A. The purposes of the processing of Personal Data are as follows:

Porto Academy may use your e-mail address or telephone number to communicate with you by sending you e-mail or SMS, in particular in relation to:
– Dissemination of cultural activities, such as exhibitions, conferences, workshops, bookshop and other events;
– Invitations within the framework of Porto Academy;

Porto Academy may use your personal data to communicate with you, in particular to send you news related to services and products, or to send invitations, as well as to provide assistance in aspects related to the services provided by the Porto Academy (including to respond and deal with support requests, complaints and monitor service quality) in the framework of its Mission.

Supply of services:
Porto Academy uses your Personal Data to inform you about events available in Porto Academy website. We may also use your Personal Data to contact you to finalize your subsription to any event and complete the payment process; inform you when an event you intended to attend is available; process and monitor your subscription, manage the payment; manage any contact with us regarding your subscription; prevent and investigate possible misuse of these and provide assistance in aspects related to the services provided by Porto Academy.

You may cancel the subscription of the Newsletter as well as any other communications identified above at any time by using the option that we make available in each communication. The legal basis for such data processing is the consent of the data holders. Personal Data collected when making an order or service request to the Porto Academy are necessary for the execution of the respective contract, so if the user in any way opposes the respective data processing, the Porto Academy cannot comply with execution of the contract.

B. Who are the recipients of your data?
Porto Academy may subcontract other companies for the provision of certain services, such as delivery / collection services, tax and accounting advice, communication, cultural dissemination (including sending of sms and emailing) or maintenance of the website and digital suppliers. In these cases, these third-party companies may need to access certain information and data from the data holders. Porto Academy guarantees that, in such cases, these third parties will have limited access to the information of the data holders, restricted only to those data necessary for the execution of the contracted tasks. It also guarantees that a contract has been made between the parties in which the data protection of Personal Data is regulated, in which these third parties undertake not to disclose, in any way, the Personal Data, nor to use them for purposes other than the provision of the contracted services.
Likewise, the Porto Academy may communicate your Personal Data when this is determined by law, in the context of a judicial proceeding or in the context of investigations of suspicious activities. In no case shall the Porto Academy carry out international transfers of your data to a third country or an international organisation outside the European Union. The Porto Academy does not intentionally collect personal information from minors under the age of 18. If it discovers that it unintentionally collects personal information from persons under 18 years of age, the Porto Academy will take the necessary steps to eliminate the information as soon as possible, unless required by applicable law to keep it.

C. Where do we store your data?
Porto Academy stores the Personal Data that you provide on servers that are in a secure environment, protected from unauthorised access, use or disclosure. When personal information (such as a credit card number) is provided on the website for payment, it will not be retained by Porto Academy, but by Unicre – Instituição Financeira de Crédito S.A., with fiscal identification number 500292841. Porto Academy adopts the technical, electronic and organisational procedures necessary and adequate to ensure the security of your Personal Data and to prevent its loss, misuse or improper access. It emphasises that it will only process your data for the purposes for which it was collected, in accordance with the terms of this Privacy Policy.
Porto Academy frequently reviews its data collection, storage and data processing policies to ensure that it only collects, stores and processes information that is essential to the provision or improvement of services. Porto Academy adopts appropriate procedures to ensure that your information is accurate, complete and current, but it is up to you to update or correct your personal information when necessary.
Given that Personal Data collection is undertaken in an open network (internet), these data may eventually circulate on the network without security conditions, and may be viewed and / or used by third parties who are not authorised for this purpose, despite the fact that appropriate safety measures have been taken against accidental or unauthorised destruction and accidental loss and also against unauthorised access, modification or dissemination.
Porto Academy does not make automated decisions.

D. What are your rights when you give us your data?
In accordance with the applicable legislation, the Porto Academy undertakes to respect the confidentiality of your personal information and ensure the exercise of your rights, in particular:

a) Right to be informed: our visitors/customers have the right to obtain clear, transparent and understandable information on how the Porto Academy uses their Personal Data. That is why we hereby make this Privacy Policy available to you.

b) Right of access: in addition to the right to information, you can access your personal data that we process and keep. In these cases, the Porto Academy will provide you with a copy of the personal data that is processed. In addition, when requested through electronic process, the information will be provided in an electronic format of common use.

c) Right of rectification: you have the right to rectify your personal data if they are incorrect, out of date or if you wish to complete them. To do so, you can contact us via the above contacts or, alternatively, if you have registered on the website, go to its “reserved area”.

d) Right of deletion / right to be forgotten: you can ask us to delete your data, however, please note that this is not an absolute right, since we may have legal grounds or other legitimate interests for the retention of your personal data.

e) Right of opposition, including direct marketing: You can either unsubscribe from Porto Academy Newsletter or opt-out of our direct marketing communications at any time. The easiest way to do this is by clicking on the link “unsubscribe” in any email or communication we send you, and you may also contact us for this purpose.

f) Right to withdraw consent at any time for the processing of data: you may withdraw your consent to the processing of data when such processing is based on your consent. Withdrawal of consent does not affect the legality of processing based on your consent prior to its withdrawal.

g) Right to file a complaint with the CNPD: If you consider that the treatment of your personal data by the Porto Academy stands in breach of the applicable data protection legislation, you may file a complaint with the National Data Protection Commission (“CNPD”). Please feel free to contact us before submitting any complaint to the CNPD.

h) Right to the portability of data: you have the right to move, copy or transfer the data from our database to another.

i) Right to limit data processing: you have the right to request the restriction of the processing of your data in the following situations: if you dispute the accuracy of the data, if the treatment is unlawful and you do not want to erase your data, but only limit it, if the data are no longer required by Porto Academy, but necessary to the visitor / customer or if you have exercised the right of opposition mentioned above, during the period of time in which the Porto Academy examines whether or not its legitimate interests for data processing prevail over that right. In order to request the exercise of any of the rights listed above, in addition to the forms specifically mentioned in the respective paragraphs, you may send a communication addressed to the above mentioned address or by sending an e-mail to the e-mail address also mentioned above, which you may also use if you have any questions regarding this Privacy Policy.

E. How long do we store your data?
We only store Personal Data for the time required to achieve the purpose for which it was collected, to respond to your needs or to comply with our legal obligations. In order to determine the period for which we store your data, we use the criteria listed below. If multiple criteria are applied simultaneously, we will keep your personal data in accordance with the criterion that entails the preservation of your Personal Data for the longest period of time. a) When purchasing products and / or services, we will keep your personal data for the duration of our contractual relationship, including any complaints that may arise, as well as for a period of two years after termination thereof, without prejudice to the fulfilment of obligations of the data controller; b) When you contact us to ask questions, we will keep your personal data for the period of time necessary to resolve your question; c) When creating an account on the reserved area (login), i.e. when registering on our website, we will keep your data until you ask us to delete it or after a period of inactivity of two years; d) When you consent to the sending of dissemination of Porto Academy events or the newsletter, we will keep your personal data until you cancel the subscription or ask us to eliminate it; e) Images taken by the video surveillance system, will be kept for a maximum of 30 days; f) For data collected during the recruitment procedure, for a maximum period of one year from the close of the procedure; g) The period of time provided in the applicable legislation; or h) Until the specific purpose applicable to certain data ceases to exist. In any of these situations, if there is pending legal or administrative offence proceedings, the data will be kept for the duration of the process and up to six months after the final decision is transited in rem judicatum. We may also retain some of your personal data to the extent necessary to comply with our legal obligations, as well as to manage or enforce our rights, including through recourse to the courts. After the above mentioned periods of conservation, the Personal Data will be deleted and / or erased in a secure way.

F. Guarantees
The data holder guarantees that the Personal Data communicated to the Porto Academy is correct and accurate and undertakes to notify any change or modification to them and assumes sole responsibility for the losses and damages caused by the erroneous, inexact or incomplete communication of the data. The data holder is expressly warned that when disclosing Personal Data in Porto Academy public media, such as Facebook, Twitter and Instagram, this information may be seen and used by third parties. The Porto Academy does not read any personal communications published on the websites of its visitors.