Ave. Infante D. Henrique, 311
Espazo Building
1950-421 Lisbon
PORTUGAL
Organized by
Privacy Policy
Privacy Policy
Privacy Policy
The PSTQB – PORTUGUESE SOFTWARE TESTING QUALIFICATIONS BOARD , headquartered at FEUP – Faculty of Engineering of the University of Porto, located at Rua Dr. Roberto Frias, s/n, 4200-465, legal entity and tax number 509 326 781, a private non-profit association (hereinafter referred to as “PSTQB”).
The objectives of PSTQB are to develop, promote, and foster the qualification and recognition of testing professionals and careers, the debate and sharing of knowledge and experiences, research, innovation, and standardization in the field, and the Portuguese presence in international forums.
As part of its activity, PSTQB collects personal data from its owners, either in person or remotely, ensuring that it is processed in accordance with the privacy protection rules set out in Regulation (EU) 2016/679 (“GDPR”) and other applicable national legislation, as well as in accordance with the confidentiality obligations to which the PSTQB is subject.
The data collected corresponds to data provided by the data subjects themselves or their legal representatives by filling out forms, such as the following:
Contact form, through digital channels;
Associate registration form;
Registration form for certification exams;
Form present on the cover sheet(s) of the exam(s)
Responsible for Processing
The entity responsible for processing personal data is PSTQB, insofar as it is responsible for determining the purposes and means of processing the data in its possession.
Data Processed by the PSTQB
What is personal data?
Personal data means any information, of any nature and regardless of its medium, relating to an identified or identifiable natural person. An identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identification number or to one or more factors specific to his or her physical, physiological, mental, economic, cultural, social, religious, health, or criminal identity. We ask that you do not send us sensitive personal data, such as identification numbers or one or more specific elements of your physical, physiological, psychological, economic, cultural, social, religious, health, or criminal background, or other information via electronic means. If such information is necessary for a specific purpose, it should only be provided in person and never via the web.
Who are the personal data subjects?
The personal data subjects are Associates, Exam Candidates, Employees, Partners, or individuals to whom the data pertains and who use the services provided by PSTQB, collaborate with it, or enter into a relationship with it in any contact with PSTQB.
What is personal data?
It corresponds to all data necessary to become a PSTQB Associate, take Exams, or participate in the Conference or other events organized by PSTQB.
Purposes of Processing
The PSTQB processes personal data on its own behalf, but may also do so on behalf of and in representation of third parties in the following situations:
Provision of services within the scope of Certification:
Conducting Certification Exams;
Issuing and sending the Certificate, in case of approval;
On behalf of its international representative – ISTQB® – International Software Testing Qualifications Board;
On behalf of its international partner – GASQ Service GmbH
Communication of an administrative nature;
Compliance with legal obligations;
Financial management;
Sending a newsletter and other commercial information;
Promotion of events organized by PSTQB
Testing Portugal Conference;
PSTQB Sessions Events;
Social media management (LinkedIn, Instagram, Facebook, Twitter, etc.)
It should be noted that the purposes listed here are not exhaustive, and others may derive from these as far as possible. If there is a new purpose independent of the previous ones, PSTQB will inform the data subject on a case-by-case basis at the time of collection of personal data.
Basis for Data Processing
The PSTQB will only process personal data to the extent that such processing is lawful and necessary. The processing of personal data is only lawful if and to the extent that at least one of the following situations applies:
Consent: When the data subject has given their prior, express consent in writing, orally (after ratification, where necessary), or through the validation of an option, if such consent is freely given, informed, specific, and unambiguous for the processing of their personal data for one or more specific purposes referred to above.
Compliance with legal obligations: When the processing of personal data is necessary to comply with a legal obligation to which PSTQB is subject, such as, for example, the communication of identification data to police, judicial, tax, or regulatory entities.
Legitimate interest: When the processing of personal data corresponds to a legitimate interest of PSTQB or third parties (such as the processing of data to improve the quality of the service provided) and when PSTQB's reasons for its use should prevail over data protection rights.
