Privacy Policy

This Privacy and Personal Data Protection Policy sets out the terms under which the Lisbon Architecture Triennale processes the personal data of its visitors and those participating in its activities, as well as the rights they may exercise, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council – General Data Protection Regulation (GDPR) – and other applicable national legislation on privacy and data protection.

To facilitate understanding of this Policy, we provide clarification for the following definitions:

• Personal Information
  Any information relating to an identified or identifiable natural person (“data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier (such as, for example, a name, an identification number, location data, an online identifier) or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
• Personal data processing
  Any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
• Controller
  Individual or group of people who decides the purposes and means of personal data processing.
• Processor
  Individual or group of people who processes personal data on behalf of the Lisbon Architecture Triennale, in the context of the provision of services, formalised by contract.
• Supervisory authority
  Independent public authority, which, in the case of Portugal, is Comissão Nacional de Proteção de Dados (National Data Protection Commission or CNPD), which is responsible for overseeing the correct application of personal data protection legislation.

CONTROLLER

The organisation responsible for data processing is the Lisbon Architecture Triennale.

PROCESSED DATA

The Lisbon Architecture Triennale processes the personal data it collects in the context of the business and promotional relationship of its cultural activity, established with visitors and participants, whilst fulfilling the applicable legal and regulatory obligations.

PRINCIPLES OBSERVED

In the data processing it carries out, the Lisbon Architecture Triennale observes the principles of lawfulness, fairness and transparency; purpose limitation; data minimisation; accuracy; storage limitation; integrity, confidentiality and accountability.

BASIS FOR DATA PROCESSING

The data processing that the Lisbon Architecture Triennale carries out in the course of its activities is framed within defined, clear and specific purposes, guaranteeing the duty of information to the data subjects.
This processing is based on:

• the fulfilment of legal obligations;
• the context of the execution of contracts in which the data subjects are a party or in pre-contractual proceedings on request;
• the pursuit of the Lisbon Architecture Triennale’s legitimate interests;
• the consent of the data subject.

PROCESSORS

In pursuing its activities, the Lisbon Architecture Triennale may make use of third parties – Processors – to provide certain services, which may involve access, by these third parties, to personal data belonging to the data subject. The Lisbon Architecture Triennale assures that, in these circumstances, suitable technical and organisational measures are adopted in order to ensure that subcontracted entities satisfy the applicable legal requirements and offer appropriate guarantees in terms of data protection.

RIGHTS OF PERSONAL DATA SUBJECTS

The acceptance on behalf of the data subjects that their data may be processed or used under permission is always of a revocable nature, without any retroactive effects. The Lisbon Architecture Triennale guarantees the data subject, on a permanent basis, all rights resulting from the personal data protection legislation, including rights of access, updating, rectification, the right to be forgotten, to restriction of processing or erasure of personal data and, where applicable, the right to data portability.
The data subject can, at any time, revoke, reduce or limit the scope of any consent previously given, without prejudice to the lawfulness of the processing previously carried out.
Visitors and participants also have the right to lodge a complaint with Comissão Nacional de Protecção de Dados (National Data Protection Commission).

OUR WEBSITE

Lisbon Architecture Triennale’s website and respective HTML messages incorporate pixel tags that allow us to track the actions of its users and the addressees’ of our communications. These tags do not collect personal information and are used to collect data for statistical purposes and setting reading standards.

COOKIES

Cookies are text files containing relevant information downloaded by your access device and processed by your internet browser when a website is visited, which are used to store information about those visits. Cookies carry out various tasks, for example helping the website recognizing the type of access device, facilitating navigation, presenting the most relevant contents, only retaining information related to the user preferences, without disclosing personal information.
This website uses cookies that improve the navigation performance and experience of the user. Your internet browser allows you to accept, refuse or erase cookies, through the respective settings. In case you choose to deactivate the cookies, some of the functions or pages of this website will stop working, affecting your experience as user.

HOW TO EXERCISE THESE RIGHTS

Visitors and participants can exercise the above-mentioned rights by various alternative methods: (I) written communication presented in person at Lisbon Architecture Triennale’s headquarters; (II) letter sent to the Lisbon Architecture Triennale (Campo Santa Clara, 142, 1100-474 Lisbon); (III) e-mail: dir@trienaldelisboa.com

DATA STORAGE

The Lisbon Architecture Triennale observes the legal regulations relating to periods of personal data storage, and may store data under the following conditions:

• until the end of the legal period established after the term of the contractual relation;
• as long as obligations resulting from the contractual relation remain in force;
• as long as there is an enforceable right against the Lisbon Architecture Triennale.
  When there is no specific legal requirement, data will be stored and kept only for the minimum period necessary for the purposes that motivated its collecting and subsequent processing.

SECURITY MEASURES

The Lisbon Architecture Triennale guarantees appropriate levels of security and personal data protection to data subjects. To this end, it makes use of various technical and organisational security measures to protect personal data against loss, disclosure, alteration, unauthorised processing or access, as well as any other form of unlawful processing.