Regulation EU 2016/679 of the European Parliament and of the Council of 27 April 2016

Alignment

The Privacy and Cookies Policy of the Fundação Casa da Música website is included in the Privacy and Data Protection Policy of the Fundação Casa da Música and implements the strategy associated with it in the specific domain of personal data processing of all those who interact with the Foundation’s website.

Objective

The Privacy and Cookies Policy (“Policy”) regulates the processing of personal data of users (hereinafter “User” or “Users”) collected as part of the use of the websites within the Fundação Casa da Música universe (hereinafter “websites”) by the Fundação Casa da Música (“Foundation”), reflecting the institutional concerns of the Foundation regarding privacy and personal data processing in these contexts.

The provision of personal data in the context of browsing the websites implies knowledge and express acceptance of the conditions set out in this Policy.

Data Controller for Personal User Data Processing

The Foundation is responsible for processing the personal data of the Users, and may process such data directly and/or through subcontracted entities for this purpose.

Collection and Processing of Personal Data

Access and general browsing on the websites do not necessarily imply the provision of personal data. Any User can:

> Browse freely on the websites and view the available content, including purchasing tickets without the need to register (in which case only the data necessary for payment processing will be requested); and

> Freely subscribe to the Foundation’s newsletters through the websites, in which case their email address will be requested.

However, the use of certain website functionalities presupposes the creation of an account and/or the provision of a set of personal data elements. In these cases, it will only be possible to enjoy the functionalities, products, and services in question if the user voluntarily provides the personal data requested, as this is strictly necessary for the operations in question.

Purposes of Personal Data Processing

The Foundation processes the personal data of Users for the following purposes:

Website registration

As part of the creation of personal accounts on its websites, including the Casa da Música Account, the Foundation collects a set of personal data that will be processed for the purpose of creating and managing your personal account, based on the relationship established with you at the time of its creation.

For this purpose, the collection of personal data is requested, which is necessary for providing this, without which it will not be possible to complete the registration process, including name, email, and password.

To complete the User’s personal account, the Foundation may also collect other personal data, which may be, depending on the personal account created, of mandatory or optional completion (such as date of birth, gender, additional contact details, nationality, and address).

Purchase of Foundation products (ticketing and online store)

The Foundation will process the personal data necessary for the management of purchases and transactions associated with those made from its websites, based on undertaking pre-contractual diligence and the purchase and sale contract entered into, as well as for compliance with the applicable legal obligations of the Foundation. This personal data mainly refers to the name of the counterparty, email, telephone number, taxpayer identification number (NIF) and address, as well as the purchase amount, payment method and associated data, identification of the establishment and the products/services purchased.

Customer Service

In order to respond to your requests, the Foundation will process the personal data collected, including identification and contact data, as well as the data you share with the Foundation regarding your request. This data will be processed based on the Foundation’s legitimate interest in responding to the questions/requests that any User submits through its websites.

Registration and participation in events held at and/or by the Foundation

The Foundation also processes your personal data for the purpose of processing registrations and participation in events held at and/or by the Foundation (for example, Conferences, Educational Activities, among many others.), including identification and contact data. This data will be processed based on the relationship established through your registration for the event or the Foundation’s legitimate interest in processing your registration, as applicable.

The Foundation may collect image, sound, and voice recordings of participants in events held at and/or by the Foundation, and these recordings may contain personal data and be disclosed by the Foundation through any technical means of dissemination, distribution, or communication.

Disclosure of Foundation activities

With informed consent having been obtained, the Foundation will send newsletters and/or process User personal data for the purpose of profiling for the sending of promotional communications, disclosure of events and campaigns, as well as promotional coupons tailored to interests and preferences regarding Foundation products and services, by automated means such as SMS, email, and telephone.

The User’s profile will be created based on their activity on its websites, in the Foundation’s store and ticket office, as well as other databases accessible to the Foundation, for the purposes of disclosure, sending of institutional information, and presentation of new products and services.

Additionally, the Foundation will send communications to institutional contacts for the purpose of disclosing its institutional activity to relevant entities and individuals, as well as for sending invitations, institutional communications, and other relevant news. In this context, the Foundation processes the following personal data: name, email, telephone number, institution with which it collaborates, and position held. These communications are sent by the Foundation based on its legitimate interest in maintaining contact and disclosing its activities to its institutional contacts.

Processing of spontaneous applications and recruitment processes

The Foundation also processes User personal data for the purpose of processing applications, whether spontaneous or as part of recruitment processes, made through the form available on the websites for this purpose.

The personal data processed is mainly name, email, telephone number, ID card number, date of birth, academic qualifications and professional background, and other data included in the curriculum vitae, such as its image, if it contains your photograph. The personal data collected in this context will be processed for the management of the Foundation’s recruitment processes based on the Foundation’s legitimate interest in processing the voluntarily submitted application, as well as for compliance with the Foundation’s respective legal obligations.

Statistical Analysis

In the context of the purposes mentioned above, and with the User’s informed consent or based on the Foundation’s legitimate interest in managing and evaluating its activities, the collected data, which may be, depending on the purpose in question, of mandatory or optional completion (such as date of birth, gender, level of education, profession, or nationality), may be processed for statistical purposes.

The statistical processing of the collected data is done in an aggregated and non-individual way, not allowing the identification of the User.

Functionality Analysis and Quality Monitoring

Without prejudice to providing information regarding the use of cookies by the Foundation, and, if applicable, with the User’s consent, the Foundation may sporadically conduct surveys to measure the quality of its websites’ functionalities, as well as to monitor their quality and the level of satisfaction of Users of its websites.

Transmission of Personal Data

The Foundation may transmit the collected personal data to partner entities and subcontracted entities for the purposes mentioned above, in accordance with the contracts concluded with them in compliance with the applicable legislation and whenever the principle of necessity is met.

