Privacy Policy
FUNDAÇÃO MENDES GONÇALVES prioritizes the protection of the privacy of all users of its website and, for this purpose, has prepared the present privacy policy.
In particular, the processing of personal data by FUNDAÇÃO MENDES GONÇALVES is governed by the following principles: lawfulness, fairness, and transparency in data processing; purpose limitation; data minimization; accuracy; storage limitation; integrity and confidentiality; and accountability.
To ensure its commitment to user privacy, FUNDAÇÃO MENDES GONÇALVES has adopted best practices for the security and protection of personal data, as further detailed below.
Therefore, in order to ensure that all personal data is processed and protected in accordance with the General Data Protection Regulation (GDPR), we ask you to read our privacy and data protection policy carefully.
It is essential that you read and provide your explicit consent for the storage and processing of your personal data, authorizing the sending of communications according to the rules defined herein.
Additionally, please note that simply accessing the FUNDAÇÃO MENDES GONÇALVES website does not necessarily involve the collection of your personal data.
Personal Data
1. What data is processed and how is it collected?
FUNDAÇÃO MENDES GONÇALVES only collects personal data that is adequate, relevant, and limited to what is strictly necessary for the purposes for which it is processed.
Regarding candidates, suppliers, partners, employees, and collaborators, FUNDAÇÃO MENDES GONÇALVES collects the following personal data: identification, professional, employment-related, or accounting data, either of the individuals themselves (in the case of natural persons) or their representatives (in the case of legal persons), such as name, nationality, contact details, citizen card data, job title, functions, professional contacts, and any other personal data strictly necessary for contract performance or to comply with legal obligations.
For contact requests, FUNDAÇÃO MENDES GONÇALVES collects the following personal data: identification data such as name, email address, and telephone or mobile number.
For newsletter subscriptions, FUNDAÇÃO MENDES GONÇALVES collects the following personal data: identification data such as email address.
For job applications, FUNDAÇÃO MENDES GONÇALVES collects the following personal data: identification data such as name, email address, and any information contained in the CV.
Personal data is collected through various means, including forms on the FUNDAÇÃO MENDES GONÇALVES website, email communications, telephone calls, business card handovers, proposal requests, job applications, and the provision or procurement of services by FUNDAÇÃO MENDES GONÇALVES.
FUNDAÇÃO MENDES GONÇALVES may only process health-related data if duly mandated to do so and only with the explicit consent of the data subjects.
2. Data Controller
FUNDAÇÃO MENDES GONÇALVES, a private foundation of public utility, with tax identification number 501277625, headquartered at Zona Industrial – Lote 6, 2150-268 Golegã, Portugal, is the entity responsible for the collection and processing of personal data for the purposes described in this privacy policy.
If you find the information in this privacy policy unclear, or for any other relevant reason, you may contact us at: info@fundacaomendesgoncalves.org.
To reach the data protection officer at FUNDAÇÃO MENDES GONÇALVES, please send an email to: pedro.cardoso@casamg.pt
3. What is the legal basis and purpose for processing personal data?
The legal bases for processing personal data of candidates, suppliers, partners, employees, and collaborators are the performance of a contract and compliance with legal obligations, as provided under points (b) and (c) of Article 6(1) of the GDPR..
The processing of personal data in these contexts is for purposes directly related to contract performance or legal compliance, including recruitment, hiring, contract management, work supervision, accounting, commercial activity, candidate management, communication, proposal requests, and service provision.
The processing of personal data collected via the FUNDAÇÃO MENDES GONÇALVES website or via emails requesting contact requires the consent of the data subjects, under point (a) of Article 6(1) of the GDPR.
Such processing is intended to respond to contact requests (e.g., sending proposals/quotes and other information promoting scientific, technical, cultural, educational, commercial, or business cooperation), to send marketing communications such as newsletters, event information, or similar activities, and for recruitment purposes.
4. Personal data retention
FUNDAÇÃO MENDES GONÇALVES retains personal data in a way that allows the identification of the data subjects only for the time strictly necessary to fulfill the purposes for which it was collected, without prejudice to longer retention periods required by law.
