Privacy Policy

1. WHO WE ARE
"LIGA PORTUGAL" (LP), "we," and "our" refer to the companies that make up the LIGA PORTUGAL network, which includes the Fundação do Futebol – Liga Portugal, Liga Portugal Infraestruturas, Liga Portugal Comercial, Liga Portugal Centralização, and Liga Portugal Business School.
LIGA PORTUGAL is the Data Controller or joint controller for collecting and processing your personal data, determining which data is collected, the means of processing, and the purposes for which the data is processed.
Additionally, LIGA PORTUGAL processes personal data as a Data Processor on behalf of and according to the instructions of other data controllers, in the context of its services, Statutes, and Regulations.
2. OUR COMMITMENT
This privacy policy reflects our commitment to:
- communicate transparently about the personal data we process and under what conditions;
- protect the security and privacy of personal data; and
- provide appropriate mechanisms for the exercise of data subjects' rights.
If you are our member, customer, potential customer, job candidate, alumni, supplier, partner, or user of our websites ("sites") within our network or mobile applications (“apps”), we recommend reading this document as well as the Terms and Conditions of our services.
LIGA PORTUGAL promotes the protection of the confidentiality and privacy of the information entrusted to it. As part of this fundamental obligation, LIGA PORTUGAL also promotes the proper protection and use of personal data (referred to as "personal data," "personally identifiable information," or "PII") collected through its websites, platforms, and network apps.

3. WHAT PERSONAL DATA DO WE COLLECT AND PROCESS?

When you register and/or submit personal data to LIGA PORTUGAL, we will use it as described in this Privacy Policy. Your personal information will not be used for other purposes unless we obtain your consent or if required or permitted by law or professional rules.
Essentially, personal data is any information that, directly or in combination with other data, can identify an individual.
The following table outlines the main categories of personal data we process:

Category of personal data	Examples (non-exhaustive)
Identification and contact information	Name, identification document number, tax identification number (NIF), photograph, signature, address, phone number, or email address.
Personal data	Date of birth, gender, nationality, place of birth, marital status, household composition, academic qualifications, professional experience, curriculum vitae, LinkedIn profile.
Financial data	Bank account number (NIB), income, or financial/real estate assets.
Relationship with LIGA PORTUGAL	Data related to participation in LIGA PORTUGAL (LP) events or events promoted by LP, or business interactions between the data subject and LP.
Opinions and preferences	Preferences regarding the receipt of invitations and publications from LP, comments made by data subjects on LP's social media platforms, or responses from data subjects to satisfaction surveys.
Content	Information contained in written communications between the data subject and LIGA PORTUGAL or images from surveillance cameras.
Website and app usage	Pages visited or information about the devices used (e.g., IP address, geographic location, browser used).

LIGA PORTUGAL processes other personal data as a data controller or jo‑int controller, including special categories of data (e.g., health data), in the exercise of public interest activities, particularly in providing services related to the organization of sporting events or services connected to sports.

LIGA PORTUGAL obtains the above-mentioned personal data through the following collection methods:

Collection methods	Examples
Data provided by the data subjects	Data or content provided directly by the data subjects (i) in interactions with LIGA PORTUGAL (LP) professionals, (ii) in letters or emails sent to LP, (iii) when setting preferences for LP communications, (iv) when participating in events, (v) when submitting applications to LP, (vi) when submitting requests for proposals to LP or other information, or (vii) when responding to satisfaction surveys.
Data collected from social media	Data related to the interaction of data subjects with LIGA PORTUGAL's social media platforms or from the public profiles of data subjects on social media (e.g., LinkedIn, curriculum vitae submitted online when applying for a job at LIGA PORTUGAL, we will use the information provided to review job opportunities available at LIGA PORTUGAL).
Data collected from third parties	Data obtained by LIGA PORTUGAL from its clients in the context of providing professional services or from other third parties (e.g. Portuguese Football Federation (FPF), sports societies, football associations, professional sector associations, public authorities, ticketing service providers).
Persistent Cookies	Data related to the use of LIGA PORTUGAL's websites and applications (e.g., pages visited; user preferences), obtained through cookies from LIGA PORTUGAL or third parties.

