Privacy Policy

SOTA, Agência de Arte, S.A

Privacy Policy of www.sota.pt

This Site collects some Personal Data from Users.

Owner and Data Controller

SOTA – Agência de Arte S.A. – Av. Clotilde. Centro de Congressos do Estoril 4.C., 2765-198 Estoril

E-mail contact of the Owner: info@sota.pt

Types of Data collected

Among the types of Personal Data that this Site collects, by itself or through third parties, there are: First Name; Last Name; Phone Number; Company Name; E-mail; Cookies.

Full details of the Personal Data collected are provided in the dedicated sections of this privacy policy or by specific explanatory text displayed prior to collection.

Personal Data may be provided voluntarily by the User, or, in the case of Usage Data, collected automatically when using this Site.

Unless it is specified that all Data requested by this Site is mandatory and failure to provide this Data may make it impossible for this Site to provide its Services. Where this Site specifically states that some Data is not required, Users will not be required to complete such Data and there will be no consequences for the availability or operation of the Service.

Users who have questions regarding which Personal Data are mandatory are invited to contact the Owner.

Any uses of cookies – or other tracking tools – by this Site or the third party service owners used by this Site will be for the purpose of providing the Services requested by the User, in addition to the other purposes described herein and in the Cookie Policy, if available.

Users remain responsible for any third-party Personal Data that is obtained, published or shared through this Service (this Site) and confirm that they have the third party’s consent to provide the Data to the Owner.

Mode and place of Data processing

Method of processing

The Owner will take appropriate security measures to prevent unauthorized access, disclosure, alteration or unauthorized destruction of the Data.

Processing of the Data is performed using computers and/or enabled IT tools, following organizational procedures and means strictly related to the stated purposes. In addition to the Owner, in some cases Data may be accessed by certain types of persons in charge, involved with the operation of this Service (this Site) (administration, sales, marketing, legal system administration) or external persons (such as third-party providers of technical services, couriers, etc.) appointed, where necessary, as Data Processors by the Owner. The updated list of these parties can be requested from the Owner at any time.

Legal basis for processing

The Owner may process Personal Data related to the User if one of the following applies:

  • Users who have given their approval for one or more specific purposes; Note: Under some legislations the Owner may have the permission to process the Personal Data UNTIL the User objects to this (“opt-out”), without having to rely on permission or any other legal bases below. This, however, does not apply where the processing of Personal Data is subject to European data protection law;
  • The provision of the Data is necessary for the performance of a contract with the User and/or any pre-contractual obligations of the User;
  • The processing is necessary for compliance with a legal obligation to which the Owner is subject;
  • The processing relates to a task that is carried out in the public interest or in the exercise of an official authorization in which the Owner is vested;
  • The processing is necessary for the purpose of legitimate interests pursued by the Owner or a third party;

In any case, the Owner will gladly cooperate to clarify which legal basis applies to the processing, and in particular if the provision of Data is a mandatory requirement under law or contract, or a necessary requirement to enter into a contract.

Place

Data is processed at the headquarters of operation of the Owners, and any other places where the parties involved with the processing are located.

Depending on the User’s location data transfers may involve the transfer of User Data to a country other than their own. To find out more about where such transferred Data is processed Users can check the section containing details about the processing of Personal Data.

Users also have the right to be informed about the legal basis of transfers of Data to countries outside the European Union or to any international organizations governed by public international law or formed by two or more countries, such as the UN, and about the security measures taken by the Owner to protect their Data.

If any such transfers occur Users can find out more about them by checking the relevant sections of this document or by asking the Owner using the information provided in the contact section.

Retention Period

Personal Data will be processed and stored for as long as necessary for the purposes for which they are collected.

