Smart Ideal World
Effective date: 13 September 2026
Last updated: 13 September 2026
Version: 2.0
Smart Ideal World respects your privacy and is committed to protecting personal data in accordance with applicable data-protection and privacy laws.
This Privacy Policy explains how Smart Ideal World collects, uses, discloses, stores, transfers and protects personal data when you:
This Privacy Policy also explains your privacy rights and how you may exercise them.
This Privacy Policy is a transparency notice. It is not a request for consent to every processing activity described in it. We rely on the appropriate legal basis for each processing activity, as explained below.
The data controller responsible for the personal data covered by this Privacy Policy is:
Smart Ideal World, Unipessoal, Lda
NIPC: 516 868 780
Privacy email: privacy@smartidealworld.com
In this Privacy Policy, “Smart Ideal World,” “SIW,” “we,” “us” and “our” refer to Smart Ideal World, Unipessoal, Lda.
For questions concerning this Privacy Policy or the processing of personal data, contact:
Smart Ideal World has not designated the privacy email address as a formal Data Protection Officer contact unless a Data Protection Officer is expressly identified in a future version of this Privacy Policy.
This Privacy Policy applies to personal data processed by Smart Ideal World in connection with its corporate website and the related communication channels described above.
This Privacy Policy does not govern personal data processed through:
Each separate product or platform should provide its own privacy notice describing the applicable controller, purposes, data categories, recipients, retention periods and international transfers.
Associação Portuguesa de MLS, or “APMLS,” is an independent association.
APMLS is not a subsidiary, branch or department of Smart Ideal World. Personal data processed by APMLS for membership, accreditation, ethics, compliance, disciplinary or MLS-governance purposes is subject to the applicable APMLS privacy notice and governance documents.
Where Smart Ideal World processes personal data on behalf of APMLS through a technology-services arrangement, that processing is governed by the applicable agreement and data-processing terms rather than this corporate website Privacy Policy.
Where Smart Ideal World processes personal data solely on behalf of a business customer or another controller, Smart Ideal World acts as a processor or service provider in accordance with the applicable contract and data-processing agreement.
In those circumstances, the relevant customer or organization is generally responsible for providing the applicable privacy notice and responding to requests concerning the personal data it controls.
“Personal data” means any information relating to an identified or identifiable individual.
Depending on how you interact with us, we may collect the following categories of personal data.
This may include:
When you contact us, we may collect:
Where relevant to an inquiry or prospective relationship, we may collect:
Where newsletters or marketing communications are offered, we may collect:
When you apply for a position or submit an open application, we may collect:
Where reference information relates to another individual, you should ensure that you are authorized to provide it and that the individual understands how their information may be used.
When you access the website, our systems and service providers may automatically process technical information such as:
We may collect:
Where you interact with an official Smart Ideal World social-media page, we may receive information made available by the relevant platform, such as:
The relevant social-media provider may also process your information as an independent controller under its own privacy terms.
We may receive personal data from:
Where required by law, we will provide any additional information applicable to personal data that was not collected directly from you.
Unless specifically requested for a lawful and necessary purpose, you should not submit the following through a general contact form or ordinary email:
If such information is submitted without being requested, we may delete it where it is not necessary or lawful for us to retain it.
Where sensitive information is genuinely required for recruitment, legal compliance or another specific process, we will provide additional information and obtain consent or rely on another lawful basis where required.
We may collect personal data:
For example, when you:
We may collect technical and security information automatically through:
We may receive information from a referral source, event organizer, recruitment provider, business partner or publicly available professional source.
We process personal data only where we have a lawful basis for doing so.
Depending on the circumstances, the applicable legal bases may include:
We process contact, identity, business and communication information to:
The applicable legal bases are generally:
We may process personal data to:
The applicable legal bases are generally:
We may process candidate information to:
The applicable legal bases may include:
Submission of an application does not guarantee an interview, offer, employment relationship or future contact.
We may process contact and preference information to send:
We send electronic marketing only where:
You may unsubscribe at any time.
We process technical and security information to:
The applicable legal bases are generally:
We process consent and preference information to:
The applicable legal bases are:
Where legally permitted, we may process aggregated, statistical or limited usage information to:
Where this processing requires non-essential cookies or similar tracking technologies, it will be based on consent.
Basic operational analysis derived from essential server logs may be based on our legitimate interests in maintaining and improving the website.
We may process personal data to:
The applicable legal bases are generally:
Personal data may be processed where reasonably necessary in connection with:
The applicable legal bases are generally:
Appropriate confidentiality and data-protection safeguards will be used.
Where we rely on legitimate interests, those interests may include:
Before relying on legitimate interests, we consider:
You may object to processing based on legitimate interests as explained in Section 16.
Certain information may be required in order for us to:
Required form fields should be clearly identified.
