Legal

Privacy policy

OLOMOON, LDA. · NIPC 519639430
Version 1 — in force since 22 September 2026

English version. A Portuguese version of these documents is also available. For consumers resident in Portugal the Portuguese version prevails, pursuant to Article 7(3) of Law no. 24/96 of 31 July.

1. Controller

The controller is OLOMOON, LDA., legal person number 519639430, with registered office at Rua da Saudade, n.º 8, 4th floor, 1100-583 Lisbon, contactable at info@olomoon.org.

2. Data processed

We process identification and contact details, Account data, submitted content, usage and technical data and — where the Candidate authorises it — image, voice and audiovisual content.

Under the Discovery programme we may collect, from publicly accessible sources, professional identification data of individuals whose work is relevant. In that case we provide the information required by Article 14 of the General Data Protection Regulation at first contact and, in any event, within one month.

We do not request data in the special categories set out in Article 9 of the Regulation. Users should refrain from including such data in free-text fields.

3. Purposes and legal bases

Account management and provision of the Services — performance of the contract, Article 6(1)(b).

Identification and contacting of potential Candidates under Discovery — legitimate interests, Article 6(1)(f), following the corresponding balancing assessment.

Publication of the public profile and project — consent, Article 6(1)(a), freely revocable.

Use of name, image, voice and interviews — separate consent, revocable under Articles 79 to 81 of the Portuguese Civil Code.

Retention of the factual record of closed editions and of the editorial archive — freedom of expression and information, Article 85 of the Regulation and Article 24 of Law no. 58/2019 of 8 August.

Security, fraud prevention and compliance with legal obligations — legitimate interests and legal obligation, points (f) and (c).

4. Recipients and processors

We use hosting, communication, forms and analytics providers, bound by contract under Article 28 of the Regulation. We may share data with jury members, sponsors and prize providers where disclosed and lawful.

5. International transfers

Where data is transferred outside the European Economic Area, such transfer relies on an adequacy decision or on standard contractual clauses, accompanied by a transfer impact assessment. Data subjects may request information on the safeguards applied.

6. Retention periods

Account data — while the Account remains active and for twelve months after closure. Discovery data not leading to contact — six months. Do-not-contact list — for as long as necessary to honour the objection expressed. Record of closed editions — five years. Data required for legal compliance — for the period required by law.

7. Cookies

We use cookies strictly necessary for the operation of the site. Any others, in particular analytics or audience measurement cookies, are only installed with prior consent, under Article 5 of Law no. 41/2004 of 18 August, given through the management panel provided on first access and revocable at any time.

8. Automated decision-making

No decisions are taken solely by automated means producing legal effects or significantly affecting data subjects. Automated detection applied to moderation is always followed by human review.

9. Data subject rights

Data subjects may request access, rectification, erasure, restriction and portability of their data, object to processing based on legitimate interests, and withdraw consent at any time without affecting the lawfulness of prior processing. Requests are answered within one month, extendable by two months in complex cases.

Data subjects may lodge a complaint with the Portuguese Data Protection Authority (CNPD), Av. D. Carlos I, n.º 134, 1.º, 1200-651 Lisbon, www.cnpd.pt.

10. Security and data breaches

We apply technical and organisational measures appropriate to the risk. In the event of a personal data breach likely to result in a risk to the rights and freedoms of data subjects, we notify the supervisory authority within seventy-two hours and, where the risk is high, inform the affected data subjects.

11. Changes

Material changes to this Policy are notified with reasonable advance notice and by appropriate means.

The three documents
Terms of Use · Privacy Policy · Code of Conduct
To report illegal content, use olomoon.org/report.
Privacy Policy · Olomoon