4. COLLECTION OF PERSONAL DATA

In some cases, LIGA PORTUGAL and its service providers may use cookies, web beacons, and other technologies to automatically collect certain types of data when you visit our websites or through emails we exchange.

Collecting this information will allow us to optimize your user experience, enhance the performance, management, and effectiveness of LIGA PORTUGAL websites, and assess the effectiveness of our marketing activities.

— IP Addresses
An IP address is a number assigned to your computer whenever you access the Internet. It allows computers and servers to recognize and communicate with each other. The IP addresses through which visitors access the site will be recorded for security and diagnostic purposes of our information systems. This information will typically be used in aggregate form to monitor site trends and analyze performance.

— Cookies
Cookies are usually installed on your computer or device whenever you visit our site and serve to recognize your computer or device.

On some of our websites, a notification window will appear, allowing you to manage your consent regarding the cookies to be used (cookie banner). Below is a summary of the categories of cookies on our websites and how your consent may affect your experience while browsing our sites:

- Strictly Necessary Cookies:

These cookies are essential to allow users to navigate the website and use its features, such as accessing secure areas. These cookies must be enabled, or the site will not function and cannot be blocked.

- Performance Cookies:

Performance cookies are used to collect data to improve the performance of a website. You can manage your consent for performance cookies using the cookie banner or by updating your browser settings (usually found in the Tools or Preferences menu of your browser) to not accept cookies.

- Functional Cookies:

Functional cookies are used to remember user selections, which may alter how the site behaves or appears. You can opt out of these cookies (opt‑out), but it will affect your experience on the site, requiring you to repeat certain selections each time you visit. You can manage your consent for functional cookies using the cookie banner or by updating your browser settings (usually found in the Tools or Preferences menu of your browser) to not accept cookies.

- Targeting or advertising cookies:
These cookies are used to deliver content relevant to the user’s interests. They may also be used to limit the number of times the user sees certain marketing materials and help measure the effectiveness of these marketing If the user does not consent to these cookies, their computer or internet-enabled device will not be tracked for marketing-related activities. You can manage your consent for targeting cookies using the cookie banner or by updating your browser settings (usually found in the Tools or Preferences menu of your browser) to not accept cookies.

Although most browsers automatically accept cookies, you can choose to accept them through your consent via the cookie banner or through your browser settings (usually found in the Tools or Preferences). If you wish to revoke your selection, you can do so by clearing cookies from your browser or updating your preferences in the cookie banner.

You can find more information on managing cookies through your browser's help file or certain websites like www.allaboutcookies.org.

Below is a list of the types of cookies used on our websites:

Objective	Description	Type & Period
Performance (e.g. Browser Compatibility)	Our websites are developed using common Internet platforms. These platforms have embedded cookies that help with compatibility issues (e.g., identifying the browser type) and improve performance (e.g., faster content loading).	Session Deleted after closing the browser
Security cookies	If you register to access a restricted area, our cookies ensure that your device is registered during your visit. You will need a username and password to access restricted areas.	Session Persistent but automatically deleted after closing the browser
Website preferences	Our cookies can also remember your site preferences (e.g., language) or attempt to improve your experience (e.g., personalize a greeting or content). This applies to areas where a specific registration was created to access or create an account.	Session Deleted after closing the browser
Analytics	We use various third-party analytics tools to help us understand how visitors use our site. This allows us to improve the quality and content on ligaportugal.pt for our visitors. Aggregated statistical data covers items such as total visits or page views and referrals to our sites. For more information on how we use Google Analytics, see below.	Persistent, but are automatically deleted after two years without accessing ligaportugal.pt
Social sharing	We use third-party social media widgets or shortcuts to provide you with additional functionalities for sharing content from our web pages on social networks and via email. The use of these widgets or shortcuts may result in a cookie being placed on your device to facilitate the use of these third-party services, ensure that your interaction appears on our web pages (e.g., social share count cache is updated), and record information about your internet activities on our sites. We recommend that you carefully read the Privacy Information of each of our service providers before using them. For more information on how we use widgets and social media, please see below.	Persistent, but are automatically deleted after two years without accessing ligaportugal.pt

Our pages may also periodically use third-party tools and widgets to offer additional functionalities. Depending on how you set your preferences in your browser and/or the cookie banner, using these tools and widgets may generally result in a cookie being placed on your device to facilitate the use of these services and ensure that your interaction appears correctly on our web pages.

