Privacy Policy | MEG'S PROJECT MUSIC
1. Protecting Your Privacy and Personal Data Is a Commitment of MEG'S PROJECT
Protecting privacy and personal data is a fundamental commitment of MEG'S PROJECT (MEG'S) to every individual whose personal data is processed (hereinafter referred to as the "data subject") and who uses MEG'S digital platforms and services.
With the implementation of the General Data Protection Regulation (GDPR), Regulation (EU) 2016/679 of 27 April, applicable from 25 May 2018, and subsequently the publication of Portuguese Law No. 58/2019 of 8 August, which implements the GDPR in Portuguese law, MEG'S remains firmly committed to protecting the privacy and personal data of individuals using its digital platforms and services.
Accordingly, MEG'S has updated its Privacy Policy in accordance with the principles and data protection requirements established by the GDPR.
This document explains what personal data we collect, the purposes for which it may be used, how we process it, with whom we share it, how long we retain it, and how you can contact us and exercise your rights.
We also recommend consulting the Terms and Conditions of Use of our Digital Platforms and our Cookie Policy. Any updates will be made available through MEG'S digital platforms.
2. General Data Protection Regulation
The General Data Protection Regulation (GDPR) establishes rules governing the processing of personal data relating to individuals within the European Union (EU) by individuals, companies and organisations.
The GDPR protects personal data regardless of the technology used to process it.
This protection is technologically neutral and applies to both automated and manual processing, provided that the data is organised according to predefined criteria, such as alphabetical order.
The method of storage is also irrelevant. Whether personal data is stored electronically, collected through video surveillance or maintained in paper records, it remains subject to the data protection requirements established by the GDPR.
3. Who Is Responsible for Processing Personal Data?
MEG'S PROJECT (MEG'S), with its registered office at:
Rua Valério Nogueira, 14 – 3rd Floor, Right
2625-002 Póvoa de Santa Iria
Vila Franca de Xira, Portugal
Legal Entity Identification Number: 222435070
MEG'S PROJECT is the data controller responsible for processing personal data under the GDPR.
4. Data Protection Officer
MEG'S has appointed a Data Protection Officer (DPO), António Ferraz.
The Data Protection Officer is responsible for providing information and advice to members involved in processing personal data regarding their obligations under privacy and data protection legislation.
The DPO also monitors compliance with applicable data protection regulations, provides advice concerning Data Protection Impact Assessments when requested, and monitors their implementation.
Furthermore, the DPO acts as a contact point for individuals seeking clarification regarding the processing of their personal data by MEG'S.
The DPO also serves as the contact point for the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD), and cooperates with this authority on matters relating to personal data processing.
Data Protection Officer Contact:
Email:
5. Personal Data Processing, Scope and Amendments to the Privacy Policy
By providing personal data to MEG'S, the data subject consents to its processing in accordance with this Privacy Policy and the rules and principles established in the Terms and Conditions of MEG'S Digital Platforms.
This Privacy Policy applies to personal data provided directly by individuals or collected when accessing our digital platforms, services and products.
MEG'S digital platforms and services may contain hyperlinks to third-party websites or content that is not covered by this Privacy Policy.
We therefore recommend that users consult the privacy policies and terms and conditions of any third-party websites they visit.
MEG'S reserves the right to amend its Privacy Policy.
We recommend regularly reviewing this document, together with our Cookie Policy and Terms and Conditions.
If changes are made to this Privacy Policy, a notice will be published on our digital platforms.
6. What Is Personal Data?
Personal data refers to any information relating to an identified or identifiable individual.
An individual is considered identifiable when they can be identified directly or indirectly.
Different pieces of information that, when combined, may identify a particular individual are also considered personal data.
Examples of personal data include:
-
First name and surname
-
Residential address
-
Email address
-
Identification document number
-
Internet Protocol (IP) address
-
Cookies
7. Who Is a Data Subject?
A data subject is the individual to whom personal data relates and who has used MEG'S digital platforms or services.
8. Categories of Personal Data
The following are non-exhaustive examples of personal data categories.
Primary Identification Data
Name, civil or tax identification number, passport number, date of birth, marital status, address, telephone number, email address, nationality, photographs and files stored on mobile devices, household information and family relationships.
