Data Protection Policy

According with the new General Data Protection Regulation, (EU) 2016/679, of the European Parliament and the Council of the European Union of the 27th of April 2016, on the protection of individuals regarding the processing of personal data and the free movement of such data (GDPR), it is essential to obtain the explicit consent of all persons whose personal data are used by UPTEC.

UPTEC’s vision is to become a Science and Technology Park that contributes to the development of the new economic frame, which is more transparent, ethical and sustainable. For us, it is essential to be transparent about the personal data we want to collect, how we use it and with whom we share it.

This UPTEC concern with the authorized and adequate use of personal data was not started only now by the entry into force of the GDPR, but it has been our common practice for some years. We always ask installed business projects / companies for express and written authorization to share contact with third parties, for receiving communications from UPTEC, as well as for all identification and contact details of employees of business / companies projects.

In this document you can obtain information about the personal data we collect, the reasons why we use and share it, and how long we keep it.

Which personal data do we use and what is the purpose?

Events registration and participation

When registering for events organized by UPTEC — or in which UPTEC does data collection — identification (name) and contact details* are kept, to be able to contact the registred participants in case of any changes regarding the event (for example, change of day, time or place). During the events images may be collected and used to the UPTEC activities archive or for publication on UPTEC’s dissemination platforms.

Newsletter

As part of the activities and events that UPTEC promotes, welcomes and/or takes part, personal identification data (name) and contact details* are processed for wide communication of the initiatives that may become business opportunities and/or knowledge sharing.

Security and surveillance

UPTEC buildings have a closed TV circuit (CCTV) system installed, for monitoring the infrastructure and equipment that UPTEC is liable for, as well as security and support porpuses for all who work or visit these facilities. The identification data (name) and contact details* of the companies teams installed in the UPTEC can be used for direct contact by the UPTEC team in any situation where the safety of persons or goods could be at risk.

UPTEC applications

In the case of project applications to UPTEC or application to UPTEC programmes, identification data (name) and contact details* of participants are treated for communications related to that project/programme. Depending on the programme the user is applying for, biographical data may be collected which are only used for analysis and evaluation of the project/application.

With whom do we share personal data?

UPTEC shares the identification and contact details* of business project teams persons/companies installed — and previously installed — in the case of business opportunities or in the context of other initiatives and activities with the potential to have a positive impact on the evolution and notoriety of business projects/installed companies.

In those cases, only data teams members for which there is express authorization for sharing contact with third parties is shared.

Until when do we keep personal data?

The personal data and contact details* of  teams members  from business projects/companies installed are kept during the contract with UPTEC and after its ended. After the contract ending, these data are kept ad aeternum until the user exercises is right to delete/forget.

However, the data requested in the registration and participation of events is only kept up to five days after the event.

In UPTEC newsletter, the user always has the unsubscribe button available.

According to the present legislation, images collected through CCTV are only kept for 30 days.

The data subject has the following rights: 

  • Information and access | you can obtain information regarding your data treatment and obtain a copy
  • Rectification | whenever you consider that your personal data is inaccurate or incomplete, you can request to rectify them accordingly.
  • Blackout | you can request that your personal data is deleted, to the full extent of law.
  • Limitation | you can request that your personal data processing is limited.
  • Opposition | the personal data subject can object personal data processing, namely based on fair interests and for reasons related to his particular situation.
  • Withdraw consent | in cases where you have given your consent for personal data processing, you can withdraw it at any time.
  • Portability | when legally possible, you have the right to the personal data return that concerns you and that you have provided, or, if technically possible, to transfer them to another third party, responsible for processing.

 

You can exercise the rights listed above by directly contacting the UPTEC team

The data subject will also have the right to file a complaint with the National Data Protection Commission, or any other supervisory authority to whom this competence may be attributed by law, whose contacts can be reached at www.cnpd.pt.

* Contact details — e-mail address, mobile phone number or identifiers on other communication platforms.

It is possible that this information is updated regularly.

The UPTEC team will inform you of any relevant changes through the usual communication channels.

For further information, you can contact us through the email address: geral@uptec.up.pt.