Cookies do not, by themselves, allow us to identify your email address or personally identify you in any other way. We may obtain other means of identification through our analytical reports, such as IP addresses, but only to help us determine which areas of the Site our visitors prefer and not to identify individual visitors.

— Google Analytics
A LIGA PORTUGAL utiliza a Google Analytics e/ou o Adobe Analytics.

LIGA PORTUGAL uses Google Analytics and/or Adobe Analytics.

For more information on how LIGA PORTUGAL uses Google Analytics, please visit:https://www.google.com/analytics/terms/us.html)

To provide website visitors with more options on how their data is collected by Google Analytics, Google has developed the Google Analytics Opt-out Browser Add-on. This add-on communicates with the Google Analytics JavaScript (ga.js) to indicate that information about the website visit should not be sent to Google Analytics. The Google Analytics Opt-out Browser Add-on does not prevent information from being sent to the website itself or to other web analytics services.

— Web beacons
A "web beacon " is a small image on a webpage that can be used to collect certain information from your computer, such as your IP address, the time content was viewed, the type of browser, and the existence of cookies previously sent by the same server. LIGA PORTUGAL only uses web beacons in accordance with applicable law.

LIGA PORTUGAL or its service providers will use web beacons to monitor the effectiveness of third-party websites that provide recruitment or marketing services, or to gather aggregated statistics of visitors, or to manage cookies.

You can make some web beacons unusable by rejecting the cookies associated with them. The web beacon may still record an anonymous visit from your IP address, but cookie information will not be recorded.

In some of our newsletters and other communications, we verify the recipient's email address through links included in the messages. We collect this information to assess user interest and to improve future user experiences.

— Location-based tools
LIGA PORTUGAL will collect and use the geographic location of your computer or device. This location data is collected to provide you with information related to services we believe may be of interest to you based on your geographic location and to improve our products and services based on location.

— Social media widgets applications (LinkedIn)
LIGA PORTUGAL websites typically include features to facilitate sharing through external social media applications, such as the Facebook "Like " button and the Twitter widget. These applications may collect and use information about your use of LIGA PORTUGAL websites (see details on "Social Sharing " cookies in the table above). Any personal information you provide through these applications will generally be collected and used by other members of these social networks, and such interactions are governed by the privacy policies of the companies providing the applications. We have no control over these companies or their use of your information and are not responsible for such companies or their use of your information.

Additionally, LIGA PORTUGAL websites may host blogs, forums, crowdsourcing, and other applications or services (collectively referred to as social media sources). The purpose of social media sources is to facilitate knowledge and content sharing. Any personal information you provide in any of LIGA PORTUGAL's social media resources will generally be shared with other users of those respective resources (unless otherwise stated at the time of collection), over which we often have no control or only limited control.

Children and Minors
LIGA PORTUGAL recognizes the importance of protecting children's or minors' privacy, especially in the interactive online world. Our websites are not designed or intentionally directed towards children or minors. It is not our policy to intentionally collect or maintain information about any minor, except as part of a contract for the provision of services or registration for events organized by LIGA Portugal. In such cases, we will always attempt to obtain the authorization/consent of the legal guardian or custodian of the child or minor.

5. HOW WE PROCESS PERSONAL DATA

Data processing is any operation or set of operations performed on personal data by manual or automated means, including collection, storage, use, copying, and transfer.

At LIGA PORTUGAL, we process personal data in a lawful, fair, just, and transparent manner with specific purposes. Any additional secondary data processing is only carried out if (i) it is compatible with the authorized and communicated purposes to the data subjects or (ii) it is subject to the specific and explicit consent of the data subjects. We may also process your personal data without your knowledge or consent in accordance with data protection legislation and to the extent required or permitted by law.

The following sections describe and illustrate the main processing purposes at LIGA PORTUGAL, framed within the respective legal bases we have for using your personal information.

Execution of regulations and/or contracts

LIGA PORTUGAL will carry out the necessary data processing for the execution of regulations and the conclusion, execution, and management of contracts where the data subject or entity responsible for data processing is a party, or for pre-contractual measures:

Processing purpose	Examples
Contracting	Preparation, evaluation, and formalization of contracts and confidentiality agreements related to the products or services provided by LIGA PORTUGAL.
Service provision	Execution of the contracted service.
Billing and collections	Issuance of invoices and management of collections.
Procurement and payment	Evaluation of suppliers, contracting, renegotiation, and termination of contracts with suppliers, evaluation of services provided, and payment to suppliers.

