Privacy Policy

Privacy Policy
www.albuquerquefoundation.pt
[date last revised: 02/03/2026]

Introduction

Fundação Renato de Albuquerque (the “Foundation” or “we”) values and respects the privacy of users of the website located at albuquerquefoundation.pt (the “Website”) (the “Users” or “you”).

This personal data processing policy of Fundação Renato de Albuquerque (“Privacy Policy”) describes the processing activities of Users’ personal data, namely with regard to:

  • The personal data that the Foundation collects, processes and stores.
  • The grounds and purposes of the processing of personal data.
  • The rights of Users and the way in which they can be exercised.


Acceptance

This Privacy Policy is supplemented by the Terms and Conditions of this Website. By using the Website you acknowledge and accept that your personal data may be processed in accordance with this Privacy Policy and the Terms and Conditions. Accordingly, your use of the Website assumes that you have reviewed and accept the provisions of this Privacy Policy and the other policies and terms and conditions that supplement it.

This Privacy Policy will be subject to revision, with the date of the most recent revision being indicated in the header of this Policy. We will make reasonable efforts to ensure that changes to this policy are posted through the Website and/or other appropriate means. However, we recommend that you periodically consult this policy to stay informed of the terms under which your personal data may or will be processed.

Responsible for data processing

Fundação Renato de Albuquerque, headquartered at Rua do Centro Empresarial, Edifício 6, 2.º, Escritório 13, 2710-693 Sintra, and holder of the legal person identification number 516478451, is responsible for the processing of the personal data of the Users of this Website.

Scope and purposes

The Foundation may process personal data (which includes collection, storage, use or transmission), within the scope and for the purposes of making this Website available to Users, including its contents and functionalities, and exchanging communications with them through forms, messaging system and/or other electronic means incorporated therein and/or supported by it,  For the purposes of:

  • To allow Users to access and use the Website.
  • To enable the User, in accordance with the conditions in force at any given time, to book, reserve and purchase, through this Website and/or the BOL online ticketing platform, tickets to visit the Albuquerque Collection of Chinese Ceramics (“Collection”), including the permanent or temporary exhibitions exhibited at its facilities located at Quinta de São João, and the respective spaces, equipment and museum and non-museum services, such as the library, gardens, shop, café terrace, residences and outdoor and parking areas (“Museum”).
  • Management of subscriptions and user consents, carried out through the Website and/or by other means of communication indicated or made available therein.
  • Receiving, analyzing, and responding to User communications, including requests for information, suggestions, or complaints, when sent through and/or related to the Website

    Legal basis for data processing

    The processing of personal data by the Foundation is based, as the case may be:

  • In the execution of a contract or prior diligences related to it, including both the purchase and sale of tickets through the Website and the actual use of the Website, and the functionalities and contents contained therein and/or made available therein.
  • Compliance with a legal obligation, including, in particular, the provision of the electronic complaints book.
  • Legitimate interest of the Foundation, its employees and, in certain cases, of the Users themselves, such as in the case of the use of cookies necessary, and/or for the purposes of exercising, asserting and defending the Foundation’s rights in court, administrative or arbitration. 
  • Consent, namely for the sending of promotional communications and newsletters related to the Website and/or when their provision is made through the Website, as well as for the use of analytical cookies and statistical analysis tools.

    Data processed

    The personal data we collect includes, for example:

  • Identification and contact data, including, but not limited to, name, date of birth, email address, telephone number, social media profile addresses, among others.
  • Communications exchanged with the User through and/or related to the Website, including addresses, date and time, subject and content.
  • Consents given and withdrawn by Users.
  • Data related to the scheduling of visits and the purchase of tickets, individual or group, namely, data related to transactions or transmitted by the User for the purpose of booking or scheduling visits, including, where applicable, the name and contact details of other visitors in the case of group visits.

    Access, use and navigation data on the Website may also be collected through the use of essential or necessary cookies. This data does not, however, include personal information that allows the identification of the User. 
     

In the future, the Foundation may process personal data collected from other features and services of the Website and/or related to the use of these, and which are currently not available / implemented, such as data related to the registration of the User of the Website through the creation of an individual account, and the access of the respective personal area. Processing of personal data by BOL.

Processing of Personal Data by BOL

This Website allows the User to purchase and sell tickets (individual or group).

