Personal Data Processing Policy

The Instituto do Turismo de Portugal, I.P. (“Turismo de Portugal”) is committed to protecting and respecting the privacy of users of the portal https://escolas.turismodeportugal.pt/ and the platforms it manages.

With the entry into force on May 25, 2018, in all Member States of the European Union, of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (General Data Protection Regulation – “GDPR”), it became necessary to implement and publicize this Personal Data Processing Policy, which reflects Turismo de Portugal’s commitment to respecting and ensuring compliance with the rules for protecting personal data collected by it.

This Policy establishes the basis on which any personal data obtained or provided by their respective data subjects on this portal will be processed. The term “personal data,” as used in this Policy, refers to specific information such as name, email address, address, telephone number, or any other information that can be used to identify its owner. It is not necessary to provide personal information to browse the public areas of this portal.

By registering on the portal https://escolas.turismodeportugal.pt/ and/or providing any personal data, the data subject is freely giving their explicit consent for the personal data submitted to be processed for the purposes and under the terms described in this Policy and in compliance with the laws and regulations in force relating to personal data.

Processing of Personal Data

The processing of personal data consists of an operation or set of operations carried out on personal data or sets of personal data, by automated means or otherwise, including collection, recording, organization, structuring, storage, adaptation, retrieval, consultation, use, disclosure, dissemination, comparison, interconnection, restriction, erasure, or destruction.

Some personal data must be provided to deliver the requested service and/or information. Turismo de Portugal will inform users of this requirement, and in cases of failure to provide or incorrect provision of the required data, Turismo de Portugal will not be able to provide the requested service and/or information. The provision of incorrect or inaccurate data is the sole responsibility of the respective owner.

Data Controller

This portal is exclusively owned by Turismo de Portugal, I.P., a public institution of special regime, corporate entity no. 508666236, headquartered at Rua Ivone Silva, Lote 6, 1050-124 Lisbon, which is the entity responsible for processing personal data obtained or provided on the portal https://escolas.turismodeportugal.pt/. Contact can also be made via the email address: formacao@turismodeportugal.pt or the Data Protection Officer’s email address: dpo@turismodeportugal.pt.

Purposes of Collecting Personal Data

The personal data collected on the portal https://escolas.turismodeportugal.pt/ and/or on platforms managed by Turismo de Portugal are processed for the following purposes:

Dissemination of the activities carried out by Turismo de Portugal, including its products and services, such as the subscription and delivery of newsletters;
Promotion of the training programs provided by the Tourism Schools;
Promotion of applications, events, initiatives, and/or contests made available by the Tourism Schools;
Support programs for entrepreneurship.

Personal data may also be processed to respond to questions, suggestions, or complaints submitted by the data subject.

Rights of Personal Data Subjects

Under the terms and for the purposes of Articles 13 to 22 of the GDPR, Turismo de Portugal informs that any data in its possession can be accessed, limited in processing, rectified (for errors, inaccuracies, or incompleteness) by the respective owner and, in cases where processing is based on consent, the owner also has the right to request the erasure of data whose processing does not fall under one of the lawful situations provided in Article 6(1)(b) to (e) of the GDPR.

Additionally, Turismo de Portugal informs that in cases where processing depends on consent, the data subject has the right to withdraw their consent at any time. Withdrawal of consent does not compromise the lawfulness of processing carried out based on prior consent.

The data subject also has the right to object to the continuation of processing of their personal data, to be informed, upon request, about the purposes of processing, the categories of data involved, the identity of recipients to whom data has been disclosed, and the retention period of their personal data, as well as to receive their personal data and transfer it to another controller (“data portability”).

Subcontractors

Turismo de Portugal may engage subcontractors for the maintenance, hosting, and management of its IT systems and equipment, under the terms permitted by the legislation governing the processing of personal data. These entities are obliged to maintain confidentiality and ensure the security of users’ data of the portal https://escolas.turismodeportugal.pt/, to which they may have access for these purposes. They may not use such data for any other purposes, for their own benefit, or combine it with other data they possess.

In all cases, Turismo de Portugal remains responsible for the personal data provided to it.

Communication and Transfer of Personal Data

Personal data may be disclosed to courts and other competent authorities, strictly in compliance with the law, particularly when necessary for resolving disputes and activities related to public security, state defense and security, and the prevention, investigation, or detection of criminal offenses.

Retention of Personal Data

The period for which personal data is stored and retained varies depending on the purpose for which the information is processed.

Turismo de Portugal retains personal data only for as long as necessary to achieve the purpose for which it was provided or to fulfill any contractual or legal obligations to which it is subject.

Thus, and whenever there is no specific legal requirement, the data will be retained only for the minimum period necessary to pursue the purposes that motivated its collection or subsequent processing, as defined by law.

Complaints

Without prejudice to being able to file complaints directly with Turismo de Portugal through the contacts provided, the data subject may also lodge complaints directly with the Comissão Nacional de Proteção de Dados (CNPD), which is the Control Authority in Portugal, using the contact details provided by this entity for such purposes.

Minors

Minors under the age of 16 must obtain permission from their parents or guardians before accessing or providing personal data on the portal.

The responsibility for identifying the contents and pages accessed by minors under the age of 16 lies with their parents or legal guardians.

Changes to this Policy

Turismo de Portugal reserves the right to make adjustments or changes to this Personal Data Processing Policy at any time, publishing such changes through appropriate dissemination channels.