Privacy Policy

This Privacy and Personal Data Protection Policy sets out the terms under which the Fundação Caixa Geral de Depósitos – Culturgest processes the personal data of its Clients (including, in particular, all spectators, visitors and participants in its activities), as well as the rights they may exercise, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council – General Data Protection Regulation (GDPR) – and other applicable national legislation on privacy and data protection.

Definitions

To make this Policy easier to understand, the following definitions have been used:

Personal data

Any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier, for example a name, an identification number, location data, an online identifier or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Personal data processing

Any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Controller

Individual or group of people who decides the purposes and means of personal data processing.

Processor

Individual or group of people who processes personal data on behalf of Culturgest, in the context of the provision of services, formalised by contract.

Supervisory authority

Independent public authority, which, in the case of Portugal, is the Comissão Nacional de Proteção de Dados (National Data Protection Commission or CNPD), which is responsible for overseeing the correct application of personal data protection legislation.

Cookies

Computer files that contain a sequence of numbers and letters that allow for the unique identification of a user’s web browsing device, which can also contain other information such as the user’s browsing preferences on a certain site. Cookies are downloaded from the browser to the web browsing device (computer, mobile phone, tablet, etc.) when it accesses certain sites.

Controller

The organisation responsible for data processing is Culturgest.

Processed data

Culturgest processes the personal data it collects in the context of the business and promotional relationship established with Clients with the goal of promoting its artistic, cultural and scientific activities, whilst fulfilling the applicable legal and regulatory obligations.

Principles observed

In the data processing it carries out, Culturgest observes the principles of lawfulness, fairness and transparency; purpose limitation; data minimisation; accuracy; storage limitation; integrity, confidentiality and accountability.

Basis for data processing

The data processing that Culturgest carries out in the course of its activities is framed within defined, clear and specific purposes, guaranteeing the duty of information to the data subjects.
This processing is based on:
– the fulfilment of legal obligations;
– the context of the execution of contracts in which the data subjects are a party or in pre-contractual proceedings on request;
– the pursuit of Culturgest’s legitimate interests;
– the consent of the data subject.

Processors

In pursuing its activities, Culturgest may make use of third parties – processors – to provide certain services, which may involve access, by these third parties, to personal data belonging to the data subject. Culturgest assures that, in these circumstances, suitable technical and organisational measures are adopted in order to ensure that subcontracted entities satisfy the applicable legal requirements and offer appropriate guarantees in terms of data protection.

Rights of personal data subjects

Culturgest guarantees the data subject, on a permanent basis, all rights resulting from the personal data protection legislation, including rights of access, updating, rectification, the right to be forgotten, to restriction of processing or erasure of personal data and, where applicable, the right to data portability.
The data subject can at any time revoke, reduce or limit the scope of any consent previously given, without prejudice to the lawfulness of the processing previously carried out.
Clients also have the right to lodge a complaint with the Comissão Nacional de Proteção de Dados (National Data Protection Commission).

How to exercise these rights

Clients can exercise the above-mentioned rights by various alternative methods: (I) written communication presented in person at the Culturgest ticket office; (II) letter to Culturgest (Edifício Sede da Caixa Geral de Depósitos, Rua Arco do Cego, 50. 1000–300 Lisbon, Portugal) or Culturgest Porto (Edifício Caixa Geral de Depósitos, Avenida dos Aliados, 104. 4000–065 Porto, Portugal; (III) email: culturgest.protecaodados@cgd.pt.

Data storage

Culturgest observes the legal regulations relating to periods of personal data storage, and may store data under the following conditions:
a) Until the end of the legal period established after the term of the contractual relation;
b) As long as obligations resulting from the contractual relation remain in force;
c) As long as there is an enforceable right against Culturgest.
When there is no specific legal requirement, data will be stored only for the minimum period necessary for the purposes that motivated its collecting and subsequent processing.

Security measures

Culturgest guarantees appropriate levels of security and personal data protection to data subjects. To this end, it makes use of various technical and organisational security measures to protect personal data against loss, disclosure, alteration, unauthorised processing or access, as well as any other form of unlawful processing.

Cookie use

On its website www.culturgest.pt, Culturgest uses cookies that allow it to improve the performance and browsing experience for its data subjects, thereby increasing the speed and efficiency of response and also eliminating the need to repeatedly enter the same information.
The user can accept, reject or remove cookies by managing their browser settings, and always has the possibility of altering their permissions.

Changes to the Privacy and Cookies policy

Culturgest may update or adjust this Privacy and Cookies policy and will ensure that these changes are duly publicised.