Taguspark, S.A. expresses its firm commitment to comply, at all times, with current legislation on the protection of personal data, treating Personal Data in accordance with this Privacy Policy.

Whenever you use the Taguspark website or interact with Taguspark in any other way, namely by registering on the website or submitting forms, the Personal Data you provide will be processed in accordance with the legal requirements applicable to each specific situation.

Taguspark reserves the right to modify this Privacy Policy whenever necessary due to legal or regulatory changes, for security reasons, or in order to adapt it to the guidelines of the supervisory authorities regarding data protection.

1. Who is responsible for processing your data?

The entity responsible for processing Personal Data is Taguspark, S.A., with tax identification number 502857587, headquartered at Núcleo Central, n.º 100, 2740-122 Oeiras.

For any questions related to the processing of Personal Data, the data subject may contact Taguspark via email at: taguspark@taguspark.pt

2. What data do we collect, how do we use it, on what basis, and where do we store it?

Within the scope of its institutional activity and interactions established through its website and other digital channels, Taguspark collects and processes Personal Data that is strictly necessary for the pursuit of its respective purposes.

The Personal Data collected may include, in particular, name, email address, telephone number, entity, position, as well as other information voluntarily provided by data subjects through the forms available on the website.

Taguspark collects Personal Data through the following channels:

• Subscription to the Taguspark newsletter, for the purpose of disseminating cultural, institutional, and event programming, based on the free, express, informed, and unequivocal consent of the data subject. The consent given is recorded and stored by Taguspark for evidentiary purposes, as required by law.
• Submission of forms available on the website for the purpose of responding to requests for information, clarifying questions, commercial or institutional contacts, as well as for carrying out pre-contractual procedures at the request of the data subject, based on the execution of these procedures or on Taguspark's legitimate interest in responding to the requests submitted.

Personal Data is stored on systems and servers located in secure environments, protected against unauthorized access, misuse, or disclosure, with appropriate technical and organizational measures in place to ensure its security and confidentiality.

3. What are the purposes of processing personal data?

Personal Data collected by Taguspark is processed for the following purposes:

1. Scheduling and managing visits with a view to setting up a business in Taguspark.
2. Scheduling and management of visits and events to be held at Taguspark.
3. Response to requests for information submitted via forms available on the website.
4. Dissemination of Taguspark's cultural, institutional, and event programming through newsletters and other communications, with the express, free, and informed consent of the data subject.

4. Who are the recipients of your data?

Personal Data collected by Taguspark is processed within the scope of its institutional activity, exclusively for the purposes described in this Privacy Policy.

Whenever necessary to achieve these purposes, Personal Data may be processed by third parties that provide services to Taguspark, namely in terms of website hosting, digital platform management, electronic communications, or technological support. These entities act on behalf of Taguspark and according to documented instructions, in the capacity of subcontractors.

Taguspark ensures that any subcontracted entities fully comply with the General Data Protection Regulation and are required to adopt appropriate technical and organizational measures to protect Personal Data and guarantee its confidentiality.

Personal Data is not, as a rule, subject to international transfers to third countries or international organizations outside the European Union. Should this prove necessary, Taguspark will ensure compliance with all applicable legal obligations, including the adoption of appropriate safeguards, in accordance with the GDPR.

Without prejudice to the provisions of the preceding paragraphs, Personal Data may be communicated to administrative, tax, or judicial authorities whenever required by law or in compliance with applicable legal obligations.

5. Where do we store your data?

Taguspark stores the Personal Data provided by users on servers located in secure environments, protected against unauthorized access, misuse, or disclosure.

To this end, it adopts appropriate technical, electronic, and organizational measures to ensure data security and prevent its loss, misuse, or unauthorized access.

Personal Data is processed exclusively for the purposes for which it was collected, in accordance with this Privacy Policy, and it is the user's responsibility to keep their personal information up to date.

6. Disclosure of Data to Third Parties

Taguspark may, whenever necessary and legally permissible, engage third parties to process Personal Data on its behalf, ensuring that such entities act in accordance with the General Data Protection Regulation.

In such cases, Taguspark ensures that subcontractors adopt appropriate technical and organizational measures to protect Personal Data, guaranteeing its confidentiality and security.

Where legally required, Personal Data may be disclosed to administrative, tax, or judicial authorities, in strict compliance with applicable legal obligations.

7. What are your rights as a data subject and how can you exercise them?

In accordance with applicable data protection legislation, Taguspark guarantees the data subject the exercise of the following rights:

1. Right to information.
2. Right of access.
3. Right of rectification.
4. Right to erasure, under the terms applicable by law.
5. Right to withdraw consent, when processing is based on consent.
6. Right to object to processing based on legitimate interest.
7. Right to data portability, where legally applicable.
8. Right to restriction of processing, in accordance with the law.

These rights may be exercised by contacting the following email address: taguspark@taguspark.pt.

Taguspark will respond to requests as quickly as possible.

The data subject also has the right to lodge a complaint with the National Data Protection Commission (CNPD), without prejudice to prior contact with Taguspark for possible clarification or resolution of the situation.

Where requests are manifestly unfounded or excessive, Taguspark reserves the right to charge reasonable administrative costs or to refuse to process them, in accordance with the law.

8. How long do we store your data?

Personal Data is retained only for the period necessary to fulfill the purposes for which it was collected or processed, and this period may vary depending on the nature and purpose of the processing.

Where there is a legal obligation, Personal Data will be retained for the period required by law. In the absence of a specific legal obligation, the data will be deleted or anonymized once it is no longer necessary.