), and general hardware characteristics that help us optimise page rendering.
- Location data: Approximate geographic location inferred from your IP address (city and country level only; we do not collect precise GPS location).
- Behavioural data: Clickstream information, scroll depth, session duration, and aggregated traffic patterns, collected via analytics cookies (see Section 4).
Automatically collected data is processed in pseudonymised or aggregated form wherever possible. We do not use this data to identify you individually without your consent, except where required by law or for legitimate security purposes.
2.3 — Information From Third-Party Sources
We may receive data about your interaction with our advertisements placed on platforms such as Google and Meta, including whether you clicked an ad and subsequently visited our website. This data is limited to aggregated performance metrics and does not allow us to identify you by name unless you subsequently contact us directly.
How We Use Your Information
We process personal data only for specific, explicit, and legitimate purposes. The table below maps each purpose to its corresponding legal basis under both the LGPD and GDPR.
3.1 — Responding to Enquiries and Providing Information
When you contact us, we use your name and contact details to respond to your message, answer questions about our services, and, where relevant, follow up with additional information you have requested. Legal basis (LGPD): Legitimate interest (Art. 7, IX) and consent (Art. 7, I). Legal basis (GDPR): Legitimate interests (Art. 6(1)(f)) and, where explicit consent was given, Art. 6(1)(a).
3.2 — Website Analytics and Performance Improvement
Automatically collected data is used to understand how visitors navigate our site, identify pages that perform poorly, and prioritise technical improvements. All analysis is performed on aggregated datasets wherever individual identification is unnecessary. Legal basis: Legitimate interest in maintaining a functional, high-quality website.
3.3 — Marketing Communications
We may send informational emails about our services, real estate market insights, or company news only if you have explicitly opted in to receive such communications. Every marketing email we send includes a clear, functioning unsubscribe link. Legal basis: Consent (Art. 7, I LGPD; Art. 6(1)(a) GDPR). You may withdraw consent at any time without any consequence.
3.4 — Legal and Regulatory Compliance
Certain data may be retained and disclosed to competent authorities when required to comply with applicable law, court order, regulatory investigation, or to protect the legitimate interests and legal rights of Netimoveis. Legal basis: Legal obligation (Art. 7, II LGPD; Art. 6(1)(c) GDPR).
3.5 — Fraud Prevention and Security
We use IP addresses and session logs to detect and investigate suspicious or abusive activity, protect our systems from unauthorised access, and safeguard other users. Legal basis: Legitimate interest in network and information security.
We will never sell your personal data to third parties, nor will we use it for purposes incompatible with those stated in this section without first obtaining your explicit consent or another applicable legal basis.
Sharing With Third Parties
We do not sell, rent, or trade your personal information. We share data with third parties only in the circumstances described below, and only to the extent strictly necessary for each purpose.
5.1 — Service Providers and Data Processors
We engage trusted technology vendors who process data on our behalf under written Data Processing Agreements. These include:
- Web hosting and infrastructure providers — who store website files and databases on secure servers.
- Google LLC — for Google Analytics 4 (audience measurement) and Google Ads (advertising performance tracking), operating under standard contractual clauses approved by the European Commission and ANPD guidelines.
- Email and communication platforms — used exclusively to transmit responses to enquiries you have submitted; they do not access message content beyond what is technically required for delivery.
All processors are contractually prohibited from using your data for any purpose other than providing the agreed service to Netimoveis.
5.2 — Legal and Regulatory Disclosures
We may disclose personal data when we have a good-faith belief that doing so is necessary to comply with a legal obligation, court order, or regulatory requirement issued by a competent Brazilian or foreign authority; to investigate, prevent, or respond to fraud, security incidents, or violations of our terms; or to protect the vital interests of a person.
5.3 — Business Transfers
In the unlikely event of a merger, acquisition, asset sale, or corporate restructuring involving Netimoveis, personal data held by us may be transferred to the successor entity. We will notify affected individuals prior to any such transfer and, where required by law, seek consent or provide opt-out options.
5.4 — International Transfers
Some of our service providers, including Google, process data on servers located outside Brazil and the EEA. When transferring data internationally, we ensure that appropriate safeguards are in place — such as Standard Contractual Clauses, adequacy decisions, or other mechanisms recognised by the LGPD and GDPR — to maintain an equivalent level of protection for your data.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law. Our general retention periods are as follows:
- Contact and enquiry records: Retained for up to 5 years from the date of last contact, in accordance with Brazilian civil limitation periods (Código Civil, Art. 206).
- Server and access logs: Retained for a maximum of 6 months, consistent with Brazil's Marco Civil da Internet (Law 12.965/2014, Art. 15), unless a competent authority requests longer preservation.
- Analytics data: Google Analytics session-level data is retained for 14 months, as configured in our Google Analytics property; aggregated reports may be kept indefinitely as they contain no personal data.
- Marketing opt-in records: Retained for as long as we send you marketing communications, plus a further 3 years as evidence of your consent, to comply with LGPD accountability obligations.
- Cookies: Session cookies expire when you close your browser. Persistent cookies expire according to the schedule defined by each cookie type — typically between 30 days and 2 years, as indicated in our cookie banner.
