ÁGUAS BALNEARES Mobile Application Privacy Policy

  1. Scope

    This privacy policy is intended to inform you about the processing of personal data in connection with the download and use of the ÁGUAS BALNEARES mobile application.

  2. Personal Data

    Personal data, under the terms of the General Regulation on the Protection of Personal Data (hereinafter “GDPR”), means any information relating to an identified or identifiable natural person («data subject»); an identifiable natural person who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, identifiers electronically or to one or more specific elements of the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

  3. Processing of personal data when downloading and using ÁGUAS BALNEARES

    Downloading and using the ÁGUAS BALNEARES application does not require any registration or login, and the provision of any identification or contact data of the user for the access and current use of the same is not requested.

    The application only requests and collects the user's name, e-mail and photos or images (if he/she wishes so), in the occurrence report functionality and only in case if the user wants to report to the Regional Directorate for the Environment and Climate Change (DRAAC) any anomalous situation in some Bathing Water so that the respective services can follow up and the various users and users have access to information on this occurrence (see point 4. Occurrence Report).

  4. Occurrence Report

    In the Bathing Waters application, the user will be able to report occurrences and situations that he detects in any of the Bathing Waters in the Region, sending this information securely to DRAAC, so that it can validate the information, follow up with the responsible services and inform other users of Bathing Water.

    In order to DRAAC to get in direct contact with the user who reported the occurrence, if necessary, the name and email that the user himself indicates is requested and collected in the application.

    This data is not transmitted to third parties or disclosed in the application or other means, being immediately removed as soon as the event/occurrence in question ceases and the user owner of this data can always request its removal or alteration, via email to: draac@madeira .gov.pt

  5. Identification and contact details of the Person Responsible for the Processing of Personal Data

    The data controller that corresponds to the entity (natural or legal person, public authority, agency or other body) that determines the purposes and means of processing personal data is the Autonomous Region of Madeira, through the Regional Secretariat for the Environment, Natural Resources and Climate Change, through the Regional Directorate for Environment and Climate Change (DRAAC). DRAAC is the department responsible for managing the data and content of the Bathing Waters application.

    Address: Rua Dr. Pestana Júnior, no 6, 3rd floor Dtº, 9064-506 Funchal
    Phone: (+351) 291207350;
    Fax (+351) 291229438;
    Email: draac@madeira.gov.pt

  6. Purposes and lawful basis of data processing abd data conservation

    The processed data are processed exclusively to make available the features of Águas Balneares and, in particular, to provide the service of reporting, validating and treating occurrences in Bathing Waters and providing information to users of the same. The personal data processed will be kept only and only until the reported occurrence has ceased or at the request of the user who sent them.

  7. Your rights

    You can exercise the following rights vis-à-vis the controller at any time for the contacts indicated above and free of charge.

    Information rights and access to personal data: You have the right to be informed by the person in charge of how your personal data are processed, by whom, for what purposes and grounds and you have the right to obtain confirmation from the person in charge that the data personal data concerning you are or are not subject to processing and, where applicable, the right to access your personal data and to obtain a copy of the personal data being processed.

    Right of rectification: You have the right to request the rectification of any personal data concerning you, which are incorrect or incomplete. Right of erasure: You have the right to request the erasure of your data if any of the conditions set out in article 17 of the GDPR is met. You can then request, for example, the removal of your data, provided that the purpose for which they were collected is no longer necessary.

    Right to limitation of treatment: You have the right to request the limitation of the processing of your data, if the conditions of article 18 of the GDPR are met. This is the case, for example, if you dispute the accuracy of your data. You can request that the processing be limited for the time necessary to examine the accuracy of your data. Right of erasure: You have the right to request the erasure of your data if any of the conditions set out in article 17 of the GDPR is met. You can then request, for example, the removal of your data, provided that the purpose for which they were collected is no longer necessary.

    Right to limitation of treatment: You have the right to request the limitation of the processing of your data, if the conditions of article 18 of the GDPR are met. This is the case, for example, if you dispute the accuracy of your data. You can request that the processing be limited for the time necessary to examine the accuracy of your data.

    Right of opposition: In the event of reasons related to your particular situation that constitute a superior interest if the conditions of article 21 of the GDPR are met. Right to data portability: If the processing of data is based on consent or necessary for the execution of a contractual provision and the processing is carried out by automated means, you have the right to receive your data in a structured, commonly used and machine-readable format and to transfer them to another data controller.

    Right to revoke consent: If the data processing is based (only) on consent, you have the right to revoke your consent at any time, with effect for the future and without indicating the reasons for your choice.

    Right to file a complaint: You have the right to file a complaint with the personal data protection supervisory authority, which in Portugal is the National Data Protection Commission (www.cnpd.pt) about how your data is processed and treated.

  8. Contact person: Data Protection Officer

    The data protection officer referred to in paragraph 5 is your contact person for all data protection issues and is available to help you exercise your rights.

Verion: August 2022