The processing of data by the Foundation and the service providers mentioned above may involve the transfer of personal data to third countries (outside the European Economic Area) if such communication is imposed by the technological resources used. In these cases, the Foundation ensures adequate technical and organizational measures for the security and protection of personal data and access to copies thereof, informing the data subjects of the locations and entities to which they were transferred.

The Foundation may also, to fulfil legal obligations, complete the operations carried out through its websites, or on the basis of the consent provided for this purpose, communicate the data to third parties, whether they are:

> Other entities within the Foundation’s universe;

> Partners, sponsors, or other entities with which the Foundation establishes comparable relationships;

> Financial/payment institutions;

> Competent authorities, according to the law.

Retention of Personal Data

The personal data necessary for the purposes of joining and managing the Casa da Música Account will be retained for as long as the purpose for which it was collected and processed remains current.

Personal data processed for the purpose of processing spontaneous applications will be retained for a period of one year after submission.

When the processing is carried out based on the informed consent of the data subjects, the data will be retained for that purpose until such consent is withdrawn.

Some of the personal data collected at events held at and/or by the Foundation may be retained for as long as necessary for the management of the cultural, intellectual, and artistic heritage of the Foundation.

Cookies

To provide a more personalized and user-friendly service that meets users’ expectations, the Foundation uses its own and third-party cookies to collect and store information which is collected and processed.

A cookie is a text file that is automatically stored on users’ internet browsers (web browsers) when they access certain sites. The cookie allows the Foundation and third parties to identify the internet browser on the server, enabling the storage of information to improve users’ experience, as well as to analyse and review website performance.

Cookies can be classified as session cookies or persistent cookies. Session cookies expire automatically when users close their internet browser. Persistent cookies remain on users’ internet browsers until their expiration date or until they are deleted. Expiration dates vary by cookie, with some expiring after a few minutes, and others expiring after several years.

As part of the use of its websites, the Foundation uses cookies listed on the sites.

Cookies and other immediate tracking technologies do not collect personal data about the user unless voluntarily provided by the user, through the completion of their registration on the website or sending of communications, and these technologies can be used to obtain more information about their website usage.

Each user corresponds to an individual cookie, thus ensuring the privacy and security of the data. The presentation of statistical data is done in an aggregated and non-individual manner, not allowing the identification of the user. Thus, it is possible to evaluate the website’s performance to enable constant updating and improvement, in order to meet user preferences and needs.

Strictly Necessary Cookies

These cookies are used to improve the experience, performance, and security of various site functionalities. For this reason, they are always active. This type of cookie allows the site to identify the user during a browsing session.

Performance Cookies

These cookies collect website usage information to improve the services provided and evaluate website performance. Some of these cookies may be used to test pages or website functionalities, measuring user reactions. These cookies may be proprietary and/or third-party.

Marketing, Advertising, and Social Media Cookies

These are third-party cookies that provide links to social networks and the sharing of multimedia content from the website on those networks. Some of these cookies help tailor advertising outside the website to users’ interests. By disabling these cookies, it will no longer be possible to directly share content on any social network.

Cookie Settings

To set their cookies, users should access “Cookie Settings”, available at the bottom of the Foundation’s Websites homepage. Additionally, internet browsers allow users to manage their cookies. Users can set their devices to accept all cookies, be notified when a cookie is set, or never receive cookies.

Users can disable the cookie function through the web browser at any time, usually in the “Preferences” or “Tools” menu. For more details on configuring your browser, users should consult the “Help” menu.

Users are informed that complete deactivation of cookies may make some or even all website features unavailable.

Security

The Foundation ensures the privacy and security of user data transmission by using SSL (Secure Sockets Layer) encryption for all information exchanged with the Foundation via the internet.

Additionally, the Foundation ensures that it has and will maintain in operation all technical means at its disposal to prevent loss, misuse, alteration, unauthorized access, and improper appropriation of personal data provided or transmitted. Be that as may, it should be noted that circulating data on an open internet network cannot completely eliminate the risk of unauthorized access and use, so users should implement appropriate security measures when browsing our websites.

Whenever payments are made through website servers, the information sent will be encrypted, and additional security measures appropriate to the state of the art and market best practices will be employed.

User Rights

In accordance with applicable law, users may at any time request access to the personal data of which they are the data subjects, as well as its rectification, deletion, or limitation of its processing, the portability of their data, or object to its processing (and in the specific case of profiling creation and as applicable, request clarification on the criteria used and/or object to the creation of the profile).

Users may also obtain confirmation that personal data concerning them is being processed, as well as access to such data. Upon request, a copy of the data being processed may be provided to them.

Under the law, users also have the right to withdraw their consent at any time regarding the processing of their data based on their consent, without prejudice to the validity of processing carried out until that date, based on previously given consent.

Users also have, under the law, the right to request the limitation of processing or portability of their data, subject to legally applicable conditions.

The rights of users referred to above may be exercised through the contact methods provided.

Complaints

Without prejudice to any other administrative or judicial remedy, users have the right to lodge a complaint with the National Data Protection Commission or another competent supervisory authority under the law if they believe that the processing of their personal data by the Foundation violates the legal regime in force at any given time.

Changes to Personal Data Processing Terms

The Foundation may change this Policy at any time. These changes will be duly advertised through its Website pages.

The date of the last update was 20 September 2023.

Clarifications

Questions related to the processing of personal data and the exercise of rights conferred by applicable law and, in particular, referred to in this Policy, may be clarified through the following contacts:

[email protected]
Fundação Casa da Música
Address: Av. da Boavista, 604-610 Porto
Phone: +351 220 120 220