Privacy Policy

Privacy Policy

The PSTQB – Portuguese Software Testing Qualifications Board, headquartered at FEUP – Faculty of Engineering of the University of Porto, located at Rua Dr. Roberto Frias, s/n, 4200-465, corporate and tax person nº 509 326 781, Non-profit association of a private nature (hereinafter referred to as “PSTQB”). 
The objectives of PSTQB are to develop, promote and encourage the qualification and recognition of testing professionals and careers, the debate and sharing of knowledge and experiences, research, innovation and standardization in the area and the Portuguese presence in international forums. 
Within the scope of its activity, PSTQB collects personal data from its holders, either in person or remotely, ensuring that the respective treatment is done in accordance with the privacy protection rules emerging from Regulation (EU) 2016/679 (“R.G.P.D. ”) and other applicable national legislation, as well as in accordance with the confidentiality obligations to which PSTQB is subject.

The data collected correspond to data that are provided by the holders themselves or their legal representatives by completing forms, such as the following forms:

  1. Contact form, through digital channels;

  2. Membership application Form;

  3. Application form for certification exams;

  4. Form present on the cover sheet(s) of the Exam(s)

Responsible for Data Treatment

The entity responsible for processing personal data is PSTQB, as it is responsible for determining the purposes and means of processing the data in its possession.

Collection and Processing of Personal Data

What is personal data?

Any information, of any nature and regardless of the medium, relating to an identified natural or identified person is defined as personal. It is considered identifiable, the person who can be identified directly or indirectly, namely by reference to an identification number or to one or more specific elements of their physical, physiological, psychological, economic, cultural, social, religious, health or criminal record.
Pedimos que não nos transmita dados pessoais sensíveis, tais como número de identificação ou a um ou mais elementos específicos da sua identidade física, fisiológica, psíquica, económica, cultural, social, religiosa, saúde ou antecedentes criminais ou outras através de meios eletrónicos. Essas informações, caso sejam necessárias para algum fim específico, só deverão ser prestadas presencialmente e nunca através da WEB.

Who are the holders of personal data?

The holders of personal data are Associates, Exam Candidates, Collaborators, Partners, or natural persons to whom the data relate and who use the services provided by PSTQB, collaborate or enter into a relationship with it, in any contact with PSTQB .

What are personal data?

It corresponds to all the data necessary to be PSTQB Associates, take Exams or participate in the Conference or other events organized by PSTQB.

Purposes of Data Processing

PSTQB processes personal data on its own behalf, but may also do so on behalf of and on behalf of third parties, in the following situations:

  1. Provision of services within the scope of Certification;

  2. Taking Certification Exams;

  3. Issuing and sending the Certificate, in case of approval;

  4. On behalf of its International Representative – ISTQB® – International Software Testing Qualifications Board;

  5. On behalf of your international partner – GASQ Service GmbH

  6. Communication of an administrative nature;

  7. Compliance with legal obligations;

  8. Financial management;

  9. Sending a newsletter and other commercial information;

  10. Publicity of events promoted by PSTQB;

  11. Testing Portugal Conference;

  12. PSTQB Sessions Events;

  13. Management of social media platforms (LinkedIn, Instagram, Facebook, Twitter etc.);

It should be noted that the purposes listed here will not be the only ones, and others may derive from them as far as possible. If there is a new purpose independent of the previous ones, PSTQB will inform, on a case-by-case basis, the holder at the time of collection of personal data.

Basis for Data Processing

PSTQB will only process personal data to the extent that the treatment is lawful and necessary. The processing of personal data is only lawful if and to the extent that at least one of the following situations occurs:

  1. Consent: When the data subject has given his prior consent, express, in writing, orally (after ratification, when necessary), or through the validation of an option, if that consent is free, informed, specific and unambiguous for the processing of the data. your personal data for one or more of the specific purposes mentioned above.

  2. Compliance with legal obligations: When the processing of personal data is necessary to comply with a legal obligation to which PSTQB is subject, such as, for example, the communication of identification data to police, judicial, tax or regulatory entities.

