Privacy Policy

Privacy Policy
www.albuquerquefoundation.pt
[date last revised: 17/07/2025]

Introduction

Fundação Renato de Albuquerque (the “Foundation” or “we”) values and respects the privacy of users of the website located at albuquerquefoundation.pt (the “Website”) (the “Users” or “you”).

This personal data processing policy of Fundação Renato de Albuquerque (“Privacy Policy”) describes the processing activities of Users’ personal data, namely with regard to:

  • The personal data that the Foundation collects, processes and stores.
  • The grounds and purposes of the processing of personal data.
  • The rights of Users and the way in which they can be exercised.


Acceptance

This Privacy Policy is supplemented by the Terms and Conditions of this Website. By using the Website you acknowledge and accept that your personal data may be processed in accordance with this Privacy Policy and the Terms and Conditions. Accordingly, your use of the Website assumes that you have reviewed and accept the provisions of this Privacy Policy and the other policies and terms and conditions that supplement it.

This Privacy Policy will be subject to revision, with the date of the most recent revision being indicated in the header of this Policy. We will make reasonable efforts to ensure that changes to this policy are posted through the Website and/or other appropriate means. However, we recommend that you periodically consult this policy to stay informed of the terms under which your personal data may or will be processed.

Responsible for data processing

Fundação Renato de Albuquerque, headquartered at Rua do Centro Empresarial, Edifício 6, 2.º, Escritório 13, 2710-693 Sintra, and holder of the legal person identification number 516478451, is responsible for the processing of the personal data of the Users of this Website.

Scope and purposes

The Foundation may process personal data (which includes collection, storage, use or transmission), within the scope and for the purposes of making this Website available to Users, including its contents and functionalities, and exchanging communications with them through forms, messaging system and/or other electronic means incorporated therein and/or supported by it,  For the purposes of:

  • To allow Users to access and use the Website.
  • To enable the User, in accordance with the conditions in force at any given time, to book, reserve and purchase, through this Website and/or the BOL online ticketing platform, tickets to visit the Albuquerque Collection of Chinese Ceramics (“Collection”), including the permanent or temporary exhibitions exhibited at its facilities located at Quinta de São João, and the respective spaces, equipment and museum and non-museum services, such as the library, gardens, shop, café terrace, residences and outdoor and parking areas (“Museum”).
  • Management of subscriptions and user consents, carried out through the Website and/or by other means of communication indicated or made available therein.
  • Receiving, analyzing, and responding to User communications, including requests for information, suggestions, or complaints, when sent through and/or related to the Website.

    Legal basis for data processing
  • The processing of personal data by the Foundation is based, as the case may be:
  • In the execution of a contract or prior diligences related to it, including both the purchase and sale of tickets through the Website and the actual use of the Website, and the functionalities and contents contained therein and/or made available therein.
  • Compliance with a legal obligation, including, in particular, the provision of the electronic complaints book.
  • Legitimate interest of the Foundation, its employees and, in certain cases, of the Users themselves, such as in the case of the use of cookies necessary, and/or for the purposes of exercising, asserting and defending the Foundation’s rights in court, administrative or arbitration.  
  • Consent, in particular, to send promotional communications and newsletters related to the Website and/or when their provision is made through the Website.

    Data processed
  • The personal data we collect includes, for example:
  • Identification and contact data, including, but not limited to, name, date of birth, email address, telephone number, social media profile addresses, among others.
  • Communications exchanged with the User through and/or related to the Website, including addresses, date and time, subject and content.
  • Consents given and withdrawn by Users.
  • Data related to the scheduling of visits and the purchase of tickets, individual or group, namely, data related to transactions or transmitted by the User for the purpose of booking or scheduling visits, including, where applicable, the name and contact details of other visitors in the case of group visits.

    Access, use and navigation data on the Website may also be collected through the use of  essential or necessary cookies. This data does not, however, include personal information that allows the identification of the User. 

In the future, the Foundation may process personal data collected from other features and services of the Website and/or related to the use of these, and which are currently not available / implemented, such as data related to the registration of the User of the Website through the creation of an individual account, and the access of the respective personal area.

Processing of personal data by BOL

This Website allows the User to purchase and sell tickets (individual or group).

  • The purchase of tickets through this Website is ensured by a third party (hereinafter referred to as “BOL”), who the Foundation is responsible for ensuring and managing, through its own ticketing platform and software, the entire process of electronic ticket transactions, including communication with the User, the issuance of invoices,  and payment processing, and whose identity is as follows:
  • Etnaga – Consultores Sistemas de Informação, Lda.  Rua Cesário Verde, 35-E, 2790-491 Queijas, Portugal Legal Person No. 502 669 730

BOL only ensures technical intermediation in the context of ticket sales and invoices, and is therefore not a party to these transactions, nor does it process the personal data of Users who purchase tickets through the respective platform, except to the extent that it acts as a subcontractor and under the responsibility and instructions of the Foundation.

The above does not prevent the User from establishing, separately, an autonomous relationship with BOL, to which the Foundation is unrelated, namely, consenting to the processing of their personal data by BOL for purposes other than the purchase of tickets to visit the Foundation.

The Foundation is unaware of the processing of personal data that BOL may carry out in this context as the controller. BOL will therefore be solely and exclusively responsible for complying with the principles, requirements and obligations related to the processing of personal data that apply to it.

