Privacy Policy

The PSTQB - PORTUGUESE SOFTWARE TESTING QUALIFICATIONS BOARDheadquartered at FEUP - Faculdade de Engenharia da Universidade do Porto, Rua Dr. Roberto Frias, s/n, 4200-465, legal and fiscal person no. 509 326 781, a private non-profit association (hereinafter referred to as "PSTQB").
The PSTQB's objectives are to develop, promote and foster the qualification and recognition of testing professionals and careers, the debate and sharing of knowledge and experiences, research, innovation and standardization in the area and the Portuguese presence in international forums.
Within the scope of its activity, PSTQB collects personal data from its data subjects, either in person or remotely, ensuring that the respective processing is carried out in accordance with the privacy protection rules emerging from Regulation (EU) 2016/679 ("GDPR") and other applicable national legislation, as well as in accordance with the confidentiality duties to which PSTQB is subject.

The data collected corresponds to data provided by the owners themselves or their legal representatives by filling in forms, such as the following:

Contact form, through digital channels;
Membership application form;
Registration form for certification exams via digital channels;
Registration form for certification exams;
Form on the cover page(s) of the Exam(s).

Responsible for Treatment

The entity responsible for processing personal data is PSTQB, insofar as it is responsible for determining the purposes and means of processing the data it holds.

Data processed by PSTQB

What is personal data?

Personal data means any information, of any nature and regardless of its medium, relating to an identified or identifiable natural person. An identifiable person is one who can be identified directly or indirectly, namely by reference to an identification number or to one or more specific elements of their physical, physiological, psychological, economic, cultural, social, religious, health or criminal identity.
We ask that you do not provide us with sensitive personal data, such as your identification number or one or more specific elements of your physical, physiological, psychological, economic, cultural, social, religious, health or criminal or other background through electronic means. If this information is required for a specific purpose, it should only be provided in person and never via the WEB.

Who are the holders of personal data?

The holders of personal data are Members, Exam Candidates, Employees, Partners, or natural persons to whom the data relates and who use the services provided by PSTQB, collaborate with it or enter into a relationship, in any contact with PSTQB.

What is the personal data?

These are all the details required to become a PSTQB Member, take the Exams or participate in the Conference or other events organized by the PSTQB.

Purposes of processing

PSTQB processes personal data on its own behalf, but may also do so on behalf of third parties in the following situations:

Provision of certification services;
Conducting certification exams;
Certificate issued and sent if approved;
Because of its International representative - ISTQB® - International Software Testing Qualifications Board;
On behalf of its international partner - GASQ Service GmbH;
Administrative communication;
Compliance with legal obligations;
Financial management;
Sending a newsletter and other commercial information;
Publicizing the events promoted by the PSTQB;
Testing Portugal Conference;
PSTQB Sessions events;
Social media management (LinkedIn, Instagram, Facebook, Twitter, etc.);

It should be noted that the purposes listed here will not be the only ones, and others may derive from them as far as possible. If there is a new purpose independent of the previous ones, PSTQB will inform the data subject on a case-by-case basis at the time the personal data is collected.

Foundations for Data Processing

PSTQB will only process personal data to the extent that the processing is lawful and necessary. The processing of personal data is only lawful if and to the extent that at least one of the following situations applies:

Consent: When the data subject has given their prior express consent in writing, orally (after ratification where necessary), or by validating an option, if that consent is free, informed, specific and unambiguous for the processing of their personal data for one or more of the specific purposes referred to above.
Fulfillment of legal obligations: When the processing of personal data is necessary to comply with a legal obligation to which PSTQB is subject, such as the communication of identification data to police, judicial, tax or regulatory bodies.
Legitimate interest: When the processing of personal data corresponds to a legitimate interest of PSTQB or a third party (such as the processing of data to improve the quality of the service provided) and when PSTQB's reasons for its use must prevail over data protection rights.
Defense of the vital interests of the data subject or another natural person: The processing of personal data should also be considered lawful when it is necessary for the protection of an interest essential to the life of the data subject or any other natural person. In principle, the processing of personal data based on the vital interest of another natural person can only take place when the processing cannot manifestly be based on another legal ground. Some types of processing may serve both important public interests and the vital interests of the data subject, for example if the processing is necessary for humanitarian purposes
Performing duties in the public interest: When processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Data Communication and Subcontractors

PSTQB will not pass on personal data to third parties unless:

express consent has been obtained from the owner;
the communication is necessary for the performance of a contract, agreement or award of services to which the holder is a party;
the transmission is made in compliance with a legal obligation or to comply with a court order;
the communication is carried out for any legitimate purpose provided for by the law in force.

PSTQB is obliged by law to communicate the personal data of its Exam and Associate candidates to regulatory bodies and other public authorities / official bodies.

Personal Data retention period

The processing of data by PSTQB will continue for as long as the data is necessary for the relationship established with its owners. Once the relationship has ended, PSTQB will only keep the personal data for the period of time necessary to fulfill the defined purpose and/or for the mandatory legal deadlines, or until the rights and duties arising from that relationship lapse, under the terms of the law.