Therefore:

  • Personal Data collected for purposes related to the performance of a contract between the Owner and the User will be kept until such contract has been fully performed.
  • Personal Data collected for purposes related to the legitimate interests of the Owner will be kept for as long as necessary to fulfill such purposes. Users may obtain specific information about the legitimate interests pursued by the Owner within the relevant sections of this document or by contacting the Owner.O Proprietário poderá ter a permissão de conservar os Dados Pessoais por um prazo maior sempre que o Utilizador der a sua autorização para tal processamento, enquanto tal autorização não tiver sido retirada. Além disso, o Proprietário poderá ficar obrigado a conservar os Dados Pessoais por um prazo maior em todas as ocasiões em que estiver obrigado a fazê-lo para o cumprimento de uma obrigação jurídica ou em cumprimento de um mandado de uma autoridade.

The Owner may be permitted to retain Personal Data for a longer term where the User has given consent to such processing, for as long as such consent has not been withdrawn. In addition, the Owner may be obliged to retain Personal Data for a longer period on all occasions when it is required to do so in order to comply with a legal obligation or in compliance with a warrant from an authority.

Once the retention period is over, the Personal Data will be deleted. Thus, the right of access, the right to erasure, the right to correction and the right to data portability cannot be enforced after the expiration of the retention period.

The purposes of processing

Data relating to the User is collected to enable the Owner to provide its Services, as well as for the following purposes: Contacting the User; Anti-spam protection; Accessing third-party service accounts; Statistics; Saving and managing backup; Commenting on content; Viewing content from external platforms; Processing payments; Interaction with social media and external platforms; User database management; Interaction with data collection platforms and other third parties; Managing email addresses and sending messages; Registration and authentication; Tag management and Traffic optimization and distribution.

Users can obtain additional detailed information about such processing purposes and the specific Personal Data used for each purpose in the respective sections of this document.

Facebook Permissions Requested by this Site

This Site may request certain Facebook permissions that allow it to perform actions with the User’s Facebook account and to retrieve information, including personal data. This service allows this Site to connect with the User’s account on the Facebook social network, provided by Facebook Inc.

For more information about the following permissions, please see the Facebook permissions documentation https://developers.facebook.com/docs/facebook-login/permissions” title=”https://developers.facebook.com/docs/facebook-login/permissions)”>https://developers.facebook.com/docs/facebook-login/permissions) and the Facebook privacy policy (https://www.facebook.com/about/privacy/).

The permissions requested are as follows: Birthday, Email Contact, Email and Basic Information.

Detailed information about the processing of Personal Data

Personal Data is collected for the following purposes and using the following services:

Access to third-party service accounts

This type of service allows this service (this Site) to access your Account Data with a third party service and perform actions with it.

These services are not activated automatically, they need the explicit authorization of the User

Access to Facebook Account (this Site)

This service allows this Site to connect with the User’s account on the social network Facebook, provided by Facebook, Inc.

Permission Request: Birthday; Email Contact; Email.

Place of Processing: USA – Privacy Policy (https://www.facebook.com/policy.php).

Content Commenting

The content commenting services allows Users to create and post comments on the content of this service (this Site).

Depending on the settings chosen by the Owner, Users may also leave anonymous comments. If there is an e-mail address among the Personal Data provided by the User, it can be used to send notifications of comments on the same content. Users are responsible for the content of their comments.

If a content comment service provided by a third party is installed, it may still collect web traffic data for the pages where the comment service is installed, even when Users do not use the comment content service.

Directly Managed Comment System (this Site)

This Site has its own internal content commenting system.

Personal Data collected: Cookie; E-mail; First name; Username; Surname; Website.

Contacting the User

Contact Form (this Site)

By filling in the contact form with their Data, Users authorize this Site to use these details to respond to requests for information, quotation or any other type of request as indicated by the title of the form.

Personal Data collected: Name, E-mail; Company name; Telephone number.

Mailing List or Newsletter (this Site)

By registering for the mailing list or newsletter, your e-mail address will be added to the contact list of those who may receive e-mail messages containing information of a commercial or promotional nature about this Site. Your e-mail address may also be added to this list as a result of your subscription to this service (this Site) or after you make a purchase.

Personal Data collected: E-mail; First name; Surname.