Defense of the vital interests of the data subject or another natural person: The processing of personal data shall also be considered lawful when it is necessary to protect an interest essential to the life of the data subject or any other natural person. In principle, the processing of personal data based on the vital interest of another natural person may only take place when the processing cannot be based on another legal basis. Some types of processing may serve both important public interests and the vital interests of the data subject, for example, if the processing is necessary for humanitarian purposes.
Exercise of tasks carried out in the public interest: When processing is necessary for the performance of tasks carried out in the public interest or in the exercise of official authority vested in the controller.
Data Communication and Subcontractors
The PSTQB will not transmit personal data to third parties, except if:
it has obtained express consent to do so from the data subject;
the communication is necessary for the performance of a contract, agreement, or service award to which the data subject is a party;
the transmission is carried out in compliance with a legal obligation or to comply with a court order;
the communication is carried out for any legitimate purpose provided for by applicable law.
PSTQB is required by law to communicate the personal data of its Exam Candidates and Members to regulatory bodies and other public authorities/official entities.
Retention period for Personal Data
The PSTQB will keep processing data as long as it's needed for the relationship with the data subjects. Once the relationship ends, PSTQB will only keep personal data for as long as it's needed to fulfill the defined purpose and/or for the mandatory legal periods, or until the rights and duties arising from that relationship expire, according to the law.
Rights of Data Subjects
Under applicable law, data subjects have the following rights:
Right to Information, which consists of the right of data subjects to be informed by PSTQB about all aspects relating to the collection and processing of their personal data, namely
The purposes for which their data is processed
To whom it may be disclosed;
What rights they have;
Under what conditions they can exercise them;
What data they must provide in the context of their relationship with PSTQB, in a clear, concise, and completely transparent manner;
Right of Access, which consists of the right of Data Subjects to access the personal data they have provided, without restrictions, delays, or excessive costs, as well as to know any available information about the origin of that data;
Right of Rectification, which consists of the right of Data Subjects to demand that their data be accurate and up-to-date, and to request its rectification from PSTQB at any time;
Right of Erasure, which consists of the right of Data Subjects to demand the erasure of their personal data from PSTQB's records when it is no longer used for the purposes for which it was collected, without prejudice, however, to the retention periods that apply by law and legitimize its processing;
Right to Object, which consists of the right of Data Subjects to object, upon request and free of charge, to the processing of their personal data for direct marketing purposes;
Right to Portability, which consists of the right of Data Subjects to receive their personal data provided to PSTQB in a structured, commonly used, and machine-readable format, and to transmit that data to another controller, where technically feasible.
Right to Restriction of Processing, which consists of the right of Data Subjects to request PSTQB to restrict the processing of their data in certain circumstances, namely: (i) when they contest the accuracy of their personal data, for a period enabling PSTQB to verify its accuracy; (ii) if the processing is unlawful and the Data Subject opposes the erasure of the data, requesting, in return, the restriction of its use; or (iii) when PSTQB no longer needs the Data Subject's personal data for processing purposes, but such data is required by the Data Subject for the purposes of declaring, exercising, or defending a right in legal proceedings;
Right to lodge a complaint with the CNPD, which consists of the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place where the alleged infringement was committed, without prejudice to any other administrative or judicial remedy. if the data subject considers that the processing of personal data concerning him or her violates the GDPR and other applicable national legislation. In Portugal, the supervisory authority is the National Data Protection Commission (CNPD).
If data processing is based on consent, the data subject has the right to withdraw consent at any time, without compromising the lawfulness of the processing carried out on the basis of the consent previously given.
The data subject is guaranteed the exercise of any of their rights by sending a written request to PSTQB, sent by registered mail to the following address:
PSTQB – Associação Portuguesa de Testes de Software, Avenida Infante D. Henrique, 311, 1950-421 Lisboa, PORTUGAL;
ou através do seguinte endereço eletrónico: rgpd@pstqb.pt.
