Privacy Policy

Last updated : Nov 16, 2025

Introduction

Introduction

Introduction

Mútuo Valor Lda is fully committed to protecting the privacy and personal data of the users of our services ("Services"). This Privacy Policy outlines our practices and procedures related to the collection, use, and protection of personal data to ensure compliance with applicable laws, including the General Data Protection Regulation (GDPR).

  1. Responsible for processing personal data

  1. Responsible for processing personal data

  1. Responsible for processing personal data

Name: Mútuo Valor Lda
Corporate Taxpayer Number / Commercial Registry: 517591260
E-mail: pdd@mutuovalor.com

  1. Purpose of processing the collected data

  1. Purpose of processing the collected data

  1. Purpose of processing the collected data

The Client's personal data is collected, first and foremost, for the provision of the credit intermediation service requested by the Client, which necessarily includes the transfer of this data to Credit Institutions, so that they can analyze the Client's legal and financial situation and, thus, decide on the terms of granting the bank credit.

In view of the above, by providing their personal data to the Controller, for the purposes of establishing a credit intermediation relationship, the Client accepts that their data will be subject to this processing, and that disagreement with it implies the impossibility of providing the service requested by the Client.

The Client's personal data may also be processed for the purpose of promoting products, services, and campaigns within the scope of the activities carried out, provided that the Client's consent is obtained for this purpose.

Under no circumstances will the collected data be used for any purpose other than that legally established or for which the consent of the data subject was given. Therefore, if the Controller intends to process the personal data provided by the Client for another purpose, they will always and beforehand request the Client's consent.

Personal data collected

Personal data collected

Personal data collected

The personal data collected will be those necessary to follow up on the request made by customers, namely:

a) Identification data (full name, date of birth, identification document number, taxpayer number); b) Contact data (telephone numbers and address); c) Banking data (IBAN, bank statements, debt statements); d) Tax data (IRS declarations, IRS tax assessment notice, etc.) e) Salary data (pay slips, employment status, or other proof of salary); f)

Documentation related to the housing to be acquired, such as energy certificates, building register booklet, land registry certificate, which contains, among other information, the address of the property, the asset

value, the areas, and personal data of the owners.

  1. Retention period of personal data

  1. Retention period of personal data

  1. Retention period of personal data

The period for which we keep your personal data may vary depending on the purpose for which they are processed. Therefore, we will keep your personal data for the following periods:
- Sending commercial communications: until you exercise your right to object or withdraw your consent, whichever is applicable.

For purposes associated with the provision of our services:
- For the time necessary to ensure the full completion of the services;
- During the applicable legal periods.

To comply with the legal obligations to which the company is subject:
- During the applicable legal periods.

To respond to your requests for information:
- For the time necessary to ensure the purpose that motivated their collection;
- During the applicable legal periods;

  1. Data subject rights

  1. Data subject rights

  1. Data subject rights

As a data subject, you have the following rights regarding the processing of your personal data:

Access: You may obtain information as to whether we are processing your personal data, as well as consult your personal data included in the files of this company.

Rectification: You may alter your personal data when they are incorrect, as well as complete those that are incomplete.


Erasure: You may request the erasure of your personal data when, among other reasons, the personal data are no longer necessary for the purposes for which they were collected.

Restriction of processing: You may request the restriction of the processing of your personal data in the following situations: (a) while contesting the accuracy of your personal data; (b) when the processing is unlawful and you have opposed the same and requested the restriction of the use of the personal data; (c) when we no longer need to process your personal data, but you need them for the establishment, exercise or defense of legal claims in an administrative, judicial or extrajudicial process; (d) when you have objected to the processing of your personal data for the performance of a task carried out in the public interest or for the purposes of a legitimate interest, pending the verification whether those legitimate grounds for the processing override your grounds.


Portability: In certain situations, you will have the right to receive, in a structured, commonly used and machine-readable format, the personal data that you have provided to us and those that have been obtained from your relationship with us, as well as to transmit them to another entity.


Objection: In certain situations, you may request that your personal data stop being processed. We will cease processing the personal data, unless there are compelling legitimate grounds or for the establishment, exercise or defense of legal claims in an administrative, judicial or extrajudicial process.


If you have any questions or wish to exercise the aforementioned rights, you may do so by email. To exercise your rights, if necessary, we may request that you send a document proving your identity. You should also indicate the right you wish to exercise. The exercise of rights is free of charge, unless it is a request that is manifestly unfounded, excessive or repetitive.

Lastly, we point out that you may file a complaint with the competent supervisory authority (National Data Protection Commission - Comissão Nacional de Proteção de Dados) through the website www.cnpd.pt.