Privacy Policy

Version 1.3 – Updated 2 July 2026

1. Introduction

This Privacy Policy complements our Terms and Conditions and aims to inform you, in a clear and transparent manner, about how OBJAIS (a brand of Quotinsure Lda), a company registered in Portugal under NIF number 519089294, collects, processes, stores, and protects your personal data.

OBJAIS acts as the data controller, in accordance with the General Data Protection Regulation (GDPR – EU Regulation 2016/679) and applicable Portuguese legislation.

OBJAIS is an insurance broker (registered with the ASF) whose Application allows users to (i) obtain an indicative, non-binding estimate of a potential insurance premium from a photograph, and (ii) create and manage collections of objects and valuables. To provide formal quotes and insurance proposals, OBJAIS relies on itself or on partner brokers authorised by the supervisory authorities of their respective countries, located within or outside the European Union.

1.1 Two roles of OBJAIS and its partners

Depending on the situation, your data may be handled in two different ways:

In most cases, OBJAIS and its partner brokers each act as separate, independent data controllers: OBJAIS transmits your request to a partner so that it can be processed, and each party is responsible for its own processing.
In certain cases, OBJAIS transfers your request to a partner broker who then processes it as an independent data controller and becomes solely responsible for the subsequent handling of your data. Where this applies, the partner's own privacy policy governs that processing, and we will identify the partner to you on request.

2. What data do we collect?

2.a) When using the Application – free estimate

To provide a free, indicative estimate of a valuable item, the data processed at this stage is limited to the photograph you submit and any metadata it may contain (for example, technical or location metadata). A photograph may itself constitute personal data. These estimates are purely indicative and non-contractual.

Unless you go on to request a personalised service, the photograph and any related data are processed solely to produce the estimate and are then deleted or anonymised (see Section 4).

2.b) When requesting a personalised service

If you expressly request a binding insurance quote or related services (expert appraisal, digitalisation, certification, legal advice, transport, storage, etc.), the following data may be collected:

Identity information: first name, surname, email address, phone number, postal address;
Additional information: family situation, description of artworks or valuable objects;
Data necessary for analysing your needs and connecting you with authorised partners (insurers, brokers, experts, logistics providers, etc.).

2.c) When managing your account and collections

To create and manage your personal account and collections, we process your account identifiers and the content you choose to add to your collections. To preserve your anonymity in the collection-management features, only your city and country of residence may be displayed.

3. Purposes and legal bases for processing

Your data is processed for the following purposes:

Purpose	Legal basis
To provide free, indicative estimates from a photograph	Performance of pre-contractual measures taken at your request, or our legitimate interest in providing the estimation feature
To provide quotes or personalised services	Performance of a contract or of pre-contractual measures taken at your request
To transmit your request to Objais or to partner brokers / specialised partners so that it can be processed	Performance of a contract or of pre-contractual measures taken at your request. This transmission is necessary to process your request and is not based on your consent
To manage your Objais account and collections	Performance of a contract
To comply with legal obligations (accounting, fraud prevention, anti-money-laundering, insurance-distribution compliance)	Legal obligation
To carry out statistical analyses to improve our services	Legitimate interest
To send you information or commercial offers	Explicit consent

Where processing is based on our legitimate interest, you may object to it at any time (see Section 6). Where it is based on consent (commercial offers), you may withdraw your consent at any time without affecting the other processing necessary to handle your request.

3.1 Automated processing

The indicative estimate is generated with the assistance of automated tools applied to the photograph and the information you provide. This estimate is indicative and non-contractual and does not produce legal effects or similarly significant effects on you: it does not, by itself, decide whether you are offered insurance or on what terms. Any formal quote or insurance proposal is issued by OBJAIS or an authorised partner. If you wish, you may contact us to obtain information about how an estimate was produced.

4. Data retention

Type of data	Retention period
Photograph submitted for a free estimate (no further request)	Deleted or anonymised after the estimate is produced
Client data (active users)	Duration of the contractual relationship + 5 years
Prospects (leads)	12 months from last contact
Cookies (website only)	Maximum 12 months
Call recordings (if applicable)	6 months to 2 years depending on purpose

Certain data may be kept for longer where a specific legal retention period applies (for example, accounting or anti-money-laundering obligations relating to insurance distribution).

