Site's Policies &
General Conditions

In the present privacy policy, we describe how your personal data is treated when you visit our site. By personal data we mean any and all information that can be associated with you as a private individual, for example, name and contact information.
 

​
 

1. When do we need to process your data?
 

On the assumption we only collect the personal data you have chosen to share with us, we process your data in the following situations:
 

• When you fill out the contact form on our site to request information, we collect the personal data you provide such as name, phone number, and email address so that we can respond;

• We may process your data to send you a communication or newsletter with updates on our site and our services, if you have previously authorized us to do so;

• When you proceed with a payment on our site, in order for us to properly process it and assist to you, we may collect personal data from you such as your name, phone number, email address, and other applicable information in some cases, such as scholarship applications, names of participants in group activities, and other such information;

• When you order online sessions, workshops, or residencies through the website's booking form, we collect your personal information such as name, phone number, and email address so that we can contact you and agree on the best way to serve you;

• We may also process your data to comply with applicable law (e.g. consumer rights and accounting law).

2. Who is in charge of processing your personal data?

The www.and-lab.org website is managed by the nonprofit AND Art and Research Association. The processing of your personal data is under its responsibility. If you wish to contact us regarding the processing of your personal data - to clarify issues, request the retrieval or complete deletion of this data at any time - please do so via the contact form on our website or directly via email to info@and-lab.org.



3. Who can access your personal data?

The processing of your personal data is primarily carried out by the AND Management Team in order to meet our legal duties correctly and effectively. We never commercialize your personal data.
In some cases, your personal data is shared with our site's hosting service provider for the purpose of communicating news about our activities or processing subscriptions, registrations in our community, and payments.

Our website is hosted at Wix.com. Wix.com provides us with an online platform that allows us to deliver information and possibly offer services to visitors, participants in our courses/events or members of the community. Your information may be stored in the Wix.com databases on firewall-secured servers. To learn more about how WIX handles your personal information, please go to item 6 of the WIX Privacy Policy.

To deliver orders from Artefacts sales campaigns, such as the Book-Box, to your address, we use either the Portuguese or Brazilian Post Office services, and therefore we need to share with them your personal contact and address details, so that your order can arrive correctly;

When you proceed with a payment or a subscription on the AND Lab website, in order to be able to process online payments using cards, we use the service providers PayPal and Stripe. These are recognized providers that are Payment Card Industry Data Security Standards (PCI DSS) compliant. PCI DSS is an information security standard for organizations or businesses that accept card payments. This standard helps create a secure environment by improving cardholder data quality and reducing credit card fraud. The privacy policies of these providers when storing and processing payment and subscription data is available on their respective websites.

For more detailed information about the recipients of your personal data, please do not hesitate to contact us at info@and-lab.org .



4. How can you restrict the processing of your personal data?

The data protection legislation currently in force provides a series of rights that allow you to control the processing of your personal data.


Right to withdraw your consent and object to the processing of personal data

You have the right to revoke, in whole or in part, a given consent to the processing of your personal data. If you use the right to withdraw consent, the consent shall take effect from the moment you use it.
You have the right to object to the processing of personal data. At any time you may object to our commercial communications, such as newsletters.
However, there are situations in which you will not be able to exercise the right to object. You have the right to object when the processing is based on the balancing of legitimate interests. If legitimate and compelling reasons are presented that would justify processing with greater legal force than your interests and fundamental rights or if it is for the purpose of determining, filing or defending against legal disputes, you may never exercise the right to object to the processing.


Right to access

You have the right to obtain confirmation as to whether or not we are processing your personal data. You may access your personal data and request a copy of the personal data being processed by us.


Right to rectification

You have the right to rectify any inaccurate personal data about you and to request the correct completion of incomplete information.


Right to erasure ("right to be forgotten") and limitation of processing
 

In certain circumstances, you are entitled to request the deletion of your personal data. For example, if the personal data is no longer necessary for the purposes for which it was collected or processed, or if you withdraw your permission, on which the processing is based, and there are no longer legal grounds for further processing.
You also have the right to request the limitation of the treatment of your personal data. When, for example, the accuracy of the personal data is called into question by you, the processing is unlawful, or you object to the deletion of the personal data by requesting, alternatively, limitation of its use.


Right to complain to the competent regulatory authority
 

You can at any time submit a complaint to the competent regulatory authority. In particular, you may do so in the EU/EEA member state where you live or work, or because of an alleged breach of applicable data protection laws. In Portugal, the National Commission for Data Protection (CNPD) is the national authority that controls and supervises compliance with the RGPD (General Data Protection Regulation).


The right to data portability

You have the right to ask us to transfer some of your personal data held by us to another company (data portability). This right applies to personal data you have provided to us using a commonly used, machine-readable and interoperable format if:

- The lawful basis for the processing is consent or a contract; and
- The processing is carried out by automated means
 

By exercising your right to data portability, you have the right to have your personal data transferred directly from this site to another data controller, as far as technically feasible.
 

5. Unsubscribe, doubts and contacts
 

To unsubscribe from our newsletters and other email communications, please send us a request via the contact form on our website or by emailing us at info@and-lab.org. You can also click on the unsubscribe link at the bottom of any newsletter you may receive.
 

If you wish to access, correct, or delete any personal information we hold about you, register a complaint, or simply want more information about how we handle data, please contact us at info@and-lab.org.



This Privacy Policy was adopted by the AND Lab Centre for Research in Art-Thinking and the Politics of Togetherness on October 10, 2019.