Oficina do Peregrino

Oficina do Peregrino is a registered brand and digital domain belonging to: União Internacional de Peregrinos Jacobeus (UIDPJ) NIPC: 518 767 779 E-mail: [email protected] Phone: +351 911 106 276 UIDPJ is the entity responsible for the processing of personal data collected through the website: https://www.oficinadoperegrino.com

The processing of personal data is carried out in accordance with: • Regulation (EU) 2016/679 – General Data Protection Regulation (GDPR) • Law no. 58/2019 (Portugal) • Accommodation Bulletin Information System (SIBA – Portugal) • Royal Decree 933/2021 (Spain) • Other applicable legislation regarding internal security and traveler control

Within the scope of pilgrim registration, service provision, and compliance with legal obligations, the following may be collected: 3.1 Identification Data (document type, document number, full name, date of birth, gender, nationality, country of origin); 3.2 Contact Data (electronic address, phone number, full address, municipality, postal code); 3.3 Travel Data (current route, mode of travel, starting point, reason for travel when applicable, optional observations); 3.4 Data necessary for legal compliance (for mandatory communication to Portuguese and Spanish authorities, additional legally required data may be collected); 3.5 Digital signature (the digital signature entered in the form constitutes a declaration of veracity of the provided data).

Personal data are processed for the following purposes: 1. Pilgrim and group registration; 2. Compliance with protocols established with security forces; 3. Mandatory communication to competent authorities; 4. Provision of requested services; 5. Payment processing and billing; 6. Administrative and operational management; 7. Sending institutional communications (when consent exists).

Under applicable legislation: 5.1 Portugal – SIBA: Certain data may be communicated to Portuguese authorities through the Accommodation Bulletin Information System (SIBA), when applicable. 5.2 Spain – Royal Decree 933/2021: If the route involves Spanish territory, certain data may be communicated to Spanish authorities under the terms of Royal Decree 933/2021, regarding documentary control and traveler registration. The communication of this data is mandatory by law and does not depend on the data subject's consent.

The processing of data is based on: • Compliance with a legal obligation; • Execution of a contract or pre-contractual measures; • Data subject's consent (when applicable); • Legitimate interest in pilgrim security.

Data will be kept: • For the period legally required by the competent authorities; • As long as necessary to fulfill the indicated purposes; • For the legal period of fiscal retention (when applicable). After this period, they will be deleted or anonymized.

Data may be shared exclusively with: • Security forces and public authorities; • Subcontracted accounting entities; • External partners when necessary for the provision of the requested service; • Technological service providers that ensure the functioning of the website. There is no sale or transfer of data for commercial purposes.

UIDPJ implements appropriate technical and organizational measures, including: • Secure servers; • Access control; • Communication encryption; • Protection against unauthorized access; • Data minimization policy.

The data subject may exercise the following rights: access, rectification, erasure (when legally possible), restriction of processing, objection, portability, withdrawal of consent. Requests should be directed to: [email protected]. If you believe your rights have not been respected, you may file a complaint with the National Data Protection Commission (CNPD).

The website uses technical and functional cookies necessary for its correct functioning. Optional cookies are only used with consent.

UIDPJ reserves the right to update this privacy policy, with the version published on the website being the version in force.