Compliance with legal and regulatory obligations

LIGA PORTUGAL will carry out the necessary data processing to ensure compliance with various legal and regulatory obligations to which it is subject.

Processing purpose	Examples
Provision of information and response to requests from sector regulators and public authorities	Provision of mandatory information and response to various requests from sectoral regulators (e.g., ...) and public authorities (e.g ...).
Prevention of corruption and conflict of interest	Verification of lists of people and entities subject to risks of conflicts of interest and potential acts of corruption.
Accounting and Financial Reporting	Accounting records and preparation and disclosure of financial statements and the activity and accounts report of LIGA PORTUGAL.
Document management	Collection, classification, and storage of electronic and physical documents containing personal data in the document archive, which constitute mandatory evidence in the context of LIGA PORTUGAL's activity.

Public interest

LIGA PORTUGAL will carry out the necessary data processing in the exercise of activities of public interest based on the specific characteristics of the activities and the monitoring methodology of LIGA PORTUGAL.

Legitimate interest

LIGA PORTUGAL will process your information whenever it is in our legitimate interest to promote our lawfully conducted activities, provided this does not compromise your interests.

Processing purpose	Description
Account and contact management	Segmentation of clients, opportunity management, and contact management of clients, potential clients, sponsors, partners, and suppliers.
Website	To offer information and/or services to data subjects who visit our website or provide information on employment opportunities.
Drafting of proposals	Preparation and submission of service proposals to clients or potential clients.
Direct marketing	Sending communications (e.g., email) to clients, potential clients, and alumni related to event promotion, publication of specialized content, and promotion of products/services.
Event management	Organization and execution of LIGA PORTUGAL events or events supported by LIGA PORTUGAL, including corporate or social responsibility actions.
Quality control	Quality control of services provided by LIGA PORTUGAL to its members and clients, in accordance with regulations and statutes, and FPF guidelines and international FIFA and UEFA rules.
Management control	Production of management control information for LIGA PORTUGAL.
Litigation management	Exercise of contractual or legal rights and defense in case of judicial or extrajudicial disputes.
Internal Audit	Collection and analysis of data in the context of internal auditing of LIGA PORTUGAL's processes and operations.
Information systems and facilities security management	Management and monitoring processes of information systems and technological infrastructures, event logging of system access and usage, detection, analysis, and response to potential security incidents, control of identities and access to LIGA PORTUGAL's information systems, or control of physical access to facilities or prevention of fraud or criminal activities.

Consent of the data subject

LIGA PORTUGAL will occasionally ask for your specific permission to process some of your personal information, and we will only process your personal information in this way if you agree that we may do so. You may withdraw your consent at any time by contacti

6. WHAT ARE THE PERIODS FOR STORAGE AND PROCESSING PERSONAL DATA?

LIGA PORTUGAL retains and processes personal data for the necessary period while the legitimate purposes for which the data is processed continue to exist, in order to fulfill contractual, legal, and regulatory obligations, or to protect the legitimate interests of LIGA PORTUGAL:

Reason for retention	Retention period
Legal, fiscal, or regulatory obligation, or contract fulfillment	Up to 10 years after the end of the contract or document date, as applicable. LIGA PORTUGAL will retain personal data for longer periods based on legitimate interest, particularly for defending LIGA PORTUGAL in legal proceedings.
Retention of surveillance images	30 days.
Maintenance of customer, potential customer, or other stakeholder preferences	Indefinitely, particularly for data concerning the preferences of data subjects regarding communication about events or sharing of publications by LIGA PORTUGAL.

