The personal data gathered on this website, or when you contact us in connection with the event that presents the Adoption of the "Lisbon Declaration – Digital Democracy with a Purpose" - part of the agenda of the Leading the Digital Decade - High-Level Ministerial Conference, event under the umbrella of Portugal's Presidency of the Council of the European Union, are processed in accordance with the General Data Protection Regulation (GDPR) and other legislation applicable to personal data protection.

In accordance with Articles 13 and 14 of the GDPR, the following statement describes how we process the personal data we receive when you use our website, when you register your support to Lisbon Declaration or when you contact us using the contact form, by email, telephone or post, as well as your rights and how you can exercise them.

1. General Information
1.1. Data Controller
In accordance with Article 4(7) GDPR, the controller of your personal data is:

PORTUGAL DIGITAL Mission Structure

Estrutura de Missão PORTUGAL DIGITAL

Av. da República, 79A

1050-040 Lisboa

Telephone: (+351 21 791 1600)

Email: [email protected]

1.2. Personal data

"Personal data" is understood to mean any information concerning an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, particularly by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person (Article 4(1), GDPR).

1.3. Legal basis for processing

Your personal data are processed in accordance with the following provisions of the GDPR:

• Article 6(1)(a), in situations where the data subject has given his or her consent;

• Article 6(1)(b), if processing is necessary for the performance of a contract or in order to take steps prior to entering into a contract;

• Article 6(1)(c), if processing is necessary for compliance with a legal obligation to which PORTUGAL DIGITAL Mission Structure is subject;

• Article 6(1)(d), if processing is necessary in order to protect the vital interests of the data subject or of another natural person;

• Article 6(1)(e), if processing is necessary for performing a task carried out in the public interest or in the exercise of official authority vested in the controller.

2. Data processed when you visit this website

2.1. Data Collection
Whenever a User accesses this website, data on that activity are temporarily stored and processed in a log.

The tracking tool employed to analyse use of this website is configured to ensure that no personal data are gathered. Users' IP addresses are also anonymous, so that it is not possible to track the activity of natural persons.

Even so, if you do not wish your activity on the website to be recorded and analysed, you can turn on the "Do not track" option on your browser. When you switch this on, your browser sends a message to our website, saying that you do not want your activity to be tracked.

To find out how to do this, type the following into a search engine: "turn on do not track [name of browser used]". Information gathered by tracking tool:

• Access request (filename), date and time of request;

• Browser type and version;

• Browser language;

• Operating system of device used to access website;

• Type, brand and model of device used;

• Screen resolution used;

• Plugins used (such as Flash, Java);

• Original URL (previous page accessed by User);

• IP address (anonymised);

• Country and region from which website is accessed;

• Downloads;

• Clicks;

• Number of forms sent.

2.2. Session Cookies

When you access each page of this website, this generates the so-called temporary cookies, to facilitate browsing. These cookies do not contain personal data and are deleted at the end of each session (when the User leaves the page or closes the browser). This website does not use technology that permits monitoring of User access behaviour.

3. Personal data processed when you contact us

When you contact us, your data and information provided by you are processed in order to contact you and deal with your information request, and also to send you confirmation of your support registry if you have submitted it. These data will be processed and stored, in accordance with the GDPR, for the period of three years.

If the duty to respond to a request from you does not lie within our area of competence and responsibility, your request may be forwarded to the competent authorities without your prior consent, in accordance with the provisions of the GDPR, provided it is legitimate to presume that the forwarding of the matter safeguards your interest and that no sensitive personal data are involved (Article 6(1)(e) GDPR).

4. Your rights

4.1. In your relationship with us and as the data subject, you have the following rights under the GDPR:
• Right of access, Article 15;

• Right to rectification, Article 16;

• Right to erasure ("right to be forgotten"), Article 17;

• Right to restriction of processing, Article 18;

• Right to data portability, Article 20;

• Right to object, Article 21.

NB: The right relating to automated individual decision-making, including profiling (Article 22) has no practical application here. If the processing of your personal data is based on your consent, you have the right to revoke that consent unconditionally at any time. Such withdrawal of consent does not affect the lawfulness of any use based on consent at a date prior to its withdrawal (Article 7(3) GDPR).

In order to exercise any of the rights mentioned above, you should submit a written request to the following contacts: Email: [email protected]

Address:

PORTUGAL DIGITAL Mission Structure Estrutura de Missão PORTUGAL DIGITAL Av. da República, 79A

1050-040 Lisboa

4.2. Application form to support Lisbon Declaration.

The application form provided on this website is intended to register the User ́s support to Lisbon Declaration - initiative carried out under the scope of Portugal’s Presidency of the Council of the European Union in 2021.

The data collection form includes the fields “Name” and “Email”; these are both relevant for the purpose of the service. Therefore:

“Name” – In order to differentiate different supporters and allow accurate accounting of supporters;

“Email” – For the purpose of confirming User ́s support and receiving related communication;

“Country” – In order to identify the country of residence of different supporters and allow accurate accounting of supporters by country.

Following the submission of the form, you will be contacted in order to prove your identity, through your official identification documents (eg. ID Card, Cartão de Cidadão, Passport, etc), which you will be asked to share with PORTUGAL DIGITAL, as well as the documents proving that you have the power to sign on behalf of your organization, if that is the case. After the verification of your identity and powers to bind your organization, the referred documents (or digitalization) will not be archived by PORTUGAL DIGITAL.

In case you sign as a Citizen, your name and email address will not be publicly made available.

The processing of any data gathered for the purpose of newsletter subscriptions is covered by the personal data protection laws in force, namely the Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016, on the protection of individuals concerning personal data processing and the free circulation of that data (General Data Protection Regulation or “GDPR”); PORTUGAL DIGITAL guarantees that this data is processed in accordance with this Regulation.

The veracity, accuracy and timeliness of the data and information supplied by the User are entirely and exclusively their responsibility. By accepting the present Terms of Use, you are hereby stating that the data you have supplied to support Lisbon Declaration belongs to you, is true, accurate and current. The data collected at the moment of registering your support will be processed by PORTUGAL DIGITAL via a platform and will be stored for as long as the registration form is maintained. You may cancel your support at any moment by sending an email to [email protected] indicating your intention to cancel your support. You may also access, amend and delete the data supplied, as detailed above.

4.3. Complaints

If you consider that the processing of your personal data amounts to a breach of the GDPR, you have the right to complain to a supervisory authority (Article 77, GDPR). The Portuguese data protection authority is:

Comissão Nacional de Proteção de Dados

Address: Av. D. Carlos I, 134, 1.o

1200-651 Lisboa – PORTUGAL

Telephone: (+351) 213928400 Fax: (+351) 213976832 Email: [email protected]