Holders' rights

Under the terms of the applicable law, Data Subjects have the following rights:

Right to Information, which is the right of Data Subjects to be informed by PSTQB of all aspects relating to the collection and processing of their personal data, in particular:
- The purposes for processing your data;
- To whom can they be communicated?
- What rights they have;
- Under what conditions they can exercise them;
- What data they are obliged to provide as part of their relationship with the PSTQB, in a clear, concise and absolutely transparent manner;
Right of Access, which consists of the right of Data Subjects to access the personal data that has been provided, without restrictions, delays or excessive costs, as well as to know any available information about the origin of that data;
Right of Rectification, which is the right of Data Subjects to demand that their data is accurate and up-to-date, and they can request its rectification from PSTQB at any time;
Right of Deletion, which consists of the right of Data Subjects to demand the deletion of their personal data from PSTQB's records when they are no longer used for the purposes for which they were collected, without prejudice, however, to the retention periods that apply by law and legitimize the respective processing;
Right to Object, which consists of the right of Data Subjects to object, at their request and free of charge, in particular to the processing of their personal data for direct marketing purposes;
Right to Portability, which consists of the right of Data Subjects to receive their personal data provided to PSTQB in a structured, commonly used and machine-readable format, and to transmit this data to another controller, whenever technically possible.
Right to Restriction of Processing, which consists of the right of Data Subjects to, in certain circumstances, request PSTQB to restrict the processing of their data, namely: (i) when they contest the accuracy of their personal data, for a period that allows PSTQB to verify its accuracy; (ii) if the processing is unlawful and the Data Subject opposes the erasure of the data, requesting, in return, the limitation of its use; or (iii) when PSTQB no longer needs the Data Subject's personal data for processing purposes, but such data is required by the Data Subject for the purposes of declaring, exercising or defending a right in legal proceedings;
Right to Complain to the CNPD, which consists of the right to lodge, without prejudice to any other administrative or judicial remedy, a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place where the infringement is alleged to have taken place, if the data subject considers that the processing of personal data concerning him or her violates the GDPR and other applicable national legislation. In Portugal, the supervisory authority is the National Data Protection Commission (CNPD).

If the processing of data is based on consent, the data subject has the right to withdraw consent at any time, without compromising the lawfulness of the processing carried out on the basis of the consent previously given.

The exercise of any of their rights is guaranteed to the Holder by means of a written request addressed to PSTQB, sent by registered mail to the correspondence address:
PSTQB, Avenida Infante D. Henrique, 311, 1950-421 Lisboa, PORTUGAL;
or via the following email address: rgpd@pstqb.pt.

The provision of incorrect or inaccurate data is the sole responsibility of the data subject.

Data Protection Officer

The Data Protection Officer (DPO) ensures, among other things, that data is processed in accordance with the legislation in force and checks compliance with this Privacy Policy. The DPO also cooperates with the supervisory authority and provides information and advice to the data controller on their obligations in the field of privacy and data protection.
For any clarification related to this Privacy Policy, the Data Subject may contact PSTQB's Data Protection Officer at the following email address rgpd@pstqb.ptor by registered mail to "DPO-PSTQB", sent to the following address: Avenida Infante D. Henrique, 311, 1950-421 Lisboa, PORTUGAL.

Digital Channels and Use of Cookies

PSTQB collects and processes the personal data necessary for the provision and operation of its Websites, also known as Digital Channels, while guaranteeing adequate levels of security and protection of the personal data of those who use them and provide personal data through them.

The following are websites owned by PSTQB:
https://www.pstqb.pt/
http://www.testingportugal.pstqb.pt/

Therefore, various physical, logical, technical and organizational security measures have been adopted in order to protect personal data against its dissemination, loss, misuse, alteration, unauthorized processing or access, as well as against any other form of illicit processing.

Notwithstanding the security measures adopted by PSTQB, the Holder/User of the Digital Channels must keep any access codes they may have secret and not share them with third parties. In the particular case of mobile devices, they must also keep and maintain the device on which they access the Digital Channels in a safe condition and follow the security practices advised by the manufacturer and/or operator, in particular as regards the installation and updating of the necessary security applications, namely antivirus.

PSTQB uses "cookies" on its Digital Channels, meaning small text files with relevant information stored on the access device (computer, mobile phone/smartphone, tablet or other) and loaded by the internet browser when a site is visited by the Holder/User, namely to store and retrieve information about the browsing habits of a user of a device, and, depending on the information they contain, and the way the device is used, they can be used to recognize the Holder/User.

The cookies used by PSTQB respect anonymity and will not be used to collect any personal information.
The information stored in the cookies mentioned here is used exclusively by PSTQB, with the exception of Google Analytics, which is used and maintained by Google for statistical and research analysis purposes. The websites use the Google Analytics service, whose cookies and privacy policy can be found at:
https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage#gajs
https://www.google.com/intl/pt-PT/policies/

The use of cookies is a normal practice among websites on the Internet, and through most browsers the user can allow, block or delete the cookies installed on their device by configuring the options. If you block them, certain services that require them may not be available for use.
If you want to restrict, block or delete cookies from this website, you can disable cookies by modifying your browser settings (each browser's settings are different, so you should read your browser's instructions and manuals for more information on operating and controlling cookies). However, if you select this setting, you may not be able to access certain parts of PSTQB's websites or your browsing may be less effective.

These Digital Channels may contain links to other websites over which PSTQB has no control and is not responsible for their content. The inclusion of links to other websites is made solely as an informative reference and without binding or responsibility for the contents, owners, services or products offered. PSTQB reserves the right to demand the removal of any link it deems inappropriate, at its sole discretion. The content of the Digital Channels owned by PSTQB may not be totally or partially integrated into the structure of any other website without the express authorization of PSTQB.

Protective measures

PSTQB has implemented the appropriate logical, physical, organizational and security measures required by law, which are necessary and sufficient to protect personal data:

Firewall and intrusion detection system;
Means of protecting data from conception ("privacy by design") and also a set of preventive measures favorable to privacy ("privacy by default");
All employees are covered by a confidentiality agreement or are subject to confidentiality rules, within the scope of their employment relationship with PSTQB, with regard to the data to which they have access in the course of their work, and are duly informed of the importance of complying with this legal duty of confidentiality and are responsible for complying with this confidentiality obligation.