7. WHAT ARE YOUR RIGHTS AS THE HOLDER OF PERSONAL DATA?

LIGA PORTUGAL ensures the exercise of data subjects' rights concerning their data processing. If LIGA PORTUGAL processes information about you, you have the following rights:

Rights of the data subject	Description
Access	Data subjects have the right to access the personal data they provided to LIGA PORTUGAL or that result from the use of LIGA PORTUGAL's services, as well as the respective processing conditions.
Rectification	Data subjects have the right to request the rectification of their inaccurate or incomplete personal data (e.g., address, email, phone contacts).
Objection or withdrawal of consent	Data subjects have the right to object to data processing based on LIGA PORTUGAL's legitimate interest or to withdraw their consent for data processing based on consent.
Right to be forgotten	Data subjects have the right to request the deletion of their personal data held by LIGA PORTUGAL, provided there are no valid grounds for their retention (e.g., compliance with a legal obligation, defense of LIGA PORTUGAL in a legal process).
Restriction	Data subjects have the right to request the restriction of data processing, especially when disputing the accuracy of personal data or objecting to the processing during LIGA PORTUGAL's evaluation period.
Portability	Data subjects have the right to receive the personal data they provided to LIGA PORTUGAL or that result from the use of LIGA PORTUGAL's services.
Not being subject to automated decisions	Data subjects have the right to request human intervention or to contest decisions based entirely on automated personal data processing
Complain to the CNPD	Data subjects have the right to file complaints with the CNPD (Comissão Nacional de Proteção de Dados) regarding matters related to the exercise of their rights and the protection of their personal data.

Data subjects can exercise their data protection rights by sending a letter to the Head Office address: Rua da Constituição n.º 2555 4250-173 Porto, or by email to dpo@ligaportugal.pt. We will make all reasonable efforts to comply with your request, provided it is in accordance with applicable legislation and professional rules.

8. WHAT PERSONAL DATA WE SHARE AND TRANSFER

LIGA PORTUGAL may transfer personal data to third parties in the context of its legitimate business activities.

8.1. Transfer between organizations of the Liga Portugal Group / Associated Sports Societies

As part of our connections, we may share your information with LIGA PORTUGAL Group companies and other organizations whenever necessary or desirable to fulfill our legal and regulatory obligations worldwide. Other entities within the LIGA PORTUGAL network are also used to provide services to us/you, such as hosting and IT application support, risk coverage through insurance contracts, among others.

8.2. Transfer to third parties

LIGA PORTUGAL does not share personal information with third parties outside the LIGA PORTUGAL Group, except when necessary for our legitimate professional and commercial needs, to fulfill your requests, and/or as required or permitted by law or regulations. This includes:

Third parties	Examples (Non-Exhaustive)
Service providers	We may transfer your personal information to our external service providers, such as our IT system suppliers, hosting providers, payroll processors, consultants (such as legal advisors), and other goods and service providers. LIGA PORTUGAL works with these providers to handle your personal information on behalf of LIGA PORTUGAL. LIGA PORTUGAL only allows the transfer of personal information to these providers when they comply with our strict data processing and security standards. We only share personal information necessary for service provision.
Public or supervisory authorities	LIGA PORTUGAL may disclose personal information to respond to requests from courts, government authorities, or supervisory authorities, or when necessary or convenient to comply with applicable laws and regulations or court decisions, such as...
Audits	Disclosures of personal information may also be necessary for conducting data protection or security audits and/or to investigate or respond to a complaint or security threat.
Insurers	Our professional standards and business requirements mean we must have significant insurance coverage related to business activities (our "insurance program "). This is necessary to help each LIGA PORTUGAL Group company cover costs associated with litigation that may arise if it is alleged that something went wrong during the provision of services to clients. For the insurance program to function effectively, various market participants (e.g., brokers, insurers, reinsurers, as well as their professional advisors and other third parties involved in the event of litigation) are involved. Some of these insurance market participants will require us to disclose your personal information to them. This information will be used by them to evaluate and manage the ongoing insurance program, where there is litigation in which you are a relevant party, allowing insurance market participants to fulfill their legal and regulatory obligations. Some of these insurance market participants will handle this information on behalf of LIGA PORTUGAL (as our service providers as previously described), but others will intend to process your information independently of us.
If there is a restructuring or transfer of business to another organization	LIGA PORTUGAL will also disclose personal information as part of a sale, assignment, or other transfer of any part of LIGA PORTUGAL's business to which the personal information is related.

Locations where LIGA PORTUGAL regularly processes Personal Data

LIGA PORTUGAL may send, store, and process your personal information due to:

- The existence of a LIGA PORTUGAL Group company;

- The locations of our Data Centers;

- The locations of our IT providers; and

- The locations of our other service providers.

