Privacy Policy

The controller of your personal data is GDA Alcochete SAD, with its registered office at Alameda G.D. Alcochetense, 2890-110 Alcochete, Portugal, and home ground at Estádio António Almeida Correia (Fóni).

For any question relating to privacy or data protection, you may contact us at ask@gdasad.com.

We collect only the personal data you voluntarily provide through the website’s forms, together with limited technical data needed for the site to operate securely.

• Contact form: topic, name, email, organisation (optional) and message.
• Partnership form: organisation, website, industry, contact name, role, email, phone, areas of interest, budget scale, timeline and message.
• Newsletter: your email address only.
• Technical data: IP address (used transiently for anti-spam rate-limiting and in server logs) and a language-preference cookie.

We process your data only for specified, legitimate purposes, relying on one of the legal bases set out in Article 6 of the GDPR.

• Enquiries and partnership requests: the Club’s legitimate interest in responding to your request and/or steps taken at your request prior to entering into a contract.
• Newsletter: your consent, which you may withdraw at any time via the unsubscribe link.
• Security logs: the Club’s legitimate interest in protecting the website against abuse and keeping it secure.

We rely on a small number of trusted service providers that process data on our behalf, subject to contractual obligations of confidentiality and security. We do not sell your personal data.

• Resend — delivery of notification and confirmation emails relating to the forms; it may process data outside the European Union under appropriate safeguards (Standard Contractual Clauses).
• Plausible Analytics — privacy-friendly, COOKIELESS analytics; it collects no personal data and sets no cookies, and the data is aggregated, anonymous and EU-hosted.
• Railway — cloud hosting of the website.

Where a processor handles data outside the European Economic Area, we ensure that appropriate safeguards are in place, such as the Standard Contractual Clauses approved by the European Commission, so that a level of protection equivalent to that of the GDPR is maintained.

We keep enquiry data only for as long as necessary to handle the request and for a reasonable follow-up period.

Newsletter data is kept until the subscriber unsubscribes.

Under the GDPR you have a number of rights over your personal data, which you may exercise by emailing ask@gdasad.com.

• The right of access to your data.
• The right to rectification of inaccurate data.
• The right to erasure (the “right to be forgotten”).
• The right to restriction of processing.
• The right to data portability.
• The right to object to processing.
• The right to withdraw consent at any time, without affecting the lawfulness of earlier processing.

If you believe that the processing of your data infringes the applicable law, you have the right to lodge a complaint with the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD).

Users resident in the EU/EEA may also contact the supervisory authority in their own country.

We apply appropriate technical and organisational measures to protect your personal data against loss, unauthorised access, disclosure or alteration, including anti-spam rate-limiting and the keeping of server logs for security purposes.

We may update this Privacy Policy from time to time to reflect changes in our practices or in the applicable law. The version in force is always the one published on this page, together with its update date.