Contact Phone Number (this Site)

Users who have provided a telephone number may be contacted for commercial or promotional purposes in connection with this Site, as well as for the fulfillment of support requests.

Personal Data collected: Phone number.

Statistics

The services present in this section enable the Owner to monitor and analyze web traffic and can be used to track User behavior.

Google Analytics (Google Inc.)

Google Analytics is an internet analytics service provided by Google, depending on the location from which this Site is accessed, (“Google”). Google uses the data collected to track and analyze your use of this service (this Site) to prepare reports on activity and share it with other Google services.

Google may use the data collected to contextualize and personalize the ads of its own advertising network.

Personal Data Collected: Cookie; Usage Data.

Place of Processing: USA – Privacy Policy  (https://www.facebook.com/policy.php ) – Opt (https://policies.google.com/privacy?hl=pt) Out.

Participant in Privacy Shield.

WordPress Stat (Automattic Inc.)

WordPress is an analytics service provided by Automattic Inc.

Personal Data collected: Cookie; Usage data.

Place of Processing: USA – Privacy Policy
(https://automattic.com/privacy/).

User database management

These types of services allow the Owner to create User profiles from an email address, a personal name, or other information that the User has provided to this Site, as well as tracking User activity through analytics features. This Personal Data may also be combined with publicly available information about the User (such as social media profiles) and used to build private profiles that the Owner may display and use to improve the service (this Site).

Some of these services may also be enabled to send scheduled messages to the User such as emails based on actions taken on this service (this Site).

Intercom (Intercom Inc.)

Intercom is a database management service provided by Intercom Inc.

Intercom may also be used as a medium for communications, both via e-mail and messages within this service (this Site).

Personal Data collected: Cookie; usage data; e-mail; various types of Data as specified in the service’s privacy policy.

Place of Processing: USA – Privacy Policy
(https://docs.intercom.io/pricing-and-terms/privacy).

Management of e-mail addresses and sending messages

These types of services allow the management of the database of email contacts, telephone numbers or other contact information for the purposes of communicating with the User.

These services can also be used to collect data regarding the date and time when the User viewed the email; and also when the User interacted with the email received, such as when the User selected the links included in the email.

Mailchimp (The Rocket Science Group, LLC.)

Mailchimp is the email address management and sending message service provided by The Rocket Science Group LLC.

Personal Data collected: e-mail.

Place of Processing: USA – Privacy Policy (https://mailchimp.com/legal/privacy/).

Privacy Shield Participant

Sendgrid (Sendgrid)

Sendgrid is the e-mail address management and sending message service provided by Sendgrid Inc.

Personal Data collected: e-mail.

Place of processing: USA – Privacy Policy (https://sendgrid.com/policies/privacy/).

Tag Management

This type of service helps the Owner to manage the tags or scripts required by this Site centrally. As a result User Data flows through these services and there is a possibility of retention of this Data.

Google Tag Manager (Google)

Google Tag Manager is a management service provided by Google, depending on the location from which this Site is accessed.

Personal Data Collected: Cookies; Usage Data.

Place of Processing: USA – Privacy Policy (https://policies.google.com/privacy?hl=pt).

Privacy Shield Participant.

Interaction with Data Collection Platforms and Other Third Parties

These types of services allow Users to interact with data collection platforms or other services directly from the pages of this service (this Site) for the purpose of saving and reusing data.

If one of these services is installed, it may collect Usage and Navigation Data on the pages where they were installed, even if Users do not actively use the service.

Widget Wufoo (Wufoo Inc.)

The Wufoo Widget is a service for interacting with the Wufoo data collection platform provided by SurveyMonkey Inc,

Personal Data Collected: Cookies; Usage Data.

Place of Processing: USA – Privacy Policy
(http://www.wufoo.com/privacy/).

Privacy Shield Participant.

Interaction with Social Networks and External Platforms

These types of services allow interaction with social networks or other external platforms directly from the pages of this service (this Site).

