The FCCN Unit of the Foundation for Science and Technology, IP (FCT) is responsible for the development and maintenance of technological areas in the communications infrastructure and advanced services related to research, science and education.
As an administrative entity with strong commitments in the area of research in science, technology and innovation in all areas of knowledge, FCT is committed to respecting the principles applicable to data protection and strengthening the legal protection of personal data subjects in strict compliance with applicable legislation, specifically the provisions of Article 35 of the Constitution of the Portuguese Republic, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data – General Data Protection Regulation (GDPR), Law No. 58/2019 of 8 August, which ensures the implementation of the GDPR in the national legal order, and Law 59/2019 of 8 August, which approved the rules on the processing of personal data for the purposes of the prevention, detection, investigation, or prosecution of criminal offences or the execution of criminal penalties.
In carrying out its duties, the FCT is an integral part of the measures implemented in the current scientific policy regime defined throughout the European Union, which includes measures to simplify administrative procedures necessary for the pursuit of research and development (R&D) activities.
In compliance with these guidelines, this website was created, accessible at the URL: https://www.fccn.pt , through which all relevant information related to the FCCN's scope of action is made available to users and the scientific community, ensuring user integration within the national science, technology and scientific computing environment.
Without prejudice to the obligations arising from data protection legislation, the creation and maintenance of this website as a system for collecting, recording and analyzing data on science and technology is also provided for by Decree-Law No. 156/2019 of 22 September, which regulates the creation and maintenance of a system for collecting, recording and analyzing data on science and technology.
In this context, this Privacy Policy aims to inform about how FCT processes the data provided to it by users, for what purposes, with whom it is shared, the retention period, as well as the different ways in which users can contact FCT to learn about and exercise their rights.
Information regarding the processing of personal data in accordance with the new General Data Protection Regulation (GDPR):
Data Controller
FCT assumes the role of controller of personal data, with headquarters at Av. D. Carlos I, 126, 1249-074 Lisbon, telephone: +351 21 3924300.
Data Protection Officer
FCT has appointed a Personal Data Protection Officer, who should be contacted directly via email at dpo@fct.pt on all issues related to the processing of personal data processed under this Privacy Policy.
Data Collection Data Subject Categories and Data Categories
Personal data is collected directly from the data subject with regard to:
• Pre-adherence to the Science, Technology and Society Network (RCTS), by completing and subsequently submitting data;
• Recruitment and spontaneous application processes;
• Contact requests to obtain information regarding FCCN’s activities;
• Newsletter subscription;
The data collected relates to the following categories of data subjects: researchers, teachers, users of higher education institutions, students and scientific staff involved in the Portuguese scientific system, as well as all website users.
The data collected relates to the following categories: civil identification data and contact data including IP address (internet protocol), tracking data (access logs) and professional data.
Purposes of Personal Data Processing
Personal data processed through the FCCN website are intended for the purpose of managing and developing digital infrastructures for science, technology and research and development (R&D) activities.
Grounds for the Lawfulness of Processing
The processing of personal data relating to the FCT website complies with the principles of lawfulness, fairness, transparency and limitation of the retention period, based on the purposes of article 6 of the GDPR, paragraphs c) and e): compliance with legal obligations of the FCT and the exercise of functions in the public interest, arising from Decree-Law no. 55/2013, of April 17, which defined the mission and attributions of the FCT, and from Order no. 216/2015 of July 21, which approved the respective statutes.
This website interacts with other systems within the national and international scientific community. These systems, hereinafter referred to as "third-party systems," only have access to users' personal data in accordance with their instructions, which may be revoked at any time. The FCT considers that allowing access to this data through this website constitutes a personal data processing operation for which there is no legal basis, and therefore its lawfulness is based on prior consent in accordance with Article 6, paragraph a), of the GDPR.
Data Subject Rights
As holders of personal data, you may exercise, within the limits of the law, the following rights:
• Right of access: the data subject has the right to obtain confirmation from the FCT (responsible for processing) regarding the processing of his/her personal data, as well as to access such data and request information about the processing thereof.
