Privacy

Who is responsible

MOV.AP — Movimento de Cidadãos de Avelãs de Ambom e Pêra do Moço (informal group), contact: [email protected].

What data we collect, and why

The identity document number is asked for only on the petition, because the law requires it[1]. We never publish names.

On what basis

Signing a petition, voting or receiving our news can reveal your opinion about the project. So we only process this data with your explicit consent, given separately for each purpose, with boxes that start unticked[2][3]. We keep the date, the form version and the exact text we showed you, to prove consent[3].

Who we give the data to

• Assembleia da República (AR petition): name, document type and number. The AR may check, by sampling, that identifications are genuine[1]. Above 1,000 signatures the petition is published in the Diário da Assembleia da República; in practice, the text and the first signatory are published[1].
• Guarda's Câmara Municipal and Assembleia Municipal (municipal petition): the same data, for the same purpose.
• Brevo (Sendinblue SAS, France): the service that sends every email the site sends: the petition signature confirmation, the voting code, the subscription confirmation and update emails, if you ask for them. It receives the email address and the content of each message (for the petition, the list of petitions you signed); it does not receive your name, your identity document number or how you voted.
• WhatsApp: we collect no phone numbers. The WhatsApp channel does not show your number to the admins or to other followers[4].

The site is hosted on a server run by MOV.AP. Brevo (Sendinblue SAS, France, EU) processes, as processor, the email address of everyone we send an email to (petition, vote or updates) and keeps technical sending logs under its own terms; the list of people who asked for updates stays at Brevo until they unsubscribe. We do not sell the data or use it for anything else.

International transfers

We do not transfer data outside the European Economic Area; if the provider does, the GDPR safeguards (standard contractual clauses) apply.

For how long

• Petition: until the petition is delivered and the procedure ends; we delete it 6 to 12 months after the final decision or archiving.
• Vote: the email digest is deleted when the vote closes. Only totals by answer, parish group and day remain.
• Updates: until you unsubscribe. After about 24 months without activity we ask you to confirm, or delete.
• Consent records: as long as we keep the data they relate to, and then for the legal period.

A consequence of the anonymous vote

Your vote is stored with no link to you: we do not keep your email with the vote. So, once confirmed, a vote cannot be changed or deleted per person. If you ask us to delete your data, we delete the email digest that prevents double voting; the vote stays counted, without identification.

Your rights

You can ask for access, rectification, erasure, restriction, portability or objection, and withdraw consent at any time, by writing to [email protected]. Withdrawing consent does not invalidate what was done before. Every update email has an unsubscribe link.

You can also complain to the Comissão Nacional de Proteção de Dados (CNPD), the Portuguese data protection authority, at www.cnpd.pt[5].

Security

Document numbers are encrypted and only 1 or 2 people with the administrator role can access them. If there is a data breach, we report it to the CNPD within 72 hours.

No tracking cookies

This site uses no tracking cookies or advertising, and its pages make no requests to third-party services from your browser. We count page visits on our own server without storing IP addresses.

The forms (petition, vote and updates) use a single, strictly necessary security cookie: it protects against forged requests from other sites (antiforgery), identifies no one, does not follow your browsing and is deleted when you close the browser. Because the form cannot work without it, it needs no consent. The admin area also uses a session cookie, only for those who sign in there.

Other information

Giving your data is voluntary, but without it you cannot sign or vote. No automated decisions are made about you. To vote or receive updates you must be 16 or over.