The purchase of tickets through this Website is ensured by a third party (hereinafter referred to as “BOL”), who the Foundation is responsible for ensuring and managing, through its own ticketing platform and software, the entire process of electronic ticket transactions, including communication with the User, the issuance of invoices,  and payment processing, and whose identity is as follows:

  • Etnaga – Consultores Sistemas de Informação, Lda.  Rua Cesário Verde, 35-E, 2790-491 Queijas, Portugal Legal Person No. 502 669 730

BOL only ensures technical intermediation in the context of ticket sales and invoices, and is therefore not a party to these transactions, nor does it process the personal data of Users who purchase tickets through the respective platform, except to the extent that it acts as a subcontractor and under the responsibility and instructions of the Foundation.

The above does not prevent the User from establishing, separately, an autonomous relationship with BOL, to which the Foundation is unrelated, namely, consenting to the processing of their personal data by BOL for purposes other than the purchase of tickets to visit the Foundation.

The Foundation is unaware of the processing of personal data that BOL may carry out in this context as the controller. BOL will therefore be solely and exclusively responsible for complying with the principles, requirements and obligations related to the processing of personal data that apply to it.

For more information on the processing of personal data for the purpose of buying and selling tickets online, please see:

Processing of Data by Other Controllers


For more information on the processing of personal data in the context of the purchase and sale of tickets online, please consult the Digital Policy of the Albuquerque Foundation, available here.   

Collected data

The personal data we collect includes, for example:

  • Identification and contact data, including, but not limited to, name, date of birth, email address, telephone number, social media profile addresses, among others.
  • Communications exchanged with the User through and/or related to the Website, including addresses, date and time, subject and content.
  • Consents given and withdrawn by Users.


The use of essential or necessary cookies does not imply the collection of personal information that allows the identification of the User. In the future, it is expected that the Foundation may process personal data collected from certain features and services and/or related to the use thereof, and which are currently not available / implemented, such as data related to:

  • The registration, access and use of a personal area on the Website.
  • The placement and management of booking or pre-booking requests, orders, purchases, payments, returns, complaints, etc., related to tickets and/or other products or services, including the Website.
  • Making, executing and confirming payments online, through the Website and by means provided by payment service providers.
  • Data on access, use and navigation on the Website (including, if and when the Website allows it, information on the user account, access credentials, password recovery information, etc.), personal information collected through cookies subject to the prior consent of the User, and/or obtained from other pages or profiles on the Internet or social networks through which the User accesses or authenticates on the Website.

Age

This Website is intended for use by Users who are of legal age or who, being at least 16 years of age, have been previously and duly authorized by their parental/legal guardian.

Data communication and international transfers

The personal data of data subjects will not be disclosed to third parties, except as provided by law and in the following situations:

  • Payment processing, in which case the data subject’s personal data, including payment details, may be processed directly by the entities responsible for providing, processing, or validating the payment service.
  • Subscription of a ticket insurance, in which case the personal data will be processed by the insurance company and the policyholder.
  • Where the data subject has given consent to such disclosure.
  • Where the Foundation has a legal obligation to disclose personal data, namely to tax, judicial, or law‑enforcement authorities.
  • Where the disclosure is necessary for the establishment, exercise, or defence of a right of the Foundation.
  • Where the disclosure is made to processors engaged by the Foundation, who, within the scope of the services provided, are entrusted with processing personal data on behalf of and under the responsibility of the Foundation (such as providers of electronic communications services, website hosting and operation, distribution of periodic information, newsletter management, postal or delivery services, etc.).

Certain services used by the Foundation – namely statistical analysis tools and website operation tools – may involve the transfer of data to countries outside the European Union, including the United States of America, when necessary to ensure their functioning or technical support.

When such transfers occur, they will be carried out:

  • Under adequacy decisions adopted by the European Commission, including the EU–US Data Privacy Framework, applicable to certified entities in the United States; or
  • Through the implementation of appropriate safeguards under Articles 46 et seq. of the GDPR, such as Standard Contractual Clauses approved by the European Commission and additional technical and organizational measures ensuring an essentially equivalent level of protection.

The Foundation ensures that personal data will not be transferred to third countries that do not guarantee an adequate level of protection or that do not provide appropriate safeguards, in accordance with the GDPR.