Where required information is not provided, we may be unable to respond, process an application, consider a proposal or provide the requested communication.
You are responsible for ensuring that information you submit is accurate and that you are authorized to provide any information relating to another person.
The website may use strictly necessary cookies or similar technologies required to:
Strictly necessary technologies do not require consent where they are genuinely necessary to provide the website or a service requested by the user.
Preference, analytics, advertising, retargeting or behavioural-tracking cookies will not be activated unless:
At the date of this Privacy Policy, Smart Ideal World does not intend to activate analytics, advertising or behavioural-profiling cookies unless they are expressly disclosed in the current Cookie Notice and made subject to the required consent controls.
Where non-essential cookies are available, you must be provided with a genuine choice to:
Rejecting non-essential cookies should be as accessible as accepting them.
You may also control cookies through your browser settings. Blocking strictly necessary cookies may prevent parts of the website from functioning correctly.
Current information concerning the cookies and similar technologies actually used by the website, including their providers, purposes and durations, should be provided in the separate Cookie Notice and consent-management interface.
The Cookie Notice, consent banner and actual website configuration must remain consistent with each other.
Where you subscribe to a newsletter or another marketing communication, we may use your contact information to send the communications you requested.
Every electronic marketing communication should provide a clear and accessible way to unsubscribe.
You may withdraw your consent or object to marketing at any time by:
Withdrawal of consent does not affect the lawfulness of processing performed before consent was withdrawn.
After you unsubscribe, we may retain a limited suppression record containing information such as your email address and opt-out date. This is used only to ensure that your preference is respected and to demonstrate compliance.
Transactional, legal, security or direct responses to a request are not marketing communications and may still be sent where necessary.
We do not sell personal data.
We also do not disclose personal data for cross-context behavioural advertising or similar targeted-advertising purposes unless this is expressly disclosed and the applicable legal requirements have been satisfied.
We may disclose personal data to the following categories of recipients where necessary and lawful.
This may include providers supporting:
This may include providers supporting:
This may include:
We may disclose relevant information to:
We may disclose personal data to:
Information may be disclosed under appropriate confidentiality and security obligations to potential:
Where you ask us to refer or direct your inquiry to a separate company, organization, product operator or business partner, we may share the information reasonably necessary to fulfil that request.
Where the recipient is a separate controller, its own privacy notice will apply to its subsequent processing.
Service providers processing personal data on our behalf must, where required:
Smart Ideal World is established in Portugal, but its business operations, service providers and authorized support resources may operate internationally.
As a result, personal data may be:
For clarity, an international transfer may occur where a separate service provider, contractor or other recipient outside the EEA is permitted to access personal data remotely, even if the primary server storing the information is located within the EEA.
Some countries outside the EEA may not provide a level of personal-data protection considered equivalent to that available within the EEA.
Where personal data is transferred outside the EEA, Smart Ideal World will use an appropriate legal transfer mechanism as required by applicable law.
Depending on the recipient and destination, this may include:
We may transfer personal data to a country, territory, sector or organization recognized by the European Commission as providing an adequate level of protection.
Where no adequacy decision applies, we may use the European Commission’s approved Standard Contractual Clauses.
Where required, we will also:
For transfers to an eligible recipient in the United States, we may rely on the EU–US Data Privacy Framework where:
We will not rely on a provider’s general claim of participation without verifying the applicable certification status and scope.
Where appropriate, we may rely on another transfer mechanism permitted by applicable law, such as:
A legal derogation for a specific situation will be used only where permitted and appropriate and not as the ordinary mechanism for systematic transfers.
You may request information about the safeguards applicable to a transfer by contacting:
Copies of contractual safeguards may be subject to reasonable redactions necessary to protect confidential, commercially sensitive or security-related information.
We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including the need to comply with legal, accounting, regulatory, contractual or reporting requirements.
We consider:
Our general retention periods are as follows.
Contact forms, general inquiries and related correspondence that do not result in an ongoing business relationship may be retained for up to three years after the last substantive communication.
Information may be retained longer where reasonably necessary for a legal claim, investigation or legal obligation.
Information concerning a prospective partnership, investment, commercial project or enterprise relationship may be retained:
Where a contractual or formal business relationship is established, relevant records may be retained for the duration of the relationship and applicable legal or limitation periods.
Records required for contractual, accounting, tax or legal purposes may be retained for up to ten years, or for another period required under applicable law.
Active newsletter and marketing-subscription information may be retained until:
Where appropriate, inactive marketing records may be reviewed after 24 months without meaningful engagement.
A limited suppression record may be retained for up to five years after an opt-out, or longer where necessary to continue honoring the opt-out or demonstrate compliance.
