This Privacy and Personal Data Protection Policy explains the terms under which OPART, as the managing entity of TNSC, CNB, and EVC, processes the personal data of its users, including, but not limited to, all spectators, visitors, and participants in the activities organised by OPART.

OPART is aware of the implications and its responsibility in adhering to the guidelines set out in the General Data Protection Regulation (GDPR), Regulation (EU) 2016/679 of the European Parliament and of the Council, which establishes the rules for the processing of personal data by an individual, a company, or an organisation within the EU. In addition to reinforcing the legal protection of data subjects’ rights, the GDPR defines new technological procedures and rules for data processing.

OPART is therefore committed to ensuring the protection of all personal data made available to it by adopting various technical and organisational security measures. OPART also pledges to continuously improve the set of procedures and techniques implemented to safeguard personal data and recommends regularly consulting this Privacy and Cookies Policy.

Entity responsible for data treatment

The entity responsible for data processing is OPART – Organismo de Produção Artística, E.P.E., with head office at Rua Serpa Pinto n.º 9, 1200-442 Lisbon, Portugal.

Control authority

In the case of Portugal, the National Commission for Data Protection (CNPD) is responsible, as an independent public authority, for supervising the correct application of the legislation on personal data protection.

Purposes of Data Processing

OPART may use your data for the following purposes:

• Registration in cultural activities, workshops and other events;

• Sending newsletters on cultural activities taking place in OPART or related to OPART;

• Signing contracts for the purchase and sale of tickets for shows promoted by OPART;

• Carrying out satisfaction surveys with the public;

• Reception and management of applications for recruitment processes and spontaneous applications; 

• Replying to contact requests. 

OPART ensures that before sending you the first marketing communication, it will request your express consent for sending this type of communication. This consent will be requested via e-mail or personally, and the holder will only receive the communications if they respond positively.

Lawfulness of data processing

OPART will only process your personal data when there is a legal basis for that, namely:

•  Pre-contractual due diligence and execution of a contract: OPART may process your personal data if they are necessary for the execution of a contract to which it is a party;

• Legal obligation: OPART may process your data if they are necessary for the fulfilment of legal obligations to which it is bound;

• Public interest or exercise of public authority: OPART may process your data in the exercise of functions of public interest or in the exercise of functions of public authority of which it may be vested; 

• Legitimate interest: your data may be processed on the basis of a legitimate interest of OPART, provided that such interests do not override your fundamental rights and freedoms;

• Consent: OPART may process your data by obtaining your consent;

• Defense of Vital Interests: OPART may also process your personal data when necessary and essential to the protection of your life.

• 
  

Data conservation period

OPART will only keep your personal data for the time necessary to achieve the purpose for which they were collected. OPART may also keep some of your personal data as necessary to comply with its legal obligations, as well as to manage or enforce your rights, namely through legal recourse. Once the aforementioned conservation periods have ended, the personal data will be eliminated from OPART's databases, regardless of any support.

Sharing personal data

OPART guarantees that whenever it makes use of third parties, these will comply with their obligations in matters of privacy and protection of personal data, signing with them a Subcontracting Agreement to regulate all aspects inherent to the processing activities of your personal data. OPART will not perform international transfers of your data to a third country or international organisation outside the European Union.

Data Storage

Your personal data may be stored for accommodation and backup in servers located in Portugal. OPART stores your personal data in servers that are in a safe environment, protected from unauthorised access, adopts the technical and organisational procedures necessary to guarantee the security of your personal data and prevent any type of personal data violation.

Rights of the data subjects

In accordance with the applicable legislation, OPART undertakes to respect the confidentiality of your personal information and guarantee the exercise of your rights, namely:

•  Right to information: you are entitled to obtain clear, transparent and understandable information on how OPART handles your personal data;

• Right of access: in addition to the right of information, you may access your personal data and confirm whether or not your data is being processed, as well as request a copy of it;

• Right of rectification: you have the right to rectify your personal data if they are incorrect, outdated or incomplete. To do so, you may contact us at the contacts indicated above;

• Right of erasure: you may request us to erase your data, but you should bear in mind that this is not an absolute right, since OPART may have legal grounds or other legitimate interests that justify the conservation of your personal data;

• Right of opposition: for reasons related to your particular situation, you may oppose certain processing operations based on a legitimate interest or public interest of OPART or third parties, at any time during the processing. You should bear in mind that OPART may continue to process such data if they can prove "compelling legitimate grounds for the processing which override your interests, rights and freedoms" or if such data is necessary for the establishment, exercise or defence of legal claims. You may unsubscribe from OPART's newsletter or opt to be removed from its direct communications at any time. The easiest way to do so is by clicking on the link to remove any e-mail or communication sent, but you may also contact OPART at epd@opart.pt;

• Right to file a complaint with the CNPD: if you consider that the processing of your personal data violates the applicable data protection legislation, you may file a complaint with the National Commission for Data Protection - CNPD;

• Right to data portability: you have the right to move, copy or transfer your personal data from the OPART database to another one, in a structured format of current use, provided the processing is based on your consent or on a contract to which you are a party, and is carried out by automated means;

• Right to restrict the processing: you have the right to request the restriction of the processing of your data (i) if you contest the accuracy of the data, (ii) if the processing is unlawful and you do not wish to delete your data, but only to limit its use, (iii) if the data is no longer necessary to OPART, but necessary to you, (iv) or when you have exercised your right to object, during the period in which OPART examines whether or not your legitimate interests for the processing prevail over that right.

To request the exercise of any of the rights listed above, you may send a written communication to OPART with the following information:

Subject: Exercise of Rights - Personal Data Protection A/C: Data Protection Officer - OPART- Organismo de Produção Artística EPE, Rua Serpa Pinto n.º 9, 1200-442 Lisbon, Portugal

Send an e-mail to dpo@opart.pt

Security measures

OPART guarantees the implementation of adequate measures to comply with the principles of data protection, so as to ensure the permanent confidentiality, integrity, availability and resilience of its processing services. However, it is up to all users to ensure that the equipment they use is protected against harmful software, computer viruses and worms, as well as guaranteeing the safe configuration of their browsing program.

Cookies

Cookies are computer files containing a string of numbers and letters that identify each user's internet access device, and may contain other information such as your browsing preferences on a particular website. Cookies are downloaded via the browser to the internet access device (computer, cell phone, tablet, etc.) when the website is visited by the user.

Use of cookies

The OPART website uses cookies to improve performance and user experience, increasing the speed and efficiency of response and eliminating the need to repeatedly enter the same information. Cookies do not collect personal information that can identify you. They store generic information, such as how or where/country users access and use the websites, among others. Cookies only retain information related to your preferences. The user can accept, refuse or remove cookies by managing their browser settings, and the user is always given the ability to change their permissions. It should be noted, however, that refusal to use cookies on the website may result in the inability to access some of its areas and not allow a complete browsing experience.

Changes to the Privacy and Cookie Policy

OPART may update or adjust this Privacy and Cookies Policy in light of new legal or procedural requirements. Whenever there is an update, you will be informed of the changes through this website.

Further Information

For a more in-depth knowledge of the Privacy and Cookies Policy, you may consult the official document here (link).