PERSONAL DATA PROCESSING POLICY
The Setúbal Bay Association (SBA) is dedicated to protecting and respecting the privacy of visitors to the portal www.setubalbay.org and the platforms it manages.
As of May 25 2018, in all Member States of the European Union and pursuant to EU Regulation 2016/679 of the European Parliament and Council of 27 April 2016 (General Data Protection Regulation – GDPR), the following Personal Data Processing Policy of the Association shall hereby be made public, by which the Association shall abide in respect of the rules of personal data protection therein.
The present Policy henceforth establishes the basis on which any personal data obtained or supplied by the respective owner shall be used within this portal and/or on the platforms managed by the Setúbal Bay Association. The term ‘personal data’, as given within this Policy, refers to particular information such as the name, email address, physical address, telephone number or any other information which may be used to identify the owner. To navigate the public areas of this portal, no personal information need be supplied.
By registering on the platforms managed by the Setúbal Bay Association and/or supplying any personal data therein, the owner of this data willingly grants explicit consent to the given personal data being made use of according to the purposes and terms described in this Policy, in accordance with the laws and regulations in effect regarding personal data management.
PROCESSING OF PERSONAL DATA
The processing of personal data consists of an operation or set of operations automatically or non-automatically implemented upon one or more types of personal data, namely its collection, registration, organisation, elaboration, preservation, adaption, recuperation, consultation, exploitation, publication, dissemination, collation, interconnection, restriction, deletion and/or destruction.
The collection of certain personal data is mandatory in order to make available the service and/or information therein. The Setúbal Bay Association shall hereby notify of this requirement and in the eventuality of non-compliance or the incorrect provision of said data, the Setúbal Bay Association will not be able to provide the service and/or information as requested. The passing on of incorrect or imprecise data is the entire responsibility of its respective owner.
THE DATA CONTROLLER
This portal is the exclusive property of the Setúbal Bay Association, legal person no. 508810060, headquartered in Av. Luísa Todi 468 2900-567, Setúbal, henceforth known as the data controller responsible for the processing of personal data obtained or supplied at the portal www.setubalbay.org. For further information contact via the email: firstname.lastname@example.org.
PURPOSES OF PERSONAL DATA COLLECTION
Any personal data collected on the portal www.setubalbay.org and/or the platforms managed by the Setúbal Bay Association are subject to the following uses:
– Membership Application to the Setúbal Bay Association.
Any personal date may also be used to respond to questions, suggestions or complaints made by the respective owner.
RIGHTS OF OWNERS OF PERSONAL DATA
According to the terms and for the purposes of the provisions of Articles 13 to 22 of the GDPR, the Setúbal Bay Association hereby informs that any data in its possession may be consulted, restricted in its use, rectified (due to incorrect, imprecise or incomplete information) by the respective owner, and, in the case of its usage being founded on the principle of consent, the owner furthermore has the right to request the deletion of data, the use of which does not pertain to its lawful usage as specified in article 6.1, lines b) to f) of the GDPR.
The Setúbal Bay Association furthermore informs that, in the case of processing of data requiring consent, the owner of the data has the right to withdraw consent at any moment. The withdrawal of consent at no point compromises the lawfulness of data processing on the basis of any previously given consent.
The owner of the aforementioned data has, furthermore, the right to oppose the continuing processing of his or her personal data, the right to be informed, on request, of the purposes of its usage, the types of data involved, the identity of the recipients with whom it has been shared and the length of time the personal data is held, as well as the right to receive any personal data of his or her concern, that may have been supplied, in order to be sent to other entities (the right to data portability).
The Setúbal Bay Association may employ subcontractors to maintain, hold and manage its IT systems and equipment, according to the terms permitted by the legislation regulating the processing of personal data, said entities being obliged to keep confidentiality and guarantee the security of the data belonging to users of the portal www.setubalbay.org and the platforms managed by the Setúbal Bay Association, for the purpose of which they have access, being furthermore prohibited from using such data for any other purposes, or personal gain, or incorporation with other data they may have in their possession.
In all cases, the Setúbal Bay Association shall continue to be responsible for the personal data with which it is entrusted.
COMMUNICATION AND TRANSFER OF PERSONAL DATA
Any personal data may be made available to the courts and other competent authorities, in strict compliance with the provisions of the law, namely when deemed necessary for the resolution of legal disputes and for activities related to matters of public safety, defence and state security, and the prevention, investigation or detection of criminal activity.
PERSONAL DATA RETENTION
The period of time during which any personal data is kept and safeguarded varies according to the purpose for which said data is being processed.
The Setúbal Bay Association shall keep hold of any personal data for no longer than the period of time required to comply with the purposes for which it was given, or to fulfil any contractual or legal obligations therein.
This being the case, or whenever a specific legal stipulation does not exist, any data shall be kept solely for the minimum required period in order to proceed with the purposes which led to its collection or its subsequent usage, according to the terms defined in law.
Notwithstanding the option of directly presenting any complaints to the Setúbal Bay Association, via the contacts made available for this very purpose, the data owner may make their complaint directly to the National Data Protection Committee (CNPD), the existing Control Authority in Portugal, by using the contacts made available by this entity for this purpose.
Minors of 16 years of age and younger should obtain permission from their parents or guardians before accessing the portal or supplying personal data on the portal.
Any responsibility for the identification of content and pages which minors of 16 years of age and younger may access is entirely that of their parents or legal guardians.
CHANGES TO THIS POLICY
The Setúbal Bay Association reserves the right, at any time, to make adjustments or changes to the present Personal Data Processing Policy, making known said alterations via the appropriate channels.
In accordance with: http://www.turismodeportugal.pt/pt/Paginas/politica-de-privacidade.aspx