Privacy and Cookies Policy
This Privacy and Cookies Policy regulates the processing of personal data belonging to users (hereinafter “User” or “Users“) collected from Calouste Gulbenkian Foundation websites (hereinafter “Websites”) by the Foundation (hereinafter “Foundation“) and reflects the latter’s institutional commitment and diligences towards the privacy and processing of Users’ personal data.
The provision of personal data for navigation in the Websites is subject to express knowledge and acceptance of this Privacy and Cookies Policy.
Personal data collection and processing
The Foundation is responsible for the processing of personal data belonging to Users and may process such data directly and/or through entities subcontracted for this purpose. Personal data collected from Websites will be processed in the terms described herein for the purpose of providing information, products and functionalities. Said personal data will also be used to comply with the Foundation’s legal and regulatory obligations (including, for example, compliance with its obligations regarding money laundering).
Use of the Website
Website access and navigation in general does not necessarily require the provision of personal data.
However, the use of certain features of the Website requires the creation of an account and the provision of personal data (for example, personal data identifying the User in “My Gulbenkian Account”). In these cases, users will only have access to the functionalities, products and services in question after providing the necessary personal data, which will be processed exclusively in accordance with and for the purposes described herein.
The Foundation collects personal data processed for the purpose of creating and managing the My Gulbenkian Account. Personal data must be supplied for this purpose, otherwise it will not be possible to complete the registration process. Data collected by the Foundation upon registration include the user’s name, e-mail and password. The Foundation may also collect additional optional data, in order to complete the My Gulbenkian Account (namely, date of birth, gender, additional contact details, nationality and address).
Users who are not registered in the My Gulbenkian Account will be able to (i) navigate the Website, view available content, and purchase tickets without registering (in this case, only data necessary to process the payment is requested); and (ii) subscribe to Foundation newsletters through the Website, in which case they will be asked to provide their e-mail address.
Through the Website and upon your explicit consent, the Foundation will process personal data necessary for managing purchases made from the Website and for fulfilling the legal obligations applicable in this context. This personal data refers essentially to the name, e-mail, telephone number, Taxpayer’s No., address, amount, identification of the establishment and products/services purchased.
Information collected will also be processed by the Foundation in order to establish a purchase history for each User and to attribute benefits, discounts and promotions.
Based on personal data collected and with your explicit consent, the Foundation may process such data for the purpose of profiling and designing cultural, promotional and institutional communications specifically suited to your interests and preferences.
Your profile will be created based on information provided through your navigating experience, information made available through the Website and other databases to which the Foundation has access, for the purposes of marketing, institutional communications and presentation of new products, services and initiatives.
Personal data processing
The Foundation processes personal data for the purposes of completing registration on the Website and for managing and using the features available therein, such as processing purchases made by Users, responding to requests for contact or applications, processing applications for grants, and for preparing statistics on how the Foundation can improve the level of its services.
Upon your express consent, your data may also be processed for sending newsletters and institutional information, as well as information on promotions and direct marketing of events, artistic, cultural, educational and scientific activities, solidarity campaigns and other Foundation initiatives through automated SMS and e-maiIs and by telephone.
You may withdraw your consent to data processing for the purposes indicated in the previous paragraph at any time. If you do so, data will no longer be processed for this purpose, although this does not affect the validity of the data processing previously carried out based on your consent.
Personal data disclosure
The Foundation may forward your data to data processors for the purposes mentioned above, pursuant to an agreement signed with said entities.
In compliance with its legal obligations and to conclude the operations carried out through the Website, or on the basis of the consent provided for this purpose, the Foundation may also forward your data to third parties, namely: (i) other Foundation entities, (ii) partners, sponsors or other entities with whom the Foundation establishes similar relationships, (iii) financial/payment institutions; (iv) competent entities, in accordance with the law.
In accordance with applicable law, you may, at any time, request access to your personal data, its rectification, elimination or limited processing, portability, or opposition to its processing (in the specific case of creating profiles and, as applicable, requesting clarification of the criteria used and/or opposing the creation of the profile). You may exercise these rights directly by sending an e-mail or by writing to the Foundation, to the contact details provided in point 9 below.