The interaction and information obtained by this Site is always subject to the User’s privacy settings on each social network.

This type of service may also collect traffic data for the pages where the service is installed, even when Users are not using it.

It is recommended to exit the respective services in order to ensure that the data processed in this service (this Site) is not being connected back to the User’s profile.

The Facebook Like Button and Social Widgets (Facebook, Inc.)

The Facebook Like button and Social Widgets are services that enable interaction with the Facebook social network provided by Facebook, Inc.

Personal Data Collected: Cookies; Usage data.

Place of Processing: USA – Privacy Policy (https://www.facebook.com/privacy/explanation).

Privacy Shield Participant.

The +1 button and Google+ Social Widgets (Google Inc.)

The +1 button and Google+ Social Widgets are services that enable interaction with the Google+ social network provided by Google, depending on the location from which this Website is accessed.

Personal Data collected: Cookies; Usage data.

Place of Processing: USA – Privacy Policy (https://policies.google.com/privacy?hl=pt-PT).

Privacy Shield Participant.

The LinkedIn Social Button and Widgets (LinkedIn Corporation)

The LinkedIn button and social widgets are services that allow interaction with the LinkedIn social network provided by LinkedIn Corporation.

Personal Data Collected: Cookies; Usage data.

Place of Processing: USA – Privacy Policy (https://www.linkedin.com/legal/privacy-policy).

Privacy Shield Participant.

The YouTube Social Button and Widgets (Google Inc.)

The YouTube button and social widgets are services that allow interaction with the YouTube social network provided by Google, depending on the location from which this Website is accessed.

Personal Data collected: Usage data.

Place of Processing: USA – Privacy Policy (https://policies.google.com/privacy?hl=pt).

Privacy Shield Participant.

Traffic Optimization and Distribution

These types of services allow this Site to distribute their content using servers located in different countries in order to optimize their performance.

Some Personal Data is processed and depends on the characteristics and the way these services are implemented. Their function is to filter communications between this Site and the User’s browser.

Considering the widespread distribution of this system, it is difficult to determine the locations to which content, which may contain the User’s personal information, has been transferred.

Sucuri CloudProxy (Sucuri, Inc.)

Sucuri CloudProxy is a traffic optimization and distribution service provided by Sucuri, Inc.

The way Sucuri CloudProxy is integrated means that it filters all traffic through this service (this Site), i.e. communication between this Site and the User’s browser, while at the same time, allowing analytical data from this Application to be collected.

Personal Data collected: various types of Data as specified in the service’s privacy policy.

Place of Processing: USA – Privacy Policy
(https://bit.ly/2QQX3Al).

Payment Process

Payment processing services enable this Site to process payments by credit card, bank transfer or other means. For increased security, this Site provides only the information necessary to execute the transaction with the financial intermediaries operating the transaction.

Some of these services may also enable the sending of timed messages to the User of this Site such as email-based invoices and other notifications.

Paypal (Paypal)

PayPal is a payment service provided by PayPal Inc. that allows Users to make payments online.

Personal Data collected: various types of Data as specified in the service’s privacy policy.

Anti-spam protection

These types of services analyze the traffic of this service (this Site), which may contain Personal Data of Users, in order to filter them from those parts of the traffic, messages and content that are recognized as SPAM.

Google reCAPTCHA (Google Inc.)

Google reCAPTCHA is a SPAM protection service provided by Google or Google, depending on the location from which this Site is accessed.

Use of reCAPTCHA is subject to the privacy policy (https://policies.google.com/privacy?hl=pt-BR) and the terms of use (https://policies.google.com/terms?hl=pt-BR) from Google.

Personal data collected: Cookies; Usage data.

Place of Processing: USA – Privacy Policy (https://policies.google.com/privacy?hl=pt-PT).

Privacy Shield Participant.

Akismet (Automattic Inc.)

Akismet is a SPAM protection service provided by Automattic Inc.

Personal Data collected: Various types of Data as specified in the service’s privacy policy.

