DATA PROTECTION POLICY

Personal data is all personal information relating to an identified or identifiable natural person, the data subject.

Data Processing refers to any operation or set of operations performed on personal data or sets of personal data, whether by automated means or not, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment or combination, restriction, erasure, or destruction.

As a public company, ANI – Agência Nacional de Inovação, S.A. (ANI), is implementing the necessary technical and organizational measures to comply with the GDPR in order to ensure the confidentiality, integrity, security, and accuracy of the personal data provided to it.

In the course of its activities, ANI processes personal data under the terms of the GDPR when necessary for:

• the execution of contracts to which it is a party,
• compliance with legal obligations to which it is subject,
• the performance of tasks carried out in the public interest,
• the pursuit of a legitimate interest that is not overridden by the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data

Outside of these situations, ANI will request your consent to process your personal data.

How is personal data processed?
The processing of personal data by ANI adheres to the principles of transparency and fairness toward the data subject

Personal data are collected for specific, explicit, and legitimate purposes, communicated to the data subject, and cannot be used for purposes incompatible with those for which consent was granted.

Only personal data that are appropriate and relevant to the purposes of the processing will be requested

Personal data are accurate and updated as necessary, and appropriate measures will be taken to ensure that inaccurate data, considering the purposes for which they are processed, are erased or rectified as soon as possible

Personal data are retained only for as long as necessary to fulfill the purpose for which they were collected

ANI will implement technical and organizational measures to ensure the security of personal data and to prevent accidental loss, destruction, or damage, as well as unauthorized or unlawful processing

Withdrawal of Consent
Whenever the collection and processing of personal data are based on the consent of the data subject, such consent may be withdrawn at any time.
To do so, simply inform ANI of the withdrawal of consent by contacting the Data Protection Officer by email at epd@ani.pt or by sending a letter via regular mail.

Rights of the data subject
The data subject has the following rights:

• Right to be informed about relevant aspects of processing;
• Right to access their data;
• Right to rectification of their data;
• Right to restrict the processing of their data;
• Right to deletion/erasure of data;
• Right to data portability (where technically feasible);
• Right to object to the processing

To exercise these rights, the data subject must submit a request to the Data Protection Officer by email at epd@ani.pt or by sending a letter via regular mail.

By providing their personal data to ANI, the data subject acknowledges and agrees that their data will be processed in accordance with this “Privacy and Personal Data Processing Policy.”

Data Protection Officer
The Data Protection Officer’s role includes ensuring the relationship between ANI and the data subjects concerning matters covered by the GDPR and related legislation.
The Data Protection Officer at ANI will provide clarifications on personal data protection matters, receive requests concerning the exercise of data subject rights, and address complaints related to data protection.

National Data Protection Commission
The National Data Protection Commission is responsible for overseeing the application of the GDPR to protect the fundamental rights and freedoms of individuals regarding data processing and to facilitate the free flow of data within the European Union.
Data subjects may submit any complaints related to ANI’s privacy policy and data processing to the National Data Protection Commission.