Last updated: March 13, 2025
The Quadrilátero Association (hereinafter referred to as 'AQ') is committed to protecting the privacy and personal data of its members, employees, partners, and other individuals with whom it interacts. This Personal Data Protection Policy sets out the guidelines for the collection, use, sharing, and protection of personal data, in accordance with the General Data Protection Regulation (GDPR) and applicable national legislation.
- Data Controller
- Personal Data Collected AQ may collect the following types of personal data:
- Identification Data: Full name, tax identification number (NIF), citizen card or passport number, nationality, date of birth, gender, marital status.
- Contact Data: Address, phone number, email address.
- Professional Data: Job title, employer, professional history.
- Financial Data: Banking information for processing payments or receipts.
- Image and Sound Data: Photographs, videos, and voice recordings captured at events organized by AQ.
- Purposes of Data Processing The personal data collected by AQ are processed for the following purposes:
- Membership Management: Administration of members, fee management, communication of activities and events.
- Communication and Marketing: Dissemination of news, events, newsletters, and other relevant information for members and the general public.
- Event Management: Organization and promotion of events, workshops, conferences, and other initiatives.
- Payment processing, invoicing, and compliance with tax obligations.
- Security: Ensuring the safety of facilities and event participants, including the use of properly signposted video surveillance systems.
- Legal Grounds for Processing The processing of personal data by AQ is based on the following legal grounds:
- Consent: When the data subject gives explicit consent for one or more specific purposes.
- Contract Execution: When processing is necessary for the execution of a contract to which the data subject is a party or for pre-contractual steps at their request.
- Compliance of legal obligations: When processing is necessary to comply with legal obligations to which AQ is subject.
- Legitimate Interests: When processing is necessary for the legitimate interests pursued by AQ or third parties, unless the fundamental rights and freedoms of the data subject prevail.
- Sharing of Personal Data AQ may share personal data with:
- Public Entities: Tax, judicial, and regulatory authorities, as required by law.
- Partners and Service Providers: Entities collaborating with AQ in organizing events, providing services, or carrying out activities, provided they comply with confidentiality and data protection obligations.
- Other Entities: When such sharing is necessary to protect the vital interests of the data subject or another individual.
- International Data Transfers
- Rights of Data Subjects Data subjects have the following rights:
- Right of Access: To obtain confirmation of whether their personal data are being processed and, if so, access to those data.
- Right to Rectification: Request correction of inaccurate or incomplete personal data.
- Right to Erasure: To request the deletion of their personal data, when applicable.
- Right to Limitation of Processing: Request the limitation of the processing of your personal data in certain circumstances.
- Right to Object: To object to the processing of their personal data for reasons related to their particular situation.
- Right to Portability: Receive personal data concerning you that you have provided to AQ, in a structured, commonly used and machine-readable format, and transmit this data to another controller.
- Personal Data Security AQ implements appropriate technical and organizational measures to protect personal data against loss, misuse, unauthorized access, disclosure, alteration, or destruction. These measures include:
- Access Control: Restricting access to personal data to authorized personnel only and for established purposes.
- Training: Ongoing awareness and training of staff on data protection policies and procedures.
- Technological Security: Use of firewalls, encryption, and other IT security measures to protect personal data.
- Data Retention
- Changes to this Policy
- Contact
AQ, headquartered at Câmara Municipal de Braga, Praça Municipal, s/n, 4700-435, is the entity responsible for processing personal data collected in the scope of its activities.
AQ does not, in principle, transfer personal data outside the European Economic Area (EEA). If such transfers occur, AQ will ensure compliance with applicable legal provisions, guaranteeing an adequate level of protection for personal data.
To exercise their rights, data subjects should contact AQ via email at geral@quadrilatero.eu or by registered mail to Associação Quadrilátero, Câmara Municipal de Braga, Praça Municipal, s/n, 4700-435.
AQ retains personal data only for the period necessary for the purposes for which they were collected or to comply with applicable legal obligations. After this period, the data will be securely deleted.
AQ reserves the right to update or modify this Personal Data Protection Policy at any time. Any changes will be published on AQ's institutional website and, when appropriate, notified to data subjects.
For questions related to this Personal Data Protection Policy or to exercise data subject rights, please contact us via email at geral@quadrilatero.eu or by registered mail to Associação Quadrilátero, Câmara Municipal de Braga, Praça Municipal, s/n, 4700-435. AQ is committed to protecting the privacy and personal data of all individuals with whom it interacts, strictly complying with the provisions of the GDPR and applicable national legislation.
As a user of MAP, you have the option to delete your account and the personal data associated with it. To do so, access your Personal Area and select the Delete Account option. Alternatively, you may request deletion by sending an email to geral@quadrilatero.eu
How long will your data be stored?The period of time during which data is stored and retained varies according to the purpose for which the information is processed. Whenever there is no specific legal requirement, the data will be stored and retained only for the minimum period necessary for the purposes that justified its collection or subsequent processing, after which it will be deleted.