Place of Processing: USA – Privacy Policy
(https://automattic.com/privacy/).

Registration and Authentication

By registering or authenticating, Users allow this service (this Site) to identify them and give them access to dedicated services. Depending on what is described below, registration and authentication services may be provided by third parties. In this case, this Site may access some Data stored by these third party services for registration or identification purposes.

Facebook Authentication (Facebook, Inc.)

Facebook Authentication is a registration and authentication service provided by Facebook, Inc. and is connected to the Facebook social network.

Personal Data collected: Various types of Data as specified in the service’s privacy policy.

Place of Processing: USA – Privacy Policy (https://www.facebook.com/help/405977429438260).

Privacy Shield Participant.

Save and Manage Backup

These types of services allow the Owner to save and manage backups of this service (this Site) on external servers managed by the service provider itself. The backups may include the source code and content, as well as the data that the User provides to this Site.

Backup in Google Drive (Google LLC)

Google Drive is a service for storing and managing backups provided by Google.

Personal Data collected: various types of Data as specified in the service’s privacy policy.

Place of Processing: USA – Privacy Policy
(https://policies.google.com/privacy).

Privacy Shield Participant.

Viewing content from external platforms

These types of services allow the User to view and interact with content present on external platforms directly from the pages of this service (this Site). If such type of service is installed it may collect web traffic data for the pages where it is installed, even when Users are not using them.

Google Fonts (Google Inc.)

Google Fonts is a font type preview service provided by Google, depending on the location from which this Site is accessed, that enables this Site to embed font content on its pages.

Personal Data collected: Usage data; various types of Data as specified in the service’s privacy policy.

Place of Processing: USA – Privacy Policy (https://policies.google.com/privacy?hl=policies&gl=it).

Privacy Shield Participant.

Google Maps widget (Google Inc.)

Google Maps is a map viewing service provided by Google, depending on the location from which this Site is accessed, which allows this Site to incorporate content of this type on its pages.

Personal Data Collected: Cookies; Usage Data.

Place of Processing: USA – Privacy Policy (https://policies.google.com/privacy?hl=pt&gl=it).

Privacy Shield Participant.

Gravatar (Automattic Inc.)

Gravatar is an image viewing service provided by Automattic Inc. which enables this Site to incorporate content of this type into its pages.

Please note that if Gravatar images are used in commenting systems, the email address of the person who made the comment or parts of it may be sent to Gravatar – even if that person has not signed up for this service.

Personal Data Collected: Usage data; email.

Place of Processing: USA – Privacy Policy
(https://automattic.com/privacy/).

The rights of Users

Users may exercise certain rights with respect to their Data processed by the Owner.

In particular, Users have rights, such as:

  • Withdrawing their approval at any time. Users have the right to withdraw their approval in cases where they have previously given their approval for the processing of their Personal Data.
  • Refuse the processing of their Data. Users have the right to refuse the processing of their Data if the processing is performed on a legal basis other than approval. Additional details are provided in the specific section below.
  • Accessing Your Data. Users have the right to know whether their Data is being processed by the Owner, to obtain disclosures about certain aspects of the processing, and to obtain a copy of the Data that is being processed.
  • Verify and Request Correction. Users have the right to verify the accuracy of their Data and to request any updates or corrections.
  • Restrict the processing of your Data. Users have the right, under certain circumstances, to restrict the processing of their Data for any purpose other than the storage of their Data.
  • Erase Personal Data or otherwise remove it. Users have the right, under certain circumstances, to obtain the deletion of their Data from the Owner.
  • Receive their Data and have it transferred to another controller. Users have the right to receive their Data in a structured, commonly used and machine-readable format and, if technically feasible, have it transferred to another controller without any problem. This stipulation is conditional upon the Data being processed by automated means and the processing being based on your approval, on a contract to which you are a party or on your pre-contractual obligations.
  • Filing a Complaint. Users have the right to lodge a complaint with their competent data protection authority.Detalhes sobre o direito de recusar o processamento

Where Personal Data is processed for a public interest, in the exercise of an official authorization in which the Owner is vested, or for purposes of the legitimate interests pursued by the Owner, Users may refuse processing by providing a reason relating to their particular situation to justify the refusal.

