Privacy Policy

This privacy policy regulates the way in which the Faculty of Economics of the Universidade Nova de Lisboa-Nova School of Business and Economics ("Nova SBE”) collects, guard and disseminates the data collected from users (“Users"), Through the website www.novasbe.unl.pt

This privacy policy applies to the processing of personal data of Nova School of Business & Economics’ (“Nova SBE”) website users. 

 

Who are we? 

Personal data will be processed by Universidade NOVA de Lisboa, legal entity number 501559094, headquartered in Campus de Campolide, 1099-085 Lisboa, more specifically by Nova SBE as an organic unit of Universidade NOVA de Lisboa. 

Nova SBE assumes the role of the data controller in the processing of personal data, as defined and employed in accordance with personal data protection legislation. 

 

What are the purposes of personal data processing? 

The Nova SBE processes personal data for the following purposes: 

  • a. To share relevant information with website users, including institutional content, informational materials, brochures, events, and Nova SBE’s academic offerings; 
  • b. To facilitate communication between users and Nova SBE, including scheduling meetings and conversations; 
  • c. To manage and process applications for academic programs, including PhDs, master’s degrees, postgraduate programs, and other courses, as well as for research centers; 
  • d. To organize and manage registrations and participation in events promoted by Nova SBE; 
  • e. To manage requests for the creation of clubs within the scope of Nova SBE’s activities; 
  • f. To manage spontaneous applications within the scope of recruitment processes; 
  • g. To enable the publication and dissemination of job opportunities and roles for the academic community and partners; 
  • h. To process and manage donations to the institution; 
  • i. To receive, analyze, and respond to compliments, suggestions, and complaints; 
  • j. To ensure the development, maintenance, operation, and security of the website. 

The use of personal data for a different purpose is evaluated based on the criteria outlined in Article 6(4) of the GDPR. 

 

Lawfulness Of Processing For Processing Personal Data 

The processing of personal data carried out by Nova SBE is based on the following legal grounds: 

  • The legitimate interests pursued by Nova SBE or by third parties, unless the interests or fundamental rights and freedoms of the data subject which require the protection of personal data prevail; 
  • The performance of a contract to which the data subject is a party, or for the purpose of carrying out pre-contractual steps at the request of the data subject; 
  • The fulfilment of legal obligations of Nova SBE; 
  • The public interest pursued by Nova SBE. 

When none of the other conditions of lawfulness are able to support the data processing operation, Nova SBE will only process personal data if it has obtained the consent of the data subject to process their personal data for specific, explicit and legitimate purposes. 

The data subject can request information about the criteria used to determine legitimate interest from Nova SBE. 

 

To Whom We Transmit Personal Data? 

In the course of its activities, Nova SBE transmits your personal data to processors, other data controllers and joint controllers. These entities include the following: 

  • Technology and web hosting service providers – To ensure the development, maintenance, operation, and security of the website, guaranteeing its functionality and protection against cybersecurity incidents; 
  • Communication platforms – To facilitate contact between users and Nova SBE, including the management of meeting and conversation scheduling requests; 
  • Organizers and partners of academic and scientific events – To manage registration and participation in events organized by Nova SBE or in partnership with other institutions; 
  • Educational institutions and research centers – To manage and process applications for academic programs, including PhDs, master’s degrees, postgraduate programs, and research projects; 
  • Financial entities and payment platforms – To manage and process donations to the institution; 
  • Competent authorities – Whenever required by law or regulation, namely to comply with legal obligations related to data protection, digital accessibility, and information security. 

 

Transfer Of Personal Data To Countries Outside The EEA 

Nova SBE may transfer personal data to countries outside the European Economic Area (EEA), in accordance with the General Data Protection Regulation. Whenever the destination countries do not offer a level of protection equivalent to that of the European Union, Nova SBE ensures the implementation of appropriate safeguards, such as verifying the existence of an adequacy decision by the European Commission or, in its absence, the adoption of Standard Contractual Clauses approved by the Commission. 

Further information about these safeguards can be obtained by contacting helpdesk@novasbe.pt. 

 

How Long Do We Keep Personal Data? 

Nova SBE keeps personal data for the period necessary to fulfil the purposes for which it was collected. To this end, a retention schedule has been defined which indicates the periods applicable to each purpose. For more information on retention periods, you can contact us through the means indicated in this policy. 

 

What Are The Data Subject Rights? 

The law grants the data subject a set of rights that can be exercised at any time. These rights include the right to object, often used in relation to certain types of communications, as well as the right of access, erasure, restriction of processing, and rectification. In addition, the data subject has the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. 

The data subject can exercise these rights by emailing dataprotection@novasbe.pt . You can also contact the NOVA's Data Protection Officer at dpo@unl.pt. 

The data subject also has the right to lodge a complaint with the Portuguese supervisory authority – Comissão Nacional de Proteção de Dados at https://www.cnpd.pt/. 

 

Privacy Policy Changes 

Please note that this privacy notice may be updated. If there are substantive or material changes that alter how the personal data is processed, the data subject will be promptly notified within a reasonable timeframe. This includes changes to the processing purposes, data controller identity, or recipient categories. 

Version | July 25, 2025