Quality Policy

Privacy Policy

Introduction

The Liga Portuguesa de Futebol Profissional (Liga Portugal), a non-profit, public-utility collective, is committed to protecting the privacy of personal data. Personal data is collected and processed in accordance with the Personal Data Protection legislation, namely Regulation (EU) 2016/679 of the European Parliament and the Council of 27 April 2016 and other applicable legislation.

Liga Portugal follows best practices in terms of security, respecting privacy and protecting personal data.

The definitions and terms used in this document were taken from Articles 4 and 5 of Regulation (EU) 2016/679.

Definition of Personal Data

In accordance with Regulation (EU) 2016/679 of the European Parliament and the Council of 27 April 2016 (hereinafter referred to as the RGPD) on the Protection of Individuals with regard to the Processing of Personal Data and the Free Movement of these Data, the definition of personal data includes any information relating to an identified or identifiable natural person, directly or indirectly, such as name, address, email, age, marital status, identification number, electronic identifiers and specific elements of physical, genetic, economic, cultural or social identity of that natural person.

Data Controller

Within the scope of the RGPD, the Controller is the natural or legal person, public authority, agency or other body that determines, individually or jointly with others, the purposes and means of processing personal data; where the purposes and means of such processing are determined by the law of the Union or of a Member State, the controller or the specific criteria applicable to their appointment may be determined by Union or Member State law.

Liga Portugal controls the processing of the personal data under its responsibility.

Processing of Personal Data

The personal data collected by Liga Portugal is limited to that which is necessary for managing the activities under their charge, including any activities relating to the promotion, development and improvement of existing or new activities, which may involve several collective or singular entities or private individuals.

Some of the further processing carried out by Liga Portugal for purposes of public interest archives, for scientific or historical research or for statistical purposes is not considered incompatible with the initial purposes. In some cases, "anonymization" or "pseudonymization" techniques may be used to reduce the risk to data subjects.

Where there is a need to obtain consent from the data subject, more specific information regarding the purpose, use, storage and possible transfer of collected personal data to third parties will be provided at the time of data collection.

Principles Applied to the Processing of Personal Data:

Lawfulness, Loyalty and Transparency

The processing of personal data is carried out in a way that is loyal and transparent for the data subject, always ensuring that it is done in accordance with the law.

Use Limitations

Personal data shall be processed according to their specified purposes, in a manner that is explicit and lawful, and no processing that is incompatible with the specified purposes shall be carried out.

Data Minimization

Personal data must be adequate, relevant and limited to only what is necessary for the purposes of the processing. Whenever warranted, Liga Portugal may apply measures to "anonymize" or "pseudonymize" personal data to reduce the risk to data subjects.

Rights of Subjects

Liga Portugal ensures that Data Subjects, whose respective Personal Data Liga Portugal has collected, may at any moment write to Liga Portugal (at the following email address: tecnologia@ligaportugal.pt) to exercise their rights, which include: access, rectification, portability, limitation of processing, opposition to processing and disposal under the following conditions: the data is no longer required for the purpose for which it was collected or processed, or the subject withdraws consent, where consent is legally required, or the subject opposes to the processing and if there are no existing or underlying prevailing interests legitimizing the maintenance of the data and rejection of the subject's opposition, or the data is no longer necessary for the purpose that led to its collection or processing.

The data subject may request that their personal data be eliminated whenever it is no longer necessary for the purpose for which it was collected and whenever they wish to withdraw their consent; this request shall not, however, affect any previous lawful processing.

This request shall be fulfilled so long as it does not conflict with any legal requirement or contractual need regarding the period of retention of personal data.

Security Measures

Liga Portugal is committed to ensuring the protection of the security of the personal data that is made available to it, having implemented strict rules for these purposes.

Compliance with these rules is a mandatory obligation for all those who have lawful access to this data.

A number of technical and organizational security measures have been adopted to ensure the protection of personal data provided to us against unauthorized use, loss, alteration or unauthorized access, as well as any other form of illicit processing.