Users should be aware that if their Personal Data are processed for marketing purposes, they may refuse processing at any time without providing any justification. Users can refer to the respective sections of this document.

How to exercise these rights

Any requests to exercise the rights of Users can be directed to the Owner using the contact details provided in this document. These requests can be exercised free of charge and will be answered by the Owner as soon as possible and in all cases within less than one month.

Cookie Policy

This Site uses Cookies. To learn more and for a more detailed notice about cookies, the User can refer to the Cookie Policy.

Additional Information on Data Collection and Processing

Legal Action

The Personal Data of Users may be used for legal purposes by the Owner in question or in the steps leading to possible legal action arising from a misuse of this Service (this Site) or the related Services.

The User declares to be aware that the Owner may be obliged to disclose the Personal Data upon request by government authorities.

Additional Information about Your Personal Data

In addition to the information contained in this privacy policy, this Site may provide the User with additional, contextual information about specific services or the collection or processing of Personal Data upon request.

System Logs and Maintenance

For system and maintenance purposes, this Site and any third party services may collect files that store interaction with this Site (system logs) or use other Personal Data (such as IP address) for this purpose.

Information not contained in this policy

Further details about the collection or processing of Personal Data may be requested from the Owner at any time. Please see the contact information at the beginning of this document.

How “Do Not Track Me” Requests Are Handled

This Site does not support “Do Not Track Me” requests.

To determine whether any of the third party services you use honor “Do Not Track Me” requests, please read their privacy policies.

Changes to this privacy policy

The Owner reserves the right to make changes to this privacy policy at any time by communicating to its Users on this page and possibly within this Service, this Site and/or – to the extent technically and legally feasible – by sending notice to Users via any contact information available to the Owner. It is highly recommended that this page be consulted several times in relation to the last change described at the bottom.

Should the changes affect processing activities carried out on the basis of User approval, the Owner will collect the new User approval where required.

Definitions and legal references

Personal Data (or Data)

Any information that directly, indirectly or in connection with other information – including a personal identification number – allows the identification or identifiability of a natural person.

Usage Data

The information automatically collected through this Site (or third party services contracted on this Service), which may include: the IP addresses or domain names of the computers used by Users using this Site, the URI (Uniform Resource Identifier) addresses, the date and time of the request, the method used to submit the request to the server, the size of the file received in response, the numeric code indicating the status of the response server (positive result, error , etc. ), the country of origin, the characteristics of the browser and operating system used by the User, the various time details per visit (e.g. the time spent on each page within the application) and the details about the path followed within the application, with particular reference to the sequence of pages visited and other parameters about the operating system of the User’s device and/or IT environment.

User  

The person using this Site who, unless otherwise specified, coincides with the Data Subject.

Data Subject

The natural person to whom the Personal Data relates.

Data Processor (or Data Controller)

The natural or legal person, public administration, agency or other body that processes the Personal Data on behalf of the Controller as described in this privacy policy.

Data Controller (or Owner)

The natural or legal person, public administration, agency or other body that alone or jointly with others determines the purposes and means of processing Personal Data, including security measures relating to the operation and use of this Service (this Site). The Data Controller, unless otherwise specified, is the Owner of this Service (this Site).

This Site (or this Application)

The means by which User Personal Data is collected and processed.

Service

The service provided by this Site as described in the relative terms (if available) and on this site/application.

European Union (or EU)

Unless otherwise specified, all references in this document to the European Union include all current member states of the European Union and the European Economic Area.

Cookies

Small units of data stored on the User’s device.

Legal Information

This privacy statement has been prepared based on determinations of multiple legislations, including Arts. 13/14 of Regulation (EU) 2016/679 (GDPR – General Data Protection Regulation).

This privacy policy relates only to this Site.

 

 

Last updated: April 2022