You may also obtain confirmation that your personal data and access requests to same are processed. A copy of data being processed may be supplied to you at your request.
Pursuant to the law, you have the right to withdraw your consent to processing data for the purposes indicated through the contact details provided.
Pursuant to the law, you also have the right to withdraw your consent at any time, although this does not affect the validity of the data processing previously carried out based on your consent.
You also have the right, under the applicable law, to request limited processing or portability of your data, subject to the legally established conditions. You should therefore send a request using the contact details mentioned in 4.1.
Personal data retention
Personal data necessary for registration purposes will be kept for as long as you wish to keep your My Gulbenkian Account.
Other personal data collected through the Website will be kept until the Foundation has provided the relevant products and information, in order to facilitate purchase/payment processes and information requested by Users. Data collected for the purpose of sending newsletters and other institutional and marketing communications regarding the Foundation will be kept for as long as you consent to this. Once you have withdrawn your consent and/or checked the option to “unsubscribe” in any of our communications, your personal data will be deleted.
The Foundation uses its own and third-party cookies to collect and retain information, so as to provide a more personalized service that meets Users’ expectations.
The Cookie is a text file that is automatically stored in users’ web browsers when they access certain websites. The cookie allows the Foundation and third parties to identify the web browser on the server, store information aimed at improving user experience, and analyze and review Website performance.
Cookies may be classified into two groups: session or persistent. Session cookies expire automatically when you close your web browser. Persistent cookies remain in your web browser until they expire or are eliminated. Expiry dates vary according to the nature and purpose of each cookie, as per the information available through our list of cookies.
Cookies mentioned in this table will be used by the Foundation, strictly for the following purposes:
a) Strictly Necessary Cookies
These cookies allow access to the main Website functionalities and are therefore always active. These include session and security cookies.
b) Performance Cookies
These cookies collect information about the use of the Website to improve the services provided and to evaluate its performance. Cookies may be used to test pages or features by measuring the reaction of users. Performance cookies used on the Website may be our own and/or belong to third parties.
c) Marketing, Advertising and Social Media Cookies
Marketing, Advertising and Social Media cookies are third-party cookies that allow connection to social networks and share multimedia content from our Website on those networks.
Some of these cookies help us adjust advertising outside our website to the interests of users. By disabling these cookies our content will no longer be directly shared in any social network.
Each User is linked to an individual cookie, which ensures data privacy and security. Statistical data is presented in aggregate form, not individually, and does not enable User identification. It is therefore possible to evaluate the performance of the Website, towards its constant improvement, to meet the User’s needs and expectations.
Web browsers allow users to manage their cookies. Users can configure their device settings to accept all cookies, know when a cookie is set or never receive cookies. You can deactivate the cookies function through the web browser at any time, usually in the “Preferences” or “Tools” menu. See the “Help” menu for further details on configuration in your web browser.
Please note that by completely turning cookies off, some/all features of the Website may no longer be available.
For further details on cookies used on the Website, please see our list of cookies.
The Foundation guarantees the privacy and security in the transmission of User data using Secure Sockets Layer (SSL) encryption of all information exchanged with the Foundation on the Internet.
The Foundation also states that it uses and will continue to use all technical means at its disposal to prevent loss, misuse, alteration, unauthorized access or misappropriation of personal data provided or transmitted. In any case, it should be noted that, by circulating data on an open internet network, the risk of unauthorized access and use cannot be completely eliminated, meaning that the User must implement appropriate security measures when browsing the Website.
Without prejudice to any other administrative or judicial action, Users have the right to submit a complaint to the National Data Protection Commission or other competent control authority in accordance with the law, should they consider that the processing of their data by the Foundation at any time breaches the applicable legal framework.
If you have any questions related to the processing of your personal data and the exercise of the rights conferred to you by the applicable law and, in particular, referred to in this Policy, please contact us through the following meanss:
Address: Av. de Berna, 45 A, 1067 – 001, Lisbon
Changes to Personal Data Processing Terms
25 may 2018