Privacy and Cookies Policy

1. Framework

This Privacy and Cookies Policy establishes the conditions applicable to the processing of personal data and the use of cookies through the wearemadeira.pt website.

Personal data are processed in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation — GDPR), Law No. 58/2019 of 8 August, Law No. 41/2004 of 18 August, as currently amended, and other applicable legislation.

2. Data Controller

The controller responsible for the personal data processed through the wearemadeira.pt website is:

3. Data Protection Officer

The Data Protection Officer (DPO) of the responsible entity is the Director of the Regional Office for Digital Compliance, Data Protection and Cybersecurity (GCPD).

Contact: gcpd@madeira.gov.pt

4. Personal Data Processed

The wearemadeira.pt website can generally be used without the visitor having to directly provide personal data.

In connection with the use and security of the website, technical browsing data may be processed, including IP address, date and time of access, browser type and version, operating system, technical characteristics of the device, pages viewed and information relating to cookie consent preferences.

Data processed through Google Analytics are collected according to the configuration implemented on the website and with the visitor's consent, where required.

When the visitor uses the 'Notify Me' form, the following personal data may be processed: first and last name, email address, date and time of registration, and the language of the website version through which the form was submitted.

5. Purposes of Processing

Data may be processed to ensure the operation and security of the website, provide its content, detect and prevent security incidents, manage cookie preferences and, where consent has been provided, obtain statistical information about website use through Google Analytics and improve its content and operation. The data provided through the 'Nofify Me' form is used to contact the data owner when wearemadeira.pt becomes available.

6. Legal Basis

Processing may be based on compliance with legal obligations, the performance of tasks carried out in the public interest or in the exercise of official authority, where applicable, and on the consent of the data subject where required, particularly for cookies and analytics technologies.

Where processing is based on consent, consent may be withdrawn at any time without affecting the lawfulness of processing carried out before its withdrawal.

The processing of personal data provided through the “Notify Me” form is based on the consent of the data subject, given by explicitly selecting the respective option in the form. Consent can be withdrawn by contacting aim@madeira.gov.pt or through the other contacts listed in this Policy.

7. Google Analytics

The wearemadeira.pt website uses Google Analytics 4 (GA4), a statistical analysis service provided by Google, to understand how visitors use the website and to improve its content and operation.

In its default implementation, Google Analytics may collect information such as the number of users, session statistics, approximate geolocation and browser and device information. GA4 uses, among others, the _ga cookie to distinguish users and sessions. The _ga_<container-id> cookie is used to maintain session state.

Analytics cookies will only be used when the necessary consent has been obtained from the visitor.

8. Cookies

The website uses storage mechanisms and cookies necessary for the operation and security of the infrastructure, as well as local storage intended to save the visitor's preference regarding the use of analytical cookies. With consent, analytical cookies associated with Google Analytics are also used.

Necessary cookies are intended to ensure the operation, security and management of website functionalities. Analytics cookies provide statistical information regarding the use of the website and depend on the visitor's consent where legally required.

9. Cookies Used

10. Cookie Management and Consent

On first access to the website, the visitor may accept or reject non-essential cookies and consult their respective settings.

The visitor may change or withdraw consent at any time through the “Cookie Settings” option available on the website.

Withdrawal of consent does not affect the lawfulness of processing carried out previously on the basis of that consent.

11. Data Sharing and Recipients

Data may be processed by the responsible entity and, where applicable, by service providers acting on its behalf.

In connection with Google Analytics, certain data may be processed by Google as the provider of the statistical analysis service.

The data collected through the 'Notify Me' form is stored in systems managed by the entity responsible for processing it and can only be accessed by properly authorized people, according to the principle of need-to-know.

Where applicable, appropriate measures will be adopted in relation to transfers of personal data to third countries or international organisations in accordance with the GDPR.

12. Data Retention

Personal data are retained only for the period necessary to fulfil the purposes for which they were collected or for the period required by law.

Google Analytics data are retained according to the retention settings configured in the respective property.

The data collected through the “Notify Me” form will be kept until the communication regarding the availability of wearemadeira.pt is sent and, afterwards, only for the strictly necessary period to manage that communication and any related requests, being then deleted, except when retention is required by law.

13. Data Subject Rights

Under the GDPR, the data subject may, where applicable, exercise the rights of access, rectification, erasure, restriction of processing, objection, portability and withdrawal of consent.

Requests may be sent to aim@madeira.gov.pt .

14. Right to Lodge a Complaint

The data subject has the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD), without prejudice to other administrative or judicial remedies available by law.

15. Security

The responsible entity adopts appropriate technical and organisational measures to protect personal data against destruction, loss, alteration, disclosure or unauthorised access.

16. Changes to the Policy

This Policy may be updated whenever changes are introduced to the website, the services used, the cookies, or whenever necessary to reflect legal or regulatory changes.

The most recent version will be available on the website, indicating the respective date of update.

17. Contacts

For matters specifically related to data protection:

gcpd@madeira.gov.pt