Privacy Policy
Last updated: 2 November 2026
This is a courtesy translation. If there is any doubt, the Portuguese version prevails. Read the Portuguese version
1. Who processes your data
Associação Coração Santola, tax ID (NIPC) 519158296, registered office at Rua António Sérgio, Lote 4, n.º 19, Bairro Novo Pinhal da Areia, 2860-599 Moita, Portugal.
Contact for privacy matters: associacaosantola@gmail.com.
2. What data we collect and why
| Situation | Data | Purpose | Legal basis |
|---|---|---|---|
| Contact form | Name, email, message, tax number (optional, for a donation receipt) | Reply to your request and issue a receipt | Steps taken at your request; legal obligation (receipts) |
| Joining as a member | Name, email, phone (optional), tax number (optional), amount and frequency of the membership fee | Manage the membership and collect the fee | Performance of the membership contract |
| Payments | Payment details | Collect membership fees | Performance of the contract |
Payments are made on Stripe's secure page. The association does not see or store your full card or bank account details.
3. Who we share it with
Only with the providers that supply us with services, and only as far as necessary:
- Stripe Payments Europe, Ltd. (Ireland): payments and membership fee management
- Vercel Inc.: website hosting
- Resend: sending the website's emails
- Accountant, when needed to meet tax obligations
When any of these providers processes data outside the European Economic Area, the transfer relies on the safeguards provided for in the GDPR (an adequacy decision or the European Commission's standard contractual clauses).
We do not sell or hand over your data for third-party marketing.
4. How long we keep it
- Contact requests: 2 years after the last contact
- Member data: for as long as you are a member and, afterwards, only what is needed for legal obligations
- Invoices and receipts: for the legal retention period for tax documents (10 years)
5. Your rights
You can request access to, rectification, erasure, restriction or portability of your data, and object to its processing, using the email in section 1. We reply within one month at most.
You can also lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (www.cnpd.pt).
7. Changes
If this policy changes, we will publish the new version here with the update date.