Amigos dos Pequeninos
PTEnrolmentRHApp

Privacy Policy

Last updated: 27 October 2026. This is a translation; in case of discrepancy, the Portuguese version prevails.

1. Who is the data controller

The controller of the personal data collected on this website is Instituição Amigos dos Pequeninos de Silves, a private social solidarity institution (IPSS), tax number (NIF) 501 437 010, registered office at Largo 1.º de Maio, 8300-116 Silves, Portugal.

For any privacy question or to exercise your rights, write to secretaria@amigosdospequeninos.com or direcao@amigosdospequeninos.com, or call +351 282 440 120.

This policy covers the website www.amigosdospequeninos.com. The institution's platforms reached from it (for example, the enrolment platform and parents' area at app.amigosdospequeninos.com) are not covered by this policy.

2. What data we process, why, and for how long

We only process the data we need for each purpose. We do not sell personal data, we do not buy data from third parties and we do not build advertising profiles.

Browsing the website

Data
IP address, date and time of access, page requested, browser type and operating system, logged automatically by the server.
Purpose
To run the website, keep it secure and prevent abuse (for example, limiting repeated form submissions).
Legal basis
The institution's legitimate interest in keeping the website secure and available (Article 6(1)(f) GDPR).
Retention
Technical logs are kept for a short period and then deleted.

Contact form

Data
Name, email address, subject and message.
Purpose
To reply to your request. The message is emailed to our office and is not stored on the website.
Legal basis
Legitimate interest in replying to people who contact us and, where relevant, steps taken at your request before entering into an agreement (Article 6(1)(b) and (f) GDPR).
Retention
As long as needed to deal with the matter and any follow-up.

Membership application

Data
Name, email, phone, date of birth, address, postcode, town, tax number (NIF) and an optional message.
Purpose
To assess your application and, if accepted, to manage your membership (fees, notices of meetings and communications to members).
Legal basis
Steps prior to and performance of the membership relationship (Article 6(1)(b) GDPR) and compliance with legal and tax obligations (Article 6(1)(c)).
Retention
For as long as you are a member and afterwards only for the periods required by law. Applications that do not lead to membership are not kept longer than necessary.

Whistleblowing channel

Data
The content of the report and any attachments. Identification (name, email, phone, relationship with the institution) is optional: you may report anonymously.
Purpose
To receive, record and follow up reports of breaches under the Portuguese whistleblower protection regime.
Legal basis
Compliance with a legal obligation (Article 6(1)(c) GDPR and Law no. 93/2021 of 20 December).
Retention
At least 5 years and, in any case, for as long as any judicial or administrative proceedings relating to the report are pending (Article 20 of Law no. 93/2021). Data clearly irrelevant to the report is deleted.

Job applications

Data
Whatever you include in the CV and message you send to vicepresidente@amigosdospequeninos.com.
Purpose
To assess your application for the position you applied for.
Legal basis
Steps taken at your request before entering into a contract (Article 6(1)(b) GDPR). To keep your CV for future vacancies we ask for your consent (Article 6(1)(a)).
Retention
Until the end of the recruitment process or, with your consent, up to 2 years for future vacancies.

Suggestions and contact by email or phone

Data
Whatever you send us. The suggestions form opens your own email programme; nothing is stored on the website.
Purpose
To consider your suggestion or reply to your request.
Legal basis
Legitimate interest in improving our services and replying to people who contact us (Article 6(1)(f) GDPR).
Retention
As long as needed to deal with the matter.

3. Cookies and storage in your browser

This website does not use advertising or analytics cookies and does not use tools such as Google Analytics.

  • Strictly necessary cookies: only set in the restricted area (back office and whistleblowing channel management), to keep authorised users signed in.
  • Accessibility preferences: if you use the accessibility button (text size, contrast, motion), your choice is stored only in your browser and is never sent to us.

4. Third-party content

Some pages show content from other organisations, which may collect data under their own policies:

  • Google Maps (Contact page): when the map loads, Google may receive your IP address and set cookies.
  • Google Forms: some forms (for example, the volunteering form) are filled in on Google's website.
  • The institution's platform (app.amigosdospequeninos.com): birthday party requests and enrolment take place on that platform.
  • Social networks (Facebook, Instagram, YouTube, TikTok): the icons are plain links; nothing is shared with these networks until you open them.

5. Who we share data with

Data is accessed only by the institution's staff who need it for the purpose concerned. We use service providers that process data on our behalf, under contract and with appropriate safeguards:

  • website hosting: Amazon Web Services, on servers located in the European Union;
  • sending and receiving email: Microsoft 365.

We may also disclose data to public authorities (for example, courts, the Public Prosecutor's Office or the authorities competent for whistleblowing reports) where the law requires it.

If any of these providers processes data outside the European Economic Area, the transfer relies on the safeguards set out in the GDPR, such as European Commission adequacy decisions or standard contractual clauses.

6. Your rights

Under the GDPR you have the right to:

  • access your data and obtain a copy;
  • have inaccurate or incomplete data corrected;
  • have your data erased where there is no legal reason to keep it;
  • restrict processing, or object to it where it is based on legitimate interest;
  • receive the data you gave us in a structured format (portability);
  • withdraw your consent at any time, where processing is based on consent.

To exercise these rights, contact us using the details in section 1. We reply within one month. In the whistleblowing channel, some rights may be limited to protect the confidentiality of the whistleblower and of the persons concerned, as provided by Law no. 93/2021.

You also have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD), www.cnpd.pt.

7. Security

The website uses encrypted connections (HTTPS). Data stored on the website can only be viewed by authorised people after signing in, and the whistleblowing channel has separate access reserved for the people designated to manage it. Report attachments are never public.

8. Children

This website is not intended to collect data from children. Children's data needed for enrolment is processed on the enrolment platform, with the involvement of parents or guardians.

9. Changes to this policy

We may update this policy when our processing or the law changes. The date of the last update is shown at the top of the page. Any questions? Contact us.