The National Center for Advanced Computing (CNCA) ensures compliance with the legal obligations arising from Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and other applicable and related legislation on the protection of personal data, in the processing of personal data that it carries out.

Who is the “Controller” of the personal data processing?

CNCA, with headquarters at Av. do Brasil 101, Lisbon, is the controller responsible for the processing of personal data of the infrastructure users.

For what purpose will personal data be processed?

The processing of users’ personal data aims primarily at managing registration requests and/or access to the services provided by CNCA.

What personal data will be processed?

In the context of providing products and/or services, CNCA will process the following user data: identification and contact details, institution of origin, position within the institution, publications and scientific results, association with projects requesting the infrastructure’s services and their objectives. CNCA also collects data relating to the use of its services and network access carried out by users.

How will my personal data be processed?

Users’ personal data will be processed by CNCA using appropriate technical and organisational measures to ensure their security and confidentiality, namely with regard to unauthorised or unlawful processing and accidental loss, destruction, or damage.

Who are the recipients of my personal data?

Users’ personal data may be made available to CNCA’s supporting entities for the purpose of justifying the support received, namely through public reports on the execution of funding and centralised accounting of service usage.

Users’ personal data will not be disclosed to third parties for commercial purposes.
In compliance with legal obligations, personal data may be transmitted to judicial, administrative, supervisory, or regulatory authorities, as well as to entities that lawfully carry out data compilation or statistical activities.

For how long will my personal data be processed?

Personal data will be retained for as long as necessary to process requests and/or provide access to the services offered by CNCA. After the end of this relationship, the data will be retained for the minimum period necessary for CNCA’s legal protection. The data will then be anonymised and retained for infrastructure usage statistics.

What rights do I have regarding my personal data?

CNCA users have the right to:

• Request and receive all relevant information regarding the processing of personal data;
• Request access to their personal data, namely to obtain confirmation that their personal data are being processed and to receive a full copy thereof;
• Request the rectification, erasure, or restriction of the processing of personal data.

Users also have the right to lodge a complaint with the competent supervisory authority, the Portuguese Data Protection Authority (Comissão Nacional de Proteção de Dados – CNPD), if they consider that the processing of their personal data violates their rights and/or applicable data protection laws.

Who can I contact to obtain answers to my questions about the protection of my personal data?

Users may, at any time, via the email helpdesk@acnca.pt:

i) Exercise the rights enshrined in the Personal Data Protection Law and other applicable legislation;

ii) Contact CNCA’s Data Protection Officer regarding any questions related to the protection and privacy of their personal data.