Additionally, LIGA PORTUGAL may, in specific contexts, transfer personal information outside the EU to external companies that work with or on behalf of us for the purposes described in this Privacy Policy. LIGA PORTUGAL may also store personal information outside the EEA.

LIGA PORTUGAL will not transfer any Personal Data to any State outside the EEA unless the transfer is made (i) to a State classified as offering an adequate level of protection by the European Commission, or (ii) by other mechanisms or protections for data transfer approved and accepted by applicable Personal Data Protection legislation.

LIGA PORTUGAL will not transfer the personal information you provided to us to other third parties for their direct marketing use.

9. HOW WE PROTECT PERSONAL DATA
The protection of the confidentiality and integrity of data is (i) a legal and regulatory obligation, and (ii) one of the pillars in building trust relationships between LIGA PORTUGAL and its clients, employees, regulatory entities, and business partners.
LIGA PORTUGAL has implemented appropriate organizational measures, processes, and security systems to protect your personal data against unauthorized destruction, alteration, and access, including: (i) access control mechanisms for information systems and data; (ii) specialized security systems (e.g., firewalls, antivirus, vulnerability management); (iii) logging mechanisms of actions performed by employees and other users of information systems; (iv) encryption, pseudonymization, and anonymization mechanisms for data; (v) encryption measures for equipment and mobile devices; (vi) physical security measures to protect facilities (e.g., physical access control, video surveillance); and (vii) an awareness and training program for LIGA PORTUGAL employees and partners on information security and personal data protection.
10. OPTIONS
The protection of the confidentiality and integrity of data is (i) a legal and regulatory obligation, and (ii) one of the pillars in building trust relationships between LIGA PORTUGAL and its clients, employees, regulatory entities, and business partners.
LIGA PORTUGAL has implemented appropriate organizational measures, processes, and security systems to protect your personal data against unauthorized destruction, alteration, and access, including: (i) access control mechanisms for information systems and data; (ii) specialized security systems (e.g., firewalls, antivirus, vulnerability management); (iii) logging mechanisms of actions performed by employees and other users of information systems; (iv) encryption, pseudonymization, and anonymization mechanisms for data; (v) encryption measures for equipment and mobile devices; (vi) physical security measures to protect facilities (e.g., physical access control, video surveillance); and (vii) an awareness and training program for LIGA PORTUGAL employees and partners on information security and personal data protection.
11. LINKS TO OTHER SITES
Please note that LIGA PORTUGAL sites may contain links to other websites, including sites maintained by other member companies of LIGA PORTUGAL, which may not be subject to this Privacy Policy but rather to other privacy policies that may differ in some respects. We encourage users to read the privacy policy of each website they visit before providing any personal data.
By registering on any LIGA PORTUGAL site and navigating to other websites with your login, you agree to the use of your personal data under the terms of the Privacy Policy of the LIGA PORTUGAL website you are visiting.
12. CHANGES TO THE PRIVACY POLICY
LIGA PORTUGAL may periodically change the Privacy Policy to reflect our current privacy practices. When we make changes to the privacy policy, we will update the “last updated” date on this page. All changes that may affect you will be communicated through an appropriate channel, in line with how we usually communicate with you.
We advise you to periodically read this Privacy Policy to stay informed about how LIGA PORTUGAL protects your information. The updated version will always be available for consultation on our website:

liga portugal website
13. QUESTIONS ABOUT THE POLICY AND ITS APPLICATION
LIGA PORTUGAL is committed to protecting the privacy of your personal information. If you have any questions or comments about how we manage your personally identifiable information, please contact us at dpo@ligaportugal.pt. You can also use this email address to raise any concerns you may have regarding compliance with our Privacy Policy.
We will confirm receipt of your email within 10 days and will endeavor to resolve your issue within one month of receipt. When the issue is complex or we have a high volume of requests to review, we may extend the response time by an additional three months. We will either accept the request and implement one of the measures established in Point 7 - What are your rights as a data subject, or we may reject it for legitimate reasons.
In any case, you always have the right to file a complaint with the National Data Protection Commission in Portugal.

Contact the DPC

This policy is effective as of 13/12/2024