Last updated: 20 August 2026
Âncora Investments respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what personal data we collect through this website, why we collect it, how we use it, who we share it with, how long we keep it, and the rights you have in relation to it.
This policy is issued in accordance with Regulation (EU) 2016/679 of 27 April 2016 (the General Data Protection Regulation, "GDPR") and Portuguese Law no. 58/2019 of 8 August.
Who we are
The controller responsible for the personal data processed through this website is:
Âncora Investments, Lda.
Registered office: Rua Sampaio e Pina, n.º 36, 3.º Direito (Fração H), 1070-249 Lisboa, Portugal
Registered with the Commercial Registry under corporate taxpayer number (NIPC) 518609650
Email: info@ancora-inv.com
In this policy, "Âncora Investments", "we", "us" and "our" refer to the entity above. Where a request concerns another company within the Âncora Investments group, we will direct it to the relevant entity and tell you that we have done so.
You may contact us at the address above about anything in this policy, including to exercise any of the rights described in Section 8.
What personal data we collect
Data you give us through the contact form
When you complete the contact form on this website, we collect:
your full name (required);
your email address (required);
your telephone number, including country code (optional);
the content of the message you write to us, and any personal data you choose to include in it (required).
Fields marked with an asterisk on the form are required. Without them, we cannot identify you or reply to you. Everything else is optional, and it is entirely your choice whether to provide it.
Please do not include sensitive information in the message field — for example, health information, or details of your political opinions, religious beliefs or trade union membership. We do not need it, and we do not ask for it.
Data collected automatically
When you visit this website, certain data is collected automatically by our hosting provider and by cookies and similar technologies:
your IP address;
the type and version of your browser and operating system, and the type of device you use;
the pages you visit, the time and duration of your visit, and the website or source you arrived from;
technical event and error data generated while the website is running.
Some of this data is necessary for the website to work and to remain secure. The rest is only collected where you have consented to it through the cookie banner. Full details are set out in our Cookies Policy.
Data we do not collect
This website does not have a user account or login area, does not process payments, and does not sell products or services online. We do not knowingly collect personal data from children, and this website is not directed at them.
Why we process your data, and on what legal basis
We process personal data only where the GDPR provides a lawful basis. Each purpose and its basis is set out below.
Responding to your enquiry. Reading your message, identifying you, replying by email or telephone, and holding the follow-up correspondence that arises from it. Legal basis: Article 6(1)(b) — steps taken at your request before entering into a contract; or Article 6(1)(f) — our legitimate interest in responding to those who contact us.
Managing a business relationship. Where your enquiry leads to a commercial discussion, evaluating and progressing that opportunity and keeping a record of it. Legal basis: Article 6(1)(b) — performance of a contract or steps prior to it; Article 6(1)(f) — our legitimate interest in managing our business.
Operating and securing the website. Keeping the site available, preventing abuse and fraud, diagnosing faults and maintaining records of security events. Legal basis: Article 6(1)(f) — our legitimate interest in a secure and functioning website.
Understanding how the website is used. Aggregated statistics on pages visited and how visitors navigate the site, used to improve its content and performance. Legal basis: Article 6(1)(a) — your consent, given through the cookie banner.
Meeting our legal obligations. Retaining records where accounting, tax, anti-money-laundering or other legislation requires it, and responding to requests from competent authorities. Legal basis: Article 6(1)(c) — compliance with a legal obligation.
Establishing or defending legal claims. Retaining and using correspondence where necessary to bring, defend or respond to a legal claim. Legal basis: Article 6(1)(f) — our legitimate interest in protecting our legal position.
Where we rely on legitimate interests, we have considered whether our interest is overridden by your interests and fundamental rights, and concluded that it is not. You may ask us for further information on that assessment, and you have the right to object as described in Section 8.
We do not use your data to send marketing communications. If we introduce a newsletter or similar communication in future, we will ask for your consent separately and you will be able to withdraw it at any time.
Who has access to your data
Your personal data is accessible to the partners and employees of Âncora Investments who need it to respond to you or to manage the resulting relationship. Access is limited to those people.
We also use third-party service providers who process personal data on our behalf, under written contracts that meet the requirements of Article 28 GDPR. They may only act on our instructions and may not use your data for their own purposes. They fall into the following categories:
Website hosting and platform providers. This website is built and hosted on Framer, which delivers the site and operates the contact form.
Email and office productivity providers. Delivery and storage of the emails generated by the contact form and of our subsequent correspondence with you.
Website analytics providers. Aggregated statistics on how the website is used, activated only where you have consented through the cookie banner.
Professional advisers. Our lawyers, accountants and auditors, where their involvement is necessary and subject to professional confidentiality.
