Privacy Policy

1. INTRODUCTION
The protection of personal data is a priority for Ágora – Cultura e Desporto do Porto, EM, S.A. (hereinafter referred to as “Ágora”). This Privacy and Personal Data Protection Policy clarifies what personal data is collected, for what purposes it is used, what principles guide the use of this data, and the rights that their holders enjoy.

Ágora is a local company of a municipal nature, endowed with statutory, administrative and financial autonomy, incorporated on September 29, 2006 (then as Porto Lazer E.M.), whose share capital is fully owned by the Municipality of Porto, under the terms of the Legal of Local Business Activity and Local Participations.

Its corporate purpose is the promotion and development of culture, physical activity and sport, other entertainment activities in the city, as well as the promotion and development of brands associated with the city of Porto, in addition to activities determined by the management of the spaces and equipment that are under its management.


2. CONTEXT
This policy applies to all those who, in any way, have a relationship with Ágora.


3. RESPONSIBLE FOR DATA PROCESSING
As the entity responsible for processing the personal data entrusted to it, Ágora:
— Ensures that personal data is processed exclusively for the purposes for which it was collected or for compatible purposes;
— Is committed to a culture of data minimisation, in which only the necessary personal data is collected, used and stored;
— Ensures that it does not disclose or share personal data for commercial or advertising purposes.


4. USE OF PERSONAL DATA
Ágora uses personal data to ensure the pursuit of its activities and the fulfilment of its mission, including:
— Responding to requests, communications, complaints, suggestions and user participation;
— Managing registrations and reservations at sports and cultural venues managed by Ágora, as well as participation in activities, events and initiatives promoted by it;
— Conducting surveys to assess the quality of services provided and identify opportunities for improvement;
— Sending information related to or compatible with the purposes for which the data was collected, such as the dissemination of activities, events or changes in the services provided; Sending information related to or compatible with the purposes for which the data was collected;
— Ensuring the efficient functioning of the spaces and activities under its management.

Ágora may use anonymised data generated in the course of its activities to improve its services, develop new features and perform statistical analyses.


5. PERSONAL DATA COLLECTED

The data collected varies depending on the interaction with Ágora and may include:

— Identification: Name, age, tax identification number, citizen card/ID card number, social security number.

— Financial data: Bank identification number.

— Institutional data: Institutional email address.

— Contact details: Address, email address, telephone/mobile number.

— Image: Images captured by security cameras and photographs/videos taken during events, used for the purpose of publicising activities, in accordance with the best practices set out in the GDPR.


6. PERSONAL DATA OF MINORS

The collection and processing of personal data of minors only occurs with the consent of those with parental responsibility, except in situations provided for by law. These responsible parties may exercise their rights over the personal data of minors under conditions similar to those of data subjects.


7. PROCESSING OF SPECIAL DATA

Data considered sensitive by the GDPR, such as health information, receives additional protection. Ágora only collects such data when strictly necessary and in accordance with specific safeguards.


8. SHARING OF PERSONAL DATA

Ágora will only share your personal data with third parties in the exercise of public interest/public authority functions, in strict compliance with legal obligations, or with the consent of the data subject.


9. SECURITY OF PERSONAL DATA

Ágora uses security technologies and measures to protect personal data against unauthorised access, use or disclosure.


10. DATA SUBJECT RIGHTS

Data subjects have the right to:

— Be informed in a clear and transparent manner about the processing of their data;

— Access data concerning them;

— Request the rectification of incorrect, incomplete or inaccurate data;

— Object to the processing of their data (except in cases where there are legal exceptions);

— Request the restriction of processing to specific categories;

— Request the erasure of data (“right to be forgotten”), except where there are legal grounds for its retention;

— Withdraw consent, without compromising the lawfulness of previous processing;

— Request the portability of their data to another entity, where technically feasible.


11. RETENTION OF PERSONAL DATA
Personal data is retained for the period necessary for the purposes for which it was collected. Where justified, retention periods may be extended for archiving purposes in the public interest, historical, scientific or statistical purposes, always in compliance with appropriate security measures.

To determine the appropriate retention period, Ágora takes into account the various deliberations of the European data protection supervisory authorities, namely the CNPD, and the Archival Regulation for Local Authorities (Ordinance No. 112/2023 of 27 April).

The data will be deleted as soon as it is no longer necessary for the defined purpose(s) or when consent is withdrawn.


12. COOKIES AND SIMILAR TECHNOLOGIES
Ágora uses cookies (small text files that a website places on your computer or mobile device via your internet browser when you visit it) to provide our websites and online services, help us collect data and save your settings, in order to improve our performance and your user experience.


13. SOCIAL MEDIA
— Facebook: facebook.com/agoraporto2019

— Instagram: instagram.com/agoraporto

— YouTube: youtube.com/agoraporto

— LinkedIn: linkedin.com/company/agoraporto


14. CONTACT INFORMATION
For more information about Ágora's privacy and personal data protection practices, as well as to exercise your rights as a data subject, you can contact the Data Protection Officer by email at dpo@agoraporto.pt.


15. CHANGES TO THE PRIVACY POLICY
This privacy policy will be updated regularly, whenever necessary.

We recommend that you periodically review the privacy and personal data protection policy to stay informed about how Ágora is protecting your personal data and to keep up to date with the information and rights that apply to you.

Suggestions for improvement can be made by emailing dpo@agoraporto.pt.