Privacy Policy

The Fundação JMJ Lisboa 2023 (hereinafter referred to as  “WYD Foundation”), shall process the data collected through website www.lisboa2023.org, as the Entity Responsible for the Processing of Data.

For all legal purposes and effects, the full details and contact information of the Entity Responsible for the Processing of Data may be found below:

• Denomination: Fundação JMJ Lisboa 2023
• Tax Identification Number: 591 001 420
• Registered Address: Mosteiro de S. Vicente de Fora, Campo de Santa Clara, 1100-472 Lisbon
• Email: geral@lisboa2023.org

Personal data provided through the website shall be processed as follows:

Purposes and legal bases for the processing of personal information

Depending on the features of the website, your personal data may be processed for different purposes. These purposes and their applicable legal bases are set out below:

• For the purpose of sending newsletters related to the activity of WYD Foundation, we process your personal data on the legal basis of your consent. You may withdraw your consent at any time, while it is not unlawful for us to process your personal data on the basis of such consent up to the date upon which it is withdrawn. When necessary, your lack of consent will prevent us from sending you newsletters related to our activity.
• For the purpose of responding to requests or inquiries, we process your personal data on the legal basis of our legitimate interest in clarifying your doubts and providing you with the information requested.
  
• The website uses cookies, namely through the Google Analytics tool, a service of Google Ireland Limited (“Google”). On behalf of the JMJ Foundation, Google will collect information through your browser, if you give your consent, for the purpose of analyzing your behavior when browsing and using the website.

You may object to the use of Google Analytics, provided that you do not consent to its use and, if you have initially given your consent, you may withdraw it at any time. For more detailed information on how we process your personal data through cookies, please consult our Cookies Policy.

Retaining your personal data

The period for which we retain your personal data may vary according to the purpose for which it is processed. Therefore, your personal data shall be retained for the following duration periods:

• Sending newsletters related to the activity of WYD Foundation: until you withdraw your consent or for a maximum period of 2 years unless the holder renews his consent.
• Replying to requests or inquiries: until you exercise your right to object to the processing of your data, or until your personal data is no longer necessary for the accomplishment of such purpose, except the need to comply with a legal obligation.

Sharing and recipientes of personal data

We may share your personal details with third-party entities for the purpose of compliance with legal obligations whenever applicable, or whenever deemed necessary for the accomplishment of the afore-mentioned purposes of the processing of personal data.

Whenever personal data is outsourced to be processed by external service providers, we abide by stringent criteria in the selection of these entities in order to ensure compliance with their data protection obligations, and we also commit to entering into a data processing agreement with these service providers.  

The information generated by certain cookies about your use of the website may be transferred to an external server outside the European Economic Area (“EEA”) and stored there. This is the case with the cookies used by Google Analytics. In these cases, we implement adequate safeguards to protect your privacy, fundamental rights and freedoms as in the EEA, namely through an agreement entered with Google for the use and application of the standard contractual clauses adopted by the European Commission. For more detailed information on how we process your personal data through cookies, please consult our Cookies Policy.

Data subject rights

As the data subject, you have the following rights in relation to the processing of your personal data:

• Right to Access: You may obtain information on whether we are processing your personal data, and also access your personal data held on the files of this company. 
• Right to Rectification: You may make changes to your personal data when they are inaccurate or incomplete.
• Right to Erasure: You may request erasure of your personal data when, for instance, they are no longer necessary for the purposes for which they were collected.
• Right to Object: In specific situations, you may object to the processing of your personal data and request that it be ceased. We will stop processing your personal data except when there are legitimate interests for the declaration, exercise or defence of rights in administrative, legal or extrajudicial claims. 
• Right to Restriction: You may request the restriction of the processing of your personal data in the following situations: (a) when contesting the accuracy of your personal data; (b) when the processing is unlawful, and you have expressed your objection and requested the restriction of use of your personal data; (c) when we no longer need to process your personal data, but you need them for the exercise or defence of rights in administrative, legal or extrajudicial claims; (d) when you have objected to the processing of your personal data for reasons of public interest or to satisfy a legitimate interest, pending verification of whether the legitimate grounds for such processing override yours.
• Right to Portability: In specific situations, you shall have the right to receive the personal data you have provided, in addition to those obtained on the basis of your relationship with us,  in a structured, commonly used and machine-readable format, and the right to transmit those data to other entities. 

For further information, or should you wish to exercise the above-mentioned rights, you may send an email to geral@lisboa2023.org. Should you wish to exercise your rights, if deemed necessary, we may request that you submit an identity document to us. You should also specify the right you intend to exercise. The exercise of one’s rights is free, except when a request is manifestly unfounded, excessive or repeated. 

Alternatively, you may always contact our Data Protection Officer ("DPO") at the following email address: dac@hedadpo.pt

You may also contact the DPO by sending a letter to the following address: Rua João Ramalho, 141, 4200-342 Porto

Finally, please note that a complaint may also be lodged with the competent control authority (National Data Protection Commission) at www.cnpd.pt.