Privacy Policy

1. Data controller

The controller of personal data collected through gestinvest.pt, gestinvest.es, gestinvest.fr and gestinvest.uk is GESTINVEST PRIVATE CAPITAL SA, Rue de la Corraterie 5, 1204 Genève, Switzerland, operating under the GestInvest brand. For any question about personal data, please contact contact@gestinvest.pt.

This policy applies the EU General Data Protection Regulation (GDPR), the UK GDPR and the Swiss Federal Act on Data Protection (FADP, Loi fédérale sur la protection des données).

2. Data we process and why

Contact form and enquiry pages

We process your name, email, telephone number, company, message and the mandate details you provide, in order to answer your request and to assess and prepare a potential advisory relationship. Legal basis: steps taken at your request prior to entering into a contract, and our legitimate interest in responding to professional enquiries.

Newsletter

We process your email address and, where provided, your name and company, to send institutional communications. Legal basis: consent, which you may withdraw at any time using the link included in every mailing.

B2B commercial communications

We send emails to professionals and companies, using business contact details obtained from professional or publicly available sources, on topics relevant to the recipient's activity. Legal basis: legitimate interest in developing business relationships. Every email includes an immediate unsubscribe option.

Analytics

We use Google Analytics 4 to measure use of the site on an aggregated basis. This service loads only after you give consent through the cookie banner. Legal basis: consent.

Technical cookies and security

We use technical cookies essential to the operation of the site, such as language preference, session and the record of your cookie choice. We keep security logs to prevent abuse and attacks, with IP addresses stored as a hash. Legal basis: legitimate interest in the security and proper operation of the site.

3. Processors

We use service providers who process data on our behalf, under contract and according to our instructions: Hostinger for hosting (servers in the European Union), Google (Google Analytics 4) and our email service provider. Data is shared only to the extent each service requires.

4. International transfers

The controller is based in Switzerland, which benefits from an adequacy decision of the European Commission and of the United Kingdom. Where data is transferred to other countries, we ensure appropriate safeguards, namely adequacy decisions or standard contractual clauses approved by the competent authorities.

5. Retention periods

• Contact requests and business contacts: 24 months after the last contact.
• Mandate data and contractual relationships: for the applicable statutory retention period.
• Newsletter: until consent is withdrawn.
• Analytics data: according to the retention period configured in Google Analytics 4, limited to 14 months.
• Security logs: for the period strictly necessary for their purpose.

6. Your rights

Under applicable law, you have the rights of access, rectification, erasure, restriction of processing, portability and objection, including objection to commercial communications, and you may withdraw consent at any time with effect for the future. To exercise these rights, write to contact@gestinvest.pt. We reply within one month.

You also have the right to lodge a complaint with a supervisory authority, in particular the Information Commissioner's Office (ICO) in the United Kingdom or the Federal Data Protection and Information Commissioner (FDPIC) in Switzerland.

7. Security

We apply appropriate technical and organisational measures to protect personal data, including encrypted connections, access control and data minimisation.

8. Changes

This policy may be updated to reflect legal or operational changes. The version in force is always the one published on this page, with the date of its last update.