Additional Identification Data
IBAN, geolocation, educational qualifications, gender, profession, socioeconomic information, personal identification number, IP address, social media addresses, mobile device type, operating system and operating system version.
Data Requiring Special Protection
Personal data relating to children under the age of 13.
Special Categories of Personal Data
Biometric or genetic data, racial or ethnic origin, political opinions, trade union membership, philosophical or religious beliefs, health information, sex life and sexual orientation.
9. What Information Does MEG'S Collect and How?
MEG'S collects two types of information: personal information and anonymous information.
Anonymous information may be collected when individuals visit our digital platforms. Its purpose is to improve platform functionality, including content management and prioritisation.
Personal information is collected when users provide their details directly to MEG'S.
This may occur when individuals:
-
Contact MEG'S to request information or clarification.
-
Participate in training activities, workshops, events or conferences.
-
Apply for professional positions.
-
Purchase MEG'S products or services.
-
Download or use MEG'S products, services or applications.
-
Contact our customer service or support channels.
Personal data may be collected verbally, in writing, through online forms, by email or through the use of MEG'S digital platforms.
Information may also be collected indirectly when provided by public authorities, media organisations, event companies or other sources.
Certain personal information, including IP addresses, may be collected automatically for service analysis and improvement purposes.
Data collected through MEG'S digital platforms is processed automatically. The information collected from data subjects is encrypted and managed using advanced security measures.
10. For What Purposes Does MEG'S Process Personal Data?
MEG'S may process personal data for the following purposes.
Newsletter Distribution
Collecting information necessary to send newsletters to individuals who have subscribed.
Subscription to Alerts and Notifications
Collecting information required to provide alerts and notifications relating to services subscribed to by users.
Participation in Training Activities or Workshops
Collecting information through online registration forms for training activities or workshops organised by MEG'S.
Participation in Events and Conferences
Registering and managing guests attending MEG'S events and conferences.
Prize Management
Contacting members and winners to arrange the delivery of prizes.
Recruitment Management
Registering and managing unsolicited applications for recruitment processes.
Engineering, Systems and Technology
Providing technical responses and handling complaints.
Where necessary, we will request your explicit consent before using your information for the purposes described in this Privacy Policy.
11. What Is the Legal Basis for Processing Your Personal Data?
Consent
Your consent must be given in advance and must be freely given, specific, informed and unambiguous.
Consent may be provided in writing, verbally or by actively selecting an appropriate option.
Examples include consent for MEG'S to analyse the use of its services and assess satisfaction levels, including evaluations of training programmes, organisation, educational coordination, facilities and trainer performance.
Consent may also be requested to use satisfaction questionnaires completed during training activities.
Consent for Children Under 13
When processing personal data relating to children, MEG'S will require consent from those holding parental responsibility, particularly for participation in training activities or events.
Performance of a Contract and Pre-contractual Measures
Personal data may be processed when necessary for entering into, performing or managing contracts with MEG'S.
Examples include purchasing archived content or providing services.
Compliance with Legal Obligations
Personal data may be processed when necessary to comply with legal obligations applicable to MEG'S.
This may include communicating identification or traffic data to police, judicial, tax or regulatory authorities.
Legitimate Interests
MEG'S may process personal data based on legitimate interests associated with carrying out its activities as an association.
An example is processing information to improve service quality.
Vital Interests of Data Subjects
Personal data may be processed when necessary to protect the vital interests of the data subject or another individual.
This may include humanitarian purposes, such as monitoring epidemics and their spread, or responding to humanitarian emergencies, particularly natural or human-made disasters.
Public Interest
Personal data processing may be necessary for MEG'S to perform functions or pursue objectives in the public interest as a non-profit association.
An example includes processing data for communications with service providers.
12. How Long Does MEG'S Process and Retain Personal Data?
MEG'S processes and retains personal data according to the purposes for which it was collected.
Personal data is retained only for the period necessary to fulfil those purposes, in accordance with applicable legislation and the guidelines and decisions of the Portuguese Data Protection Authority (CNPD).
Where applicable, processing may continue until the data subject exercises their right to object, requests erasure or withdraws previously given consent.
