Privacy Policy

Discover More

Privacy Policy

Who is responsible for processing your data?

IdanhaCulta – Associação de Desenvolvimento Social, Cultural, Recreativo e Ambiental (NIPC: 513781323), based in Boomland, Estrada de Alcafozes, S/N, 6060-011 Idanha-a-Nova, is responsible for processing your personal data. For any privacy-related questions, you can contact our Data Protection Officer (DPO) via email: dpo@idanhaculta.pt.

What data do we collect?

To provide our services, we process the following categories of personal data:

  • Identification Data: Name, date of birth, and ID/Passport number (when necessary for training certificates or accommodation).
  • Contact Data: Email address, phone number, and billing address.
  • Financial Data: Payment details processed through our secure platform (Stripe).
  • Technical Data: IP address, browser type, and usage data collected through cookies when you visit our website.

Why are your data collected and processed?

Your data are processed based on the following legal grounds:

  • Contract Execution: To process purchases, manage workshop registrations, and provide accommodation services.
  • Legal Obligation: For mandatory tax billing (retention for 10 years) and issuance of official training certificates.
  • Legitimate Interest: To ensure website security, prevent fraud, and improve our educational offerings.
  • Consent: For any secondary purposes, such as sending newsletters, which you can revoke at any time.

Personal data of minors

The processing of personal data of children under 16 years, where consent is required, is only lawful when provided or authorized by the holders of parental responsibilities.

Will your data be shared?

We do not sell your data. They are only shared with third parties when necessary to fulfill our services:

  • Good Mood – Produção e Comercialização de Audiovisuais, Lda.: For administrative, financial, and logistical support related to your stay at Boomland.
  • Service Providers: We use Stripe (Payment Processing) and Jotform (Registration Forms). You can review the privacy policies of each on their respective websites.
  • International Transfers: If data are transferred outside the European Economic Area (EEA), we ensure safeguards, such as Standard Contractual Clauses (SCCs), to maintain the level of protection required by the GDPR.

How long will your data be retained?

We retain your data only for the strictly necessary period:

  • Billing/Tax Data: 10 years (as required by Portuguese law).
  • Registration Data: During the duration of the training program and for a subsequent period of 2 years for administrative follow-up, unless legal obligations require otherwise.

How will your data be protected?

Your data are stored securely, using technical and organizational measures to prevent unauthorized access, loss, or misuse. Access is restricted to authorized personnel only.

What actions can you take regarding your data?

We have implemented technical and organizational measures to protect your data. Under the GDPR, you have the right to:

  • Access, rectify, or delete your personal data.
  • Request portability or restrict the processing of your data.
  • Object to processing based on legitimate interest.

To exercise these rights, send an email to dpo@idanhaculta.pt. If you believe your data are being processed improperly, you have the right to file a complaint with the National Data Protection Commission (CNPD) at www.cnpd.pt.