Privacy Policy

— Responsibility for data processing

VinsLapa undertakes to respect the legislation in force and to treat your personal data in accordance with this privacy policy.

Each time you use the VinsLapa website www.irmandadedalapa.pt or the Porto Liberal website www.rotaportoliberal.pt or when, in any other way, you have a relationship with VinsLapa, the personal data you transmit to us will be treated in accordance with the current Privacy Policy.

VinsLapa’s website may contain links to websites and services from other companies, which have their own privacy policies. We recommend that you carefully read the privacy policies of such third parties. VinsLapa is not responsible for the practices or content of the privacy policies of these third parties.

VinsLapa reserves the right to modify the Privacy Policy in line with new legal and/or regulatory requirements, for security reasons or in order to adapt the said Policy to the instructions of the control authorities in terms of data protection.

Whenever any change is made to the Privacy Policy, the user will be informed of the changes through the VinsLapa website or, if justified, through a communication, and will be asked to renew consent regarding the text of the Privacy Policy.

The Venerable Irmandade de Nossa Senhora da Lapa (VinsLapa) is responsible for the processing of Personal Data, a canonical legal entity of a public nature, headquartered at Largo da Lapa, n.º 1, in Porto, holder of the corporate identification number 500746451. The user may contact VinsLapa, through the email address; geral@irmandadedalapa.pt

— Data collected, purpose and basis

VinsLapa collects different types of Personal Data for different purposes, including the following:
– Full name
– Date of birth
– E-mail address
– Phone number
– Household
– Profession
– Address for billing purposes
– CC
– NIF
– Position held (applicable only to business contacts)
– Company name (only applicable to business contacts)
– Car registration number

— Personal Data is collected and processed for the following purposes:

Registration of Siblings: VinsLapa collects and processes the personal data of Siblings for registration, statutory and historical purposes;

Communication: VinsLapa may use your personal data to communicate with you, through the contact means you have provided, namely to send you news related to services and products, or to send you invitations, whether for activities organized by VinsLapa or by entities with which it has partnerships, as well as to provide assistance in aspects related to the services provided by VinsLapa (including to respond and handle requests for support, complaints and monitoring of the quality of service), as well as to fulfill the statutory obligations in relation to the Brothers, within the scope of its Mission ;

Provision of products and services: VinsLapa uses your Personal Data to execute the contract for the purchase and sale of products or the contract for the provision of services entered into and to provide assistance in aspects related to the services provided by VinsLapa.

Video surveillance: Some spaces at VinsLapa have a duly signaled video surveillance system. The purpose of capturing images is the safety of people and goods. The images are stored in secure files with restricted access, for a period of 30 (thirty) days.

Management of the car park: The use of the car park at VINSLapa (Hospital da Lapa) implies the registration of the license plate with the purpose of managing the space and its security.

Recruitment: VinsLapa, during the personnel selection and recruitment process, collects and processes the personal data of the respective candidates. The personal data processed will be those contained in the application form and the Curriculum Vitae, as well as all the personal data that you spontaneously decide to transmit to VinsLapa, including but not limited to, name, age, gender, photograph, contact details (email address and telephone number), education information, employment history, immigration status (in case you need a work permit).

You can cancel the receipt of the Newsletter as well as any other communications identified above at any time, using the option provided in each communication.

With the exception of processing for the purpose of registering Siblings, supplying products and services (processing necessary for the performance of a contract), capturing images through the video surveillance system and processing within the scope of recruitment processes, in which the processing is based on the legitimate interest of VinsLapa, the legal basis for data processing is the consent of the holders.

The Personal Data collected when VinsLapa requests a service to be provided is necessary for the purposes of executing the respective contract, so if the user, in any way, opposes the respective treatment, VinsLapa will not be able to comply with the performance of the contract.

— Data recipients

The data collected by VinsLapa is shared with partners within the framework of the Porto Liberal project.

VinsLapa may subcontract other companies to provide certain services. In these cases, these third-party companies may need to access certain information and data of data subjects. VinsLapa guarantees that, in such cases, these third parties will have limited access to the information of the data subjects, restricted solely to those data necessary for the performance of the contracted tasks. It also guarantees that a contract was signed between the parties in which the protection of Personal Data is regulated and where these third-party companies undertake not to reveal, in any way, the Personal Data, nor to use them for purposes other than the provision of contracted services.

Likewise, VinsLapa may communicate your Personal Data, when so determined by law, within the scope of a judicial process or within the scope of investigations of suspicious activities.

VinsLapa, under no circumstances, will carry out international transfers of your data to a third country or international organization located outside the European Union.

VinsLapa does not intentionally collect personal information from minors under 18 years of age. If it detects that it is involuntarily collecting personal information from persons under 18 years of age, VinsLapa will take the necessary measures to eliminate the information as soon as possible, except if it is required by applicable law to retain it.

– Data storage

VinsLapa stores the data provided on servers that are located in a secure environment, protected from unauthorized access, use or disclosure.