You may request the identity of the specific providers used in each category by contacting us at the address in Section 1.
We may also disclose personal data to courts, regulators, tax authorities or law enforcement where we are legally required to do so.
We do not sell your personal data, and we do not share it with third parties for their own marketing purposes.
Transfers outside the European Economic Area
Some of our service providers process data on servers located outside the European Economic Area, in particular in the United States.
Where that happens, we make sure the transfer is protected by one of the safeguards permitted under Chapter V of the GDPR — normally an adequacy decision of the European Commission, or the European Commission's Standard Contractual Clauses combined with additional technical and organisational measures where required.
You may request a copy of the safeguards applied to a specific transfer by contacting us at the address in Section 1.
How long we keep your data
We keep personal data only for as long as it is needed for the purpose it was collected for, and then delete it or anonymise it.
Contact form inquiries that do not lead to a business relationship — 12 months from our last exchange with you, after which the message and your contact details are deleted.
Correspondence connected to an ongoing or completed business relationship — for the duration of the relationship and for 5 years afterwards, or longer where a legal obligation or an active or foreseeable legal claim requires it.
Records subject to accounting, tax or anti-money-laundering obligations — for the period required by the applicable legislation, which in Portugal is generally 10 years.
Website technical logs — up to 12 months.
Cookies — for the period stated for each cookie in our Cookies Policy.
Where you ask us to delete your data before the end of these periods, we will do so unless we are required or entitled to keep it — for example to comply with a legal obligation or to defend a legal claim. If that is the case, we will tell you.
How we protect your data
We apply technical and organisational measures appropriate to the risk, including encrypted connections between your browser and this website (HTTPS), restricted and authenticated access to the systems that hold enquiry data, confidentiality obligations on everyone with access, contractual safeguards with our processors, and periodic review of these measures.
No system connected to the internet can be guaranteed to be completely secure. If a personal data breach occurs that is likely to result in a high risk to your rights and freedoms, we will notify you and the CNPD as required by Articles 33 and 34 GDPR.
Your rights
Under the GDPR, you have the following rights in relation to your personal data:
Access. To be told whether we process data about you and, if so, to receive a copy of it together with information about how it is used.
Rectification. To have inaccurate data corrected and incomplete data completed.
Erasure. To have your data deleted where one of the grounds in Article 17 GDPR applies.
Restriction. To have the processing of your data limited in the circumstances set out in Article 18 GDPR.
Portability. To receive the data you provided to us in a structured, commonly used and machine-readable format, and to have it transmitted to another controller where technically feasible.
Objection. To object at any time to processing based on our legitimate interests, on grounds relating to your particular situation. Where you object, we will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, or the processing is needed for legal claims.
Withdrawal of consent. Where processing is based on your consent, to withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before it.
You are not subject to any decision based solely on automated processing, including profiling, that produces legal effects concerning you or similarly significantly affects you.
How to exercise your rights
Write to us at info@ancora-inv.com or at the postal address in Section 1. We will respond within one month of receiving your request. That period may be extended by up to two further months where the request is complex or where we have received several requests from you, in which case we will tell you within the first month and explain why.
Exercising these rights is free of charge. Where a request is manifestly unfounded or excessive, in particular because it is repetitive, we may charge a reasonable fee or refuse to act on it, and we will explain our reasons. We may need to ask you for information to confirm your identity before we act.
Complaints
If you believe we have not handled your personal data properly, we would prefer that you contact us first so that we can resolve it.
You also have the right to lodge a complaint at any time with the Portuguese supervisory authority:
Comissão Nacional de Proteção de Dados (CNPD)
Av. D. Carlos I, 134, 1.º — 1200-651 Lisboa, Portugal
Telephone: +351 213 928 400 — Email: geral@cnpd.pt — www.cnpd.pt
If you are resident in another Member State of the European Union, you may also complain to the supervisory authority of that country.
Cookies
This website uses cookies and similar technologies. Detailed information on the categories used, their purpose and duration, and how to accept, refuse or withdraw your consent, is set out in our Cookies Policy, which forms part of this Privacy Policy.
Third party websites
This website contains links to third party websites and platforms, including our LinkedIn page and external press coverage of our projects. We are not responsible for the privacy practices of those websites. This policy applies only to www.ancora-inv.com, and we encourage you to read the privacy policy of any website you visit through a link on ours.
Changes to this policy
We may update this Privacy Policy to reflect changes to the website, to our processing activities or to applicable law. The current version is always published on this page, and the date at the top shows when it was last updated. Where a change materially affects how we process your personal data, we will take reasonable steps to bring it to your attention.