Privacy and Data Protection
This Privacy and Personal Data Protection Policy sets out the terms under which AL KANTARA – Associação Cultural (Alkantara) processes the personal data of its users of the website www.alkantara.pt (including, in particular, all audience members, visitors and participants in our activities), as well as the rights they may exercise, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council – General Data Protection Regulation (GDPR) – and other applicable national legislation on privacy and data protection.
To make this Policy easier to understand, the following definitions have been used:
Any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier, for example a name, an identification number, location data, an online identifier or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Personal data processing
Any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
Individual or group of people who decides the purposes and means of personal data processing.
Individual or group of people who processes personal data on behalf of Alkantara, in the context of the provision of services, formalised by contract.
Independent public authority, which, in the case of Portugal, is the Comissão Nacional de Proteção de Dados (National Data Protection Commission or CNPD), which is responsible for overseeing the correct application of personal data protection legislation.
Computer files that contain a sequence of numbers and letters that allow for the unique identification of a user’s web browsing device, which can also contain other information such as the user’s browsing preferences on a certain site. Cookies are downloaded from the browser to the web browsing device (computer, mobile phone, tablet, etc.) when it accesses certain sites.
The organisation responsible for data processing is Alkantara.
Alkantara processes the personal data it collects in the context of the business and promotional relationship established with Users with the goal of promoting its artistic, cultural and training activities, whilst fulfilling the applicable legal and regulatory obligations.
In the data processing it carries out, Alkantara observes the principles of lawfulness, fairness and transparency; purpose limitation; data minimisation; accuracy; storage limitation; integrity, confidentiality and accountability.
BASIS FOR DATA PROCESSING
The data processing that Alkantara carries out in the course of its activities is framed within defined, clear and specific purposes, guaranteeing the duty of information to the data subjects.
This processing is based on:
– the fulfilment of legal obligations;
– the context of the execution of contracts in which the data subjects are a party or in pre-contractual proceedings on request;
– the pursuit of Alkantara’s legitimate interests;
– the consent of the data subject.
In pursuing its activities, Alkantara may make use of third parties – processors – to provide certain services, which may involve access, by these third parties, to personal data belonging to the data subject. Alkantaraassures that, in these circumstances, suitable technical and organisational measures are adopted in order to ensure that subcontracted entities satisfy the applicable legal requirements and offer appropriate guarantees in terms of data protection.
RIGHTS OF PERSONAL DATA SUBJECTS
Alkantara guarantees the data subject, on a permanent basis, all rights resulting from the personal data protection legislation, including rights of access, updating, rectification, the right to be forgotten, to restriction of processing or erasure of personal data and, where applicable, the right to data portability.
The data subject can at any time revoke, reduce or limit the scope of any consent previously given, without prejudice to the lawfulness of the processing previously carried out.
Users also have the right to lodge a complaint with the Comissão Nacional de Proteção de Dados (National Data Protection Commission).
HOW TO EXERCISE THESE RIGHTS
Users can exercise the above-mentioned rights by various alternative methods: (I) letter to Alkantara (Espaço Alkantara, Calçada Marquês de Abrantes, nº 99, 1200-718 Lisbon, Portugal); (II) email: firstname.lastname@example.org.
Alkantara observes the legal regulations relating to periods of personal data storage, and may store data under the following conditions:
a) Until the end of the legal period established after the term of the contractual relation;
b) As long as obligations resulting from the contractual relation remain in force;
c) As long as there is an enforceable right against Alkantara.
When there is no specific legal requirement, data will be stored only for the minimum period necessary for the purposes that motivated its collecting and subsequent processing.
Alkantara guarantees appropriate levels of security and personal data protection to data subjects. To this end, it makes use of various technical and organisational security measures to protect personal data against loss, disclosure, alteration, unauthorised processing or access, as well as any other form of unlawful processing.
The user can accept, reject or remove cookies by managing their browser settings, and always has the possibility of altering their permissions.
CHANGES TO THE PRIVACY AND COOKIES POLICY
Alkantara may update or adjust this Privacy and Cookies policy and will ensure that these changes are duly publicised.