Privacy Policy

Who processes your data

Colégio O Brinquinho, Lda., a private limited company with corporate tax number 503768901, registered office at Rua Manuel Marques n.º 14, Matoeira, 2500-743 Caldas da Rainha, Portugal.

• Email: geral@obrinquinho.pt
• Telephone: 262 939 002 (call to the national landline network)
• Mobile: 917 847 666 (call to the national mobile network)

The School has not appointed an external data protection officer. Requests about personal data are handled by the management and should be sent to the email above.

What data we collect on this website

Application

The child's name, date of birth and sex; the age group and school year applied for; the parent or guardian's name, relationship to the child, email, telephone and, where given, tax number and address; the message you write; and, for security reasons, the IP address, the browser used and the date of submission.

Contact messages

Name, email, telephone (optional), subject and message, with the same technical security record.

Families' reviews

Name, relationship with the School, rating and review text. The email is optional: anyone who wishes to write without identifying themselves may do so. Reviews are only published on the website with express permission, given in the form itself.

Browsing

With your consent, statistics on how the website is used. See the Cookie Policy.

What we use this data for

• Application: to assess the request, contact the family and manage the waiting list. The legal basis is the pre-contractual steps requested by the family itself (Article 6(1)(b) of the GDPR).
• Contact: to reply. Same legal basis.
• Families' reviews: to improve our service and, where authorised, to publish the review. The legal basis is consent (point (a)).
• Visit statistics: consent, given in the cookie notice.
• Technical records (IP address, browser, attempt limits): to protect the website from abuse and automated submissions. The legal basis is the School's legitimate interest in keeping the website secure (point (f)).
• Legal obligations: where required by law, namely in tax matters and the licensing of the activity (point (c)).

Informações por email. Se o autorizar na pré-inscrição — é opcional e independente das outras autorizações —, o Colégio pode enviar-lhe por email informações sobre novidades, eventos e datas de inscrição. O fundamento é o consentimento (alínea a). Pode retirá-lo a qualquer momento, escrevendo para geral@obrinquinho.pt ou respondendo a um desses emails, e cada envio indica como o fazer.

Fora deste caso, os dados recolhidos no site não são usados para publicidade, e o Colégio não tem newsletter.

How long we keep it

• Applications: 730 days from submission. After that, personal data is anonymised and only statistical information that identifies no one is kept.
• Mensagens de contacto: 730 dias a contar do envio.
• Autorização para informações por email: enquanto a pré-inscrição for conservada, ou até ser retirada, o que acontecer primeiro.
• Published reviews: while they are on the website; their authors can ask for them to be removed at any time.
• Consent record (which version of this document was accepted, and when): for as long as the processing it relates to, because it is what proves that consent was given.
• Cookie choice: 12 months, after which you are asked again.

Children

Children's data is provided by those with parental responsibility and processed only for the purpose requested: applying for a place.

Photographs published on this website are processed with faces blurred. Image permission is collected on paper at enrolment and covers use on the website and in the School's internal communications. It can be withdrawn at any time simply by asking the School, which will remove the photographs concerned.

Who we share data with

The School does not sell or pass on personal data. To work, the website relies on service providers that process data on the School's behalf and only on its instructions:

• Vercel — website hosting. The servers that process requests are in Frankfurt, in the European Union.
• Neon — database, hosted in Frankfurt, in the European Union.
• Vercel Blob — storage of the website's photographs and documents, with private access.
• Email hosting for the obrinquinho.pt domain, in Portugal, through which confirmation emails and internal notices are sent.
• Google Ireland Limited — visit statistics (Google Analytics), only if you allow them.

Data may be disclosed to public authorities where required by law.

Transfers outside the European Union

Processing visit statistics may involve access to data from the United States of America by Google. This transfer is based on the standard contractual clauses approved by the European Commission and on the adequacy decision for the EU–US Data Privacy Framework. The IP address is collected in anonymised form and is only collected after you allow it.

All other processing takes place on servers in the European Union.

How we protect it

The website is served exclusively over an encrypted connection. Access to the management area requires a password and a second authentication factor, passwords are stored encrypted and cannot be reversed, access is logged, and each person only sees what their profile allows.

Your rights

You can ask for access to your data, its correction, erasure, restriction of or objection to processing, and portability. Where processing is based on consent, you can withdraw it at any time, without affecting what was done before.

Requests should be sent to geral@obrinquinho.pt and are answered within one month.

If you believe your data is not being handled correctly, you can lodge a complaint with the Portuguese Data Protection Authority (Comissão Nacional de Proteção de Dados, www.cnpd.pt).

Changes to this policy

When this policy changes, a new version is recorded with its date. The record of each application and each message keeps the version in force at the time of submission.