For example, personal data related to recruitment may be kept as long as necessary for that purpose (e.g., if a candidate joins a project, their data will be processed for HR management; if not selected, their data may be retained for future recruitment processes for up to 1 year, unless the data subject requests deletion earlier).
For data collected via contact forms, personal data will be deleted after responding to the request and, in any case, no later than 6 months from submission.
For newsletter subscription data, personal data is deleted 6 months after the unsubscription request.
However, for compliance with legal obligations related to the retention of accounting records and supporting documents, personal data may be archived for up to 12 years, under Article 123(4) of the Portuguese Corporate Income Tax Code.
5. Data subject rights
FUNDAÇÃO MENDES GONÇALVES guarantees users the right to access their personal data at any time, as well as to request rectification, deletion, portability, restriction of processing, and/or to object to processing.
To exercise these rights, users may contact FUNDAÇÃO MENDES GONÇALVES in writing at its headquarters address or via email pedro.cardoso@casamg.pt.
Additionally, users may submit complaints to the competent data protection authority at any time.
6. Right to be forgotten
The data subject has the right to request the deletion of their personal data from the data controller, who must delete such data when any of the following conditions apply:
(i) the data is no longer necessary for the purpose for which it was collected or processed;
(ii) the data subject withdraws consent (where consent was the legal basis) or objects to processing and there are no overriding legitimate grounds for continuing the processing.
7. Data processing security
FUNDAÇÃO MENDES GONÇALVES is committed to implementing all necessary precautions to maintain the confidentiality and security of collected and processed personal data. To this end, technical and organizational security measures have been developed, particularly concerning information systems.
These security measures are regularly reviewed and updated according to needs and regulatory requirements.
In the event of a personal data breach resulting in accidental or unlawful destruction, loss, alteration, disclosure, or unauthorized access, FUNDAÇÃO MENDES GONÇALVES commits to notifying the Portuguese Data Protection Authority (CNPD) without undue delay and, whenever possible, within 72 hours of becoming aware of it, in accordance with applicable legislation.
The organization also undertakes to inform the affected data subject of the breach, as legally required.
Despite the security measures adopted by FUNDAÇÃO MENDES GONÇALVES, users are also advised to implement additional protective measures, such as maintaining active firewalls, and up-to-date antivirus and anti-spyware software.
8. Sharing of personal data with third parties
FUNDAÇÃO MENDES GONÇALVES only shares personal data with third parties when necessary for the promotion of scientific, technical, cultural, educational, commercial, or business cooperation, or to comply with legal obligations to which it is subject. These third parties are selected based on strict criteria and are bound to comply with applicable data protection regulations.
Any such sharing, whether for legal compliance or under the data subject’s consent, will be limited to what is strictly necessary and protected by appropriate security measures. Personal data will not be shared in any other context without the data subject’s explicit authorization.
As part of its activity, FUNDAÇÃO MENDES GONÇALVES may engage third parties (e.g., located in Portugal or the United States) to support cooperation initiatives, which may involve access to users’ personal data.
In such cases, FUNDAÇÃO MENDES GONÇALVES undertakes to ensure that these entities are reputable and provide high levels of data protection, as contractually stipulated in a written agreement between FUNDAÇÃO MENDES GONÇALVES and the third party.
Thus, any subcontracted entity will process personal data on behalf of FUNDAÇÃO MENDES GONÇALVES and under its instruction, with a commitment to implement necessary technical and organizational measures to protect the data against accidental or unlawful destruction, loss, alteration, disclosure, unauthorized access, or other unlawful forms of processing.
FUNDAÇÃO MENDES GONÇALVES remains responsible for all personal data processing.
Whenever necessary and within the scope of engaging third parties, personal data may be transferred outside the European Union, in accordance with applicable legal requirements.
9. Access to third-party websites
This privacy policy does not apply to third-party websites. Whenever you access another website via a link on our site, you should read that site’s privacy policy and ensure you agree with its terms before providing your personal data.
FUNDAÇÃO MENDES GONÇALVES is not responsible for the privacy policies or content of third-party websites.
10. Amendments to the privacy policy
FUNDAÇÃO MENDES GONÇALVES reserves the right to amend this privacy policy at any time. All such amendments will be duly published on this website.
.