1. Introduction
This Privacy and Cookies Policy governs the processing of personal data and use of cookies on the website and in the activities of Arriaga Pinto e Leite Lda. (hereinafter the “Organisation”).
The Organisation complies with:
- Regulation (EU) 2016/679 (GDPR);
- Law no. 58/2019 (implementation of the GDPR in Portugal);
- The Electronic Communications Law applicable to the use of cookies.
This Policy applies to all website users and participants in events held by the Organisation.
PART I — PRIVACY POLICY
2. Data Controller
Arriaga Pinto e Leite Lda.
Tax number: 509 490 239
Registered office: Av. Santos Dumont 68 – 4º. 1050-204 Lisboa. Portugal
Email: info@lisbonecomarathon.com
The Organisation may act as:
- Data Controller
- Data Processor
- Joint Controller
3. Data Protection Officer
The Data Protection Officer can be contacted at:
Email: info@lisbonecomarathon.com
Address: Av. Santos Dumont 68 – 4º. 1050-204 Lisboa. Portugal
(For the attention of: Data Protection Officer)
- 4. Applicable Principles
Personal data is processed in accordance with the following principles:
- Lawfulness, fairness and transparency
- Purpose limitation
- Data minimisation
- Accuracy
- Storage limitation
- Integrity and confidentiality
5. Categories of Personal Data
5.1 Identification Data
- Name
- Date of birth
- Nationality
- Civil identification number
- Tax number
- Address
- Telephone number
- Emergency contact
- Clothing size
5.2 Financial Data
- IBAN
- Billing details
- Account holder identification
5.3 Health Data
Relevant health data may be processed where necessary for participation in sporting events.
The processing of this data is based on the data subject’s explicit consent, under Article 9 of the GDPR.
5.4 Browsing Data (Website)
- IP address
- Approximate location data
- Device and browser information
- Access logs
6. Purposes, Legal Basis and Retention
6.1 Registration and Participation Management
- Basis: Performance of a contract
- Retention: Up to 2 years after the event
6.2 Sports Insurance
- Basis: Legal obligation and performance of a contract
- Retention: Applicable statutory period
6.3 Billing
- Basis: Legal obligation
- Retention: 10 years
6.4 Health Data
- Basis: Explicit consent
- Retention: Up to 1 year after the event
6.5 Marketing (where authorised)
- Basis: Consent
- Retention: Until consent is withdrawn
6.6 Website Security and Operation
- Basis: Legitimate interest
- Retention: As specified in the cookies policy below
7. Disclosure of Data
Data may be disclosed to:
- Insurance companies
- Partners and co-organisers
- Technology service providers
- Public bodies or judicial authorities
All processors are contractually bound to comply with the GDPR.
8. International Transfers
Where data is transferred outside the European Economic Area, appropriate legal safeguards will apply, including standard contractual clauses or adequacy decisions.
9. Data Subjects’ Rights
Data subjects may exercise the following rights:
- Access
- Rectification
- Erasure
- Restriction of processing
- Objection
- Portability
- Withdrawal of consent
Requests must be sent to the Data Protection Officer.
The Organisation will respond within a maximum of 30 days.
Data subjects may lodge a complaint with the Portuguese Data Protection Authority (Comissão Nacional de Proteção de Dados).
10. Security
The Organisation adopts appropriate technical and organisational measures to protect data against unauthorised access, loss or unlawful disclosure.
11. Data Breaches
In the event of a personal data breach, the supervisory authority will be notified as required by law and data subjects will be informed where applicable.
PART II — COOKIES POLICY
12. What Are Cookies?
Cookies are small text files stored on a user’s device when they visit a website.
They enable:
- The website to function correctly
- An improved browsing experience
- Collection of statistical information
- Personalised content
13. Types of Cookies Used
13.1 Strictly Necessary Cookies
These enable the website’s basic functions.
Legal basis: Legitimate interest.
Consent is not required.
Examples:
- Session management
- Security
- Technical preferences
13.2 Performance and Statistical Cookies
These allow analysis of website use to improve services.
Legal basis: Consent.
Examples:
- Traffic analysis tools
13.3 Marketing Cookies (if applicable)
Used to display personalised content.
Legal basis: Consent.
14. Managing Cookies
Users can:
- Accept all cookies;
- Reject non-essential cookies;
- Set preferences in the cookie banner;
- Change browser settings.
Disabling strictly necessary cookies may affect the website’s operation.
15. Cookie Retention
Cookies may be:
- Session cookies (deleted when the browser is closed);
- Persistent cookies (retained for a defined period).
The retention period depends on the type of cookie and will not exceed what is necessary for its purpose.
16. Updates
This Privacy and Cookies Policy may be updated at any time.
We recommend checking this page periodically.
17. Contacts
For any questions relating to this Policy, please contact:
Arriaga Pinto e Leite Lda.
Email: info@lisbonecomarathon.com
