{"id":2068,"date":"2026-09-07T10:16:51","date_gmt":"2026-09-07T09:16:51","guid":{"rendered":"https:\/\/pdo.pt\/privacy-policy\/"},"modified":"2026-11-12T19:00:41","modified_gmt":"2026-11-12T19:00:41","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/pdo.pt\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"<div class=\"et_pb_section_0 et_pb_section et_section_regular et_block_section preset--module--divi-section--default\">\n<div class=\"et_pb_row_0 et_pb_row et_block_row preset--module--divi-row--default\">\n<div class=\"et_pb_column_0 et_pb_column et_pb_column_4_4 et-last-child et_block_column et_pb_css_mix_blend_mode_passthrough\">\n<div class=\"et_pb_text_0 et_pb_text et_pb_bg_layout_light et_pb_module et_flex_module\"><div class=\"et_pb_text_inner\"><div class=\"pdo-legal\">\n<h1>Privacy Policy<\/h1>\n<p class=\"pdo-legal-date\">Last updated: 23 October 2026<\/p>\n<p>At Palha\u00e7os d'Opital we treat your data with the same care we take when we walk into a hospital room: with respect, and only with what is needed. This policy explains what data we collect on this website, why, for how long, and how you can exercise your rights.<\/p>\n<nav class=\"pdo-legal-toc\" aria-label=\"Contents\">\n<ul>\n<li><a href=\"#responsavel\">Who is responsible for your data<\/a><\/li>\n<li><a href=\"#dados\">What data we collect and why<\/a><\/li>\n<li><a href=\"#partilha\">Who we share your data with<\/a><\/li>\n<li><a href=\"#transferencias\">Transfers outside the European Union<\/a><\/li>\n<li><a href=\"#direitos\">Your rights<\/a><\/li>\n<li><a href=\"#seguranca\">How we protect your data<\/a><\/li>\n<li><a href=\"#menores\">Children<\/a><\/li>\n<li><a href=\"#ligacoes\">Links to other websites<\/a><\/li>\n<li><a href=\"#alteracoes\">Changes to this policy<\/a><\/li>\n<li><a href=\"#contactos\">Contact<\/a><\/li>\n<\/ul>\n<\/nav>\n<h2 id=\"responsavel\">Who is responsible for your data<\/h2>\n<p>The controller of your data is Palha\u00e7os d'Opital, Associa\u00e7\u00e3o Cultural, tax number (NIPC) 510 556 434, with registered office at Rua do T\u00fanel, n.\u00ba 14, 1.\u00ba Esq., 3030-006 Coimbra, Portugal.<\/p>\n<p>For any questions about your data, write to <a href=\"mailto:geral@palhacosdopital.pt\">geral@palhacosdopital.pt<\/a>.<\/p>\n<h2 id=\"dados\">What data we collect and why<\/h2>\n<p>We only collect the data you give us when you make a donation or a purchase, subscribe to the newsletter, contact us or apply to work with us, plus the technical browsing data described in our <a href=\"https:\/\/pdo.pt\/en\/cookie-policy\/\">Cookie Policy<\/a>.<\/p>\n<table class=\"pdo-legal-table\">\n<thead>\n<tr>\n<th>When<\/th>\n<th>What data<\/th>\n<th>Why<\/th>\n<th>Legal basis<\/th>\n<th>For how long<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td data-label=\"When\">You make a one-off donation<\/td>\n<td data-label=\"What data\">Name, email, address, tax number (NIF, if you ask for a receipt), mobile number (optional), donation amount<\/td>\n<td data-label=\"Why\">To process the donation, send the receipt and meet our tax obligations, including the annual reporting of donations to the Portuguese Tax Authority<\/td>\n<td data-label=\"Legal basis\">Carrying out your request and legal obligation<\/td>\n<td data-label=\"For how long\">[10 years], the legal retention period for accounting records<\/td>\n<\/tr>\n<tr>\n<td data-label=\"When\">You become an Amigo d'Opital (regular donation)<\/td>\n<td data-label=\"What data\">The same data, plus the frequency and payment method you choose<\/td>\n<td data-label=\"Why\">To manage collections, notify you before each collection, send receipts and keep in touch with you<\/td>\n<td data-label=\"Legal basis\">Carrying out the donation agreement