Privacy and Personal Data Protection Policy
Data Controller
The Universidade da Madeira, with registered office at Campus da Penteada, Caminho da Penteada, 9020-105 Funchal, Portugal, hereinafter referred to as the CONTROLLER, is the entity responsible for the processing of Users’ personal data.
The academic event to which this Website refers takes place at Colégio dos Jesuítas, Rua dos Ferreiros, 9000-082 Funchal, Portugal.
The CONTROLLER informs that personal data will be processed in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation – GDPR), Law No. 58/2019 of 8 August, which ensures the implementation of the GDPR in the Portuguese legal system, and all other applicable European and national data protection legislation.
Information and consent
By accepting this Privacy Policy, the User declares that they have been duly informed and gives their free, specific, informed and unequivocal consent to the processing of the personal data provided through the forms available on the congress website (hereinafter, the “Website”) by the CONTROLLER.
The CONTROLLER shall not be held liable for the processing of personal data carried out by third-party websites not under its responsibility.
Obligation to provide data
Unless otherwise indicated, the provision of the personal data requested through the Website forms is mandatory in order to process registrations, submissions or requests made by the User. Failure to provide such data, or providing inaccurate data, may prevent the fulfilment of the intended purposes, without prejudice to free access to the publicly available content of the Website.
The User guarantees that the personal data provided are accurate, complete and up to date, and undertakes to communicate any changes thereto.
Purpose of processing
Personal data will be processed exclusively for the following purposes:
-
Management of congress registrations and participation
-
Management of scientific submissions and communications
-
Issuing of attendance or participation certificates
-
Organisation and logistical management of the congress
-
Responding to requests for information related to the event
Lawfulness of processing
The processing of personal data is based on the consent of the data subject, pursuant to Article 6(1)(a) of the GDPR, and on the necessity of such processing for the organisation and management of the congress, in accordance with Article 6(1)(e) of the GDPR and Law No. 58/2019 of 8 August.
Data retention period
Personal data shall be retained only for the period strictly necessary to fulfil the purposes for which they were collected and, thereafter, for the period required to comply with applicable legal and administrative obligations.
The User may withdraw their consent at any time, without affecting the lawfulness of the processing carried out prior to such withdrawal.
Data communication
Personal data shall not be disclosed to third parties, except where such disclosure is required by law or strictly necessary for the organisation and operation of the congress.
Rights of data subjects
In accordance with the applicable data protection legislation, data subjects have the right to:
-
Access their personal data
-
Request rectification or erasure
-
Request restriction of processing
-
Data portability
-
Object to processing
-
Not be subject to automated individual decision-making
-
Withdraw consent at any time
-
Lodge a complaint with the competent supervisory authority
In Portugal, the competent authority is the Comissão Nacional de Proteção de Dados (CNPD).
Exercise of rights
Requests for the exercise of data protection rights may be addressed to:
Universidade da Madeira
Campus da Penteada
Caminho da Penteada
9020-105 Funchal, Portugal
📧
Origin of the data
All personal data processed are provided directly by the data subject.
Data Protection Officer
The Universidade da Madeira has appointed a Data Protection Officer (DPO), who may be contacted for any matter related to personal data protection via the following e-mail address:
📧
Security measures
The CONTROLLER undertakes to process personal data in strict confidentiality and to implement appropriate technical and organisational measures to ensure an adequate level of security, preventing unauthorised access, disclosure, alteration or loss of personal data, taking into account the state of the art, the nature of the data and the risks involved.