Last updated: 19 August 2026
EMSF Lisboa respects the privacy of its website users and is committed to protecting their personal data in accordance with the General Data Protection Regulation — Regulation (EU) 2016/679 of 27 April 2016 — and applicable Portuguese law.
1. Data controller
The controller responsible for the personal data collected through this website is:
Entity: EMSF-LISBOA.PT
Address: Lisbon — Portugal — European Union
Data protection contact: Contact form
2. Scope of this policy
This Privacy Policy applies to the processing of personal data carried out through the website www.emsf-lisboa.pt, particularly data submitted by users through the contact form.
The website is informational in nature and publishes news, press releases and other content related to the activities of EMSF Lisboa.
3. Personal data collected
When a user completes the contact form, the following data may be collected:
- name;
- email address;
- message subject;
- message content.
The server hosting the website may also automatically record certain technical data, such as the IP address, date and time of access, browser used and pages visited. These logs are used for the security, operation and technical protection of the website.
Users should not submit sensitive personal data or information that is not necessary for handling their request through the contact form.
4. Purposes of processing
Data submitted through the contact form is processed in order to:
- receive, review and reply to submitted messages;
- provide the requested information;
- manage professional or institutional contacts;
- ensure the security and proper operation of the website;
- prevent abusive, fraudulent or unlawful use;
- comply with applicable legal obligations;
- establish, exercise or defend legal claims in judicial or administrative proceedings.
The data will not be used to send advertising or commercial communications unless an appropriate legal basis exists.
5. Legal basis
The processing of personal data submitted through the contact form is based on the legitimate interest of EMSF Lisboa in receiving and responding to communications addressed to it.
Where the contact relates to the provision of a service or to steps taken before entering into a contract, processing may also be necessary in order to take those steps at the request of the data subject.
Certain data may be retained where necessary to comply with legal obligations or to establish, exercise or defend legal claims.
Where processing associated with cookies, identifiers or advertising technologies that are not strictly necessary depends on consent, that consent will be requested through Google’s consent management platform (CMP). Users may refuse or withdraw consent without affecting the lawfulness of processing carried out before withdrawal.
6. Data retention
Data submitted through the contact form will be retained only for the period necessary to respond to the message and follow up on the matter raised.
Once the contact has been concluded, data may be retained for the period necessary to comply with legal obligations or protect the rights of EMSF Lisboa.
Technical server logs will be retained only for the period necessary to ensure security, investigate incidents and maintain the technical operation of the website.
7. Recipients of the data
EMSF Lisboa does not sell or rent personal data. The use of external services may, however, involve the transmission or availability of certain technical and usage data to the relevant providers, as described in this policy and in accordance with the user’s consent choices where applicable.
Within the limits strictly necessary, access may be granted to:
- persons authorised by EMSF Lisboa;
- website hosting providers;
- email service providers;
- IT maintenance or security providers;
- Google and advertising technology providers associated with Google AdSense, when advertising is active and in accordance with the user’s choices;
- public authorities where required by law.
Providers processing personal data on behalf of EMSF Lisboa must act on documented instructions and adopt appropriate security and confidentiality measures.
8. External services, advertising and cookies
The website may display advertising through Google AdSense, an advertising service provided by Google. When AdSense is active, Google and other authorised advertising technology providers may use cookies, identifiers or similar technologies to serve, frequency-cap, measure and protect advertising against fraud and abuse and, where valid consent has been given, to personalise ads.
Third-party vendors, including Google, may use cookies to serve ads based on a user’s previous visits to this website or other websites. Google’s use of advertising cookies enables Google and its partners to serve ads based on those visits, in accordance with the user’s applicable choices and settings.
For users in the European Economic Area, United Kingdom and Switzerland, EMSF Lisboa uses Google’s consent management platform (CMP). The message provides the choices Consent, Do not consent and Manage options. Applicable purposes and advertising technology providers are presented and managed through that CMP.
Consent for purposes that are not strictly necessary may be refused or withdrawn at any time through the privacy and cookie settings mechanism made available on the website.
How Google uses information from sites or apps that use its services
Manage Google ad personalisation
Detailed information about cookies and similar technologies, their purposes and providers is available in the Cookie Policy.
9. International data transfers
Some technology providers, including Google and certain advertising technology providers, may process data outside the European Economic Area.
Where international data transfers occur, the legally recognised safeguards will be applied, including European Commission adequacy decisions, Standard Contractual Clauses or other safeguards recognised under data protection law.
10. Rights of data subjects
Under applicable law, and where the relevant conditions are met, the data subject may exercise the following rights:
- the right to access their personal data;
- the right to rectify inaccurate or incomplete data;
- the right to erasure;
- the right to restriction of processing;
- the right to object to processing;
- the right to data portability, where applicable;
- the right to withdraw consent where processing is based on consent;
- the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects.
To exercise these rights, the data subject should use the contact form available in the website contact section.
The request must make it possible to verify the identity of the applicant and clearly identify the right they wish to exercise.
11. Complaint to the supervisory authority
The data subject has the right to lodge a complaint with the Portuguese supervisory authority:
Portuguese Data Protection Authority — CNPD
Avenida D. Carlos I, no. 134, 1st floor
1200-651 Lisbon
Portugal
Lodging a complaint does not affect the right to pursue other administrative or judicial remedies.
12. Data security
EMSF Lisboa adopts technical and organisational measures designed to protect personal data against unauthorised access, loss, destruction, alteration or improper disclosure.
Despite the measures adopted, no transmission of data over the Internet or storage system can be considered completely free of risk.
13. Automated decision-making
EMSF Lisboa does not use data submitted through the contact form to make decisions based solely on automated processing that produce legal effects or similarly significantly affect the user.
14. Links to external websites
The website may contain links to pages or services operated by third parties.
EMSF Lisboa does not control the privacy policies of those websites, and users should therefore consult the information provided by the respective controllers.
15. Changes to this Privacy Policy
EMSF Lisboa may update this Privacy Policy whenever legal, technical or website operational changes occur.
The updated version will be published on this page together with its revision date.
16. Contact details
For questions relating to this Privacy Policy or the processing of personal data, please contact:
Contact: Contact form
Address: Lisbon — Portugal — European Union