and legal obligation<\/td>\n<td data-label=\"For how long\">While the donation is active and then [10 years] for tax purposes<\/td>\n<\/tr>\n<tr>\n<td data-label=\"When\">You buy from the d'Opital Store<\/td>\n<td data-label=\"What data\">Name, email, mobile number, delivery and billing address, tax number (optional)<\/td>\n<td data-label=\"Why\">To process and ship the order, issue the invoice and handle returns<\/td>\n<td data-label=\"Legal basis\">Performance of the purchase contract and legal obligation<\/td>\n<td data-label=\"For how long\">[10 years] for invoices; other data, [2 years] after the order<\/td>\n<\/tr>\n<tr>\n<td data-label=\"When\">You subscribe to the newsletter<\/td>\n<td data-label=\"What data\">Email and, if you give it, your name<\/td>\n<td data-label=\"Why\">To send news and stories from Palha\u00e7os d'Opital and, if you accept marketing cookies, to measure opens, clicks and website visits that come from our emails<\/td>\n<td data-label=\"Legal basis\">Your consent<\/td>\n<td data-label=\"For how long\">Until you unsubscribe<\/td>\n<\/tr>\n<tr>\n<td data-label=\"When\">You send us a message<\/td>\n<td data-label=\"What data\">Name, email, mobile number (optional) and your message<\/td>\n<td data-label=\"Why\">To reply to your request<\/td>\n<td data-label=\"Legal basis\">Our legitimate interest in replying to people who contact us<\/td>\n<td data-label=\"For how long\">[2 years] after the last contact<\/td>\n<\/tr>\n<tr>\n<td data-label=\"When\">You apply to work with us<\/td>\n<td data-label=\"What data\">Name, contact details, CV, portfolio and anything else you choose to send us<\/td>\n<td data-label=\"Why\">To assess your application and contact you<\/td>\n<td data-label=\"Legal basis\">Pre-contractual steps at your request<\/td>\n<td data-label=\"For how long\">Until the end of the recruitment process; [2 years] if you allow us to keep your application for future opportunities<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>Payment data (card, IBAN, MB WAY number) is processed directly by Easypay, the payment institution we use. Palha\u00e7os d'Opital does not have access to your full card details.<\/p>\n<p>If you are a donor or an Amigo d'Opital, we also keep a record of your donations and of our communications with you, so we can thank you, send your annual receipt and share news of our work. We do this on the basis of our legitimate interest in keeping in touch with the people who support us. You can object at any time.<\/p>\n<p>We do not make automated decisions about you or create profiles with your data.<\/p>\n<h2 id=\"partilha\">Who we share your data with<\/h2>\n<p>We do not sell or share your data for commercial purposes. We only share it with the organisations that help us operate and that process it on our behalf, under a contract that requires them to protect it:<\/p>\n<ul>\n<li>Easypay, to process donations and payments<\/li>\n<li>E-goi, to send the newsletter<\/li>\n<li>Salesforce, where we organise information about donors, partners and donations<\/li>\n<li>Hostinger, where the website is hosted<\/li>\n<li>Google, for visitor statistics (Google Analytics, only with your consent), protecting our forms against spam (reCAPTCHA, based on our legitimate interest in keeping the website secure) and maps (Google Maps, only if you accept them)<\/li>\n<li>Our certified accountant, for bookkeeping and tax obligations<\/li>\n<li>Shipping and logistics companies, to deliver shop orders<\/li>\n<\/ul>\n<p>We may also have to share data with the Portuguese Tax Authority or other authorities when required by law.