Privacy Policy
Introduction
This Privacy Policy governs the processing of personal data of users (or "Data Subjects") collected in the context of their interactions with Terra Heritage – Cultural Association ("Terrafoundation"), a non-profit private legal entity, located at Rua Nova da Trindade, number 1, 1st floor center, 1200 –301 Lisbon, with tax identification number 516 790 560, in the scope of providing and using the website hosted at www.terrafoundation.pt ("Site"), as the entity responsible for processing their personal data.
Through this Policy, we aim to inform the user about how Terrafoundation collects, processes, and protects the personal data provided to us.
The provision of your personal data implies acknowledgment and acceptance of the conditions outlined in this Privacy Policy. This Privacy Policy is supplemented by the Terms and Conditions and the Cookie Policy.
Collection and Processing of Personal Data
Accessing and browsing the Site does not necessarily require the provision of personal data.
However, there are certain features on the site that involve the provision of personal data. Therefore, in your interactions with Terrafoundation through the Site, you may provide us with contact information through the newsletter subscription form or when you contact us.
When you provide us with data through the newsletter subscription, this data is exclusively processed for the purpose of sending our newsletter and is processed based on your consent.
When you contact us, the personal data you provide is processed for the purposes of managing contact requests, clarifying doubts, or providing additional information based on Terrafoundation's legitimate interest in responding to your contact, or as applicable, based on pre-contractual measures at your request.
Disclosure of Data to Third Parties
Terrafoundation may transmit your personal data to third-party entities when it deems such data disclosures necessary or appropriate (i) in light of applicable law, (ii) to comply with legal obligations or court orders, (iii) in compliance with resolutions or decisions of supervisory authorities, (iv) to respond to requests from public or government authorities.
Additionally, Terrafoundation may engage other entities to provide certain services. This provision of services may potentially involve these entities accessing personal data of users. Therefore, any subcontracted entity of Terrafoundation will process the personal data of users on behalf and under the strict obligation to follow our instructions.
In any of the aforementioned situations, Terrafoundation will take all appropriate measures to ensure the effective protection of personal data.
Transfers of Data to Third Countries
We will seek to ensure that the processing of personal data takes place within the European Economic Area ("EEA"). However, when necessary, your personal data may be transferred and hosted outside of Portugal, in countries located outside the EEA.
If necessary, such transfers will be made (i) when there is a decision of adequacy by the European Commission for the recipient country, (ii) to entities based or located in the United States of America (USA) that are certified under the EU-US Data Privacy Framework, or (iii) in other cases, based on the implementation of appropriate safeguards, such as standard contractual clauses for data protection adopted by the European Commission. The responsible entities commit to adopting additional protective measures as needed to ensure, as far as possible, that the level of protection of the transferred personal data is essentially equivalent to that existing in the European Union.
Additionally, the data collected during your browsing on the Site, particularly through cookies and other similar technologies, may also be transferred outside of the EEA if you give your consent for the placement of certain categories of cookies (e.g., analytical or advertising cookies). These cookies are placed by third-party entities that may transfer your data to countries that do not have an adequacy decision from the European Commission and do not offer a level of personal data protection essentially equivalent to that of the European Union (e.g., the United States of America), as is the case with the web analytics and optimization service "Google Analytics" provided by Google Ireland Limited. As an example, sharing data with service providers outside of the EEA (such as Google LLC) may imply disproportionate access to your data by government authorities and intelligence services of the data-importing country or the inability to effectively exercise your rights. For more information on the use of these cookies, please refer to our Cookie Policy.
Data Retention
The personal data collected is processed in strict compliance with applicable law. Therefore, and unless there is a specific legal requirement, the data will be stored and retained only for the appropriate period and to the extent necessary to fulfill the purpose for which they were collected, unless the right to object, the right to erasure, or consent withdrawal is exercised within legal limits.
Cookies
The Site uses cookies. To learn more, please refer to our Cookie Policy here.
Rights of the Data Subject
Users may, at any time and free of charge, exercise their rights of access, rectification, erasure, objection, and restriction of processing, as well as data portability and withdrawal of consent, in accordance with the law.
Right of Access: The data subject has the right to obtain - confirmation of what personal data concerning them is being processed, as well as a copy of this personal data in the processing phase. The right to obtain said copy does not adversely affect the rights and freedoms of third parties, including trade secrets or intellectual property, and particularly copyright which protects software.
Right to Rectification: The data subject has the right to request the rectification of their inaccurate personal data or to have incomplete personal data completed.
Right to Erasure (Right to be Forgotten): The data subject has the right to obtain the erasure of their personal data without undue delay. This right shall not apply when the processing of the data is necessary for Terrafoundation to comply with a legal obligation.
Right to Restriction of Processing: The data subject has the right to request the restriction of processing, by asking for the suspension of processing or limiting the scope of processing to certain categories of data.
Right to Data Portability: The data subject has the right to receive the data they provided in a commonly used digital format that allows for automatic reading, or to request the direct transmission of this data to another entity that will become the new data controller.
Right to Object: The data subject can object to the processing of their data, for example, in cases where data is processed for the purpose of sending marketing communications.
Right to Withdraw Consent: The user also has the right to withdraw their consent for the processing of their personal data at any time, without affecting the lawfulness of the processing carried out based on the previously given consent. The user may exercise this right by using the option to unsubscribe from the mailing list available in all newsletters sent, or at any time they find convenient through the contacts provided below.
The data subject also has the right not to be subject to a decision based solely on automated processing, including profiling, that has legal effects on them or significantly affects them, unless it is necessary for the performance of a contract, based on their explicit consent, or authorized by EU or national legislation.
If you wish to exercise any of these rights, you should contact us in writing at the email address info@terrafoundation.pt or by mail addressed to the following address: Rua Nova da Trindade 1, 1st Center, 1200-301 Lisbon.
Complaints:
Without prejudice to any other administrative or judicial remedy, the data subject has the right to lodge a complaint with the CNPD or another competent supervisory authority in accordance with the law, if they believe that the processing of personal data concerning them by Terrafoundation violates the current legal framework.
Security
We are committed to ensuring the confidentiality of our users' personal data, employing appropriate security measures to ensure that they are not accessed by unauthorized entities. To this end, we use security systems to guarantee the protection of personal data and to prevent unauthorized access, improper use, disclosure, loss, or destruction of such data.
However, it is the responsibility of the users to ensure and secure that the devices and equipment used to access the Site are adequately protected against harmful software, computer viruses, and worms.
Changes to the Privacy Policy
Terrafoundation reserves the right to, at any time, change these terms regarding the processing of personal data. These changes will be disclosed on the Site.