Privacy Policy
Last updated: 10/04/2026
Thank you for your interest in our website. Protecting our visitors’ data and using it only for the established purposes is our highest priority. Thus, the following policy is designed to inform you about the processing of your personal data and your rights regarding this processing according to the General Data Protection Regulation (“GDPR”) and other data protection laws.
Who can you contact regarding the processing of your personal data?
If you have any doubts regarding the processing of your personal data, you can contact our Data Protection Officer at any time by using the following contact details
Email: dpo@i3s.up.pt
Address: Rua Alfredo Allen 208, 4200-135 Porto, Portugal
Telephone: +351 226 074 900
What personal data are collected/processed during your use of our website?
Your visit to our website will be logged. The IP address currently used by your device, date and time, the browser type and operating system of your device and the pages accessed may be recorded. This data is collected for the purposes of optimising and improving our website, as well as for security issues. The processing is legally based on legitimate interest as it is in our legitimate interest to protect our website and improve its quality.
Cookies
To make your visit to our website more pleasant and to enable the use of certain functions, we may use “cookies” on various pages. Cookies are small text files that are stored on your terminal device. Some of the cookies we use are deleted after the end of the browser session. Other cookies remain on your device and enable our partner companies or us to recognise your browser on your next visit. You can set your browser in such a way that you are informed about the setting of cookies separately and decide individually about their acceptance, or exclude the acceptance of cookies for certain cases or generally.
For more information, see the help function of your Internet browser. To find out more about how we use cookies, you can access our Cookie Policy.
What rights do you have regarding your personal data?
As a data subject, you can contact our Data Protection Officer at any time, using the contact information mentioned above, to make use of your rights. These rights are the following:
- The right to receive information about the data processing and a copy of the processed data;
- The right to demand the rectification of inaccurate data or the completion of incomplete data;
- The right to demand the erasure of personal data;
- The right to demand the restriction of the data processing;
- The right to receive the personal data concerning the data subject in a structured, commonly used and machine-readable format and to request the transmittance of these data to another controller;
- The right to object to the data processing;
- The right to withdraw a given consent at any time to stop a data processing (from then onwards) that is based on your consent.
What is personal data?
Personal data means any type of information that allows a person to be identified, directly or indirectly. Examples of personal data include name, address, telephone number, passport number, and photographs, among others.
Who is responsible for the processing of your personal data?
The organization responsible for the processing of your personal data (i.e. the data controller according to the GDPR) that is collected by the website https://turningmirrors.i3s.up.pt/ is i3S - Instituto de Investigação e Inovação em Saúde da Universidade do Porto, located at Rua Alfredo Allen 208, 4200-135 Porto, Portugal.
Where is your personal data stored?
The data collected by this website is stored at local i3S servers.
Who will have access to your data?
Only specific i3S employees involved in the process of fulfilling the purpose for which the data has been collected will have access to the personal data you submit when using our website. i3S may need to share your data with specific data processors that process personal data on our behalf, in which case, specific data protection clauses are implemented between the partners in order to guarantee that your personal data remains secure. i3S will not disclose your personal data to other entities, unless required by law or by the competent authorities.
For how long is your personal data stored?
Personal data provided to us via our website will only be stored until the purpose for which they were processed has been fulfilled, for the minimum legally required time and/or until the data subjects remove their consent.
How secure is your stored data?
The security of your information is important to us, and we will use reasonable security measures to prevent the loss, misuse or unauthorised alteration of your information under our control. However, given the inherent risks, we cannot guarantee absolute security, and consequently, we cannot ensure or warrant the security of any information you transmit to us, and you do so at your own risk.
With whom can you file a complaint?
As a data subject, you have the right to file a complaint about our use of your information to Comissão Nacional de Proteção de Dados, our competent national supervisory authority, at https://www.cnpd.pt/.
How often is this Privacy Policy updated?
This privacy policy will be reviewed and updated whenever deemed necessary. The date of this document will be updated each time it is altered.