1. Introduction

This Privacy Policy describes how personal data collected through the ESCXEL Project – Network of Schools of Excellence website is gathered, used and protected.

The ESCXEL Project is committed to protecting users' privacy and ensuring that personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation – GDPR), as well as any applicable national legislation on personal data protection.

2. Data Controller

The data controller responsible for the processing of personal data collected through this website is:

ESCXEL Project – Network of Schools of Excellence
Faculty of Social and Human Sciences
NOVA University Lisbon (NOVA FCSH)
Avenida de Berna, 26-C
1069-061 Lisbon
Portugal

For any matters relating to personal data protection, users may contact the Project through the contact details provided on the website.

3. Personal Data Collected

The website may collect and process the following personal data:

• Name;
• Email address;
• Institution or organisation;
• Data required for access management to the Members' Area;
• Any other information voluntarily provided by users through the forms available on the website.

The ESCXEL Project does not collect or request special categories of personal data through this website.

4. Purposes of Processing

Personal data is collected and processed exclusively for the following purposes:

• Managing enquiries and requests for information;
• Managing newsletter subscriptions and sending communications regarding activities, events, publications and initiatives related to the ESCXEL Project;
• Managing access to the Members' Area;
• Disseminating information about activities, events, publications and initiatives related to the ESCXEL Project;
• Compliance with applicable legal obligations.

Personal data will not be processed for purposes incompatible with those for which it was originally collected.

5. Legal Basis for Processing

Depending on the circumstances, personal data is processed on one or more of the following legal grounds:

• The data subject's consent;
• The performance of steps requested by the data subject;
• Compliance with legal obligations;
• Legitimate interests relating to the management, dissemination and development of the activities of the ESCXEL Project.

6. Data Retention

Personal data will be retained only for as long as necessary to fulfil the purposes for which it was collected or for the period required by law.

Data provided for newsletter subscriptions will be retained while the subscription remains active. Users may unsubscribe at any time through the unsubscribe link included in each communication or by contacting the ESCXEL Project.

Once the applicable retention period has expired, personal data will be securely deleted or anonymised.

7. Recipients of Personal Data

Personal data will not be sold, transferred or disclosed to third parties for commercial purposes.

Data may be accessed by service providers responsible for the technical operation, hosting, maintenance or support of the website, strictly to the extent necessary for the performance of their duties and subject to appropriate confidentiality and data protection safeguards.

8. Rights of Data Subjects

Under applicable legislation, data subjects have the right to:

• Access their personal data;
• Rectify inaccurate or incomplete personal data;
• Request the erasure of personal data where legally applicable;
• Request restriction of processing;
• Object to processing;
• Receive their personal data in a portable format;
• Withdraw consent at any time where processing is based on consent.

Requests to exercise these rights may be submitted through the contact details provided on the website.

9. Data Security

The ESCXEL Project implements appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access, and any other unlawful form of processing.

While every reasonable effort is made to ensure the security of information, no method of electronic transmission or storage can be guaranteed to be completely secure.

10. Changes to this Privacy Policy

The ESCXEL Project reserves the right to update or amend this Privacy Policy whenever necessary.

Any changes will be published on this page and shall take effect from the date of publication.

11. Supervisory Authority

Without prejudice to any other administrative or judicial remedy, data subjects have the right to lodge a complaint with the Portuguese Data Protection Authority (Comissão Nacional de Proteção de Dados – CNPD), the supervisory authority responsible for data protection in Portugal.

12. Contact Information

For any questions regarding this Privacy Policy or the processing of personal data, users may use the contact details provided on the ESCXEL Project website.