The purpose of this Privacy Policy is to outline how INOVA+ – INNOVATION SERVICES, S.A. (INOVA+), as CrossReTour website manager, deals with any personal data you provide to us while visiting this website.

Types of data we collect and what we use it for
a. When you use the CrossReTour website: Like most websites, we gather analytical data collected on an aggregated basis of all visitors to the website. The data that we collect through Google Analytics is anonymised and, therefore, not personally identifiable. If you do not want your data to be collected by Google Analytics, you can opt out through Google Analytics Opt-out Browser Add-on Download Page.
b. Our website uses cookies to ensure that we give you the best experience on the website. A cookie is a small file of information which is sent to your computer when you visit a website. This file allows the site to recognise your browser and can be used to store user preferences. When you visit the website, we provide a cookie notification which informs you that we use cookies on this site. You can choose to accept cookies or not within your browser settings. Different browsers have different controls available to you. Typically, your browser will enable you to choose to accept, refuse or delete all cookies. Please select your browser below for further details.
Google Chrome
Internet Explore
Firefox
Safari
Safari Mobile
Opera
For this purpose, please consult our Cookies Policy.
c. If you fill in the contact request form, using the option “Contact Us”: your e-mail address and name will be provided. INOVA+ may process your data to send you information about CrossReTour project and its objectives, to interact and answer your questions.

What we do with your data
a. Aside from cookies and data referred to, we do not collect, store or re-use any personally identifiable data because of your visit to the website. If this changes in the future, we will update this Privacy Policy accordingly.
Your personal data will be processed based on the legitimate interests of INOVA+ and on your consent.

With whom we may share your personal information
Your personal data may be disclosed to the project´s partners.
The data provided will be securely stored on the project partner databases which adhere to GDPR compliance.
Your personal data may be processed by companies subcontracted by INOVA+, namely for website hosting and email. These companies are only provided with the personal data necessary for the provision of the service in question.
The personal data may also be accessed by auditors external to INOVA+, namely by funding authorities for reporting and auditing purposes, with the guarantee that they will be kept confidential and will not be used for purposes other than their purpose.
Your data will be processed inside of the European Union.

Your data protection rights
We would like to make you aware of your data protection rights. Every user is entitled to the following:
Access: the right to ask INOVA+ for copies of your personal data.
Rectification: the right to request that INOVA+ correct any information you believe to be inaccurate.
Erasure: the right to request that INOVA+ erase your personal data from our records.
Restrict processing: the right to request that INOVA+ restrict the processing of your personal data, under certain conditions.
Object to processing: the right to object to INOVA+ processing your personal data, under certain conditions.
Data portability: the right to request that INOVA+ transfer the data we have collected to another organization, or directly to you, under certain conditions.
If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us at dpo@inova.business.

Data retention
We store the information we collect about you for as long as necessary for the purpose(s) for which we collected it.
Your personal data will be stored by INOVA+ until November 2028 as this is two years after the expected completion of CrossReTour.
Once the maximum retention period is reached, the personal data will be irreversibly anonymised (anonymised data may be retained) or securely destroyed.

Security Measures adopted for the protection of personal data
INOVA+ uses a variety of security measures, including authentication tools, encryption, and digital certificates to help protect and maintain the security, integrity, and availability of your personal data.
Although data transmission over the internet or website cannot guarantee full security against intrusion, INOVA+ and its service providers employ their best efforts to implement and maintain physical, electronic, and procedural security measures designed to protect Users’ personal data in compliance with applicable data protection requirements. Among others, INOVA+ implements the following:

  • Protection of information technology systems through firewalls, with a view to preventing unauthorised access to their personal data.
  • Permanent monitoring of access to information technology systems with a view to preventing, detecting, and avoiding the improper use of your personal data.
  • Our servers are in the European Economic Area.

Responsibility for use of the Website
INOVA+ cannot be held responsible for any damages or losses suffered by Users resulting from the correct or incorrect use of the Website, as well as arising from access by third parties to the Users’ computer and computer system, viruses, etc.

Right to complain to the Data Protection Commissioner (DPC)
If you wish to raise a complaint, you can contact us (dpo@inova.business) in the first instance.
If you are not satisfied, you can also lodge a complaint with the Supervisory Authorities (in Portugal – Comissão Nacional de Proteção de Dados – CNPD) if you believe that your rights over your personal data have been compromised.

Updates to the Privacy Statement
We may change this Privacy Policy. The ‘Last updated’ section at the bottom of this page indicates when it was last revised. Any changes to this Privacy Policy will become effective once we post the revised version on the CrossReTour website. Your use of the CrossReTour website and services following these changes means that you accept the Privacy Policy.

How to contact us
The data controller for the CrossReTour website and services provided through this website is INOVA+ – INNOVATION SERVICES, S.A. (“INOVA+”), with head office at Rua Dr. Afonso Cordeiro, n. º 567, in Matosinhos and Leça da Palmeira, 4450-309 Matosinhos.
If you need to contact INOVA+ regarding any of your rights as set out in this Privacy Policy, all such requests should be made in writing by the e-mail dpo@inova.business.