Privacy Policy

Introduction

Feira Viva, Cultura e Desporto, E.M. (hereinafter ‘Feira Viva’) is the entity responsible for processing personal data in connection with the Viagem Medieval website.

Feira Viva, with its registered office at Europarque – Administrative Building, Rua Interior do Europarque, 4520-153 Santa Maria da Feira, undertakes to process personal data in accordance with the General Data Protection Regulation (GDPR), ensuring full respect for the rights of data subjects.

Scope

This Privacy Policy applies to the Viagem Medieval website and describes the processing of personal data carried out in connection with browsing the site and using its features.

In this document, we explain how your personal data is collected, used, stored and protected, as well as the rights you are entitled to under applicable data protection legislation.

Data Controller

Feira Viva, as the data controller responsible for processing your personal data:

  • collects, processes and stores your personal data lawfully, fairly and transparently, in accordance with the principle of good faith and with absolute confidentiality;
  • ensures that your personal data is processed for the purpose(s) for which it was collected or for purposes compatible with the original purpose(s);
  • is committed to implementing a culture of data minimisation, whereby we only collect, use and retain personal data that is strictly necessary;
  • guarantees the security of your personal data, including protection against unauthorised or unlawful processing, and against accidental loss, destruction or damage, by adopting appropriate technical and/or organisational measures;
  • does not disclose or share your personal data for commercial or advertising purposes.

Personal data

Personal data refers to any information relating to an identified or identifiable natural person, either directly or indirectly, in accordance with the GDPR.

In the course of its activities, Feira Viva may process, in particular, the following categories of personal data: identification data (such as name and national or tax identification number, where applicable), contact details (such as address, email address and telephone number), data necessary for registration and participation in activities, events or programmes organised, billing and payment data, where applicable, as well as images and voice recordings collected in the context of events or institutional initiatives, in accordance with the law. Website browsing data may also be processed, including information collected via cookies, in accordance with the terms set out in the respective Cookie Policy.

Feira Viva ensures that it processes only personal data that is adequate, relevant and strictly necessary for the purposes for which it is processed, in accordance with the principle of data minimisation, as provided for in the GDPR.

Processing of personal data

The personal data processed depends on the user’s interaction with the website and may include data provided directly via forms and contact requests, or collected automatically through cookies and similar technologies.

Feira Viva will only use personal data for the purposes initially stated, such as managing the website and improving the browsing experience, managing requests submitted by the user, complying with legal obligations and carrying out its public mission.

If it becomes necessary to process data for purposes other than those initially communicated, Feira Viva will assess the compatibility of these purposes with the original processing and, if necessary, will request new consent.

Image processing

Feira Viva may collect and process images in the course of its activities, events and institutional communications. Wherever possible, wide-angle or distant shots will be used to minimise the direct identification of data subjects. In cases where an image clearly identifies a person, prior consent will be obtained.

Images will be retained only for the period strictly necessary to fulfil the purpose for which they were collected, or for the applicable legal period, and will subsequently be securely deleted.

Data retention

Personal data will be retained only for as long as is necessary to fulfil the purposes for which it was collected.

In the absence of any legal or regulatory requirement, the data will be stored and retained for the minimum period necessary, after which it will be deleted.

Where processing is based on consent, this may be withdrawn at any time, without prejudice to the lawfulness of the processing carried out up to that date. If the purpose justifying the processing ceases to exist or consent is withdrawn, the data will be deleted, unless there is another legal basis justifying its retention.

Sharing of personal data

Personal data may be disclosed, where necessary and proportionate to the identified purposes, to the following categories of recipients:

  • Sendinblue, Inc., trading as Brevo
  • Etnaga - Promoção, Gestão e Produção de Eventos, Lda., trading as Bol

Where processing is carried out by processors, this is governed by a contract ensuring compliance with legal obligations regarding data protection.

Personal data is, as a rule, processed within the European Economic Area (EEA). Should it, exceptionally, be necessary to transfer it to a third country, this will take place on the basis of an adequacy decision by the European Commission or through the adoption of appropriate safeguards provided for in the GDPR.

Personal data security

Feira Viva implements technical and organisational measures to protect personal data against unauthorised access, misuse, loss, destruction or alteration, including: access controls; encryption and backups; firewalls and security protocols; and incident management and response procedures.

In the context of service provision, subcontractors acting on behalf of Feira Viva are bound by a Data Processing Agreement, formalised in writing, which governs the relationship between the parties and ensures compliance with legal obligations regarding data protection.

In the event of a personal data breach, Feira Viva will notify the National Data Protection Commission (CNPD) within a maximum of 72 hours of becoming aware of the breach, in accordance with Article 33 of the GDPR.

Data subjects’ rights

Under applicable legislation, data subjects have the following rights:

  • Right to information: the right to be informed in a clear and transparent manner about the collection and use of their personal data.
  • Right of access: the right to obtain confirmation as to whether or not their personal data is being processed and, where applicable, to access it.
  • Right to rectification: the right to request the correction or updating of your personal data that is inaccurate or incomplete.
  • Right to erasure (“right to be forgotten”): the right to request the erasure of your personal data, in the cases provided for by law.
  • Right to restriction: the right to request the restriction of the processing of your data, in the cases provided for in Article 18 of the GDPR, namely when you contest the accuracy of the data or object to the processing.
  • Right to object: the right to object to the use of your personal data for a specific purpose or purposes, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims.
  • Right to withdraw consent: where processing is based on your consent, you have the right to withdraw it at any time, without affecting the lawfulness of processing carried out prior to such withdrawal.
  • Right to data portability: the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, and to request its transmission to another controller, where technically feasible.
  • Right to be notified of rectification, erasure and restriction: the right to be notified when any rectification, erasure or restriction of your personal data takes place, unless such notification is impossible or would involve a disproportionate effort.
  • Right to lodge a complaint directly with the supervisory authority: the right to lodge a complaint with the supervisory authority (CNPD) if you consider that our use of your personal data does not comply with data protection legislation. However, we would like to resolve any concerns you may have, so please contact us first using the details in the Information and Contact section.

Cookies and similar technologies

The website uses cookies and similar technologies to ensure its technical functioning and to improve the user experience.
For further information, please see our Cookie Policy.

Social Media

Feira Viva uses social media to engage with the public and publicise its activities within the scope of its remit.

As such, the website contains links to these platforms, over which Feira Viva has no control, and the processing of data on these platforms is not covered by this Privacy Policy. Therefore, when you interact with us via social media, your personal data will also be processed by the respective service providers, in accordance with their own privacy policies.

Contact

To contact us regarding any matter relating to your personal data, please use the following details:

  • Data Controller:
    • Email address: comunicacao@feiraviva.com
    • Telephone number: +351 256 330 900
    • Postal address: Europarque – Edifício Administrativo, Rua Interior do Europarque, 4520-153 Santa Maria da Feira
  • Data Protection Officer:
    • Email address: epd@feiraviva.com

Changes to the Privacy Policy

This Privacy Policy may be updated whenever necessary, with the latest version being made available on the Viagem Medieval website.

Latest version

This Privacy Policy was last updated on the 14/05/2026.