Privacy and Data Protection Policy
The protection of personal data is an essential pillar of the FCT's activities, and it adopts the highest standards of transparency, lawfulness and responsibility. This document reflects the organization's practices and commitments to ensure legal compliance, protect the rights of individuals and promote trust in personal data processing processes.
FCT recognizes that privacy is a fundamental right and, as such, strives to implement effective measures to guarantee data protection, ensuring respect for the choices of data subjects.
This policy presents a comprehensive summary of FCT's General Privacy and Data Protection Policy, with the aim of informing all data subjects who interact with this website in detail about the principles, practices and commitments adopted to guarantee the protection and privacy of their personal information. Through this document, FCT reinforces its commitment to transparency and full compliance with applicable regulations, ensuring that all data collected is treated securely, ethically and in strict compliance with current legislation, including the GDPR.
For more extensive and detailed information on the processing of personal data carried out by FCT, we recommend that you consult the General Privacy and Data Protection Policy.
Responsibility for data processing
FCT is responsible for the processing of personal data and has its head office at Av. D. Carlos I, 126, 1249-074 Lisboa, telephone: +351 21 3924300
Data Protection Officer
FCT has appointed a Data Protection Officer, whose contact should be made directly through the e-mail dpo@fct.pt for all questions related to the processing of personal data processed under this Privacy Policy.
Among other duties, the Data Protection Officer monitors the compliance of data processing with the applicable regulations, ensuring compliance with privacy and data protection policies, and is one of the points of contact for clarifying data processing issues.
Data Collection and Use
The data collected and used by FCT mainly includes identification data, such as full name, address (residential or professional), e-mail address and telephone or cell phone number. This personal data is essential for direct contact with data subjects in the context of applications, institutional communications or sending notifications related to ongoing projects and activities.
FCT also processes financial and contractual information necessary to fulfill administrative and financial obligations, such as the tax identification number (NIF), IBAN (International Bank Account Number) for payment processing and information related to contracts and financial obligations associated with services provided or financing granted.
In the context of project applications and Studentships, specific personal data of researchers is also collected, including academic and professional history, detailed curriculum vitae, scientific production (such as publications and research results) and information on affiliation institutions.
Personal data related to scientific and administrative projects and initiatives is also collected, such as project titles, thematic frameworks, scientific and technical reports submitted as part of funded projects. Personal data is processed in order to ensure compliance with FCT's institutional obligations in supporting and funding science.
Processing of data relating to this website
The website collects personal data in different contexts to ensure functionality, security and fulfillment of the specific objectives of interaction with users.
The following data may be collected automatically while browsing the website:
- IP address: To monitor security and prevent unauthorized access.
- Browsing data: This includes pages visited, date and time of access, and type of device (computer, tablet or smartphone).
- Cookies: Used to improve the user experience, record preferences, personalize content and statistics.
Personal data is also collected by filling in forms available on the website.
This data is collected in the following contexts:
Recruitment and Procurement
- Data collected: Full name, e-mail address, telephone number, address, CV (in the case of recruitment), and information relating to the desired service.
- Purpose: To evaluate applications for recruitment or the acquisition of services.
Public consultations
- Data collected: Name, e-mail address and opinions or suggestions submitted.
- Purpose: To collect public participation in relevant issues or projects.
Expressions of Interest
- Data collected: Name, e-mail address, telephone number, description of the interest expressed and any relevant documents attached.
- Purpose: To identify potential stakeholders for collaborations, partnerships or services.
Studentships Applications to Calls and Funding Programs and Projects
- Data collected: Full name, contact details, CV, academic or professional history and additional documents required under the regulations of the Calls.
- Purpose: To evaluate applications according to the criteria defined in the funding programs.
Newsletter subscription
In this case, consent will be requested to send communications related to news, FCT events and other relevant information.
- Users must mark a checkbox indicating that they agree to receive newsletters.
- Consent can be revoked at any time via a link included in all newsletters.
Purposes of Processing
FCT processes personal data in accordance with defined, lawful and transparent purposes, in line with the GDPR. Processing is carried out in accordance with previously established objectives, ensuring the protection of the rights of data subjects and respecting the principles of minimization, necessity and adequacy and is intended for, but not limited to, the following purposes:
- Management of Financing Instruments and Co-financing: This covers the administration of programs, projects and initiatives that receive financial support from the FCT, including application processes, evaluation and monitoring.
- International Relations Management: This relates to establishing and maintaining partnerships and cooperation with foreign organizations and institutions.
- Institutional Communication and Events Management: Focuses on the organization of events, institutional dissemination and interaction with the public and stakeholders.
- Human Resources Management: This involves recruiting, hiring, developing and managing the careers and benefits of FCT employees.
- Purchasing and Public Procurement Management: Refers to the acquisition of goods and services, ensuring compliance with public procurement regulations.
- Document Archive Management: This involves the organization, preservation and access to FCT documents and records.
