Privacy Policy

1. What data we collect

   • Contact form: name, email, telephone (optional), subject, message
   • Volunteer registration: name, email, telephone, availability and areas of interest
   • Membership registration: name, date of birth, tax number (NIF, optional), mobile phone, email (optional), address
   • Donations: bank details you provide in order to make the transfer (we do not store card details)

2. How we use your data

   • To reply to requests and messages
   • To manage membership registration and the history of membership fees
   • To issue a tax receipt, when requested (using the tax number provided)
   • To organise volunteer participation in activities

3. Legal basis

   Processing is based on the consent you give when submitting each form and, in the case of members, on the performance of the membership agreement.

4. Data sharing

   We do not sell or share your data with third parties for commercial purposes. Your data may be accessed by ASLA volunteers and staff strictly within the scope of their duties, and by technical support providers (e.g. website hosting) only to the extent necessary.

5. Retention period

   Members' data is kept for as long as the membership lasts and, after it ends, for the period required by law for tax and accounting purposes. Contact and volunteer data is kept for [period to be confirmed by the association] after the last contact, after which it is deleted or anonymised.

6. Your rights

   Under the GDPR, you have the right to access, rectify and erase your data, to restrict or object to its processing, and to request data portability. You can exercise these rights by writing to geral@sorrisoleonor.pt. You also have the right to lodge a complaint with the Portuguese Data Protection Authority (Comissão Nacional de Proteção de Dados — CNPD).

7. Children and public content

   As part of our mission, we publicly share stories, photographs and information about the health condition of some of the children supported by ASLA (the "Butterflies of Inclusion"), always with the express and informed consent of their parents or legal guardians, who may ask for this content to be updated or removed at any time using the contact details above.

8. Security

   We take appropriate technical and organisational measures to protect your data against unauthorised access, loss or improper disclosure.

Last updated: [date]