Privacy Policy

Last updated: 23 October 2026

At Palhaços d'Opital we treat your data with the same care we take when we walk into a hospital room: with respect, and only with what is needed. This policy explains what data we collect on this website, why, for how long, and how you can exercise your rights.

Who is responsible for your data

The controller of your data is Palhaços d'Opital, Associação Cultural, tax number (NIPC) 510 556 434, with registered office at Rua do Túnel, n.º 14, 1.º Esq., 3030-006 Coimbra, Portugal.

For any questions about your data, write to geral@palhacosdopital.pt.

What data we collect and why

We only collect the data you give us when you make a donation or a purchase, subscribe to the newsletter, contact us or apply to work with us, plus the technical browsing data described in our Cookie Policy.

When	What data	Why	Legal basis	For how long
You make a one-off donation	Name, email, address, tax number (NIF, if you ask for a receipt), mobile number (optional), donation amount	To process the donation, send the receipt and meet our tax obligations, including the annual reporting of donations to the Portuguese Tax Authority	Carrying out your request and legal obligation	[10 years], the legal retention period for accounting records
You become an Amigo d'Opital (regular donation)	The same data, plus the frequency and payment method you choose	To manage collections, notify you before each collection, send receipts and keep in touch with you	Carrying out the donation agreement and legal obligation	While the donation is active and then [10 years] for tax purposes
You buy from the d'Opital Store	Name, email, mobile number, delivery and billing address, tax number (optional)	To process and ship the order, issue the invoice and handle returns	Performance of the purchase contract and legal obligation	[10 years] for invoices; other data, [2 years] after the order
You subscribe to the newsletter	Email and, if you give it, your name	To send news and stories from Palhaços d'Opital and, if you accept marketing cookies, to measure opens, clicks and website visits that come from our emails	Your consent	Until you unsubscribe
You send us a message	Name, email, mobile number (optional) and your message	To reply to your request	Our legitimate interest in replying to people who contact us	[2 years] after the last contact
You apply to work with us	Name, contact details, CV, portfolio and anything else you choose to send us	To assess your application and contact you	Pre-contractual steps at your request	Until the end of the recruitment process; [2 years] if you allow us to keep your application for future opportunities

Payment data (card, IBAN, MB WAY number) is processed directly by Easypay, the payment institution we use. Palhaços d'Opital does not have access to your full card details.

If you are a donor or an Amigo d'Opital, we also keep a record of your donations and of our communications with you, so we can thank you, send your annual receipt and share news of our work. We do this on the basis of our legitimate interest in keeping in touch with the people who support us. You can object at any time.

We do not make automated decisions about you or create profiles with your data.

Who we share your data with

We do not sell or share your data for commercial purposes. We only share it with the organisations that help us operate and that process it on our behalf, under a contract that requires them to protect it:

Easypay, to process donations and payments
E-goi, to send the newsletter
Salesforce, where we organise information about donors, partners and donations
Hostinger, where the website is hosted
Google, for visitor statistics (Google Analytics, only with your consent), protecting our forms against spam (reCAPTCHA, based on our legitimate interest in keeping the website secure) and maps (Google Maps, only if you accept them)
Our certified accountant, for bookkeeping and tax obligations
Shipping and logistics companies, to deliver shop orders

We may also have to share data with the Portuguese Tax Authority or other authorities when required by law.

Transfers outside the European Union

Some providers, such as Salesforce and Google, may process data outside the European Economic Area. In those cases, the transfer only takes place with the safeguards provided for in the GDPR, such as the standard contractual clauses approved by the European Commission or the provider's participation in the EU-US Data Privacy Framework.

Your rights

At any time, you can ask us to:

access the data we hold about you
correct inaccurate or out-of-date data
delete your data, when it is no longer needed or the law does not require us to keep it
restrict the use of your data
receive your data in a digital format, to take it to another organisation
object to the use of your data based on our legitimate interest, including for communications
withdraw your consent, for example for the newsletter, without affecting what was done before

To exercise any of these rights, write to geral@palhacosdopital.pt. We reply within one month. To unsubscribe from the newsletter, just use the link at the end of each email.

If you believe your data has not been handled properly, you can lodge a complaint with the Portuguese data protection authority, Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt.

How we protect your data

The website uses a secure connection (HTTPS). Access to data is limited to the team members who need it for their work, and our providers are required to take appropriate security measures.

Children

This website is not aimed at children under 16. We do not knowingly collect data from children. If you know that a child has given us personal data, contact us and we will delete it.

Links to other websites

This website contains links to the websites of partners and other organisations. This policy does not apply to those websites. We recommend that you read each one's privacy policy.

Changes to this policy

We may update this policy to reflect changes in the law or in the way we work. The date of the last update is at the top of the page. If a change is significant, we will let newsletter subscribers and Amigos d'Opital know.