Information submitted for a specific role may generally be retained for up to 12 months after the recruitment process closes, unless:
Where you provide valid consent for us to consider you for future opportunities, relevant application information may be retained for up to 24 months, after which renewed permission should be obtained or the information deleted.
Routine website and security logs may generally be retained for up to 90 days.
Relevant logs may be retained longer where they are required to:
Cookie and consent-preference records may generally be retained for up to 24 months, subject to:
Information relevant to an actual or reasonably anticipated dispute, investigation or legal claim may be retained until:
At the end of the applicable retention period, personal data will be:
Backup copies may remain for a limited period until they are securely overwritten through the normal backup cycle. Access to backup data will remain restricted.
We implement technical and organizational measures designed to protect personal data against:
Depending on the circumstances, these measures may include:
Access to personal data should be limited to persons who require it for an authorized business purpose.
No website, online service, storage environment or electronic transmission can be guaranteed to be completely secure. While we take reasonable steps to protect personal data, we cannot guarantee absolute security.
You should not send highly sensitive or confidential information through an ordinary contact form or unencrypted email unless specifically instructed to do so.
Depending on the circumstances and applicable law, you may have the following rights.
You may request confirmation as to whether we process your personal data and obtain access to the relevant information.
You may request correction of inaccurate personal data and completion of incomplete information.
You may request deletion of personal data in circumstances provided by law.
The right to erasure is not absolute. We may retain information where processing remains necessary for:
You may request that processing be restricted in circumstances provided by law.
Where processing is based on consent or contract and performed by automated means, you may have the right to receive personal data you provided in a structured, commonly used and machine-readable format and to request transmission to another controller where technically feasible.
You may object to processing based on legitimate interests.
Where you object, we will stop the relevant processing unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is required for the establishment, exercise or defense of legal claims.
You have the right to object to direct marketing at any time.
Where you object to direct marketing, your personal data will no longer be processed for that purpose.
Where processing is based on consent, you may withdraw consent at any time.
Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
You may have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects or similarly significantly affects you, subject to applicable exceptions.
You have the right to lodge a complaint with a competent data-protection authority.
You may complain to the authority in:
To exercise a privacy right, contact:
Your request should clearly explain:
We may request additional information reasonably necessary to verify your identity and protect personal data against unauthorized disclosure.
We will not request more identity information than reasonably necessary.
We will respond without undue delay and generally within one month after receiving a valid request.
Where permitted by law, that period may be extended by up to two additional months due to the complexity or number of requests. We will inform you of any extension and the reason for it.
Rights are generally exercised without charge. Where a request is manifestly unfounded or excessive, particularly because it is repetitive, we may:
as permitted by applicable law.
The Smart Ideal World corporate website is not intended to make decisions based solely on automated processing that produce legal effects or similarly significant effects on individuals.
We may use basic automation to:
Such operational automation is not intended to make a legally or similarly significant decision about you without appropriate human involvement.
If we introduce automated decision-making that is legally significant, we will provide additional information concerning:
The Smart Ideal World corporate website is intended for adult business visitors, professionals, employment candidates and other individuals capable of making business or professional inquiries.
It is not directed to children under the age of 18.
We do not knowingly request or collect personal data from children through the corporate website.
If you believe that a child has submitted personal data to us, contact:
We will review the matter and delete or otherwise address the information where appropriate.
The Smart Ideal World website may contain links to:
A link does not necessarily mean that Smart Ideal World controls the third party or its personal-data processing.
Third parties may act as independent controllers and apply their own privacy notices, cookie policies and legal terms.
You should review the applicable privacy information before providing personal data to a third-party service.
Smart Ideal World is not responsible for the privacy or security practices of an independent third party, except to the extent responsibility cannot lawfully be excluded.
Smart Ideal World may maintain pages or accounts on social-media and professional-networking platforms.
When you interact with those pages:
Depending on the platform and activity, Smart Ideal World and the platform may act as separate controllers or, for certain statistical page functions, joint controllers as determined by applicable law.
You should use the privacy settings provided by the relevant platform and review its privacy notice.
We may update this Privacy Policy to reflect changes in:
When this Privacy Policy is updated, we will revise the “Last updated” date and version number.
Where a change is material, we may provide additional notice through:
Previous versions may be retained for compliance, audit and record-keeping purposes.
Questions, concerns and privacy requests may be directed to:
Smart Ideal World
Privacy email: privacy@smartidealworld.com
You have the right to lodge a complaint with the Portuguese supervisory authority:
Comissão Nacional de Proteção de Dados — CNPD
Av. D. Carlos I, 134, 1.º
1200-651 Lisboa
Portugal
General email: geral@cnpd.pt
Telephone: +351 213 928 400
We encourage you to contact Smart Ideal World first so that we have an opportunity to review and address your concern. This does not affect your right to contact the CNPD or another competent supervisory authority directly.
