Last updated: 26 July 2026
1. Data controller
The organisation of the Pilgrimage of Our Lady of Christendom — Portugal, an initiative supported by the São Nuno de Santa Maria Institute, is responsible for processing personal data collected on this website.
For privacy questions or to exercise your rights, contact infonscportugal@gmail.com.
2. Data we collect
- Identity and contact details: first and last name, email, telephone, nationality and date of birth.
- Participation data: state of life, affiliation, route type, chapter, registered family members, accommodation and transport.
- Safety data: emergency contact, allergies, special needs and health information you choose to provide.
- Transaction data: reference, status, amount and technical payment identifiers. We do not store full card details.
- Technical data essential to the website's operation and security, and aggregated usage measurements.
3. Purposes and legal bases
- Managing registration, requested services, payment and necessary communications — performance of a contract and pre-contractual steps.
- Organising groups, route, accommodation, transport, assistance and emergency response — performance of the service, vital interests and, where applicable, explicit consent for health data.
- Meeting accounting, tax and legal obligations and lawful authority requests — legal obligation.
- Protecting the website, preventing fraud and producing aggregated statistics — legitimate interests in security and service improvement.
- Publishing identifiable images for publicity — only where optional permission has been given; it may be withdrawn for future uses.
4. Sharing and service providers
Data is available only to team members and volunteers who need it and to providers bound by confidentiality duties. We may use Stripe for payments, hosting and database providers to operate the website, and email, ticketing and technical support providers.
We share only what is necessary for each purpose. We may also disclose data where required by law, to protect vital interests, or to establish and defend legal rights.
5. International transfers
Some providers may process data outside the European Economic Area. Where they do, legally required mechanisms such as adequacy decisions or standard contractual clauses, and supplementary safeguards where necessary, will be used.
6. Retention
We retain registration data for as long as needed to organise and complete the pilgrimage, handle requests and meet applicable legal periods. Accounting and transaction data is retained for the period required by law. Health and emergency data ceases to be needed after the event and will be deleted or anonymised as soon as reasonably possible, unless required for a legal claim or obligation.
7. Your rights
- You may request access, correction, deletion, restriction or portability of your data and object to processing based on legitimate interests.
- You may withdraw consent at any time, without affecting earlier lawful processing.
- Some rights may be limited by legal obligations or the need to perform your registration.
- You may complain to the Portuguese Data Protection Authority (CNPD) at www.cnpd.pt.
8. Security, cookies and changes
We apply technical and organisational measures appropriate to the risk. No system is completely secure, so please contact us if you suspect misuse of your data.
The website uses only technologies needed for operation, security, language preferences and payment, plus aggregated metrics. If technologies requiring consent are introduced, an appropriate choice mechanism will be provided.
This policy may be updated for legal or operational changes. The current version and its update date will always be published here.