Privacy Policy
Cascais Dinâmica is committed to protecting the privacy of users of the website www.estorilcc.com (the “Website”) and has prepared this Privacy Policy to demonstrate its commitment to protecting users' personal data, in compliance with Regulation (EU) 2016/679 of 27 April 2016 (GDPR) and Law No. 58/2019 of 8 August, which implements the GDPR in Portuguese law.
Please read this Privacy Policy carefully. By accessing the Website and providing your personal data through the contact form, you authorise its collection and processing in accordance with the rules set out herein.
Browsing or accessing the Website alone does not, in itself, entail the collection of personal data.
1. Data Controller
Cascais Dinâmica - Gestão de Economia, Turismo e Empreendedorismo, E.M., S.A., a company incorporated under NIPC 503589780, with registered office at Avenida Clotilde, Edifício Estoril Congress Centre, 3.º andar A, 2765-192 Estoril, is the entity responsible for collecting and processing personal data.
For any questions relating to this Privacy Policy, or for any other matter you consider relevant, you may contact us by email at info@estorilcc.com, by telephone on (+351) 21 464 75 75, or by post at the address indicated above.
2. How We Obtain Your Personal Data
Your personal data is obtained directly from you when you complete and submit the contact form available on the Website to request information about the spaces, facilities and services of the Estoril Congress Centre.
Completing the contact form constitutes your prior and express consent to the processing of the personal data provided therein for the purpose indicated in section 4.
3. What Personal Data May Be Collected
The following personal data is collected through the Website's contact form:
a) Name;
b) E-mail address;
c) Telephone number;
d) Type of event;
e) Number of people;
f) Event date;
g) Message and any other information voluntarily included as part of your enquiry.
Cascais Dinâmica does not request or encourage users to provide personal data relating to racial or ethnic origin, political or religious beliefs, trade union membership, genetic data, biometric data, health data or data concerning sex life. Should such data nevertheless be voluntarily included in the message, Cascais Dinâmica cannot be held responsible for its processing under this Privacy Policy.
4. Purpose and Legal Basis for Processing
The collection and processing of personal data submitted through the contact form is intended to respond to requests for information about the spaces and services of the Estoril Congress Centre, on the legal basis of taking steps at the request of the data subject prior to entering into a contract (Article 6, nº1(b) of the GDPR).
Where an enquiry results in the conclusion of a contract for the use of spaces or the provision of services, personal data may also be processed for the celebration of that contract (Article 6, no.1(b) of the GDPR), as well as to comply with legal obligations to which Cascais Dinâmica is subject (Article 6, no.1(c) of the GDPR).
Failure to provide the personal data requested in the form will prevent Cascais Dinâmica from responding to the enquiry.
5. Retention Period for Personal Data
Personal data processed in connection with enquiries that do not result in a contract will be retained for a period of 1 (one) year following the last contact with the data subject, after which it will be deleted or anonymised.
Where an enquiry results in the conclusion of a contract for the use of spaces or the provision of services, personal data will be retained for as long as necessary to comply with the applicable contractual and legal obligations.
In the event of an actual or potential dispute in which Cascais Dinâmica is directly or indirectly involved, personal data may be retained for an additional period, until the proceedings have been finally concluded, strictly to the extent necessary to protect legitimate rights and interests.
6. Disclosure of Data to Third Parties and International Transfers
Cascais Dinâmica does not share or disclose users' personal data to third parties, except where strictly necessary to fulfil the purposes described in this Privacy Policy, namely:
a) public entities, including Cascais Municipal Council, where necessary within the scope of the functions carried out by Cascais Dinâmica as a municipal company;
b) service providers acting on behalf of Cascais Dinâmica, such as Website hosting and maintenance providers;
c) public and judicial authorities, where required to comply with legal or regulatory obligations.
Any processor engaged by Cascais Dinâmica processes personal data on its behalf and under its instructions and is required to adopt the technical and organisational measures necessary to protect such data, with Cascais Dinâmica remaining responsible for the processing.
Where the provision of services by third parties involves the transfer of personal data outside the European Economic Area, Cascais Dinâmica shall ensure that such transfer is carried out in compliance with the GDPR, in particular on the basis of an adequacy decision by the European Commission or standard contractual clauses.
7. Data Subjects’ Rights
Data subjects are guaranteed the right, at any time, to access their personal data, as well as the right to rectification, erasure, restriction of processing, data portability and the right to object to processing.
Where processing is based on consent, data subjects also have the right to withdraw their consent at any time, without affecting the lawfulness of processing carried out based on consent prior to its withdrawal.
These rights may be exercised by submitting a request to Cascais Dinâmica using the contact details provided in section 1.
Without prejudice to the above, data subjects are always entitled to lodge a complaint with the competent supervisory authority if they consider that the processing of their personal data infringes the GDPR or applicable national legislation.
8. Security and Personal Data Processing
Cascais Dinâmica is committed to ensuring the security and protection of the personal data provided through the Website and has implemented appropriate technical and organisational measures for this purpose. These measures are reviewed and updated in accordance with requirements and the state of the art in this area.
In the event of a personal data breach resulting in the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of or access to personal data, Cascais Dinâmica shall notify the competent authorities without undue delay and, where possible, within 72 hours of becoming aware of the breach, in accordance with applicable legislation. Cascais Dinâmica shall also notify the affected data subject of the breach where required by law.
9. Links to Third-Party Websites
This Privacy Policy does not apply to third-party websites. If you access another website through a link on the Website, you should consult its privacy policy before providing any personal data. Cascais Dinâmica accepts no responsibility for the privacy practices or content of third-party websites.
10. Amendments to the Privacy Policy
Cascais Dinâmica reserves the right to amend or update this Privacy Policy at any time in order to reflect changes in legislation or in data-processing practices. The version published on the Website is the version currently in force.
Last updated: 27 July 2026