Who are we?
Personal data will be processed by NOVA School of Law, which, within the scope of its mission, provides information on its website regarding its activity, with the aim of conveying information to its academic community and society in general.
For the purpose of the applicable legislation on personal data protection and namely the General Data Protection Regulation (hereinafter “GDPR”), NOVA University of Lisbon collective entity No. 501559094, with its head office at Campus de Campolide 1099-085 Lisbon, more precisely NOVA School of Law as an Organic Unit of NOVA University of Lisbon, shall be responsible for processing personal data in accordance with that as defined and used by the GDPR.
What personal data do we process?
In accordance with the principle of data minimization, NOVA School of Law collects and processes personal data strictly for the purposes for which it is required.
Information about hardware and software of the user’s computer is automatically collected by NOVA School of Law through the necessary cookies for basic functioning of the website. This information may include: IP address, browser type, computer type, access periods, domain names, access times and reference website addresses. This information is used by NOVA School of Law for the operation of its service to maintain quality of the service and to receive general statistics regarding use of the website.
NOVA School of Law provides access through its website to forms for registration for events/activities organized by NOVA School of Law or for courses where the user will have to provide the requested data, which will be used exclusively for the purposes indicated in the respective online forms with the user’s consent.
The categories of personal data we may collect are:
- Personal identification data such as first and last name, address e-mail, telephone, mobile phone, professional qualifications, tax identification number;
- Related data regarding professional activity: place of work, position;
- Related data on areas of interest within the educational offer.
We do not voluntarily collect any sensitive information such as race or ethnic origin, political opinions, religious or other similar belief, physical or mental health, sexual orientation or criminal record.
What are the purposes of processing personal data?
Processing the above-mentioned data enables NOVA School of Law to:
- Disclose relevant information to users of the website, namely institutional information, events and information about its training offers;
- Provide the contacts of NOVA School of Law representatives for direct contact between them and users who wish to know more information about NOVA School of Law;
- Achieve its academic purposes and facilitate the relationship between NOVA School of Law and its community;
- Deal with administrative functions;
- Develop and maintain NOVA School of Law websites;
- Ensure the security of networks and information;
- Communicate with other entities, partners or projects for administrative, pedagogical or similar purposes.
NOVA School of Law only processes your personal data for the purposes for which it was collected, except when it considers that such data is necessary for another purpose and that this purpose is compatible with its original purpose, specifically for scientific, historical research or for statistical purposes.
When none of the other conditions of lawfulness are able to support the data processing operation, NOVA School of Law will only process personal data if it has obtained the consent of the data holder to process their personal data for specific, express and legitimate purposes.
In accordance with the applicable legislation on personal data protection, depending on the purposes of the specific processing, NSL may lawfully process your personal data in specific situations, such as:
- in the execution of a contract to which the data subject is a party, or the execution of pre-contractual steps at the request of the data subject;
- for compliance with NOVA School of Law’s legal obligations;
- to protect the vital interests of the data subject or of another individual;
- for the purposes of the legitimate interests pursued by NOVA School of Law or a third party, except where overriding interests or fundamental rights and freedoms of the data subject require protection of the personal data;
- for the purposes of complying with obligations and specific rights of NOVA School of Law, or of the data subject, under the terms set out in the GDPR;
- for archiving and public interest purposes, scientific or historical research, or statistical purposes, under the terms provided in the GDPR.
When none of the other conditions of lawfulness are deemed appropriate to support data processing, NOVA School of Law will only process personal data if it has received the data subject’s agreement to process their personal data for specified, explicit and legitimate purposes.
How long do we keep personal data?
In order to comply with the principle of limitation of storage and to keep personal data for no longer than necessary to fulfil the purposes set out in this privacy notice, NOVA School of Law shall establish time limits for the erasure or anonymization of personal data.
In cases where it is not possible to foresee the time limits for erasure/anonymization of data, NOVA School of Law shall from time to time review the need to retain the data in question.
In some cases, the conservation of your data may occur for longer periods, namely when the law so requires.
What security measures have been adopted to protect personal data?
Security of information and protection of personal data are priorities for NOVA School of Law. For this reason, NOVA School of Law has implemented and maintains a set of technical and organizational measures that take into account the most up-to-date techniques, costs of implementation, and the nature, scope, context and purposes of each processing of personal data, enabling mitigation of risks for the holder of personal data and preventing the occurrence of personal data breaches and security incidents in general.
In particular, the following measures among others stand out:
- NOVA School of Law secures personal identification information that the user provides in a controlled and secure environment, protected against unauthorised access, use or disclosure, with limitation of access to personal data to designated persons and only when their contact with such personal data is justified within the scope of their duties
To whom do we transmit personal data?
In the scope of its mission, NOVA School of Law may share personal data of the data subjects with other entities.
Any sharing or transfer of personal data will only be made to third parties that guarantee an adequate protection of the personal data to which they have access or that act exclusively, under the guidance of NOVA School of Law (outsourcing) and which follow technical and organizational measures, similar to those which NOVA School of Law is obliged to follow.
Transfer of personal data to countries outside the european union
In the normal functioning of NOVA School of Law website, no data is transferred to countries outside the European Economic Area. Therefore, no personal data is stored or accessed in States whose legislations do not provide a degree of protection equivalent to that demanded by the GDPR.
What are the rights of holders of data?
Holders of data may at any time exercise their rights, including requesting further information regarding the processing of their data, rectifying their data, as well as within certain limits, erasing their data, revoking consent given or opposing the processing of their data among others, via the email address email@example.com. They may also contact the UNL Data Protection Officer at firstname.lastname@example.org
Holders of data should be aware that in certain cases (e.g. due to legal requirements), their request may not be fulfilled. In such a case, they will be informed of any measures taken, within one month of the request being made.
Holders of data have the right to make a complaint to the supervisory authority, which in Portugal is the Comissão Nacional de Proteção de Dados at https://www.cnpd.pt
Page updated on: