NOVA University Lisbon
Scope
This privacy policy applies to the processing of personal data of users of the website www.unl.pt of NOVA University Lisbon (NOVA).
Who are we?
Personal data will be processed by NOVA, legal entity nr. 501559094, headquartered in Campolide Campus, 1099-085 Lisbon.
NOVA is responsible for the processing of personal data it carries out in the sense that such expressions are defined and used in personal data protection legislation.
What are the purposes of personal data processing?
NOVA processes personal data for the following purposes:
1. Disseminate relevant information with website users, including institutional content, informational materials, brochures and events, particularly through newsletters;
2. Receive, analyse and respond to compliments, suggestions and complaints;
3. Receive and respond to requests for information regarding the organisation of events (Rectorate’s Auditorium event rentals)
4. Receive, analyse and respond to user contacts;
5. Organise and manage registrations and participation in promoted events by NOVA;
6. Manage and process course applications.
Any reuse of personal data for a different purpose is assessed in light of the criteria defined in Article 6(4) of the GDPR.
What is the legal basis for the processing of personal data?
The processing of personal data carried out by NOVA is based on the following legal grounds:
• The legitimate interests pursued by NOVA or by third parties, unless the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data prevail;
• The performance of a contract to which the data subject is a party, or for the purpose of carrying out pre contractual steps at the request of the data subject;
• Compliance with NOVA’s legal obligations;
• The public interest pursued by NOVA.
Where none of the remaining legal bases are suitable to support the data processing operation, NOVA will only process personal data if it has obtained the data subject’s consent to process their personal data for specific, explicit, and legitimate purposes.
The data subject may request for more information regarding the criteria used to determine legitimate interest from NOVA, through dpo@unl.pt.
To whom do we transmit personal data?
In the course of its activities, NOVA transmits your personal data to processors, other data controllers and joint controllers. These entities include the following:
• Technology and web hosting service providers – To ensure the development, maintenance, operation, and security of the website, guaranteeing its operability and protection against cybersecurity incidents;
• Organizers and partners of institutional, academic and scientific events (including academics and scientists) – To manage registration and participation in events organized and promoted by NOVA, or in partnership with other institutions;
• Educational institutions and other partners (e.g. research centers) – To manage and process applications for academic programs, including PhDs, master’s degrees, postgraduate programs, and research projects;
• Competent authorities – Whenever required by law or regulation, namely, to comply with legal obligations related to data protection, digital accessibility and information security.
Does NOVA share personal data outside the EEA?
NOVA may transfer personal data to countries outside the European Economic Area (EEA), in accordance with the General Data Protection Regulation. Whenever the destination countries do not offer a level of protection equivalent to that of the European Union, NOVA ensures the implementation of appropriate safeguards, such as verifying the existence of an adequacy decision by the European Commission or, in its absence, the adoption of of Standard Contractual Clauses approved by the Commission.
Further information about these safeguards can be obtained by contacting dpo@unl.pt.
For how long does NOVA keep personal data?
NOVA keeps personal data for the period necessary to fulfil the purposes for which it was collected. To this end, a retention schedule has been defined, which indicates the periods applicable to each purpose. For more information on retention periods, you can contact us through the means indicated in this policy.
What are the rights of data subjects?
The data subject may, at any time, exercise a set of rights, under the terms and conditions provided for by law. These rights include the right to object, often used in relation to certain types of communications, as well as the right of access, erasure, restriction of processing and rectification. In addition, the data subject has the right to withdraw consent at any time, without this affecting the lawfulness of processing carried out on the basis of the consent previously given.
These rights can be exercised by sending an email to privacidade@unl.pt. You may also contact NOVA’s Data Protection Office at dpo@unl.pt.
You also have the right to lodge a complaint with the Portuguese supervisory authority – Comissão Nacional de Proteção de Dados, at https://www.cnpd.pt/.
Changes to the Privacy Policy
This privacy policy may be updated. Data subjects will be informed within a reasonable time, once these changes reveal a fundamental change in the nature of the processing, such as a change in the purposes of the processing, a change in the identity of the controller, or an extension of the categories of recipients.
1 – Nota de privacidade – alumni e doadores
2 – Nota de privacidade – alunos
3 – Nota de privacidade – candidatos