This Privacy Policy explains how the personal data of users of the website www.spcpre55.pt and of participants, potential participants, speakers, authors, sponsors, partners or other interested parties in the Annual Meeting of the Portuguese Society of Plastic, Reconstructive and Aesthetic Surgery are collected, used, stored and protected.
The protection of personal data is a priority. Data processing is carried out in accordance with the General Data Protection Regulation — Regulation (EU) 2016/679 — and with Law No. 58/2019, of August 8, which ensures the implementation of the GDPR in the Portuguese legal system.
Responsible for data processing
For the purposes of this Policy, the entity identified as responsible for managing the Site is:
Lab52, Unipessoal Lda.
Rua Oliveira Monteiro, 358
Porto, Portugal
Email: geral@lab52.pt
Other organizing, scientific, institutional, or partner entities may be involved in the organization of the event. Where applicable, these entities may act as joint controllers or as subcontractors, in accordance with the GDPR.
Scope of the Privacy Policy
This Policy applies to the processing of personal data carried out through the Site and in the context of the organization, management, communication and execution of the event.
This includes, among other things, data collected through:
- contact forms;
- registration forms;
- forms for submitting papers, abstracts, or summaries;
- subscription to newsletters or informational communications;
- requests for information;
- billing processes;
- management of participants, speakers, authors, sponsors, and partners;
- photographic, video, or audiovisual records of the event, when applicable.
Personal data we may collect
Depending on the purpose and the form used, the following personal data may be collected:
- full name;
- professional name;
- profession;
- entity or workplace;
- phone or mobile number;
- email address;
- tax identification number;
- address, postal code, city and country;
- billing information, including name or company, NIF (Portuguese tax ID), and address;
- registration model or category;
- typewriter number, when applicable;
- dietary restrictions, including vegetarian, vegan options, intolerances, or other indications provided by the participant;
- data contained in submitted works, abstracts, or communications;
- data contained in submitted works, abstracts, or communications;
- imagem, voz ou outros elementos de identificação captados durante o evento, quando aplicável;
- technical data associated with browsing the Site, such as IP address, browser type, device, pages visited and cookies, in accordance with the Cookie Policy.
Special categories of data
Some information provided in the context of dietary restrictions, intolerances, or specific needs may, in certain cases, reveal health data or other specially protected data.
This data will only be processed when necessary to ensure proper participation in the event, namely for meal management, accessibility, security, or logistical adaptation, and only to the extent strictly necessary for that purpose.
Finalidades do tratamento
Personal data may be processed for the following purposes:
- managing contact or information requests;
- managing event registrations;
- confirmation of registration and sending of operational communications;
- management of payments, receipts, invoices, and accounting/tax obligations;
- logistical organization of the event;
- accreditation management, check-in, attendance and certificates;
- management of submission, evaluation and presentation of scientific papers;
- communication with participants, speakers, authors, moderators, sponsors, and partners;
- sending relevant information about the event;
- sending newsletters, institutional communications, or disseminating information about future initiatives, when there is consent or other applicable legal basis;
- production of internal statistics, participation reports, and event evaluation;
- capturing and using images or videos for institutional and promotional purposes, when applicable;
- compliance with legal obligations;
- defending the legitimate rights or interests of the responsible entity.
Legal basis for treatment
The processing of personal data may be based on the following legal grounds:
- Contract execution or pre-contractual due diligence, especially to manage registrations, event participation, payments, and certificate issuance;
- compliance with legal obligations, namely tax, accounting and legal obligations;
- consent, in particular for sending newsletters, marketing communications or processing certain categories of data when required;
- legitimate interests, namely for administrative management, security, fraud prevention, service improvement, institutional communication and defense of rights;
- Public or scientific interest, when applicable to the academic, scientific or educational context of the event.
When processing is based on consent, the data subject may withdraw their consent at any time, without affecting the legality of the processing carried out up to that date.
Data from minors
The Site and the event are generally intended for professionals, students, researchers, institutional entities, or adult participants.
If data from minors is collected, processing will only be carried out when there is an adequate legal basis and, when necessary, authorization from those with parental responsibility or legal guardianship.
Sharing data with third parties
Personal data may be shared with third parties only when necessary for the purposes described in this Policy, namely:
- organizers and scientific committees of the event;
- entities responsible for managing registrations;
- providers of technology platforms, web hosting, email marketing, forms, CRM, or event management;
- providers of accounting, billing or administrative support services;
- catering providers, only when necessary for managing dietary restrictions;
- entities responsible for accreditation, check-in, certificates or logistical support;
- public, administrative, tax, judicial or regulatory entities, when legally required;
- sponsors or partners, only when there is an adequate legal basis or consent from the data subject.
Data sharing will be limited to what is strictly necessary and, where applicable, regulated by data processing contracts or agreements.
International data transfers
Whenever possible, data will be processed within the European Economic Area.
If it becomes necessary to use service providers located outside the European Economic Area, appropriate safeguards will be adopted, including adequacy decisions, standard contractual clauses approved by the European Commission, or other mechanisms provided for in the GDPR.
Data retention period
Personal data will be kept only for the period necessary to fulfill the purposes for which it was collected, without prejudice to legal retention periods.
As a rule:
- contact details and information requests: for the period necessary to respond to and follow up on the request;
- Registration and participation data: for the period necessary for event management and certificate issuance;
- billing data: for the period legally required to comply with tax and accounting obligations;
- data for submission of papers: for the period necessary for evaluation, presentation, publication or scientific archiving of the event;
- data for newsletter: until withdrawal of consent or request to cancel the subscription;
- images and videos: for the period necessary for institutional, promotional or archival purposes, unless the data subject legitimately objects.
Data subject rights
Under the GDPR, the data subject may exercise the following rights:
- right of access;
- right of rectification;
- right to erasure of data;
- right to limitation of treatment;
- right to object;
- right to data portability;
- right to withdraw consent, when the processing is based on consent;
- right to lodge a complaint with the competent supervisory authority.
The exercise of these rights can be requested via email:
geral@lab52.pt
The request must be sufficiently clear and allow for the identification of the data subject. Additional information may be requested when necessary to confirm the applicant’s identity.
Complaint to the supervisory authority
If you believe that the processing of your personal data violates applicable law, you may file a complaint with:
National Data Protection Commission — CNPD
Website: www.cnpd.pt
Address: Av. D. Carlos I, 134, 1st floor, 1200-651 Lisbon
Data security
Appropriate technical and organizational measures are adopted to protect personal data against loss, destruction, alteration, disclosure, unauthorized access or unlawful processing.
Despite the measures taken, data transmission over the internet is not entirely risk-free. Users should also adopt good security practices, namely the use of secure devices, reliable networks, and protected credentials.
Cookies and similar technologies
This website uses cookies and similar technologies to ensure its functionality, improve the browsing experience and, when authorized, collect statistical or marketing data.
For more information, please see the Cookie Policy available on this website.
Marketing communications and newsletter
The sending of newsletters or promotional communications will only be carried out with the consent of the data subject or other applicable legal basis.
The data subject may unsubscribe or withdraw their consent at any time via the link provided in the communications sent or by contacting geral@lab52.pt.
Changes to the Privacy Policy
This Privacy Policy may be updated at any time to reflect legal, technical, organizational, or functional changes.
Changes will be posted on this page, indicating the date of the last update.
Contacts
For any questions related to this Privacy Policy or the processing of your personal data, you can contact:
Lab52, Unipessoal Lda.
Rua Oliveira Monteiro, 358
Porto, Portugal
Email: geral@lab52.pt
