Privacy Policy
Last updated: 25 August 2026
This page tells you what happens to your personal data when you use all-portugal-festival.com, why we need it, how long we keep it, and what you can ask us to do about it.
1. Who is responsible for your data
all-portugal-festival.com (All Portugal Festival) is owned and operated by DESCOBRILANÇA UNIPESSOAL LDA, sociedade por quotas, unipessoal (a private limited company with a single shareholder), NIPC 516940503. Registered office: Rua 2 da Matinha, Urbanização da Matinha, Lote A, 5D, Armazém J, 1950-073 Lisboa, Portugal.
That company is the data controller (responsável pelo tratamento) under the General Data Protection Regulation (GDPR).
Synthesis Open Gate Portugal Association is a separate non-profit legal entity with its own privacy policy. Part of the festival programme is made together with the Association. The data you leave on this site is the responsibility of DESCOBRILANÇA UNIPESSOAL LDA.
Questions about your data, withdrawal of consent, and any of the requests in section 9: team@allcountries.online. Every message gets read and answered.
2. What we collect, and where it comes from
We buy no contact lists and gather nothing about you elsewhere. Everything we hold, you gave us, in one of these situations.
Your member account. Login and email address, whatever you added to your profile, the history of your tickets and applications. Accounts on this site go back to February 2024, so if you registered a long time ago, yours is probably still here. Section 8 explains how to close it.
Tickets and festival registration. Name, contact details, number of places, ticket type.
Application to take part in the festival. What you or your business does, what you would offer festival guests, and how to reach you.
Booking a stand or a participant package. The package you chose, the dates, what it includes, your contact details and the details needed to issue an invoice.
Forms on the site. Your name, email address, phone number if you added one, and whatever you wrote to us.
Groups and discussions. Everything you wrote in a group on this site, including the name you wrote it under. Group discussions are visible from outside.
Chat on the site. Your messages and ours, with the time they were sent.
Payments. Amount, currency, date, transaction reference, payment status. Your card number never reaches us and is never stored by us. Wix handles it on its own systems.
Technical data. IP address, browser type, pages visited. That belongs to section 6.
3. Why we process your data, and on what legal ground
To do what you asked us to do. Sell you a ticket, register you for the festival, set up your participant package, run your account. This also covers the steps you asked us to take before any contract exists: quoting a price, choosing a package, answering a request. Ground: article 6(1)(b) GDPR.
To keep our books and pay our taxes. Invoices, receipts, payment records. We have no discretion here. Ground: article 6(1)(c) GDPR.
To reply to you and to consider your application. When you write through a form or the chat, we answer and keep the exchange. Reviewing applications to take part belongs here too. Ground: article 6(1)(f) GDPR, our legitimate interest in answering messages addressed to us. You can object under article 21 GDPR.
To protect the site and the people using it. Blocking spam, intrusion attempts, fraudulent orders. Ground: article 6(1)(f) GDPR.
To send you our newsletter and to load non-essential cookies. Only with your consent, and only until you take it back. Ground: article 6(1)(a) GDPR.
We ask for consent where consent is genuinely the ground. Tickets, packages and invoices do not run on consent, and we do not pretend otherwise.
4. How long we keep it
Data you send through forms on this site is kept for three years from your last contact with us.
Accounting and tax records, including invoices, payment records and participant contracts, must be kept longer, for the period set by Portuguese tax law: article 123(4) of the Corporate Income Tax Code (Código do IRC) and article 52 of the VAT Code (Código do IVA).
Your account stays for as long as you use it. If nobody signs in for 36 months in a row, we write to the address it is registered to and delete it 30 days later. You can close it sooner at any time, see section 8.
Ticket data is kept for as long as running the festival and its accounting records require.
Messages you left in a group stay in the group until you delete them or the group closes.
The address you gave us for the newsletter stays until you unsubscribe.
5. Who receives your data
We do not sell your data and we do not rent it out.
Wix.com Ltd., the platform this site runs on. It processes data on our instructions, payments included. Your card details go there, not to us.
Our certified accountant (contabilista certificado). Invoices and payment records go to them. Your correspondence with us does not.
Autoridade Tributária e Aduaneira (the Portuguese tax and customs authority), as part of mandatory reporting and only to the extent it requires.
Other group members and site visitors see what you wrote in an open group.
Beyond that, data may be disclosed where a court or another competent authority makes a binding request. We check such a request rather than act on it automatically.
Some of these companies may process data outside the European Union. Those transfers rely on European Commission adequacy decisions and on standard contractual clauses under Chapter V GDPR.
6. Cookies
Essential cookies load immediately, because the site would not open without them. Everything else waits for your consent.
7. Newsletter
We send festival news and invitations only to people who asked for them. Consent is given separately from everything else: the box is never pre-ticked and never buried inside checkout terms. That is what article 22 of Decreto-Lei n.º 7/2004 requires.
Every message carries an unsubscribe link. One click, no explanation needed. After you unsubscribe, your address stays on a suppression list so we do not write to you again by mistake.
Messages about your ticket, application or invoice are not marketing and reach you whether or not you subscribed.
8. Your member account
If you created an account, it holds your email address and login, whatever you added to your profile, the history of your tickets and applications, correspondence tied to that account, and your group activity.
You can edit your profile at any time once logged in.
To delete the account, write to team@allcountries.online from the address it is registered to. We will remove it and the data attached to it, and confirm that to you by email. What stays is only what tax law obliges us to keep, meaning invoices and payment records, and we detach those from your profile. Messages you left in groups are removed with the account unless you ask us to leave them.
This is your right under article 17 GDPR, and we do not ask why.
9. Your rights
You have the right:
to know what data of yours we hold and receive a copy;
to have inaccurate data corrected;
to ask for deletion;
to ask us to restrict processing;
to receive your data in a portable format;
to object to processing based on our legitimate interest;
to withdraw consent where processing rests on it. Withdrawal applies going forward and does not undo what was done while the consent was valid.
These are articles 15 to 22 GDPR. Write to team@allcountries.online and we will reply within the one month set by article 12(3) GDPR.
If you believe we handled your data wrongly, you can lodge a complaint with the Portuguese supervisory authority: Comissão Nacional de Proteção de Dados, www.cnpd.pt.
10. Children at the festival
The festival has a children's area, but we do not collect children's data through this site. Tickets and applications are made by an adult, and every form on this site is addressed to an adult.
Where photography and filming take place at the festival, we say so at the entrance and on the event pages. If you would rather your child stayed out of shot, tell us and we will work around it. The right to one's own image is protected by article 79 of the Portuguese Civil Code (Código Civil), and for a child that right is exercised by the parent.
11. Changes to this page
We update this page when what it describes changes. The date at the top says when that last happened. If a change is significant, we tell you directly.