Certain legal obligations may require personal data to be retained for minimum periods.
Examples include the obligation to retain commercial correspondence for 10 years or information relevant for tax purposes for periods of up to 12 years.
Once the applicable retention period has expired, MEG'S will delete or anonymise personal data unless its continued retention is necessary for another lawful purpose.
13. Rights of Data Subjects
Under the GDPR and other applicable legislation, data subjects have the following rights:
-
Right to information
-
Right of access to personal data
-
Right to rectification
-
Right to erasure
-
Right to data portability
-
Right to restriction of processing
-
Right to object to processing, where applicable
Data subjects may also withdraw their consent to the processing of personal data at any time.
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
Data subjects also have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD).
How to Exercise Your Rights
You may exercise your rights using the following contact details.
Email:
Postal Address:
MEG'S PROJECT (MEG'S)
For the attention of the Data Protection Officer
Rua Valério Nogueira, 14 – 3rd Floor, Right
2625-002 Póvoa de Santa Iria
Vila Franca de Xira, Portugal
Exercising your rights is free of charge.
However, where a request is manifestly unfounded, excessive or unjustifiably repetitive, a reasonable fee may be charged to cover the administrative costs involved.
MEG'S aims to respond to requests promptly and without undue delay, within one month of receiving the request.
Where a request is particularly complex or exceptional circumstances arise, this period may be extended by up to two additional months, taking into account the complexity and number of requests received.
You may be asked to provide proof of identity to ensure that personal data is disclosed only to the appropriate data subject.
The exercise of certain rights depends on the specific circumstances established by the GDPR and other applicable legislation.
Consequently, some requests may not be fulfilled where the relevant legal requirements are not met.
Right to Erasure
The right to erasure, also known as the "right to be forgotten", does not apply where personal data processing is necessary for exercising freedom of expression and information, which represents an important part of MEG'S activities.
Right to Object
MEG'S informs data subjects that exercising the right to object will take effect from the date the relevant request is received.
This does not affect the lawfulness of processing carried out before that date.
Right to Data Portability
Under applicable legislation, the right to data portability applies only to data collected on the basis of the data subject's consent.
14. Disclosure and Transfer of Personal Data
Personal data may be disclosed to service providers acting as data processors on behalf of MEG'S.
In such cases, MEG'S will implement the necessary contractual measures to seek to ensure that these service providers respect and protect personal data in accordance with applicable legislation.
Personal data may also be disclosed to third parties other than MEG'S or its contracted data processors.
This may occur where the data subject has provided consent or where disclosure is required by law.
Examples include disclosures to tax authorities, judicial authorities, criminal investigation bodies and other competent authorities.
15. Personal Data Processing for Advertising Activities and Behavioural Analysis on MEG'S Digital Platforms
For information about the collection, use and processing of personal data in connection with the analysis of user activity and the display of advertising on MEG'S digital platforms, please consult our Cookie Policy.
As part of its online advertising activities, MEG'S uses Google Ads and Google Ad Manager.
These services are provided by Google, which acts as a data controller in relation to the personal data of users of MEG'S digital platforms.
Users should consult the applicable terms and conditions and privacy policies of these services.
In such cases, MEG'S does not accept responsibility for personal data processing activities carried out independently by third-party service providers, who assume responsibility for their respective processing operations.
16. What Security Measures Are Used to Protect Your Personal Data?
MEG'S takes the necessary and legally required precautions to protect the privacy of personal data processed or transmitted through its digital platforms.
These measures are intended to ensure the security of information both online and offline.
Whenever sensitive information is collected or used, data is encrypted using SSL technology.
SSL, or Secure Sockets Layer, is a technology designed to improve the security of data transmission over the internet.
By using HTTPS, information is encrypted to help protect sensitive data against unauthorised interception.
These security measures are intended to protect personal information and ensure that it is handled securely.
MEG'S is not responsible for content accessed through hyperlinks that direct users away from its digital platforms, nor for personal data processing carried out on third-party websites where such links are managed by third parties.
Third-party websites and their content are not covered by this Privacy Policy.
We therefore recommend that users read the privacy policies and applicable terms and conditions of any external websites they visit.
