Privacy Policy — Caminho da Inovação App

Last updated: 16 September 2026

This Privacy Policy describes how the official application for the Caminho da Inovação event (the "App') collects, uses and protects the personal data of its users, in accordance with the General Data Protection Regulation (GDPR).

1. Data Controller

The data controller responsible for the personal data collected through the App is AdTA — Águas do Tejo Atlântico.

For any questions relating to the protection of your personal data, you may contact our Data Protection Officer (DPO) by email at: dpo.adta@tejoatlantico.pt.

2. Personal Data We Collect

When using the App, we may collect the following data:

  • Registration data: name, email address and telephone number associated with your event registration.
  • Participation data: personalised schedule, selected sessions and check-in/attendance records for event activities.
  • In-app communications: messages exchanged through chat functionality, where available.
  • Device identifier: a technical token generated by your device (device token / UUID), used exclusively to enable us to send you push notifications.

We do not collect location data, payment data or special categories of personal data (for example, health data) through the App.

3. How We Use Your Data

  • To manage your registration and participation in the Caminho da Inovação event;
  • To personalise your schedule and the information displayed in the App;
  • To validate your check-in at event activities;
  • To send you push notifications containing relevant information about the event (for example, schedule changes or important announcements);
  • To ensure the technical operation and security of the App.

4. Legal Basis for Processing

The processing of your data is based on taking steps at your request prior to your participation in the event and on managing your participation in the event. In the case of push notifications, processing is based on your consent, which you may withdraw at any time by disabling notifications in your device settings.

5. Sharing Data with Third Parties

For the delivery of push notifications, the App uses the services of OneSignal, Inc., a specialised mobile notification provider that acts as a data processor on our behalf. Only the technical device identifier (device token) required to deliver notifications is shared with OneSignal and, where applicable, the email address or telephone number associated with your account, exclusively for this purpose.

We do not sell or share your personal data with third parties for third-party advertising or marketing purposes.

6. International Data Transfers

OneSignal, Inc. is based in the United States of America. Transfers of data to this entity are safeguarded through its participation in the EU-U.S. Data Privacy Framework, supplemented by European Union Standard Contractual Clauses (SCCs) as an additional safeguard, ensuring a level of protection equivalent to that required under the GDPR.

7. Data Retention

Your personal data will be retained for one year following the end of the event, after which it will be deleted or anonymised, unless a longer retention period is required by law.

8. Your Rights

Under the GDPR, you have the right at any time to:

  • Access the personal data we hold about you;
  • Request the rectification of inaccurate or incomplete data;
  • Request the erasure of your data (the "right to be forgotten');
  • Request restriction of processing;
  • Object to the processing of your data;
  • Request the portability of your data;
  • Withdraw your consent, without affecting the lawfulness of processing carried out before its withdrawal.

To exercise any of these rights, please contact our DPO at dpo.adta@tejoatlantico.pt.

You also have the right to lodge a complaint with the national supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD) — www.cnpd.pt.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or improper disclosure.

10. Changes to This Policy

This Privacy Policy may be updated periodically. The date of the latest update is always indicated at the top of this page. We recommend that you review this policy regularly.

11. Contact

For any questions regarding this Privacy Policy or the processing of your personal data, please contact us at: dpo.adta@tejoatlantico.pt.