When personal data is no longer required and no legal obligation prevents deletion, we securely delete or anonymise it so that it can no longer be linked to an identifiable individual.
Data Security
We apply technical and organisational security measures proportionate to the risks associated with processing your personal data. These include, but are not limited to:
- Encryption of data in transit using TLS 1.2 or higher (HTTPS) across all pages of the website.
- Access controls that restrict data to authorised personnel on a strict need-to-know basis, with individual authentication credentials.
- Regular security assessments and vulnerability monitoring of our web infrastructure.
- Data minimisation practices that ensure we do not collect or retain more personal data than is necessary for the stated purpose.
- Vendor due diligence procedures applied before engaging any third-party data processor.
- Internal policies and staff awareness training on data protection responsibilities.
Despite these measures, no system connected to the internet can be guaranteed completely secure. In the event of a personal data breach that poses a high risk to your rights and freedoms, we will notify you and, where required, the ANPD within the timeframes established by the LGPD (Art. 48).
If you suspect that your interaction with our website has been compromised, or if you discover a potential security vulnerability, please notify us immediately at contato@netimoveis.site with the subject line "Security Report".
Your Rights
Depending on your country of residence and the applicable data protection law, you are entitled to exercise some or all of the rights described below. Brazilian residents are protected by the LGPD (Arts. 18–20); residents of the EEA are additionally protected by the GDPR (Arts. 15–22). We respect these rights regardless of your location and will respond to all valid requests within 30 days.
Right of Access
Request confirmation of whether we hold personal data about you, and obtain a copy of that data along with information about how it is processed.
Right to Correction
Request correction of any personal data that is inaccurate, incomplete, or out of date, so that our records remain accurate.
Right to Deletion (Erasure)
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where processing is unlawful.
Right to Object
Object to the processing of your data for direct marketing purposes or where processing is based on legitimate interests, if your particular situation warrants it.
Right to Restrict Processing
Request that we limit processing of your data to storage only while a dispute about accuracy or lawfulness is resolved.
Right to Data Portability
Receive the personal data you provided to us in a structured, commonly used, machine-readable format, or request that it be transferred directly to another controller.
Right to Withdraw Consent
Where processing is based on your consent, withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
Right to Lodge a Complaint
File a complaint with Brazil's ANPD (www.gov.br/anpd) or, if you are in the EEA, with your national supervisory authority, if you believe your rights have been violated.
How to Exercise Your Rights
To exercise any of the rights listed above, please send a written request to contato@netimoveis.site with the subject line "Data Subject Rights Request". Your request should include: your full name; a description of the right you wish to exercise; sufficient information to allow us to identify you in our records. We may ask for proof of identity to ensure that data is not disclosed to or deleted at the request of an unauthorised third party. We will not charge a fee for handling rights requests unless a request is manifestly unfounded or excessive.
Children's Privacy
Our website and services are directed exclusively at adults and at business professionals operating in the real estate sector. We do not knowingly collect personal data from individuals under the age of 18. If you are a parent or guardian and you believe that your child has provided us with personal information without your consent, please contact us immediately at contato@netimoveis.site.
Upon receiving a verified report of this nature, we will promptly delete the relevant personal data from our records. Where Brazilian law imposes heightened protection for data belonging to children or adolescents (LGPD Art. 14), we apply those protections in full.
Changes to This Policy
We review this Privacy Policy periodically to ensure it remains accurate, up to date, and compliant with evolving legal requirements and regulatory guidance from the ANPD. We may update this Policy at any time by publishing a revised version on this page, with the "Last updated" date adjusted accordingly.
If we make material changes — particularly changes that could affect how we use your data or reduce your rights — we will take reasonable steps to bring these to your attention, which may include placing a prominent notice on the homepage of netimoveis.site or, where we hold your email address with your consent, sending you a direct notification.
Your continued use of the website after the publication of an updated Privacy Policy constitutes acceptance of the revised terms, to the extent permitted by applicable law. We encourage you to review this page periodically.
Previous versions of this Privacy Policy are available upon request by emailing contato@netimoveis.site.
Contact & Data Protection Officer
If you have any questions, concerns, or feedback about this Privacy Policy, about the way we handle your personal data, or if you wish to exercise any of your data subject rights, please contact us using the details below. We are committed to addressing all legitimate enquiries promptly and transparently.
Under the LGPD, we have designated a Data Protection Officer (Encarregado de Proteção de Dados) responsible for overseeing compliance with data protection obligations and serving as the primary point of contact for data subjects and the ANPD. Enquiries addressed to the DPO should clearly state "DPO / Encarregado" in the subject line of your email.
Netimoveis Internet S/A — Data Controller
We aim to respond to all privacy-related enquiries within 15 business days. For complex or time-sensitive matters we will acknowledge receipt immediately and provide a full response as soon as practicable, always within the statutory deadlines established by the LGPD and applicable regulations. Should you feel that your request has not been handled satisfactorily, you have the right to escalate directly to Brazil's Autoridade Nacional de Proteção de Dados (ANPD) via www.gov.br/anpd.