4.1 Storage and international transfers

Data is hosted on secure servers located within the European Union.

Because our partner brokers may be located outside the European Union, your data will, in those cases, be transferred outside the European Union in order to process your request. Such transfers take place only on the basis of appropriate safeguards, namely:

an adequacy decision of the European Commission covering the country of the recipient; or
in the absence of an adequacy decision, Standard Contractual Clauses adopted by the European Commission, together with any additional measures necessary to ensure a level of protection essentially equivalent to that guaranteed within the European Union.

You may obtain further information about these safeguards, and a copy of the relevant clauses, by contacting us at the address in Section 6. Where any of our technical service providers (for example, hosting or analytics providers) are located outside the European Union, the same safeguards apply.

4.2 Recipients of your data

Your data may be shared with the following categories of recipients:

OBJAIS staff who are authorised to handle your request;
partner brokers and insurers, within or outside the European Union, to process your request and provide a quote or insurance proposal;
specialised service partners (experts, appraisers, digitalisation, logistics, storage, legal advice), within or outside the European Union, where you request the corresponding service;
technical service providers acting as our processors (for example, hosting, IT security, analytics, emailing);
competent authorities, where required by law.

We do not sell your personal data. You may obtain the identity of the specific partner(s) to whom your request has been or will be transmitted by contacting us at the address in Section 6.

5. Security

OBJAIS implements technical and organisational measures to ensure the confidentiality, integrity, and availability of data, including:

restricted access to data based on internal authorisations;
secure authentication for users and staff;
regular backups and encryption of sensitive data;
firewall and intrusion-prevention systems;
ongoing staff training on data security;
selection of GDPR-compliant processors bound by a data-processing agreement.

6. Your rights

In accordance with the GDPR, you have the following rights:

Right of access to your personal data;
Right to rectification or erasure;
Right to object, and right to withdraw consent for processing based on consent (such as commercial offers). Withdrawing consent does not affect the processing necessary to handle a request you have made;
Right to data portability;
Right to restrict processing;
Right to define post-mortem instructions regarding your data.

Where a partner broker processes your data as an independent controller, you may also exercise your rights directly with that partner; we will provide their contact details on request.

To exercise your rights, please contact us at the protected email address listed on the website, or by post at:

OBJAIS – DPO Avenida Cerro da Vila, Edificio Vilamarina, Loja 59 8125-403 Vilamoura – Portugal

You may also lodge a complaint with the competent data protection authority (CNPD – Comissão Nacional de Proteção de Dados in Portugal, or your local authority – for example the CNIL in France).

7. Cookies and tracking tools

7.1 Mobile application

For privacy and security reasons, the Objais mobile app does not use cookies or tracking tools.

7.2 Objais website

The website objais.com may use cookies to:

ensure the technical functionality of the website;
improve browsing experience and content;
measure audience statistics via analytics tools;
offer personalised content.

On your first visit, you may accept, refuse, or customise non-essential cookies through the consent banner provided. Where analytics or personalisation tools transfer data outside the European Union, the safeguards described in Section 4.1 apply.

8. Deactivation and automatic deletion of inactive accounts

To ensure data security and proper platform operation, Objais reserves the right to deactivate and delete any account that remains inactive for a continuous period of six (6) months.

An account is considered inactive when none of the following actions have been performed by the user:

logging into the Application;
adding or modifying an item or collection;
using social features (likes, comments, following);
interacting with Objais services.

Before permanent deletion, the user will receive an email notification and will have 30 days to log in and reactivate their account.

After this period, all associated data (profile, collections, content, interactions) will be permanently deleted.

Objais cannot be held liable for any loss of information resulting from this deletion.

8.1 Minors

The Application is intended for users aged 18 and over. We do not knowingly collect personal data relating to minors. If we become aware that data relating to a minor has been collected, we will delete it without undue delay.

9. Updates

This policy may be updated at any time to remain compliant with legal or technical developments.

The date of the latest update is shown at the footer of this document.

We encourage you to review it regularly.

DPO Contact: protected email address listed on the website Official Website: www.objais.com

Version 1.3 – Updated 2 July 2026