A carregar…
Legal information
Last updated 14 September 2026
The controller is the Associação Académica de Coimbra (AAC), legal person no. 500032173, which organises Festa das Latas e Imposição de Insígnias, with its registered office at Rua Padre António Vieira, S/N, 3000-315 Coimbra (Edifício Sede da AAC), Portugal.
For any question about your data, or to exercise your rights, write to geral@festadaslatas.pt.
We only ask for what we need to reply to you and to hand over orders. We do not sell or share your data, there is no advertising, there are no embedded social networks and we use no analytics or profiling tools. Typefaces are served from this site and not from third-party servers, so your visit is not reported to anyone else.
Contact form: name, email, subject and message, with the date sent. They are used to reply to you. Basis: our legitimate interest in answering those who write to us and, when the message is about a purchase, pre-contractual steps (article 6(1)(f) and (b) GDPR). The site keeps the 500 most recent messages; beyond that, the oldest are deleted.
Shop orders: name, email, phone (if you give it), tax number (if you give it), items ordered with colour, size and personalisation, value, order status and payment status (the method used and the identifiers Stripe returns to us). They are used to prepare and hand over the order and for accounting records. Basis: performance of the contract and compliance with legal obligations (article 6(1)(b) and (c)). The site keeps the 2000 most recent orders; invoicing documents are kept by the AAC for the period required by tax law. Your card details never pass through this site: they are collected directly by Stripe, in Stripe's own form. An order that is never paid is deleted 30 days later.
Images for printing: when you choose an item with a logo of your choice, the file you upload is stored, with its original name, so the Committee knows what to print. Basis: performance of the contract. Images that never become part of an order are deleted after 48 hours; those belonging to orders are kept for as long as the order exists. They are not public: they open only with an administrator session.
IP address: the endpoints that receive forms count submissions per address to stop abuse. That count lives only in the server's memory and disappears when it restarts: it is not written to disk and is not linked to your messages. Basis: legitimate interest in keeping the site secure.
Hosting logs: the server running the site may log accesses (address, date and page requested) for operation and security.
Newsletter: the subscription is not working yet. The footer form does not store your email or send it anywhere.
Only members of the Organising Committee with an administrator session. We do not sell, rent or hand over data for marketing purposes. The site is hosted by a service provider acting on our behalf and on our instructions. We may have to disclose data to public authorities where the law requires it.
The payment is processed by Stripe Payments Europe, Limited (Ireland), which receives your email and the amount to charge, and which handles payment data as a controller in its own right, under its own privacy policy: stripe.com/privacy.
You may ask us at any time for access to your data, correction of anything wrong, erasure, restriction of processing, objection to processing based on legitimate interest, and portability: receiving the data you gave us in an open format. Write to geral@festadaslatas.pt; we reply within one month.
If you believe we have not handled your data properly you may complain to the Portuguese data protection authority, Comissão Nacional de Proteção de Dados (cnpd.pt).
The site uses very few and none of them track you. They are all explained in the Cookie Policy.
If you are under 13, do not use the forms on this site without permission from whoever holds parental responsibility (article 16 of Portuguese Law no. 58/2019).
Access to the management area requires a password and the session lives in a signed cookie that scripts cannot read. Requests that change data are only accepted when they come from the site itself, and public forms have submission limits. Even so, no system is infallible: should there be a breach that puts your data at risk, we comply with the notification duties set out in the GDPR.
This policy may be updated. The date above says when it last changed.