The provision of incorrect or inaccurate data is the sole responsibility of the data subject.
Data Protection Officer
The Data Protection Officer (DPO) ensures, among other things, that data is processed in accordance with current legislation, verifying compliance with this Privacy Policy. The DPO also cooperates with the supervisory authority and provides information and advice to the data controller on their obligations in the area of privacy and data protection. For any clarification regarding this Privacy Policy, the Data Subject may contact the PSTQB Data Protection Officer at the following email address rgpd@pstqb.pt, or by registered mail sent to the attention of “DPO-PSTQB” at the following address: Avenida Infante D. Henrique, 311, 1950-421 Lisbon, PORTUGAL.
Digital Channels and Use of Cookies
The PSTQB collects and processes the personal data necessary for the availability and operation of its Websites, also known as Digital Channels, while ensuring adequate levels of security and protection of personal data for data subjects who use them and provide personal data through them.
The following websites are owned by PSTQB:
https://pstqb.pt/en/
https://www.testingportugal.pstqb.pt/en/
As such, various physical, logical, technical, and organizational security measures have been adopted to protect personal data against its dissemination, loss, misuse, alteration, unauthorized processing or access, as well as against any other form of unlawful processing.
Notwithstanding the security measures adopted by PSTQB, the Owner/User of the Digital Channels must keep any access codes they may have secret, not sharing them with third parties, and, in the particular case of mobile devices, keep and maintain the device on which they access the Digital Channels in secure conditions and follow the security practices recommended by the manufacturer and/or operator, particularly with regard to the installation and updating of the necessary security applications, namely antivirus software.
The PSTQB uses cookies on its Digital Channels. Cookies are small text files containing relevant information that are stored on the access device (computer, mobile phone/smartphone, tablet, or other) and loaded by the internet browser when a website is visited by the Owner/User. namely allowing the storage and retrieval of information about the browsing habits of a user of a device, and, depending on the information they contain and how the device is used, they can be used to recognize the Owner/User.
The cookies used by PSTQB respect anonymity and will not be used to collect any personal information. The information stored in the cookies mentioned here is used exclusively by PSTQB, with the exception of Google Analytics, which is used and maintained by Google for statistical and research analysis purposes. The websites use the Google Analytics service, whose cookies and privacy policy can be found at:
https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage#gajs
and
https://www.google.com/intl/pt-PT/policies/
The use of cookies is standard practice among Internet websites, and most browsers allow users to enable, block, or delete cookies installed on their devices by configuring their options. If you block them, certain services that require them may not be available for use. If you want to restrict, block, or delete cookies from this website, you can disable cookies by changing your browser settings (each browser has different settings, so you should read your browser's instructions and manuals for more information on how to operate and control cookies). However, if you select this setting, you may not be able to access certain parts of the PSTQB websites or your browsing may be less effective.
These Digital Channels may contain links to other websites over which PSTQB has no control, nor is it responsible for their content. The inclusion of links to other websites is done solely for informational purposes and without any link or responsibility for the content, owners, services or products offered. PSTQB reserves the right to demand the removal of any connection it considers inappropriate, this being its sole responsibility. The content of the Digital Channels owned by PSTQB may not be fully or partially integrated into the structure of any other website without the express authorization of PSTQB.
Protection Measures
The PSTQB has implemented the appropriate logical, physical, organizational and security measures required by law, necessary and sufficient to protect personal data, namely:
Firewall and intrusion detection system;
Data protection measures from conception (“privacy by design”) and, also, a set of preventive measures favorable to privacy (“privacy by default”);
All employees are covered by a confidentiality agreement or subject to confidentiality rules, within the scope of the employment relationship with PSTQB, in relation to the data to which they have access in the scope of the exercise of their activity, being duly informed of the importance of complying with this legal duty of secrecy and being responsible for complying with this obligation of confidentiality.