Tools Used on the Website

The Foundation uses certain analytical and monitoring tools with the purpose of understanding how users interact with the website, improving its performance, and optimizing the content made available. The use of such tools occurs only with the prior and explicit consent of the data subject, obtained through the cookie banner.

Google Analytics 4 (GA4)

The website uses the Google Analytics 4 service, provided by Google LLC, which enables the statistical analysis of how users interact with the website, including pages visited, time spent, actions performed, and browsing patterns.

GA4 operates by automatically collecting information about how the user navigates the website, using small files stored on the user’s device (first‑party cookies), which allow repeated visits to be recognised and website usage to be understood. All data are processed in a pseudonymised manner and do not directly identify the user.

The information collected includes technical data about the device, the browsing path within the website, and interactions performed (such as pages viewed, time spent, and clicks). This information is processed in an aggregated form exclusively for statistical purposes.

For more details on how Google Analytics works, the user may consult the official documentation: https://support.google.com/analytics.

The user may disable Google Analytics in two ways: by rejecting analytical cookies through the cookie banner, or by installing Google’s official opt‑out add‑on: Google Analytics Opt‑out Browser Add‑on Download Page

For more details on the use of cookies, please consult our Cookie Policy.

Retention Period of Personal Data

Without prejudice to the rights of data subjects, in particular the right to withdraw consent for the processing of their personal data, the Foundation will retain personal data:

  • As long as such data are necessary for the purposes for which they were collected, such as for the management and performance of contractual obligations, unless longer or specific retention periods apply.
  • As long as the data subject does not withdraw the consent provided.
  • For the legal periods or those required to comply with legal obligations (where applicable).
  • For the purposes of exercising or defending rights, for as long as such exercise or defence is possible or necessary, namely until a final and unappealable decision has been issued and/or until limitation periods have expired.

Safety

The Foundation makes reasonable efforts to adopt technical and organizational security measures to protect personal data against unauthorized access, including closed systems for access, permissions and physical security of facilities and servers.

To this end, the Foundation has implemented and regularly implements appropriate technical and organizational security measures, as required by law and/or deemed appropriate and reasonable in the Foundation’s sector of activity to protect personal data against unauthorized access, use and disclosure.

We also take reasonable steps to ensure that we only use your personal information as described in this Privacy Policy and that we honor the choices and permissions you have given us.

It is incumbent on users to ensure that they adopt appropriate security measures both in the transmission and storage of personal data, including, for example, protecting their equipment and applications, ensuring that they have a way of recovering the data transmitted or hosted, keeping access credentials confidential, and having appropriate software in place to avoid the risk of intrusion or improper access to their equipment,  systems and data, as well as computer viruses, harmful software and worms.

Rights of personal data subjects

Users and other identified or identifiable natural persons have the right, as holders of personal data, to:

  • To be informed about the processing of your personal data and to have access to it.
  • Obtain the rectification or deletion of inaccurate or outdated personal data.
  • Oppose or demand the limitation of processing, in the cases provided for by law.
  • Withdraw your consent, where the processing is based on it (without such withdrawal prejudice the processing carried out to date).

    In addition, whenever the processing of personal data is carried out by automated means (for example, when the reservation is made through functionalities, forms or applications whose information is automatically processed in the execution of a registration or order), the holders of personal data also enjoy:

  • Right to portability of your personal data, including receiving the personal data in a structured, commonly used and machine-readable format, and to require the transmission of the personal data to another controller you indicate.
  • Right not to be subject to any decision taken solely on the basis of the automated processing of your personal data, including the definition of the Holders of personal data may exercise the above-mentioned rights, free of charge and at any time, in writing, to the email address [email protected], or by postal communication, with the subject “Processing of Personal Data“,  to the following address:

  • Largo da Meia Laranja, 1, 2710-321 — Sintra, Lisbon, Portugal


The exercise of the above-mentioned rights does not exclude the right of the holder of personal data to file a complaint with the National Commission for the Protection of Personal Data, by telephone (+351 213 928 400) or email ([email protected]).

Information and contacts

For more information or clarification of any doubts, you can consult the Terms and Conditions and the Digital Policy of the Albuquerque Foundation or contact us through this Website or by email [email protected].