• Right of rectification: the data subject has the right to obtain, rectify inaccurate personal data and complete incomplete personal data.
• Right to erasure: the data subject has the right to obtain the erasure of his/her personal data, without prejudice to the established retention periods.
• Right to restriction of processing: the data subject has the right to obtain the restriction of processing.
• Right to portability: the data subject has the right to receive personal data concerning them collected through this website in a structured, commonly used, and machine-readable format. They also have the right to have their personal data transmitted directly to other data controllers.
• Right of opposition: the data subject has the right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her, including profiling. The FCT will cease processing personal data unless it demonstrates compelling legitimate grounds for such processing that override the interests, rights, and freedoms of the data subject, or for the establishment, exercise, or defense of legal claims.
• Right to withdraw consent: the data subject has the right to withdraw consent at any time, provided that the data processing is based on consent and provided that there is no other legal basis that allows such processing.
• Right to complain to the National Commission for the Protection of Personal Data (www.cnpd.pt), if you consider that any of the listed rights are being violated.
Subcontractors
The provision of information or services by FCT to users may involve the use of services from third-party subcontractors with access to the personal data of said users.
Subcontracting entities that process personal data on behalf of the FCT are required to provide, in writing, sufficient guarantees regarding the implementation of appropriate technical and organizational measures to comply with current legislation on privacy and personal data protection and to ensure the protection of the rights of the data subject, with such guarantees being formalized in a contract signed between the FCT and each of these third parties.
Communication of Personal Data to Subcontractors and Third Parties
Personal data may be transferred to subcontractors for processing on FCT's behalf. In this case, FCT will take the necessary contractual measures to ensure that the subcontractors respect and protect the data subject's personal data.
Personal data processed within the scope of the FCT website are available, through an interface, in accordance with the law, to other institutional information systems, such as Ciência Vitae and other FCT systems, the Directorate-General for Education and Science Statistics (DGEEC); the Directorate-General for Higher Education (DGES); the Scientific and Teaching Employment Observatory, and the Digital Skills Observatory of the National Institute of Statistics (INE). In this context, in addition to the duties provided for in the GDPR and other applicable legislation, those responsible for processing personal data, as well as all individuals who, in the course of their duties, become aware of such data, are strictly bound by the duty of professional secrecy, even after the termination of their duties.
Other systems (“third-party systems”) with access to personal data on instructions from the data subject are not covered by this privacy policy.
Transfer of data to third countries
For the processing of personal data within the scope of this website and for the indicated purpose, there is no transfer of personal data outside of Portugal.
Retention period
The retention period for personal data is that which is established by law or regulation or, in the absence thereof, that which is necessary for the pursuit of the purpose for which it was collected and processed.
However, in the case of processing for archiving purposes in the public interest, for scientific or historical research purposes, or for statistical purposes, the FCT may retain some of the data for longer periods, without prejudice to applying appropriate guarantees of the rights and freedoms of the data subject, in accordance with the legislation in force.
These guarantees imply the adoption of technical and organizational measures aimed at ensuring, in particular, compliance with the principle of data minimization and pseudonymization.
Measures adopted to guarantee the security of personal data
To ensure the protection of personal data, the FCT implements strict, internationally recognized rules that apply to all those who legally handle personal data.
Accordingly, technical and organizational security measures are implemented to protect the personal data provided to FCT, as well as the confidentiality, integrity, and authenticity of the data processed. Personal data stored by FCT is encrypted and anonymized whenever possible and subject to access control based on the principle of least privilege.
The FCT continually reviews its information quality and security practices to ensure, on the one hand, continuous improvement and, on the other, monitoring new cyber threats and implementing the necessary countermeasures.
Notification and complaint
Without prejudice to sending direct notification to the FCT, through the contacts available at https://www.fct.pt/contactos, you can complain directly to the National Data Protection Commission (www.cnpd.pt), using the contacts provided by this entity for this purpose.
Changes to the privacy policy
This Privacy Policy may be updated, so we recommend checking it regularly. Changes are considered effective from the date they are posted on this website, with express reference to the update date.