  3. Legitimate interest: When the processing of personal data corresponds to a legitimate interest of PSTQB or third parties (such as the processing of data to improve the quality of the service provided) and when PSTQB's reasons for its use must prevail over the protection rights of data.

  4. Defense of vital interests of the data subject or another natural person: The processing of personal data should also be considered lawful when it is necessary to protect an interest essential to the life of the data subject or any other natural person. In principle, the processing of personal data on the basis of the vital interest of another natural person can only take place when the processing cannot clearly be based on another legal basis. Some types of processing may serve both important public interests and vital interests of the data subject, for example, if the processing is necessary for humanitarian purposes.

  5. Exercise of public interest functions: When the processing is necessary for the exercise of functions in the public interest, or for the exercise of the public authority vested in the controller.

Data Communication and Subcontractors

PSTQB will not transmit personal data to third parties, unless:

  1. has obtained express consent to that effect from the holder;

  2. the communication is necessary for the performance of a contract, agreement or award of services to which the holder is a party;

  3. the transmission is carried out within the scope of compliance with a legal obligation or to comply with a court order;

  4. the communication is carried out for any legitimate purpose provided for in the law in force.

PSTQB is, by law, obliged to communicate personal data of its candidates for Exams and Associates to regulatory authorities and other public authorities/official entities.

Period of Retention of Personal Data

The processing of data by PSTQB will continue as long as the data is necessary for the relationship established with its holders. Upon termination of the relationship, PSTQB will keep the personal data only for the period of time necessary to achieve the defined purpose and/or for the mandatory legal deadlines, or until the rights and duties arising from this relationship prescribe, under the terms of the law.

Rights of Holders

Under the terms of the applicable law, the Data Subjects have the following rights:

  1. Right of Information, which consists of the right of the Holders to be informed by PSTQB, about all aspects related to the collection and processing of their personal data, namely about: 

    • The purposes of processing your data;

    • To whom they may be communicated;

    • What are their rights; 

    • Under what conditions can they exercise them;

    • What data must be provided within the scope of the relationship established with PSTQB, in a clear, concise and absolutely transparent manner;

  2. Right of Access, which consists of the Holders' right to access the personal data that have been provided, without restrictions, delays or excessive costs, as well as to know any available information about the origin of such data;

  3. Right of Rectification, which consists of the right of the Holders to demand that their data be accurate and current, and may, at any time, request its rectification from PSTQB;

  4. Right of Deletion, which consists of the right of the Holders to demand the deletion of their personal data from the PSTQB records when they are no longer used for the purposes for which they were collected, without prejudice, however, to the retention periods that apply by law. and legitimize the respective treatment;

  5. Right of Opposition, which consists of the right of the Holders to object, at their request and free of charge, in particular to the processing of their personal data for the purposes of direct marketing;

  6. Right to Portability, which consists of the right of the Holders to receive their personal data provided to PSTQB, in a structured, commonly used and machine-readable format, and to transmit this data to another person responsible for the treatment, whenever this is technically possible.

  7. Right to Limitation of the Data Treatment, which consists of the right that the Holders have to, in certain circumstances, ask PSTQB to limit the processing of their data, namely: (i) when they contest the accuracy of their personal data, for a period that allows PSTQB to verify its accuracy; (ii) if the treatment is unlawful and the Data Subject opposes the erasure of the data, requesting, in return, the limitation of its use; or (iii) when PSTQB no longer needs the Holder's personal data for processing purposes, but such data is required by the Holder for the purposes of declaring, exercising or defending a right in a legal proceeding;

  8. Right to Complaint to the CNPD, which consists of the right to submit, without prejudice to any other administrative or judicial remedy, a complaint to a supervisory authority, in particular in the Member State of your habitual residence, place of work or the place where the infringement was allegedly committed, if the data subject considers that the processing of personal data concerning him violates the GDPR and other applicable national legislation. In Portugal, the supervisory authority is the National Data Protection Commission (CNPD).

If the processing of data is based on consent, the holder has the right to withdraw consent at any time, without compromising the lawfulness of the processing carried out on the basis of the consent previously given.

