The PSTQB - PORTUGUESE SOFTWARE TESTING QUALIFICATIONS BOARD, with head office at FEUP - Faculdade de Engenharia da Universidade do Porto, located at Rua Dr. Roberto Frias, s/n,4200-465, tax nº 509 326 781, is a private non-profit association (hereinafter referred to as "PSTQB").
The objectives of the PSTQB are to develop, promote and foster the qualification and recognition of testing professionals and careers, the debate and sharing of knowledge and experiences, research, innovation and standardization in the area and the Portuguese presence in international forums.
As part of its activity, the PSTQB collects personal data from its holders, both in person and remotely, ensuring that the respective processing is done in accordance with the privacy protection rules emerging from Regulation (EU) 2016/679 ("R.G.P.D.") and other applicable national legislation, as well as in accordance with the confidentiality duties to which the PSTQB is subject.
The data collected correspond to data that is provided by the owners themselves or their legal representatives by filling out forms, such as the following forms:
Contact form, through the digital channels;
Associate Registration Form;
- Registration form for the Certification Exams, through digital channels;
Application Form for Certification Exams;
Form present on the cover sheet(s) of the Examination(s).
Responsible for Treatment
The entity responsible for the processing of personal data is the PSTQB, insofar as it is responsible for determining the purposes and means of processing the data it holds.
Data Handled by PSTQB
What is personal data?
Personal data means any information, of any nature and regardless of its support, concerning an identified or identifiable natural person. A person who can be identified directly or indirectly, in particular by reference to an identification number or to one or more specific elements of his or her physical, physiological, psychological, economic, cultural, social, religious, health or criminal history is considered identifiable.
We ask that you do not transmit sensitive personal data such as an identification number or one or more specific elements of your physical, physiological, mental, economic, cultural, social, religious, health or criminal history or other information to us by electronic means. This information, if necessary for any specific purpose, should only be provided in person and never through the WEB.
Who are the data subjects?
The owners of the personal data are the Members, Exam Candidates, Employees, Partners, or natural persons to whom the data pertains and who use the services provided by the PSTQB, collaborate with it or enter into a relationship, in any contact had with the PSTQB.
What is personal data?
They correspond to all the data required to become a Member of the PSTQB, take Exams or participate in the Conference or other events organized by the PSTQB.
Purposes of Treatment
PSTQB does personal data processing on its own behalf, but may also do so on behalf of and representing third parties in the following situations:
Provision of services in the scope of Certification;
Realization of Certification Exams;
Issuing and sending the Certificate, in case of approval;
On account of its International representative - ISTQB® - International Software Testing Qualifications Board;
On behalf of its international partner - GASQ Service GmbH;
Communication of an administrative nature;
Compliance with legal obligations;
Sending a newsletter and other commercial information;
Publicizing the events promoted by the PSTQB;
Testing Portugal Conference;
PSTQB Sessions Events;
Social media management (LinkedIn, Instagram, Facebook, Twitter etc.);
It should be noted that the purposes listed here are not the only ones, and others may be derived from these as far as possible. If there is a new purpose that is independent of the previous ones, the PSTQB will inform the owner on a case-by-case basis at the time of collection of the personal data.
Basis for Data Treatment
PSTQB will only process personal data to the extent that the processing is lawful and necessary. The processing of personal data is lawful only if and to the extent that at least one of the following is the case:
Consent: When the data subject has given his or her prior express consent in writing, orally (after ratification where necessary), or by validating an option, if such consent is freely given, informed, specific and unambiguous for the processing of his or her personal data for one or more of the specific purposes referred to above.
Compliance with legal obligations: When the processing of personal data is necessary to comply with a legal obligation to which the PSTQB is subject, such as reporting identification data to law enforcement, judicial, tax or regulatory bodies.
Legitimate interest: Where the processing of personal data corresponds to a legitimate interest of the PSTQB or a third party (such as the processing of data for quality improvement of the service provided) and where the PSTQB's reasons for its use should override data protection rights.
Protection of the vital interests of the data subject or of another natural person: The processing of personal data should also be considered lawful where it is necessary for the protection of an interest which is essential for the data subject's life or that of any other natural person. In principle, processing of personal data on the basis of the vital interest of another natural person can only take place where the processing cannot be manifestly based on any other legal ground. Some types of processing may serve both important public interests and the vital interests of the data subject, for example, if processing is necessary for humanitarian purposes
Performance of a task carried out in the public interest: Where processing is necessary for the performance of tasks carried out in the public interest, or in the exercise of official authority vested in the controller.
Data Reporting and Subcontractors
PSTQB will not transmit personal data to third parties unless:
has obtained the holder's express consent to do so;
the communication is necessary for the performance of a contract, agreement or award of services to which the holder is a party;
the transmission is made in compliance with a legal obligation or in compliance with a court order;
the communication is carried out for any legitimate purpose provided by the law in effect.
PSTQB is, by law, obliged to communicate personal data of its Examination and Associate candidates to regulatory authorities and other public authorities / official bodies.
Term of conservation of Personal Data
The processing of data by the PSTQB shall continue for as long as the data is necessary for the relationship established with its owners. Once the relationship is terminated, the PSTQB will keep the personal data only for the period of time necessary to achieve the defined purpose and/or for the mandatory legal time limits, or until the rights and duties arising from this relationship expire, under the terms of the law.
