Data protection
Privacy Policy
Controller
ACIST - Associacao Comercial e Industrial de Santo Tirso is the controller of personal data collected for the Santo Tirso Social Tasting event.
Data processed
We may process name, email, mobile phone number, legal drinking age confirmation, privacy acceptance, digital passport data, collected stamps, prize draw participation, contact messages and security logs such as IP address, user-agent and QR Code scan attempts.
Purposes
Data is used to create and manage accounts, validate QR Code stamps, show passport progress, identify prize draw eligibility, reply to messages, prevent abuse and comply with applicable legal obligations.
Legal basis
Processing is based on participation in the event, consent where applicable, compliance with legal obligations and ACIST's legitimate interest in protecting the platform against fraud, abuse and unauthorized access.
Retention
Data is kept for the time needed to organize the event, validate participation, run the prize draw and answer legal or event-related requests. Technical logs and messages should be reviewed periodically and deleted or anonymized when no longer needed.
Data sharing
Data may be processed by technical providers needed for hosting, email and maintenance. Participating venues validate visits through QR Codes, but do not receive the full participant personal data list through the platform.
Your rights
You may request access, correction, deletion, restriction, objection and portability of your data under the GDPR. You may also lodge a complaint with the Portuguese supervisory authority, CNPD.
Contact
To exercise your rights or ask questions, contact informacao@acist.com.pt or use the contact page.