- People and Asset Security Management: Aims to protect the physical and property of employees, visitors and FCT facilities.
- Management of Information Systems, Computer and Application Infrastructures: This covers the development, maintenance and security of FCT's technological systems and applications.
- Connectivity Management in Scientific and Higher Education Systems: Focuses on integrating and supporting connectivity between scientific and higher education institutions.
- Management of Digital Infrastructures for Science, Technology, R&D and Knowledge: This relates to the creation, maintenance and development of digital platforms to support science and innovation.
Rights of Data Subjects
Data subjects have the right to be informed about the processing of their data, and have the right to demand the correction of any inaccuracies, the deletion of unduly recorded data and the integration of omissions, under the terms of the GDPR and other applicable legislation.
Specifically, they may exercise the following rights, within the limits and exceptions provided for by law:
- right of access: the data subject has the right to obtain confirmation from the FCT (data controller) about the processing of their personal data, as well as to access this data and request information about its processing.
- right to rectification: the data subject has the right to have inaccurate personal data rectified and incomplete data completed.
- right to erasure: the data subject has the right to obtain the erasure of their personal data, without prejudice to the retention periods established.
- right to restriction of processing: the data subject has the right to obtain restriction of processing.
- right of portability: the data subject has the right to receive personal data concerning him/her collected through this website in a structured, commonly used and machine-readable format. You also have the right to have your personal data transmitted directly to other data controllers.
- right to object: the data subject has the right to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them, including profiling. FCT shall cease processing personal data unless it has compelling legitimate grounds for doing so which override the interests, rights and freedoms of the data subject, or for the purposes of asserting, exercising or defending a right in legal proceedings.
- right to withdraw consent: the data subject has the right to withdraw consent at any time, provided that the data is processed on the basis of consent and there is no other legal basis for such processing.
- the right to complain to the National Commission for the Protection of Personal Data (www.cnpd.pt) if you consider that any of the rights listed have been violated.
Bases of Lawfulness for Data Processing
The processing of common data is carried out on the basis of the following conditions of lawfulness:
- Consent: Used when no other legal basis applies, being explicit, informed, free, unequivocal, verifiable and revocable. Examples include subscribing to newsletters or authorizing the capture of images at events.
- Execution of Contract: Necessary for the conclusion or execution of contracts, the acquisition of services and financing, as well as employment or service contracts.
- Compliance with Legal Obligations: Relates to compliance with legal requirements, such as communication of data to public entities and actions for scientific and technological development.
- Public Interest: Applies to tasks of public interest, such as administrative management and video surveillance for security.
- Legitimate Interest: Refers to the need to protect the legitimate interests of FCT or third parties, without harming the rights of the data subjects.
Special categories of data, considered sensitive personal data due to their nature, are subject to more restrictive rules and processing is prohibited, subject to exceptions:
- Explicit Consent: Required in specific cases, always clear and express.
- Legal exceptions: Permitted for fulfillment of obligations or rights, execution of public policies or protection of health and life.
- Vital Interests: Applies in situations where the holder cannot consent, but there is a need for vital protection.
- Public disclosure by the data subject: Data made public by the data subject may be processed.
- Defense of Rights in Lawsuits: Used for legal claims, such as in labor lawsuits.
- Significant Public Interests: Related to public policies, such as combating discrimination or promoting inclusion.
- Public Health: Necessary to protect against health threats or guarantee high safety standards.
- Archive of Public Interest or Scientific Research: Data used for statistical, research or preservation purposes of public interest, with strict anonymization or pseudonymization measures.
Data retention
The retention period for personal data is the one set by law or regulation or, in the absence thereof, the one that proves necessary for the pursuit of the purpose for which it was collected and processed.
When processing for archiving purposes in the public interest, for scientific or historical research purposes, or for statistical purposes, FCT may keep some of the data for longer periods, without prejudice to applying the appropriate guarantees for the rights and freedoms of the data subject, under the terms of the legislation in force.
These guarantees imply the adoption of technical and organizational measures to ensure, in particular, respect for the principle of data minimization and pseudonymization.
General measures adopted to guarantee the security of personal data
To guarantee the protection of personal data, FCT implements strict, internationally recognized rules that apply to all those who legally handle personal data.
Accordingly, technical and organizational security measures are implemented to protect the personal data made available to FCT, as well as the confidentiality, integrity and authenticity of the data processed. Personal data stored by the FCT is encrypted and anonymized whenever possible, and subject to access control based on the principle of least privilege.
Notification and complaint
Without prejudice to sending a direct notification to the FCT, through the contacts available at https://www.fct.pt/contactos, you can complain directly to the National Data Protection Commission(https://www.cnpd.pt), using the contacts provided by this entity for this purpose.
Changes to the privacy policy
This Privacy Policy may be subject to updates, so regular consultation is advised. Changes are deemed to take effect from the date they are posted on this website, with express reference to the date of the update.