GDPR Data Rights - Socia Real Estate Operating System

Your GDPR Data Rights

Exercise your data protection rights under the General Data Protection Regulation (GDPR) and Portuguese law.

Back to Home
Your Rights Matter: Under GDPR and Portuguese data protection law, you have comprehensive rights regarding your personal data. We're committed to respecting these rights and processing your requests promptly.

Your Data Protection Rights

As a data subject under GDPR, you have the following rights regarding your personal data processed by Socia:

Right of Access

Request a copy of all personal data we hold about you, including how it's being processed and who it's shared with.

Right to Rectification

Request correction of inaccurate or incomplete personal data we hold about you.

Right to Erasure

Request deletion of your personal data when there's no compelling reason for continued processing ("right to be forgotten").

Right to Restriction

Request limitation of processing your personal data in certain circumstances while maintaining storage.

Right to Data Portability

Receive your personal data in a structured, machine-readable format to transfer to another service provider.

Right to Object

Object to processing of your personal data based on legitimate interests, including direct marketing.

Withdraw Consent

Withdraw consent for processing activities that require your explicit consent, such as marketing communications.

Lodge a Complaint

File a complaint with the Portuguese Data Protection Authority (CNPD) or your local supervisory authority.

Submit a GDPR Request

Use the form below to exercise your data protection rights. We will process your request within one month and may request additional information to verify your identity.

Data Rights Request Form

Response Timeline and Process

Processing Timeline

  • Acknowledgment: Within 72 hours of receiving your request
  • Identity Verification: Within 5 business days (if required)
  • Response: Within 1 month of verification (may be extended to 3 months for complex requests)
  • Appeal Process: Contact our Data Protection Officer if you're unsatisfied with our response

What We May Need

  • Proof of identity to protect against unauthorized requests
  • Specific details about the data you're requesting
  • Clarification of your request if it's unclear or overly broad
  • Additional information to locate your data in our systems

Fees and Charges

Most GDPR requests are processed free of charge. However, we may charge a reasonable fee if:

  • Your request is manifestly unfounded or excessive
  • You request additional copies of the same information
  • The request requires disproportionate effort to fulfill

Special Considerations

Data Retention

Some data may be retained even after deletion requests due to:

  • Legal obligations under Portuguese accounting and tax law
  • Legitimate business interests (fraud prevention, security)
  • Legal claims and dispute resolution
  • Regulatory compliance requirements

Third-Party Data

If your request involves data controlled by third parties (integrated services, payment processors), we will:

  • Process the portion of data under our control
  • Provide contact information for relevant third-party controllers
  • Assist in facilitating your request where possible

Impact on Service

Certain requests may affect your ability to use our services:

  • Data Erasure: May result in account termination
  • Restriction: May limit certain platform features
  • Objection: May prevent personalized experiences

Portuguese Data Protection Authority

If you're not satisfied with our response to your request, you have the right to lodge a complaint with the Portuguese Data Protection Authority:

Comissão Nacional de Proteção de Dados (CNPD)
Address: Av. D. Carlos I, 134 - 1º, 1200-651 Lisboa, Portugal
Phone: (+351) 213 928 400
Email: [email protected]
Website: www.cnpd.pt
Online Complaint: www.cnpd.pt/english/complaints

Data Protection Officer

For GDPR-related questions or to submit requests directly:
Data Protection Officer: [DPO NAME PLACEHOLDER]
Email: [DPO EMAIL PLACEHOLDER]
Address: [COMPANY ADDRESS PLACEHOLDER], Portugal
Phone: [CONTACT PHONE PLACEHOLDER]