PRIVACY POLICY
This Privacy Policy is intended to inform users about the collection, use, storage, and protection of their personal data, as well as the rights they are entitled to under Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation or “GDPR”), and any other applicable data protection legislation.
1. SCOPE
1.1.
This Privacy Policy applies exclusively to the website of ARM – Associação Rotas de Mação (www.rotasdemacao.pt), the Rotas de Mação Mobile application and to the data collected within the scope of the activities included in the Rotas de Mação activity plans over the years. It does not apply to any third-party websites, platforms, or applications that may be accessed through links provided on our website or mobile application.
1.2.
The processing of personal data carried out by third parties is subject to their own privacy policies. We therefore recommend that users review those policies before providing any personal data.
1.3.
Browsing the website generally does not require the disclosure of personal data. However, the use of certain website or mobile application features may require the collection and processing of personal data.
2. COLLECTION AND PROCESSING OF PERSONAL DATA
2.1.
ARM – Associação Rotas de Mação is the entity responsible for the processing of personal data collected through the website and mobile application.
2.2.
Personal data is collected directly from the data subject, either on the basis of consent or another applicable legal basis. Users will always be informed of the purposes of the processing and the applicable data retention periods.
2.3.
The personal data collected may be used for the following purposes:
- Responding to requests for information and clarification;
- Managing registrations for activities, walks, events, and initiatives promoted by the Association;
- Providing information about activities, events, news, and other matters related to the Association’s activities;
- Ensuring the safety of participants in organized activities;
- Complying with applicable legal and regulatory obligations.
2.4.
Personal data will only be processed to the extent strictly necessary for the purposes for which it was collected.
2.5.
Personal data will be retained for the period necessary to fulfill the purposes for which it was collected, or for as long as required by legal obligations.
2.6.
Once the applicable retention period has ended, personal data will be securely deleted or anonymized.
2.7.
ARM – Associação Rotas de Mação is committed to ensuring the confidentiality and security of personal data and will not disclose or transfer such data to third parties without a legal basis or the explicit consent of the data subject.
3. SPECIFIC PURPOSES REGARDING SAFETY AND CIVIL PROTECTION
3.1.
Within the scope of participation in activities organized by the Association, certain personal data may be collected for the purpose of ensuring participant safety.
3.2.
Where necessary for emergency response, rescue, assistance, or participant location purposes, personal data may be communicated to the competent Civil Protection authorities, namely:
- Municipality of Mação;
- National Republican Guard (GNR);
- Mação Volunteer Fire Brigade;
- National Institute of Medical Emergency (INEM);
- Other legally competent emergency and rescue entities.
3.3.
Such disclosure shall be made exclusively for the activation and implementation of applicable safety and emergency procedures aimed at safeguarding the life and physical integrity of participants.
4. DATA SUBJECT RIGHTS
Under the GDPR and applicable legislation, data subjects have the right to:
a) Access their personal data and obtain information about its processing;
b) Request the rectification of inaccurate or incomplete personal data;
c) Request the erasure of their personal data where legally applicable;
d) Request the restriction of the processing of their personal data;
e) Object to the processing of their personal data in legally defined circumstances;
f) Request the portability of their personal data to another data controller, where applicable;
g) Withdraw consent previously given, without affecting the lawfulness of processing carried out before such withdrawal;
h) Lodge a complaint with the Portuguese Data Protection Authority (CNPD);
i) Obtain information regarding the purposes of processing, categories of data processed, recipients of the data, and the applicable retention periods.
4.1.
These rights may be exercised through the contact details provided in this Privacy Policy.
5. DISCLOSURE OF DATA TO THIRD PARTIES
5.1.
ARM – Associação Rotas de Mação will not disclose personal data to third parties except where:
a) Such disclosure is necessary to comply with legal obligations;
b) It is required by a court order or by a competent administrative or judicial authority;
c) The data subject has provided explicit consent;
d) The disclosure is necessary for the pursuit of legitimate interests or purposes established by law;
e) The disclosure is necessary to protect the vital interests of the data subject or another natural person.
6. DATA SECURITY
6.1.
ARM – Associação Rotas de Mação implements appropriate technical and organizational measures to protect personal data against:
- Unauthorized access;
- Misuse;
- Unauthorized alteration;
- Accidental or unlawful disclosure;
- Loss, destruction, or damage.
6.2.
Although all reasonable security measures are adopted, the transmission of information over the Internet cannot be guaranteed as completely secure.
7. DATA CONTROLLER AND DATA PROTECTION OFFICER (DPO)
7.1. Data Controller
ARM – Associação Rotas de Mação
Edifício do Agrupamento de Escolas Verde Horizonte
Avenida Dr. Francisco Sá Carneiro, No. 47
6120-724 Mação
Portugal
E-mail: geral@rotasdemacao.pt
7.2. Data Protection Officer (DPO)
Rui Manuel Matos Moleiro
Data Protection Officer (DPO)
For any matters related to the protection of personal data, the exercise of GDPR rights, or requests for clarification regarding this Privacy Policy, data subjects may contact:
E-mail: geral@rotasdemacao.pt
Subject: DATA PROTECTION
8. DATA RETENTION PERIOD
8.1.
Personal data will be retained only for the period strictly necessary to achieve the purposes for which it was collected, without prejudice to any legally required retention periods.
8.2.
After the applicable retention period has expired, personal data will be securely deleted or anonymized.
9. WITHDRAWAL OF CONSENT
9.1.
Data subjects may withdraw their consent for the processing of their personal data at any time by sending a request to:
E-mail: geral@rotasdemacao.pt
Subject: DATA PROTECTION
or by post to:
ARM – Associação Rotas de Mação
Edifício do Agrupamento de Escolas Verde Horizonte
Avenida Dr. Francisco Sá Carneiro, No. 47
6120-724 Mação
Portugal
9.2.
The withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal.
10. CHANGES TO THIS PRIVACY POLICY
10.1.
ARM – Associação Rotas de Mação reserves the right to amend, update, or revise this Privacy Policy at any time.
10.2.
Any changes will be published on the Association’s official website and will take effect from the date of publication.
10.3.
Users are encouraged to review this Privacy Policy periodically to stay informed of any updates.
10.4.
This Privacy Policy was reviewed and updated in Mação, on 20 August 2026, and shall remain in force until further revision or update.
Mação, 20 August 2026
ARM – Associação Rotas de Mação
Data Protection Officer (DPO): Rui Manuel Matos Moleiro