<\/p>\n<h2 id=\"transferencias\">Transfers outside the European Union<\/h2>\n<p>Some providers, such as Salesforce and Google, may process data outside the European Economic Area. In those cases, the transfer only takes place with the safeguards provided for in the GDPR, such as the standard contractual clauses approved by the European Commission or the provider's participation in the EU-US Data Privacy Framework.<\/p>\n<div class=\"pdo-legal-highlight\">\n<h2 id=\"direitos\">Your rights<\/h2>\n<p>At any time, you can ask us to:<\/p>\n<ul>\n<li>access the data we hold about you<\/li>\n<li>correct inaccurate or out-of-date data<\/li>\n<li>delete your data, when it is no longer needed or the law does not require us to keep it<\/li>\n<li>restrict the use of your data<\/li>\n<li>receive your data in a digital format, to take it to another organisation<\/li>\n<li>object to the use of your data based on our legitimate interest, including for communications<\/li>\n<li>withdraw your consent, for example for the newsletter, without affecting what was done before<\/li>\n<\/ul>\n<p>To exercise any of these rights, write to <a href=\"mailto:geral@palhacosdopital.pt\">geral@palhacosdopital.pt<\/a>. We reply within one month. To unsubscribe from the newsletter, just use the link at the end of each email.<\/p>\n<p>If you believe your data has not been handled properly, you can lodge a complaint with the Portuguese data protection authority, Comiss\u00e3o Nacional de Prote\u00e7\u00e3o de Dados (CNPD), at <a href=\"https:\/\/www.cnpd.pt\" target=\"_blank\" rel=\"noopener\">www.cnpd.pt<\/a>.<\/p>\n<\/div>\n<h2 id=\"seguranca\">How we protect your data<\/h2>\n<p>The website uses a secure connection (HTTPS). Access to data is limited to the team members who need it for their work, and our providers are required to take appropriate security measures.<\/p>\n<h2 id=\"menores\">Children<\/h2>\n<p>This website is not aimed at children under 16. We do not knowingly collect data from children. If you know that a child has given us personal data, contact us and we will delete it.<\/p>\n<h2 id=\"ligacoes\">Links to other websites<\/h2>\n<p>This website contains links to the websites of partners and other organisations. This policy does not apply to those websites. We recommend that you read each one's privacy policy.<\/p>\n<h2 id=\"alteracoes\">Changes to this policy<\/h2>\n<p>We may update this policy to reflect changes in the law or in the way we work. The date of the last update is at the top of the page. If a change is significant, we will let newsletter subscribers and Amigos d'Opital know.<\/p>\n<h2 id=\"contactos\">Contact<\/h2>\n<p>Palha\u00e7os d'Opital, Associa\u00e7\u00e3o Cultural<br \/>Rua do T\u00fanel, n.\u00ba 14, 1.\u00ba Esq., 3030-006 Coimbra, Portugal<br \/><a href=\"mailto:geral@palhacosdopital.pt\">geral@palhacosdopital.pt<\/a><\/p>\n<p>See also our <a href=\"https:\/\/pdo.pt\/en\/cookie-policy\/\">Cookie Policy<\/a>.<\/p>\n<\/div>\n<\/div><\/div>\n<\/div>\n<\/div>\n<\/div>","protected":false},"excerpt":{"rendered":"","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-2068","page","type-page","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/pdo.pt\/en\/wp-json\/wp\/v2\/pages\/2068","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/pdo.pt\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/pdo.pt\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/pdo.pt\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/pdo.pt\/en\/wp-json\/wp\/v2\/comments?post=2068"}],"version-history":[{"count":2,"href":"https:\/\/pdo.pt\/en\/wp-json\/wp\/v2\/pages\/2068\/revisions"}],"predecessor-version":[{"id":2075,"href":"https:\/\/pdo.pt\/en\/wp-json\/wp\/v2\/pages\/2068\/revisions\/2075"}],"wp:attachment":[{"href":"https:\/\/pdo.pt\/en\/wp-json\/wp\/v2\/media?parent=2068"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}