Last updated: 12 August 2026
The Sociedade Portuguesa de Fisiologia, hereinafter referred to as SPF, respects the privacy of the users of its website and is committed to processing personal data lawfully, fairly, transparently and securely, in accordance with Regulation (EU) 2016/679 — the General Data Protection Regulation (GDPR) — and other applicable national legislation.
1. Data Controller
The data controller is:
Sociedade Portuguesa de Fisiologia
Escola de Saúde – Universidade Lusófona
Campo Grande, 376
1749-024 Lisbon
Portugal
For any questions concerning privacy and personal data protection, data subjects may contact SPF at:
2. Personal Data We Process
Depending on how the website is used and the services requested, SPF may process, in particular, the following categories of personal data:
- first and last name;
- email address;
- telephone number;
- address, postal code, city and country;
- Tax Identification Number (NIF);
- information concerning professional activity and the institution or organisation with which the data subject is affiliated;
- information required for membership applications and membership management;
- information required for registration for congresses, events, courses, training activities and other initiatives;
- billing information;
- information relating to orders, registrations, membership fees and payments;
- identification document number, where requested and strictly necessary;
- proof of student status or other documentation required to grant special conditions;
- website user account information;
- information submitted through contact forms;
- technical data relating to the use of the website, such as IP address, browser information and technical security logs.
SPF seeks to limit the collection of personal data to what is strictly necessary for each specific purpose.
3. Purposes and Legal Basis for Processing
Personal data may be processed for the following purposes:
Membership Management
To process membership applications, manage the membership relationship, membership fees, benefits, communications relating to the activities of SPF and other obligations arising from membership.
Processing is based on the performance of the membership relationship and on steps taken at the request of the data subject prior to its formalisation.
Registration for Events, Congresses and Training Activities
To manage registrations, participation, payments, certificates, organisational communications and other matters related to congresses, scientific meetings, courses, training activities and other events promoted or organised by SPF.
Processing is necessary for the performance of the service requested by the participant.
Payments and Billing
To process membership fees, registrations, services and other transactions, issue the corresponding accounting and tax documents and comply with applicable legal obligations.
Processing is based on the performance of the requested transaction and compliance with legal obligations.
User Account Management
To enable the creation and administration of website accounts, authentication, consultation of orders or registrations and management of information associated with the user account.
Contacts and Requests for Information
To respond to messages, enquiries, requests for clarification, complaints or other communications sent to SPF.
Website Security and Operation
To ensure the security of systems, prevent misuse, fraud, unauthorised access and technical incidents, and ensure the proper operation of the website.
Communications and Newsletter
Communications necessary for the management of membership, registration or a requested service may be sent within the scope of that relationship.
Promotional communications or other communications requiring consent will only be sent where an appropriate legal basis exists. Where applicable, the data subject may withdraw consent or object to such communications in accordance with the applicable legislation.
4. Electronic Payments
SPF may provide electronic payment methods through specialised payment service providers.
Where REDUNIQ services are used, payment processing is carried out by UNICRE – Instituição Financeira de Crédito, S.A., in accordance with the terms applicable to the contracted service. REDUNIQ is operated by UNICRE.
Depending on the payment method and technical integration used, payment data may be entered or processed within the secure REDUNIQ/UNICRE payment environment.
SPF receives only the information necessary to identify the transaction, confirm its status, reconcile the payment and manage the corresponding registration, membership fee or purchase.
5. Recipients and Service Providers
Personal data may be processed by entities providing services to SPF, solely to the extent necessary for the provision of those services, including:
- website hosting and maintenance providers;
- email service providers;
- IT support providers;
- payment service providers;
- administrative, accounting or tax service providers;
- event and training organisers, where necessary.
Personal data may also be disclosed to public authorities or other entities where required by law.
SPF seeks to ensure that service providers processing personal data on its behalf provide appropriate guarantees regarding confidentiality and security.
6. Data Retention
Personal data is retained only for as long as necessary for the purposes for which it was collected, without prejudice to retention periods arising from legal obligations.
In particular:
- data relating to membership is retained for the duration of the membership relationship and thereafter for the period required to comply with legal obligations or to establish, exercise or defend legal claims;
- data relating to registration for events and training activities is retained for the period necessary for the organisation, delivery and administrative management of the relevant initiative and thereafter where there is a legal obligation or a justified need to retain evidence;
- documents and records of accounting or tax relevance are retained for the legally applicable period, which may extend to 10 subsequent calendar years;
- proof of student status or equivalent documents should only be retained for the period necessary to verify the condition that justified their collection, unless a legal obligation or duly justified need requires otherwise;
- data used exclusively for communications based on consent is retained for as long as the consent remains valid;
- contact requests are retained for the period necessary to process and follow up the request.
At the end of the applicable retention periods, personal data will be deleted or anonymised unless its continued retention is necessary to comply with a legal obligation or to establish, exercise or defend legal claims.
7. Rights of Data Subjects
Under the applicable legislation, data subjects may, where applicable:
- request access to their personal data;
- request the rectification of their personal data;
- request the erasure of their personal data;
- request restriction of processing;
- object to processing;
- request data portability;
- withdraw consent where processing is based on consent, without affecting the lawfulness of processing carried out before consent was withdrawn.
These rights correspond to the data subject rights recognised under the GDPR and by the Portuguese supervisory authority.
The exercise of these rights may be subject to limitations provided for by applicable legislation, particularly where certain information must be retained in order to comply with legal obligations.
Data subjects also have the right to lodge a complaint with the Comissão Nacional de Proteção de Dados (CNPD), the Portuguese Data Protection Authority.
8. Security
SPF implements appropriate technical and organisational measures designed to protect personal data against loss, misuse, alteration, disclosure or unauthorised access.
Access to personal data is limited to persons and entities that require such access for the performance of their duties or the provision of contracted services.
9. Cookies and Similar Technologies
The website uses cookies and similar technologies that are necessary for its operation, security, session management and the provision of functionalities requested by the user.
Where cookies or similar technologies that are not strictly necessary are used, their use will be subject to the applicable consent requirements.
Users may manage their preferences through the cookie management mechanism provided on the website.
Detailed information concerning the cookies used may be provided in a separate Cookie Policy.
10. Third-Party Content and Services
Some pages may include content or services provided by third parties, such as videos, maps or other external resources.
The use of such content may involve the processing of personal data by the relevant providers in accordance with their own privacy policies. Prior consent will be requested whenever legally required.
11. Changes to this Privacy Policy
SPF may update this Privacy Policy whenever necessary, including as a result of legislative, regulatory or technological changes, or changes to the services made available through the website.
The updated version will be published on this page, together with the date of the latest update.
12. Contact
For any questions concerning this Privacy Policy, the processing of personal data or the exercise of data protection rights, data subjects may contact:
Sociedade Portuguesa de Fisiologia
Email: geral@sociedadefisiologia.pt