VinsLapa adopts the necessary and appropriate technical, electronic and organizational procedures to guarantee the security of your Personal Data and to prevent its loss, misuse or improper access.

It stresses that it will only process your data for the purposes for which it was collected, under the terms set out in this Privacy Policy.

VinsLapa frequently reviews its data collection, storage and processing policies to ensure that it only collects, stores and processes information that is essential for the provision or improvement of services.

VinsLapa adopts the appropriate procedures to ensure that your information is accurate, complete and current, but it is up to the user to update or correct their personal information when necessary.

When the collection of Personal Data is carried out over an open network (internet), these may eventually circulate on the network without security conditions, and may be viewed and/or used by unauthorized third parties for this purpose, despite having taken appropriate security measures against destruction, accidental or unauthorized, and accidental loss and also against unauthorized access, modification or dissemination.

VinsLapa does not make automated decisions.

— Rights of data subjects:

In accordance with the applicable legislation, VinsLapa undertakes to respect the confidentiality of your personal information and guarantee the exercise of your rights, namely:

Right to be informed: our Brothers/visitors/customers have the right to obtain clear, transparent and comprehensible information about how VinsLapa uses their Personal Data. It is, in fact, for this reason that we make this Privacy Policy available to you.

Right of access: in addition to the right to information, you may access your personal data that we process and store. In these cases, VinsLapa will provide you with a copy of the personal data that are being processed.

Right of rectification: you have the right to rectify your personal data if they are incorrect, out of date or if you want to complete them. To do so, you can contact us at dpo@irmandadedalapa.pt

Right to Erasure/Right to be Forgotten: You can ask us to delete your data, however, please note that this is not an absolute right, as we may have legal grounds or other legitimate interests for the retention of your personal data.

Right to Oppose: You can opt out of our direct disclosure communications at any time.

Right to withdraw your consent to data processing at any time: you can withdraw your consent to data processing when said processing is based on your consent. Withdrawal of consent does not affect the legality of processing based on consent prior to its withdrawal.

Right to file a complaint with the CNPD: if you consider that the processing of your personal data carried out by VinsLapa violates the applicable data protection legislation, you may file a complaint with the National Data Protection Commission (“CNPD”). Do not hesitate to contact us before submitting any complaint to the CNPD.

Right to data portability: you have the right to move, copy or transfer data from our database to another.

Right to limit processing: you have the right to request restriction of the processing of your data in the following situations: if you contest the accuracy of the data, if the processing is unlawful and you do not want to erase your data, but only limit them, if the data is no longer necessary for VinsLapa, but necessary for the visitor/customer or if you have exercised the aforementioned right of opposition, during the period of time in which VinsLapa analyzes whether or not your legitimate interests for the treatment prevail over that right.

To request the exercise of any of the rights listed above, in addition to the forms specifically referred to in the respective paragraphs, you may send a communication addressed to the aforementioned email address, an address that you may also use in case you want to ask us any question regarding this Privacy Policy.

— Data storage time

Vinslapa only keeps Personal Data for the time necessary to achieve the purpose for which it was collected, to respond to your needs or to comply with our legal obligations.

To determine the period for which we keep your data, we use the criteria set out below. If several criteria apply simultaneously, we will keep your personal data in accordance with the criterion that implies the conservation of your Personal Data for the longest period of time.

When purchasing services and/or products, we will keep your personal data for the duration of the contractual relationship, including any claims that may arise, as well as for a period of two years after its termination, without prejudice to the fulfillment of legal obligations by the controller;

When you contact us with questions, we will keep your personal data for the period of time necessary to resolve your question;

When you have consented to the dissemination of VinsLapa or Porto Liberal events, we will keep your personal data until you ask us to delete them;

Regarding the images captured by the video surveillance system, for a maximum period of 30 days; With regard to license plates collected through the use of the car park for a period of 180 days;

With regard to the data collected in the recruitment process, for a maximum period of 1 year from the closing of the process;

In relation to the Brethren indefinitely for historical reasons;

The period of time foreseen in the applicable special legislation; or Until the specific purpose applicable to certain data ceases to exist.

In any of these situations, if there is a pending judicial or administrative offence, the data will be kept for the duration of the process and up to six months after the final and unappealable decision is handed down.

We may also retain some of your personal data to the extent necessary for us to comply with our legal obligations, as well as to manage or enforce our rights, namely through the use of judicial means.

After the aforementioned conservation periods have expired, the Personal Data will be securely deleted and/or erased.

— Warranties

The data subject guarantees that the Personal Data communicated to VinsLapa is certain and exact and undertakes to notify any alteration or modification thereof and assumes sole responsibility for losses and damages caused by erroneous, inaccurate or incomplete communication of the data.

The data subject is expressly warned that when disclosing Personal Data in public VinsLapa media such as Facebook, Twitter and Instagram, this information may be seen and used by third parties. VINSLapa does not read any personal communication published on the web pages of its visitors/clients.