Nova Forum Group and Exponential Institute Unipessoal, Lda.
SCOPE
This privacy policy applies to the processing of personal data of users of the Nova Forum Group (hereinafter, ‘NF’) and Exponential Institute Unipessoal, Lda. (hereinafter, ‘EI’) websites.
WHO ARE WE?
The Nova Forum Group consists of NF association and its subsidiaries and operates under the brands Nova SBE Executive Education and Singularity University Portugal (hereinafter, ‘SUPT’), which is a partner of Singularity Education Group, a California benefit corporation doing business as Singularity University and its affiliates (‘Singularity’, ‘SU’).
Personal data will be processed by NF and EI, which has the mission of contributing to the development of executive education in Portugal.
For the purposes of the applicable legislation on the protection of personal data and, in particular, the General Data Protection Regulation (hereinafter, ‘GDPR’), Exponenential Institute Unipessoal, Lda., collective entity no. 514 978 767 with registered office at Rua da Holanda 1, 2775-405 Carcavelos – shall be the controller of the personal data it processes, following the expressions which are defined and used in the GDPR.
WHAT PERSONAL DATA DO WE PROCESS?
In order to respect the principle of minimization, NF and EI collects and processes personal data strictly necessary for the purposes of the processing. This information can include first name, last name, email address, telephone number, date of birth, organization / company name, job title, job level, industry and country of residence.
Information about the hardware and software of the equipment used to access the website is automatically collected by NF and EI. This information can include the IP, the type of browser used, date and time of access. This information is used by NF and EI to operate the service, maintain quality of the service, and receive statistics about the use of its website.
Should you decide to request a brochure and consent to the processing of your personal data for marketing purposes or should you subscribe to the newsletter, your name and contact details will also be collected for such purposes.
WHAT ARE THE PURPOSES OF THE PROCESSING OF PERSONAL DATA?
The processing of the data identified above allows NF and EI to:
- Disclose relevant information to the website users, namely, institutional information and information about its educational offer;
- Provide the contacts of NF and EI representatives to allow direct contact between them and users who want to know more information about the training offer and news of NF and EI;
- Contact data subjects for marketing purposes if they consent with such data processing.
WHAT IS THE LAWFUL BASIS?
Depending on the purpose of the particular processing, your data will be processed by NF and EI because it is necessary:
- for the purposes of the legitimate interests pursued by NF, EI or third parties, provided that a balance is struck between these interests and the fundamental rights and freedoms of the data subject (art. 6.1 f) of the GDPR).
- for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract, namely if they enter into a NF and EI Program;
- on the basis of the user’s express consent, particularly with regard to navigation data and cookies (art. 6.1 a) of the GDPR).
HOW LONG DO WE KEEP PERSONAL DATA?
In order to ensure that personal data is only kept for as long as necessary, NF and EI have set deadlines for the erasure or anonymization of the processed data.
In cases where it is not possible to predict the time limits for data erasure/anonymization, NF and EI will periodically review the need to retain the data in question.
In certain cases, your data may be kept for longer periods, namely when required by law.
WHAT SECURITY MEASURES HAVE BEEN TAKEN TO PROTECT PERSONAL DATA?
Information security and personal data protection are priorities for NF and EI. For this reason, NF and EI have implemented and maintain a set of technical and organizational measures that, taking into account the most advanced techniques, the costs of implementation, the nature, scope, context and purposes of each processing of personal data, allow to mitigate the risks to the personal data owner and prevent the occurrence of personal data breaches and security incidents in general.
Among others, the following measures stand out in particular:
- Making the necessary efforts to ensure that third parties collaborating with NF and EI guarantee adequate protection of the personal data to which they have access;
- Limitation of access to personal data to specific persons, and only when their contact with such personal data is justified within the scope of their functions;
- Storage of all personal data processed by NF and EI in servers that offer security guarantees, including access control and backups;
TO WHOM DO WE SHARE YOUR DATA?
In the course of carrying out its mission, NF and EI may need to share their users’ personal data with other entities.
Any sharing or transfer of personal data will only be made to third parties who guarantee adequate protection of the personal data to which they have access or who act exclusively under the guidance of NF and EI (subcontractors) and who comply with technical and organizational measures similar to those to which NF and EI are bound.
IS YOUR DATA TRANSFERRED OUTSIDE OF THE EUROPEAN UNION OR TO INTERNATIONAL ORGANIZATIONS?
Yes. It might be necessary, due to protocols or contractual obligations established with entities outside of the European Economic Area, to transfer personal data. In these cases, SingularityU Portugal will adopt appropriate contractual, or other, measures to mitigate the risks of each transfer of personal data. To the extent that personal data is being transferred outside the European Economic Area (EEA), SingularityU Portugal undertakes to comply with Chapter V of the GDPR.
WHAT ARE THE RIGHTS OF THE DATA SUBJECT?
Data subjets may at any time exercise their rights, including requesting further information regarding the processing of their data, rectifying their data, as well as, within certain limits, erasing their data, withdrawing their consent or opposing to the processing of their data, among others, by emailing nf.dpo.rights@novasbe.pt. They may also contact NF’s Data Protection Officer at nf.dpo@novasbe.pt.
Data subjects should be aware that in certain cases (e.g. due to legal requirements) their request may not be fulfilled. In any case, they will be informed of the measures taken in this regard within one month of the request being made.
Data subjects also have the right to lodge a complaint with the supervisory authority, which in Portugal is the Comissão Nacional de Proteção de Dados at https://www.cnpd.pt/
CHANGES TO THIS PRIVACY POLICY
NF and EI will occasionally update this Privacy Policy, so we encourage you to review it periodically to be informed of how NF and EI are protecting your information.
– Page updated on May 29, 2023 –