At CTCV the confidentiality and integrity of the personal data of its associates, partners, customers or suppliers is one of our concerns. The use of this data will be used for clearly identified purposes and in compliance with the European Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016) on the protection of individuals with regard to the processing of personal data and on the free movement of personal data.

In this context, this Personal Data Protection Policy sets out how CTCV will use your personal data.

1. PURPOSE OF THE PERSONAL DATA COLLECTED BY THE CTCV
The CTCV requires the free, specific, informed and explicit consent from the holder of the personal data for the processing of various categories of personal data, in accordance with the requirements of its activity, legal basis, or the activity of its partners, particularly in the context of compliance with legal requirements and projects of a public nature, contractual or pre-contractual relations, audits, integrity and safety of facilities and equipment, management of business relationships or for communication and marketing purposes.

2. PERSONAL DATA PROTECTION MEASURES
Although there is always a risk that data may circulate without security conditions, the CTCV has an internal process of continuous and updated registration of the personal data processing activities it carries out, in order to prevent loss, misuse, alteration, unauthorized access, or misappropriation of the personal data provided by the owners, without prejudice to the fallibility of the Internet security measures.

As data protection measures, we highlight the following:
- restricted access to your personal data and according to the needs arising from your activity
- authentication tools
- data encryption and the security of the applications that process it
- storage on protected servers, accessed and used exclusively under our security policies and standards.

Personal data is kept only for as long as is necessary for the purpose for which it was collected, or at the request of the holder, after which time it will be anonymized or destroyed.
In cases where there is a legally imposed retention period, the right to erasure can only be exercised once this period has expired.

3. RIGHTS OF THE PERSONAL DATA SUBJECT
Notwithstanding the previous paragraph, the owner of personal data has the right to request the CTCV to access, rectify or delete his/her data, as well as limitation or portability to other entities.
In cases where there is a data retention period imposed by law, the CTCV reserves the right not to execute the request, informing the holder of the personal data of the respective grounds to the interested party.
The owner of the personal data may file a complaint or exposure with the National Commission for Data Protection (CNPD), as the supervisory authority in Portugal.

TRANSMISSION OF PERSONAL DATA TO THIRD PARTIES
The CTCV, in the course of its activities, and after prior consent from the owners of the personal data in compliance with the requirements set forth in the Data Protection Regulation, may transmit the personal data to third parties, in accordance with paragraph 10 of article 4 of the RGPD, in compliance with legal, regulatory, pre-contractual or contractual obligations, namely to public authorities responsible for control and audit attributions and/or to partners of activities, projects or services.
Similarly, the CTCV may, in the course of its activities, subcontract other entities to process personal data on its behalf, after prior consent of the owners of the personal data in compliance with the requirements set forth in the Data Protection Regulation.

5. DATA COLLECTED THROUGH OTHER TECHNICAL MEANS
CTCV additionally collects anonymous information through its Website, namely information regarding the type of browser, operating systems, location, IP, date and time of access to the website, using technologies to control that information, namely through Google Analytics. Any personal data that can identify you individually in relation to your use of the Website is not stored.

6. RESPONSIBLE FOR THE PROCESSING OF PERSONAL DATA
CTCV is responsible for the collection, processing, storage, anonymization and/or deletion of personal data of its members, partners, clients or suppliers.
Any questions regarding the use of personal data should be submitted to the email address centro@ctcv.pt, or by letter addressed to the CTCV at the address indicated in the header of this document.
Under the terms and deadlines set forth in article 33 of the RGPD, the CTCV is obliged to notify the CNPD if it becomes aware of any personal data breach, as defined in number 12 of article 4 of the RGPD.

7. FINAL PROVISIONS
This document is available in an accessible area of the CTCV website.

The CTCV may, without prior notice, change this Policy, namely due to the need to adapt it to any legislative changes or to recommendations from the CNPD.