Personal Data Protection Regulation

Personal Data Protection Regulation Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (GDPR), on the protection of natural persons with regard to the processing of personal data and on their free movement, entered into force in May 2016, with a two-year transition period, which ended on May 25, 2018. In order to comply with the obligations resulting from the GDPR, UPB approves policies and procedures aimed at achieving compliance with these requirements, as part of its personal data protection strategy. UPB, as data controller, ensures that the processing of personal data is carried out within the scope of the purposes for which it was collected, implementing a culture of data minimization, and therefore only collects, processes and retains personal data that is strictly necessary for the pursuit of its activity. UPB’s Data Protection Supervisor is responsible for informing about the obligations arising from the GDPR, as well as ensuring that data subjects are aware of how their data is processed and how they can exercise their rights in this regard. Regulations Contacts: The Data Protection Supervisor (DPO) can be contacted by e-mail at protecao.dados@ipb.pt.