Privacy Policy

Scope

This privacy policy applies to the processing of personal data of users of the NOVA School of Law website.

Who are we?

Personal data will be processed by NOVA University Lisbon, legal entity no. 501559094, with its main campus located at the Campus de Campolide, 1099-085 Lisbon, more specifically by NOVA School of Law as an organisational unit of NOVA University Lisbon.

NOVA School of Law is responsible for the processing of personal data that it carries out, as defined and used in personal data protection legislation

What are the purposes of personal data processing?

NOVA School of Law processes personal data for the following purposes:

To provide website users with relevant information, such as institutional information, details of events and training courses, and other activities promoted by NOVA School of Law;
To provide contact details of NOVA School of Law representatives and teaching staff to facilitate direct contact with users interested in obtaining further information;
To manage scheduling requests and waiting lists for the various services;
To manage registration for events and academic programmes promoted by NOVA School of Law and its associated research centres;
To publicise recruitment application processes;
To receive, analyse and respond to compliments, suggestions and complaints;
To provide and manage library services and activities;
To ensure the development, maintenance, operation and security of the website.

Any reuse of personal data for a different purpose will be assessed in light of the criteria set out in Article 6(4) of the GDPR

What is the legal basis for processing personal data?

The processing of personal data by NOVA School of Law is based on the following legal grounds:

The legitimate interests pursued by NOVA School of Law or third parties, except where these are overridden by the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data;
The performance of a contract to which the data subject is a party or the implementation of pre-contractual measures at the data subject’s request;
Compliance with legal obligations of NOVA School of Law;
The public interest pursued by NOVA School of Law.

Where none of the other legal bases apply, NOVA School of Law will only process personal data if it has obtained the data subject’s consent to process their data for specific, explicit and legitimate purposes.

Data subjects may request information about the criteria used to determine legitimate interests by emailing info@novalaw.unl.pt.

To whom do we transmit personal data?

In the scope of its mission, NOVA School of Law may share personal data of the data subjects with other entities.

Any sharing or transfer of personal data will only be made to third parties that guarantee an adequate protection of the personal data to which they have access or that act exclusively, under the guidance of NOVA School of Law (outsourcing) and which follow technical and organizational measures, similar to those which NOVA School of Law is obliged to follow.

Do we transfer personal data outside the EEA?

The normal functioning of the NOVA School of Law website does not involve any data transfers outside the European Economic Area. This means that the personal data of data subjects is neither stored nor accessed in countries whose legal systems do not provide a level of protection equivalent to that required by the GDPR.

How long do we keep personal data?

NOVA School of Law retains personal data for the period necessary to fulfil the purposes for which it was collected. To this end, a retention table has been drawn up, indicating the applicable time limits for each purpose. If you require further information on retention periods, please contact us using the means provided in this policy.

What are the rights of data subjects?

Data subjects may exercise a range of rights at any time, in accordance with the terms and conditions provided by law. These rights include the right to object, which is often exercised in relation to certain types of communication, as well as the rights of access, erasure, restriction of processing and rectification. Additionally, data subjects have the right to withdraw consent at any time, without this affecting the lawfulness of the processing carried out based on consent given previously.

These rights can be exercised by sending an email to info@novalaw.unl.pt. You can also contact the NOVA Data Protection Officer at dpo@unl.pt.

You also have the right to lodge a complaint with the National Data Protection Commission at www.cnpd.pt.

Changes to privacy policy

This privacy policy may be updated, in which case data subjects will be informed within a reasonable period of time when the changes reveal a fundamental change in the nature of the processing, such as a change in the purposes of the processing, a change in the identity of the data controller or an extension of the categories of recipients.

Page updated on:

July 28, 2025

Scope

This privacy policy applies to the processing of personal data of users of the NOVA School of Law website.

Who are we?

Personal data will be processed by NOVA School of Law, which, within the scope of its mission, provides information on its website regarding its activity, with the aim of conveying information to its academic community and society in general.

For the purpose of the applicable legislation on personal data protection and namely the General Data Protection Regulation (hereinafter “GDPR”), NOVA University of Lisbon collective entity No. 501559094, with its head office at Campus de Campolide 1099-085 Lisbon, more precisely NOVA School of Law as an Organic Unit of NOVA University of Lisbon, shall be responsible for processing personal data in accordance with that as defined and used by the GDPR.

What personal data do we process?

In accordance with the principle of data minimization, NOVA School of Law collects and processes personal data strictly for the purposes for which it is required.

Information about hardware and software of the user’s computer is automatically collected by NOVA School of Law through the necessary cookies for basic functioning of the website. This information may include: IP address, browser type, computer type, access periods, domain names, access times and reference website addresses. This information is used by NOVA School of Law for the operation of its service to maintain quality of the service and to receive general statistics regarding use of the website.

