Personal Data Protection Notice
This Personal Data Protection Notice (“Notice”) describes how Publibalão – Publicidade, Lda., with registered office at Rua Eng.º Manuel Rocha, 1-B, R/C, 1700-154 Lisbon, with a share capital of €12,750.00, registered with the Oeiras Commercial Registry under registration number and corporate entity number 503425052 (hereinafter referred to as “Publibalão”), collects, uses, protects, and shares personal information obtained through the FIBAQ 2025 Registration Platform (hereinafter referred to as the “Platform”) or in person, when registration is carried out on the day of the event.
For the purposes of this Notice, all Users of the Platform who visit the Platform, use its services, and/or in any way interact with Publibalão through it, as well as individuals who register in person on the day of the event, and who, for that reason, share their personal data (i.e., data that can be identified as belonging or relating to the user or participant) with Publibalão, are considered “Data Subjects.”
Data Controller
Publibalão – Publicidade, Lda., in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (“General Data Protection Regulation” or “GDPR”), is the data controller responsible for the processing of personal data collected in person at the time of registration for the event and through the Platform.
Information Collected by Publibalão
“Personal data” means any information, of any nature and regardless of the medium used, including sound and image, relating to an identified or identifiable natural person (“data subject”). An identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identification number or to one or more specific elements of their physical, physiological, psychological, economic, cultural, or social identity.
The use of the Platform, by itself, does not automatically require the registration or collection of any personal data. However, the use of certain features of the Platform may involve the collection and subsequent processing of personal data from Data Subjects.
Depending on how Data Subjects use the Platform, or if registration is carried out in person on the day of the event, personal data of adult or minor Data Subjects may be collected. The categories of data collected include:
Contact personal information: name, age, email, tax identification number, national ID card number, passport number, and phone number.
Data relating to physical characteristics: weight
Purposes for the Collection of Information by Publibalão and the Corresponding Legal Basis
The use of certain features of the Platform, namely registration for FIBAQ 2025, may require Data Subjects to provide personal data, which will then be processed by Publibalão. Failure to provide such data may prevent Data Subjects from accessing and using these features. Additionally, personal data may also be collected in person if registration is carried out on the day of the event.
For the purpose of executing the contract related to their participation in FIBAQ 2025, Publibalão, while always safeguarding the rights and freedoms of the Data Subjects, will process the personal data of the Data Subjects for the following purposes: i) management and organization of the event, including verification of registrations and allocation of spots; ii) organization of flights and associated logistics; iii) communication with the Data Subjects, including sending confirmations, notifications regarding acceptance or rejection of registration, and relevant event information; iv) provision of technical assistance and support related to registration and use of the Platform; v) compliance with legal and regulatory obligations applicable to the event.
How Publibalão Shares the Information It Collects
Publibalão may share the personal data of Data Subjects for the purposes of managing the relationship and providing support to Platform users, through the communication channels available with Publibalão. Data may thus be shared with the association Alentejo Sem Fronteiras – Clube de Balonismo, the Volunteer Fire Departments of participating locations, consultants providing legal, regulatory, and/or commercial advice, as well as with commercial partners in areas such as information security, Platform management, and others.
Any entity subcontracted by Publibalão will process the personal data of Data Subjects on behalf of and under the instructions of Publibalão. Publibalão ensures that such subcontracted entities provide sufficient guarantees regarding the processing of Data Subjects’ personal data, including the implementation and execution of appropriate technical and organizational measures to safeguard the rights of Data Subjects, as well as the security and protection of their personal data, ensuring that such data is processed in accordance with applicable legal requirements.
Publibalão may also share the personal data of Data Subjects with entities that provide fraud prevention services, both to protect the Data Subjects and Publibalão itself. The personal data shared for these purposes may include, for example, registration data, IP address, device ID, and location.
In certain situations, the personal data of Data Subjects may also be disclosed to third parties when such data sharing is necessary to comply with legal, judicial, or regulatory obligations, to carry out the purposes described above in Section 3, or when the Data Subjects have given their prior consent for such disclosure.
In any of the situations mentioned above, Publibalão undertakes to take all reasonable measures to ensure the effective protection of the personal data it processes.
Protection Measures Adopted by Publibalão
In order to keep the personal data of Data Subjects secure, Publibalão undertakes to comply with data protection legislation and to process all data solely for the purposes for which it was collected. Publibalão also commits to ensuring that personal data is handled with appropriate levels of security and confidentiality.
It is the responsibility of Data Subjects to ensure that the computers and other electronic devices they use to access the Platform are adequately protected against malicious software, computer viruses, and worms. Additionally, Data Subjects should be aware that without the adoption of proper security measures (for example, secure configuration of the web browser, up-to-date antivirus software, firewall software, and avoidance of software from untrusted sources), the risk of their personal data and passwords being unlawfully accessed by third parties is increased.
Retention of Personal Data
Publibalão retains the personal data of Data Subjects for as long as necessary to achieve the purposes described in Section 3 of this Privacy Policy and/or for the legally required period in accordance with the purposes pursued. The personal data collected is processed in strict compliance with applicable legislation and is stored in databases created specifically for this purpose.
Publibalão has implemented the necessary procedures and measures to ensure that the personal data of Data Subjects is not retained for longer than strictly necessary.
Data Subjects’ Rights Regarding Their Personal Data
Under the terms and within the limits set by applicable legislation, Data Subjects may, at any time, request access to their personal data, as well as its rectification, deletion, or restriction of processing, data portability, or object to its processing, by submitting a written request to the email address: [email protected]. In all cases, and without prejudice to any other administrative or judicial remedy, Data Subjects have the right to lodge a complaint with a competent data protection authority, namely the CNPD, or with another competent authority in the Member State of their habitual residence, place of work, or the country where the legal regime violation occurred, in accordance with the GDPR.
Cookies
Cookies are small text files automatically stored on the devices of Platform Users (such as computers, mobile phones, or tablets) when they access the Platform.
The Platform only uses the following category of cookies:
Strictly Necessary Cookies – required to ensure the operation of the Platform and/or to provide features requested by the Platform User, or to save preferences related to navigation on the Platform when using the same device, if requested. Strictly necessary cookies may be used, for example, to prevent fraudulent activity, enhance security, and for system administration.
Functional Cookies – which collect information to maintain user sessions and display preferences for events.
All other cookies — referred to as non-essential — will only be installed for statistical and analytical purposes, with the express consent of the Data Subject.
Changes to the Notice
Publibalão may, at any time and without prior notice, amend this Notice. In such cases, it will publish the revised version and update the “last updated” date. It is recommended that users regularly consult the most recent version of this Notice.
How to Contact Publibalão
Data Subjects may contact Publibalão to obtain more information about the processing of their personal data carried out specifically by Publibalão, as well as for any questions related to the exercise of their rights under applicable law, particularly those referred to in this Policy, via the following email: [email protected].
Published on October 23, 2025.