Rights of the Holders
Under the terms of the applicable law, the Holders of personal data are entitled to the following rights:
Right to Information, which consists in the right of the Holders to be informed by the PSTQB about all aspects related to the collection and processing of their personal data, namely about
The purposes for which your data is being processed;
To whom can they be communicated;
What are their rights;
Under what conditions can they exercise them;
What data they must provide as part of the relationship established with the PSTQB, in a clear, concise, and absolutely transparent manner;
Right of Access, which consists of the Holders' right to access the personal data that have been provided, without restrictions, delay or excessive costs, as well as to know any available information on the origin of such data;
Right of Rectification, which consists of the right of the Holders to demand that their data be accurate and up-to-date, and they may at any time request their rectification from the PSTQB;
Right of Elimination, which consists of the right of the Holders to demand the elimination of their personal data from the PSTQB records when they are no longer used for the purposes for which they were collected, without prejudice, however, to the retention periods that apply by law and legitimize the respective processing;
Right of Opposition, which consists of the right of Data Subjects to object, at their request and free of charge, in particular to the processing of their personal data for direct marketing purposes;
Right to Portability, which consists in the right of the Holders to receive their personal data provided to the PSTQB, in a structured, commonly used and machine-readable format, and to transmit such data to another controller, whenever technically possible.
Right to Limitation of Processing, which consists of the right that the Data Subjects have to request PSTQB to limit the processing of their data, in certain circumstances, namely: (i) where they dispute the accuracy of their personal data, for a period allowing PSTQB to verify their accuracy; (ii) if the processing is unlawful and the Data Subject opposes the erasure of the data, requesting instead the limitation of its use; or (iii) where PSTQB no longer needs the Data Subject's personal data for processing purposes, but such data is required by the Data Subject for the purposes of asserting, exercising or defending a right in legal proceedings;
Right to complain to the CNPD, which is the right to lodge, without prejudice to any other administrative or judicial remedy, a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged offence, if the data subject considers that the processing of personal data concerning him or her infringes the GDPR and other applicable national law. In Portugal, the supervisory authority is the National Commission for Data Protection (CNPD).
If the data processing is based on consent, the data subject has the right to withdraw consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent previously given.
The exercise of any of his rights is guaranteed to the Holder by means of a written request addressed to the PSTQB, sent by registered mail to the following address:
PSTQB - Portuguese Software Testing Qualifications Board, Avenida Infante D. Henrique, 311, 1950-421 Lisboa, PORTUGAL;
or through the following email address: email@example.com.
The provision of incorrect, or inaccurate, data is the sole responsibility of the data subject.
Data Protection Officer
Digital Channels and Cookie Usage
PSTQB collects and processes personal data necessary for the availability and operation of its websites, also known as Digital Channels, ensuring, however, adequate levels of security and protection of personal data of those who use them and provide personal data through them.
Thus, several physical, logical, technical and organizational security measures have been adopted in order to protect personal data against diffusion, loss, misuse, alteration, unauthorized treatment or access, as well as against any other form of illicit treatment.
Notwithstanding the security measures adopted by PSTQB, the Digital Channels Owner/User shall keep the access codes he may have secret and not share them with third parties. In the particular case of mobile devices, he must keep and maintain the device on which he accesses the Digital Channels in safe conditions and follow the security practices recommended by the manufacturer and/or operator, particularly with regard to the installation and updating of the necessary security applications, including antivirus.
The PSTQB uses "cookies" on its Digital Channels, which are small text files with relevant information stored on the access device (computer, mobile phone/smartphone, tablet or other) and loaded by the internet browser (browser) when a site is visited by the User, allowing to store and retrieve information about the browsing habits of a user of a device, and, depending on the information they contain, and the way the equipment is used, they can be used to recognize the User.
The cookies used by PSTQB are anonymous and will not be used to collect any personal information.
The use of "cookies" is a normal practice among Internet websites, and through most browsers the user can allow, block or eliminate the "cookies" installed on their equipment by setting the options. If you block them, it is possible that certain services that require them will not be available for use.
If you want to restrict, block or delete cookies from this website you can disable cookies by modifying the settings of your browser (the settings of each browser are different so you should read the instructions and manuals of your browser for more information on the operation and control of cookies). However, if you select this setting you may not be able to access certain parts of the PSTQB websites or navigation may become less effective.
These Digital Channels may contain links to other websites over which PSTQB exercises no control, nor is responsible for their content. The inclusion of links to other websites is done solely as an informational reference and without binding or liability for the content, owners, services or products offered. PSTQB reserves the right to demand the removal of any link it considers inappropriate, this criterion being its sole responsibility. The content of Digital Channels owned by the PSTQB cannot be totally or partially integrated into the structure of any other website without the express authorization of the PSTQB
PSTQB has implemented the appropriate logical, physical, organizational and security measures imposed by law that are necessary and sufficient to protect personal data, including:
Firewall and intrusion detection system;
Means of protecting data by design ("privacy by design") and also a set of privacy-friendly preventative measures ("privacy by default");
All employees are covered by a confidentiality agreement or subject to confidentiality rules, within the scope of their employment relationship with PSTQB, regarding the data to which they have access within the scope of their activity, being duly informed of the importance of compliance with this legal duty of confidentiality and being responsible for compliance with this confidentiality obligation.