NOVA School of Law provides access through its website to forms for registration for events/activities organized by NOVA School of Law or for courses where the user will have to provide the requested data, which will be used exclusively for the purposes indicated in the respective online forms with the user’s consent.

The categories of personal data we may collect are:

Personal identification data such as first and last name, address e-mail, telephone, mobile phone, professional qualifications, tax identification number;
Related data regarding professional activity: place of work, position;
Related data on areas of interest within the educational offer.

We do not voluntarily collect any sensitive information such as race or ethnic origin, political opinions, religious or other similar belief, physical or mental health, sexual orientation or criminal record.

What are the purposes of processing personal data?

Processing the above-mentioned data enables NOVA School of Law to:

Disclose relevant information to users of the website, namely institutional information, events and information about its training offers;
Provide the contacts of NOVA School of Law representatives for direct contact between them and users who wish to know more information about NOVA School of Law;
Achieve its academic purposes and facilitate the relationship between NOVA School of Law and its community;
Deal with administrative functions;
Develop and maintain NOVA School of Law websites; 
Ensure the security of networks and information;
Communicate with other entities, partners or projects for administrative, pedagogical or similar purposes.

NOVA School of Law only processes your personal data for the purposes for which it was collected, except when it considers that such data is necessary for another purpose and that this purpose is compatible with its original purpose, specifically for scientific, historical research or for statistical purposes.

When none of the other conditions of lawfulness are able to support the data processing operation, NOVA School of Law will only process personal data if it has obtained the consent of the data holder to process their personal data for specific, express and legitimate purposes.

Legal Basis

In accordance with the applicable legislation on personal data protection, depending on the purposes of the specific processing, NSL may lawfully process your personal data in specific situations, such as:

in the execution of a contract to which the data subject is a party, or the execution of pre-contractual steps at the request of the data subject;
for compliance with NOVA School of Law’s legal obligations;
to protect the vital interests of the data subject or of another individual;
for the purposes of the legitimate interests pursued by NOVA School of Law or a third party, except where overriding interests or fundamental rights and freedoms of the data subject require protection of the personal data;
for the purposes of complying with obligations and specific rights of NOVA School of Law, or of the data subject, under the terms set out in the GDPR;
for archiving and public interest purposes, scientific or historical research, or statistical purposes, under the terms provided in the GDPR.

When none of the other conditions of lawfulness are deemed appropriate to support data processing, NOVA School of Law will only process personal data if it has received the data subject’s agreement to process their personal data for specified, explicit and legitimate purposes.

How long do we keep personal data?

In order to comply with the principle of limitation of storage and to keep personal data for no longer than necessary to fulfil the purposes set out in this privacy notice, NOVA School of Law shall establish time limits for the erasure or anonymization of personal data.

In cases where it is not possible to foresee the time limits for erasure/anonymization of data, NOVA School of Law shall from time to time review the need to retain the data in question.

In some cases, the conservation of your data may occur for longer periods, namely when the law so requires.

What security measures have been adopted to protect personal data?

Security of information and protection of personal data are priorities for NOVA School of Law. For this reason, NOVA School of Law has implemented and maintains a set of technical and organizational measures that take into account the most up-to-date techniques, costs of implementation, and the nature, scope, context and purposes of each processing of personal data, enabling mitigation of risks for the holder of personal data and preventing the occurrence of personal data breaches and security incidents in general.

In particular, the following measures among others stand out:

NOVA School of Law secures personal identification information that the user provides in a controlled and secure environment, protected against unauthorised access, use or disclosure, with limitation of access to personal data to designated persons and only when their contact with such personal data is justified within the scope of their duties

To whom do we transmit personal data?

In the scope of its mission, NOVA School of Law may share personal data of the data subjects with other entities.

Transfer of personal data to countries outside the european union

In the normal functioning of NOVA School of Law website, no data is transferred to countries outside the European Economic Area. Therefore, no personal data is stored or accessed in States whose legislations do not provide a degree of protection equivalent to that demanded by the GDPR.

What are the rights of holders of data?

Holders of data may at any time exercise their rights, including requesting further information regarding the processing of their data, rectifying their data, as well as within certain limits, erasing their data, revoking consent given or opposing the processing of their data among others, via the email address comunicacao@novalaw.unl.pt. They may also contact the UNL Data Protection Officer at dpo@unl.pt

Holders of data should be aware that in certain cases (e.g. due to legal requirements), their request may not be fulfilled. In such a case, they will be informed of any measures taken, within one month of the request being made.

Holders of data have the right to make a complaint to the supervisory authority, which in Portugal is the Comissão Nacional de Proteção de Dados at https://www.cnpd.pt

Changes to privacy policy

NOVA School of Law will occasionally update its Privacy Policy, so we encourage you to review it periodically to be informed as to how NOVA School of Law is protecting your information.

Page updated on:

July 28, 2025