The exercise of any of its rights is guaranteed to the Holder by means of a written request addressed to PSTQB, sent by registered mail to the mailing address:
PSTQB - Portuguese Software Testing Qualifications Board, Avenida Infante D. Henrique, 311, 1950-421 Lisbon, PORTUGAL;
or via the following email address:

The provision of incorrect or inaccurate data is the sole responsibility of the data subject.

Data Protection Officer

The Data Protection Officer (or DPO) ensures, among other things, the processing of data in accordance with the legislation in force, verifying compliance with this Privacy Policy. The DPO also cooperates with the supervisory authority, and provides information and advises the data controller on its obligations in terms of privacy and data protection.
To obtain any clarification related to this Privacy Policy, the Holder may contact the PSTQB Data Protection Officer at the following email address, or by registered mail sent to the care of “DPO-PSTQB”, sent to the following address: Avenida Infante D. Henrique, 311, 1950-421 Lisbon, PORTUGAL.

Digital Channels and Use of Cookies

PSTQB collects and processes the personal data necessary for the availability and operation of its Websites, also known as Digital Channels, guaranteeing, however, adequate levels of security and protection of personal data to the holders who use them and who through them provide personal data.

The following websites are owned by PSTQB:

Thus, several physical, logical, technical and organizational security measures were adopted in order to protect personal data against its dissemination, loss, misuse, alteration, treatment or unauthorized access, as well as against any other form of illicit treatment.

Despite the security measures adopted by PSTQB, the Owner/User of Digital Channels must keep the access codes that he/she may have, not sharing them with third parties, and must also, in the particular case of mobile devices, maintain and conserve the device in which accesses the Digital Channels, under security conditions and to follow the security practices recommended by the manufacturer and/or operator, namely regarding the installation and updating of the necessary security applications, namely, antivirus.

PSTQB uses "cookies" on its Digital Channels, meaning small text files with relevant information stored on the access device (computer, mobile phone/smartphone, tablet or other) and loaded by the internet browser (browser) when a site is visited by the Owner/User, namely allowing to store and retrieve information about the browsing habits of a user of a device, and, depending on the information they contain, and the way in which the equipment is used, they can be used to recognize the Owner /User.

The cookies used by PSTQB respect anonymity and will not be used to collect any information of a personal nature.
The information stored in the “cookies” mentioned herein is used exclusively by PSTQB, with the exception of Google Analytics, which is used and maintained by Google for statistical and research analysis purposes. The websites use the Google Analytics service, whose cookies and privacy policy can be consulted at: 

The use of cookies is a normal practice among Internet websites, and through most browsers the user can allow, block or eliminate the "cookies" installed on their equipment, by configuring the options. If you block them, it is possible that certain services that require them are not available for use.
If you want to restrict, block or delete the cookies of this website, you can disable the cookies by modifying your browser settings (the parameterization of each browser is different, so you should read your browser's instructions and manuals for more information about the operation and control of cookies). However, if you select this setting, it may not be possible to access certain parts of the PSTQB websites or navigation may become less efficient.

These Digital Channels may contain links to other websites over which PSTQB has no control, nor is it responsible for their content. The inclusion of links to other websites is made solely as an informative reference and without any link or responsibility for the contents, owners, services or products offered. PSTQB reserves the right to demand the removal of any link it deems inappropriate, this being its sole responsibility. The content of the Digital Channels owned by PSTQB cannot be fully or partially integrated into the structure of any other website without the express authorization of PSTQB.

Protection Measures

PSTQB has implemented the logical, physical, organizational and security measures that are appropriate and imposed by law, necessary and sufficient to protect personal data, namely:

  • Firewall and intrusion detection system;

  • Means of data protection from conception (“privacy by design”) and, also, a set of preventive measures favorable to privacy (“privacy by default”);

  • All employees are covered by a confidentiality agreement or subject to confidentiality rules, within the scope of the employment relationship with PSTQB, regarding the data to which they have access in the course of their activity, being duly informed of the importance of fulfilling this duty. confidentiality and being responsible for complying with this confidentiality obligation.