Foz da Cova Community Website Last updated: 13.08.2026 1. Introduction This Privacy Policy explains how we collect, use, and protect personal data when you visit or interact with the website of the Foz da Cova community (the "Website"). We are committed to protecting your privacy in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, "GDPR") and applicable national data protection law. 2. Data Controller The data controller responsible for the processing of personal data on this Website is: [Name of association / legal entity or responsible person] Foz da Cova, [Postal address, e.g. 3330 Góis, Portugal] Email: [contact email] If you have questions about this Privacy Policy or the processing of your personal data, please contact us at the address above. 3. What Personal Data We Collect Depending on how you use the Website, we may process the following categories of personal data: a) Data you provide voluntarily Name and email address when you contact us via the contact form or by email Name, email address, and any information you provide when you subscribe to our newsletter Information you submit when applying to visit, volunteer, or participate in community activities (such as name, contact details, and the content of your message) b) Data collected automatically IP address (anonymized where possible) Date and time of access Browser type and version, operating system Pages visited and referring website This technical data is collected through server log files and is necessary to deliver the Website securely and reliably. 4. Purposes and Legal Bases of Processing We process personal data only where a legal basis under Article 6 GDPR applies: Responding to enquiries (contact form, email): Art. 6(1)(b) GDPR (steps prior to entering into an agreement) or Art. 6(1)(f) GDPR (our legitimate interest in communicating with you) Newsletter: Art. 6(1)(a) GDPR (your consent). You may withdraw your consent at any time, for example via the unsubscribe link in each newsletter Volunteer and visit applications: Art. 6(1)(b) GDPR (steps prior to entering into an agreement) Server log files and Website security: Art. 6(1)(f) GDPR (our legitimate interest in the secure and stable operation of the Website) Cookies and similar technologies that are not strictly necessary: Art. 6(1)(a) GDPR (your consent, given via the cookie banner) 5. Cookies Our Website uses cookies. Strictly necessary cookies are used to ensure the basic functionality of the Website and are set on the basis of our legitimate interest (Art. 6(1)(f) GDPR). Any optional cookies, such as analytics or embedded third-party content, are only set with your prior consent, which you can give or refuse via our cookie banner. You can withdraw or change your consent at any time via the cookie settings on the Website or through your browser settings. 6. Third Party Services We may use the following third party services on the Website: Hosting provider: [Name and location of hosting provider]. The provider processes technical data (such as IP addresses) on our behalf under a data processing agreement pursuant to Art. 28 GDPR. Newsletter service: [Name of provider, if any] Analytics: [Name of provider, if any, e.g. a privacy friendly tool such as Matomo or Plausible, or state that no analytics are used] Embedded content: [e.g. maps, videos, social media, if any] Where third party services are located outside the European Economic Area, we ensure appropriate safeguards under Chapter V GDPR, such as EU Standard Contractual Clauses or an adequacy decision of the European Commission. 7. Data Retention We keep personal data only as long as necessary for the purposes described above: Contact enquiries: deleted once the enquiry has been fully dealt with, unless legal retention obligations apply Newsletter data: kept until you unsubscribe or withdraw consent Server log files: deleted or anonymized after [e.g. 7 to 30 days] Volunteer or visit applications: deleted after [e.g. 6 months] if no further cooperation takes place, unless you agree to longer storage 8. Your Rights Under the GDPR you have the following rights regarding your personal data: Right of access (Art. 15 GDPR) Right to rectification (Art. 16 GDPR) Right to erasure (Art. 17 GDPR) Right to restriction of processing (Art. 18 GDPR) Right to data portability (Art. 20 GDPR) Right to object to processing based on legitimate interests (Art. 21 GDPR) Right to withdraw consent at any time with effect for the future (Art. 7(3) GDPR) To exercise your rights, please contact us using the details in Section 2. You also have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work, or the place of the alleged infringement. In Portugal, the competent authority is the Comissão Nacional de Proteção de Dados (CNPD), www.cnpd.pt. 9. Data Security We take appropriate technical and organisational measures to protect your personal data against loss, misuse, and unauthorised access, including the use of TLS/SSL encryption for data transmitted via the Website. 10. No Automated Decision Making We do not use automated decision making or profiling within the meaning of Art. 22 GDPR. 11. Children Our Website is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it. 12. Changes to This Privacy Policy We may update this Privacy Policy from time to time, for example when the Website or legal requirements change. The current version is always available on this page, together with the date of the last update.

If you have questions, contact the cooperative through your usual community channels, on our telegram, or simply contact any of the members you know personally