Your privacy is important to us. This policy explains what personal data we collect, how we use it, and the legal basis for its processing. We only request the information necessary for the services you use, we never share it with third parties—except when required by law or with your explicit consent—and we do not use it for purposes other than those stated.
Data Controller
DAMA Portugal is the data controller under EU Regulation (EU) 2016/679 (GDPR) and applicable national data protection law.
Email: [Insert contact email]
What Data We Collect & Why
| Processing Activity | Data Collected | Purpose | Legal Basis |
| User registration | Name, email, phone | Create user account | User consent |
| Membership applications | Name, address, email, phone, national ID | Membership administration | User consent |
| Event registrations | Name, email, phone | Register for events | User consent |
| Mailing list subscriptions | Send updates/newsletters | User consent | |
| Contractual and administrative purposes | Name, contact details, signature data | Administrative, fiscal processing | User consent & contract execution |
[TO BE REVIEWED] Cookies & Analytics
We use cookies—some essential for functionality, others for analytics and marketing—managed via a consent banner. Data from these cookies (e.g. IP, browsing behavior) may be processed through Google Analytics, HubSpot, and email-marketing platforms, per GDPR rules.
Data Retention
We retain your personal data while our relationship exists or until you withdraw consent. Afterwards, data is kept only as long as required by applicable law.
Data Sharing
We may transfer your data:
- To law enforcement upon legal request.
- To legitimate partners (sponsors, event organisers, training providers), only for purposes covered by GDPR’s legitimate interest provisions
- To our hosting and service providers under processing agreements.
[TO BE REVIEWED] Data Geo Boundaries
Where applicable, data may be transferred to processors located outside the EU (e.g. US-based services like Google Analytics, HubSpot, Rocket Science Group). We ensure adequate safeguards are in place.
Data Subject Rights
Under GDPR, you have the right to:
- Access, correct, delete your personal information
- Restrict or object to processing
- Data portability
- Withdraw consent at any time
Security Measures
We implement technical and organizational measures to protect your data against unauthorized access, accidental loss, or destruction .
Social Media
If you interact with DAMA Portugal via social networks, data processing is subject both to this policy and to those platforms’ terms. We manage your information appropriately—but we are not responsible for third-party platform security.
Changes to This Policy
We may update this policy periodically to reflect legal or operational changes. The updated version will be published on this website.
Last updated: July 8, 2025