Portcycling – Associação is the data controller for this website and its contact form. This explains what we collect, why, and what rights you have under the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679).
This is a plain-language draft prepared to EU/GDPR best practice for Portcycling's own use – it is not legal advice. We recommend a qualified data-protection lawyer reviews and signs off on this text, and on the underlying data flows (Formspree, Tilda, hosting), before the page goes live.
Who is the data controller?
Portcycling – Associação (represented by Darina Balabai), a non-profit cycling organization registered in Portugal.
Estrada Nacional 8-2, km 1, Fracção C, Casal Sereno, 2560-239 Torres Vedras, Lisboa, Portugal.
NIPC (Portuguese legal entity number): 518757366.
Email:
dabalabar@gmail.com.
Darina Balabai is the designated contact person for data protection matters.
What data do we collect, and why?
Name, email address, and WhatsApp/phone number to process your application and contact you about your booking. Training-related information you choose to share (experience level, weekly hours, FTP/power data, goals) to place you in the correct pace group. Any dietary, health, or accessibility information you volunteer, used solely to brief the hotel and coaching team. We do not collect anything beyond what you submit in the form.
What is our legal basis for processing?
Your consent (Art. 6(1)(a) GDPR) for responding to your enquiry and, separately, for marketing updates. If your enquiry leads to a camp booking on one of our individual camp pages, that page's own consent covers performance of a contract (Art. 6(1)(b)) for logistics, payment, and delivery of the camp. Where you voluntarily share health-relevant details, this is treated as special category data processed only with your explicit consent (Art. 9(2)(a)).
Who do we share it with?
Formspree, Inc. (USA) processes and delivers this contact form on our behalf; as a US-based subprocessor, this involves an international data transfer, safeguarded by Formspree's Standard Contractual Clauses / EU-U.S. Data Privacy Framework participation. Netlify hosts this website. If your enquiry leads to a booking on one of our individual camp pages, that page's own privacy notice governs how your booking and any dietary/health details are shared with the relevant hotel. If you accept cookies, we also use Google Analytics (Google Ireland Ltd / Google LLC) and Meta Pixel (Meta Platforms, Inc.) to understand site traffic and ad performance – both are US-based subprocessors under their own data transfer safeguards, and neither loads until you accept. We never sell personal data, and we don't share it with anyone else without telling you.
How long do we keep it?
Application data is kept for the current camp cycle plus 24 months, then deleted, unless you ask us to remove it sooner. If you've opted into marketing updates, we keep that consent record until you unsubscribe or ask us to stop.
What are your rights?
Under Articles 15–22 GDPR you can request access to, correction of, or deletion of your data; restrict or object to processing; ask for a portable copy; and withdraw consent at any time – with no effect on processing carried out before withdrawal. To exercise any of these, email
dabalabar@gmail.com. If you're unhappy with our response, you can lodge a complaint with Portugal's supervisory authority, the
Comissão Nacional de Proteção de Dados (CNPD).
Cookies & third-party requests
This page loads web fonts and an embedded contact form from third-party providers, which may set cookies or receive your IP address as a technical side-effect. If you accept the cookie banner, we also load Google Analytics and Meta Pixel to measure traffic and ad performance – neither loads before you accept. See the cookie banner at the bottom of the page to manage your preference, or contact us to ask what's currently active.