1. Introduction
This Privacy and Cookies Policy governs the processing of personal data and use of cookies on the website and in the activities of Clube Desportivo e Recreativo Chronos (the “Organisation”).
The Organisation complies with:
- Regulation (EU) 2016/679 (GDPR);
- Law No. 58/2019 (implementing the GDPR in Portugal);
- Electronic communications legislation applicable to cookies.
This Policy applies to all website users and participants in events organised by the Organisation.
PART I — PRIVACY POLICY
2. Data Controller
Clube Desportivo e Recreativo Chronos
Tax ID: 514 798 998
Registered office: Av. Duarte Pacheco, nº 19 – 6º Dto, 1070-100 Lisboa
Email: geral@clubechronos.com
The Organisation may act as:
- Data Controller
- Data Processor
- Joint Controller
3. Data Protection Officer
The Data Protection Officer can be contacted at:
Email: geral@clubechronos.com
Address: Av. Duarte Pacheco, nº 19 – 6º Dto, 1070-100 Lisboa
(FAO: Data Protection Officer)
4. Applicable Principles
Personal data is processed in accordance with the following principles:
- Lawfulness, fairness and transparency
- Purpose limitation
- Data minimisation
- Accuracy
- Storage limitation
- Integrity and confidentiality
5. Categories of Personal Data
5.1 Identification Data
- Name
- Date of birth
- Nationality
- Civil identification number
- Tax identification number
- Address
- Telephone contact
- Emergency contact
- Clothing size
5.2 Financial Data
- IBAN
- Billing details
- Account holder identification
5.3 Health Data
Relevant health data may be processed where necessary for participation in sporting events.
This processing is based on the data subject’s explicit consent, under Article 9 of the GDPR.
5.4 Browsing Data (Website)
- IP address
- Approximate location data
- Device and browser information
- Access logs
6. Purposes, Legal Basis and Retention
6.1 Registration and Participation Management
- Legal basis: Performance of a contract
- Retention: Up to 2 years after the event
6.2 Sports Insurance
- Legal basis: Legal obligation and performance of a contract
- Retention: Applicable statutory period
6.3 Invoicing
- Legal basis: Legal obligation
- Retention: 10 years
6.4 Health Data
- Legal basis: Explicit consent
- Retention: Up to 1 year after the event
6.5 Marketing (where authorised)
- Legal basis: Consent
- Retention: Until consent is withdrawn
6.6 Website Security and Operation
- Legal basis: Legitimate interest
- Retention: As set out in the cookies policy below
7. Data Disclosure
Data may be disclosed to:
- Insurers
- Partners and co-organisers
- Technology service providers
- Public bodies or judicial authorities
All processors are contractually bound to comply with the GDPR.
8. International Transfers
If data is transferred outside the European Economic Area, appropriate legal safeguards will be applied, including standard contractual clauses or adequacy decisions.
9. Data Subject Rights
Data subjects may exercise the following rights:
- Access
- Rectification
- Erasure
- Restriction of processing
- Objection
- Portability
- Withdrawal of consent
Requests should be sent to the Data Protection Officer.
The Organisation will respond within a maximum of 30 days.
Data subjects may lodge a complaint with the Portuguese Data Protection Authority (Comissão Nacional de Proteção de Dados).
10. Security
The Organisation adopts appropriate technical and organisational measures to protect data against unauthorised access, loss or unlawful disclosure.
11. Data Breaches
In the event of a personal data breach, the supervisory authority will be notified as legally required and affected data subjects will be informed where applicable.
PART II — COOKIES POLICY
12. What Are Cookies?
Cookies are small text files stored on a user’s device when visiting a website.
They allow:
- The website to function correctly
- An improved browsing experience
- Collection of statistical information
- Personalised content
13. Types of Cookies Used
13.1 Strictly Necessary Cookies
These enable the website’s basic functions.
Legal basis: Legitimate interest.
Consent is not required.
Examples:
- Session management
- Security
- Technical preferences
13.2 Performance and Analytics Cookies
These analyse website use to improve services.
Legal basis: Consent.
Examples:
- Traffic analysis tools
13.3 Marketing Cookies (where applicable)
These are used to display personalised content.
Legal basis: Consent.
14. Managing Cookies
Users may:
- Accept all cookies;
- Reject non-essential cookies;
- Set preferences in the cookie banner;
- Change browser settings.
Disabling strictly necessary cookies may impair website operation.
15. Cookie Retention
Cookies may be:
- Session cookies (deleted when the browser closes);
- Persistent cookies (retained for a defined period).
The retention period depends on the type of cookie and will not exceed what is necessary for its purpose.
16. Updates
This Privacy and Cookies Policy may be updated at any time.
We recommend checking this page regularly.
17. Contact
For any questions about this Policy, please contact:
Clube Desportivo e Recreativo Chronos
Email: geral@clubechronos.com