For more information on the processing of personal data for the purpose of buying and selling tickets online, please see:

Data processing by other controllers


For more information on the processing of personal data in the context of the purchase and sale of tickets online, please consult the Digital Policy of the Albuquerque Foundation, available here.   

Data we collect

  • The personal data we collect includes, for example:
  • Identification and contact data, including, but not limited to, name, date of birth, email address, telephone number, social media profile addresses, among others.
  • Communications exchanged with the User through and/or related to the Website, including addresses, date and time, subject and content.
  • Consents given and withdrawn by Users.

The use of  essential or necessary cookies does not imply the collection of personal information that allows the identification of the User.

In the future, it is expected that the Foundation may process personal data collected from certain features and services and/or related to the use thereof, and which are currently not available / implemented, such as data related to:

  • The registration, access and use of a personal area on the Website.
  • The placement and management of booking or pre-booking requests, orders, purchases, payments, returns, complaints, etc., related to tickets and/or other products or services, including the Website.
  • Making, executing and confirming payments online, through the Website and by means provided by payment service providers.
  • Data on access, use and navigation on the Website (including, if and when the Website allows it, information on the user account, access credentials, password recovery information, etc.), personal information collected through cookies subject to the prior consent of the User, and/or obtained from other pages or profiles on the Internet or social networks through which the User accesses or authenticates on the Website.

Age

This Website is intended for use by Users who are of legal age or who, being at least 16 years of age, have been previously and duly authorized by their parental/legal guardian.

Data communication and international transfers

  • The personal data of the holders of personal data will not be communicated to third parties, except in the cases provided for by law and in the following situations:
  • Payment processing, in which case the data subject’s data, including payment data, may be processed directly by the entities responsible for the payment service, its processing or validation.
  • Subscription to ticket insurance, in which case the personal data will be processed by the insurer and policyholder.
  • Consent of the personal data subject.
  • Legal duty of the Foundation to communicate personal data, namely, to tax, judicial or police authorities.
  • When the communication of data is necessary for the assertion, defense or enforcement of a right of the Foundation.
  • The communication is addressed to subcontractors of the Foundation who, within the scope of the services provided, are in charge of the processing of personal data on behalf of and under the responsibility of the Foundation (such as, for example, providers of electronic communications services, operation and operation of the Foundation’s website, sending periodic information, management of newsletters, mail and delivery services,  etc).
  • The personal data processed under the responsibility of the Foundation will not be processed for any purposes other than those mentioned herein nor transferred outside the European Union.

Period of storage of personal data

  • Without prejudice to the rights of the holders of personal data, in particular, the right to withdraw consent to the processing of their personal data, the Foundation will store personal data:
  • As long as such data is necessary for the pursuit of the purposes of collection, such as for the purposes of management and execution of contractual obligations, except when such data must be applied for a longer or specific period.
  • As long as the data subject does not withdraw the consent given.
  • For the legal deadlines or necessary for the fulfillment of legal obligations (when applicable).
  • For the purposes of exercising and defending rights, as long as such exercise or defence is possible or necessary, namely, as long as a final and unappealable judgment has not been handed down and/or there has been no statute of limitations.

Safety

The Foundation makes reasonable efforts to adopt technical and organizational security measures to protect personal data against unauthorized access, including closed systems for access, permissions and physical security of facilities and servers.

To this end, the Foundation has implemented and regularly implements appropriate technical and organizational security measures, as required by law and/or deemed appropriate and reasonable in the Foundation’s sector of activity to protect personal data against unauthorized access, use and disclosure.

We also take reasonable steps to ensure that we only use your personal information as described in this Privacy Policy and that we honor the choices and permissions you have given us.

It is incumbent on users to ensure that they adopt appropriate security measures both in the transmission and storage of personal data, including, for example, protecting their equipment and applications, ensuring that they have a way of recovering the data transmitted or hosted, keeping access credentials confidential, and having appropriate software in place to avoid the risk of intrusion or improper access to their equipment,  systems and data, as well as computer viruses, harmful software and worms.

Rights of personal data subjects

Users and other identified or identifiable natural persons have the right, as holders of personal data, to:

  • To be informed about the processing of your personal data and to have access to it.
  • Obtain the rectification or deletion of inaccurate or outdated personal data.
  • Oppose or demand the limitation of processing, in the cases provided for by law.
  • Withdraw your consent, where the processing is based on it (without such withdrawal prejudice the processing carried out to date).

    In addition, whenever the processing of personal data is carried out by automated means (for example, when the reservation is made through functionalities, forms or applications whose information is automatically processed in the execution of a registration or order), the holders of personal data also enjoy:
  • Right to portability of your personal data, including receiving the personal data in a structured, commonly used and machine-readable format, and to require the transmission of the personal data to another controller you indicate.
  • Right not to be subject to any decision taken solely on the basis of the automated processing of your personal data, including the definition of the Holders of personal data may exercise the above-mentioned rights, free of charge and at any time, in writing, to the email address [email protected], or by postal communication, with the subject “Processing of Personal Data“,  to the following address:
  • Largo da Meia Laranja, 1, 2710-321 — Sintra, Lisbon, Portugal


The exercise of the above-mentioned rights does not exclude the right of the holder of personal data to file a complaint with the National Commission for the Protection of Personal Data, by telephone (+351 213 928 400) or email ([email protected]).

Information and contacts

For more information or clarification of any doubts, you can consult the Terms and Conditions and the Digital Policy of the Albuquerque Foundation or contact us through this Website or by email [email protected].