Last Updated: 2026/04/13

1. Introduction and Purpose

Thank you for your interest in our research website. Protecting your personal data is a priority for us. This policy explains how we process your personal data and details your rights under the General Data Protection Regulation (GDPR) and local data protection laws.

2. Data Controller

The entity responsible for processing your personal data (the “Data Controller”) via the website https://www.xxxxxxxxxxx.pt/ can be contacted regarding all matters related to the processing of personal data and the exercise of your rights under data protection law:

3. Data Collection and Usage

We only collect the data necessary to provide a functional website and to communicate with you.

Email Enquiries: If you contact our team or researchers via the email links provided, we will process your email address and any information included in your message to respond to your enquiry.

Web Server Logs: For security and performance reasons, your visit is logged. This includes your IP address, date/time of access, browser type, and operating system. The legal basis for this is our legitimate interest in maintaining a secure and optimised website.

Internal Database: Our website uses an internal database to manage project information and team profiles. We do not store any visitor personal data within this local database.

Google Analytics: We use Google Analytics to understand how visitors interact with our website. This tool uses cookies to anonymously collect standard web log data and information about visitor behaviour.

This helps us improve our content. This data is usually aggregated and used for statistical purposes.

Who should you contact regarding the processing of your personal data?

If you have any questions about this, please contact our team at any time using the following email address: .

4. Cookies

Our website uses cookies to improve your browsing experience. Cookies are small text files placed on your device.

Technical Cookies: These are necessary for the basic functions of the website (provided by the Flask framework).

Analytical Cookies (Google Analytics): These help us monitor website traffic and improve our content. These cookies track information such as your approximate location and session duration.

You can manage or disable cookies through your browser settings. However, disabling some cookies may affect how the website functions.

5. Data Storage and Location

Website Hosting: Our website and its associated database are hosted on secure servers located within the European Economic Area (EEA).

Email communication: As our team uses Gmail for communication, please be aware that any personal data shared via email may be processed on Google servers. Google ensures the protection of this data through Standard Contractual Clauses (SCCs) approved by the European Commission.

6. Data Access and Disclosure

Access to your data is strictly limited to FOODinteract Research Team researchers directly involved in handling your enquiry. We will not sell or disclose your personal data to third parties unless required to do so by law or competent authorities.

7. Data Retention

We only store your personal data for as long as is necessary to fulfil the purpose for which it was collected (e.g. responding to your email) or to comply with legal obligations. If you withdraw your consent, we will delete your data unless we are legally prohibited from doing so.

8. Data Security

Any personal data provided via this website is treated with the highest standards of security and confidentiality, in compliance with data protection laws. We have implemented appropriate technical and organisational measures to ensure your data is protected against loss, unauthorised access, or accidental alteration. These measures include, but are not limited to, encryption, access control, and secure data storage protocols. Our website uses an internal database to manage project information and team profiles. We implement strict access controls to ensure this data remains secure. The database is hosted on protected server environments, and administrative access is restricted to authorised researchers only. We do not store any visitor personal data within our local database.

9. Your Rights as a Data Subject

Under the GDPR, you may contact us at any time at to exercise your rights. These include:

  • Right of Access: To receive information about how your data is processed and a copy of the data held.
  • Right to Rectification: To request the correction of inaccurate or incomplete data.
  • Right to Erasure (“Right to be Forgotten”): To request the deletion of your personal data
  • Right to Restriction: To demand a temporary halt to data processing.
  • Right to Data Portability: To receive your data in a structured, machine-readable format.
  • Right to Object: To object to processing based on legitimate interests.
  • Right to Withdraw Consent: To withdraw your consent at any time for any future processing.

10. Right to Lodge a Complaint

If you believe your data is being handled incorrectly, you have the right to file a complaint with the Portuguese National Supervisory Authority: Comissão Nacional de Proteção de Dados (CNPD) Website: https://www.cnpd.pt.

11. Policy Updates

This Privacy Policy will be reviewed and updated periodically. The ‘Last updated’ date at the top of this document reflects the most recent changes.