In accordance with the General Data Protection Regulation (GDPR)

​

1. Identification
This Privacy Policy applies to all data collected by FABSTART - Fábrica de Startups, S.A., with registered office at Rua Alexandre Herculano, nº 23 - 2º, Lisbon, and office at Avenida Marginal, Edifício Parque Oceano, Loja 8, Oeiras, within the scope of its activity and, specifically, within the scope of Tourism Advance.

Tourism Advance is an open innovation program promoted by Fábrica de Startups, in partnership with Turismo de Portugal, designed to connect tourism companies with startups developing innovative solutions.
This Privacy Policy applies to data collected through the Tourism Advance website, application forms, social media, newsletters, personal contacts, program activities, events and any other information voluntarily provided to Fábrica de Startups, its employees or representatives.

References to “data” in this Privacy Policy refer to any data submitted by users, applicants, participants, startups, companies or other stakeholders who use, have used or will use Fábrica de Startups’ services, including answers to questionnaires, data collected through forms, data submitted through websites developed or managed by Fábrica de Startups, or data shared during program activities.
Fábrica de Startups is responsible for collecting and storing the data and will hereinafter also be referred to as the Data Controller.
 

2. Protection of Personal Data
In accordance with the General Data Protection Regulation (GDPR), Fábrica de Startups recognises the user’s right to privacy.
All data shared with Fábrica de Startups is provided voluntarily and consists of personal information that the user agrees may be used and processed by Fábrica de Startups for the purposes described in this Privacy Policy.
Personal information shared with Fábrica de Startups will only be used after the user has accepted this Privacy Policy and will not be used in any way that violates applicable law.

The Data Controller does not require users to share sensitive personal data, as defined under the GDPR.
The information provided will be used only for purposes related to Fábrica de Startups’ activity, namely the organisation, management, communication and execution of programs or events, including Tourism Advance.

After the purpose for which the personal information was collected has ended, the information may be archived for the period required by applicable law and in accordance with section 7 of this Privacy Policy.

The personal information collected by the Data Controller is used for the programs or events in which it was collected and is appropriate to the reason that led to its collection.

Each user shares personal information voluntarily and has the right to access, update, correct, block or request the deletion of their data, in accordance with section 8 of this Privacy Policy.

Users have the right to notify the Portuguese Data Protection Authority, Comissão Nacional de Proteção de Dados (CNPD), through the means available at www.cnpd.pt, whenever they consider that there has been a breach of privacy by Fábrica de Startups.

3. Who Has Access to the Data
The data provided by users is processed by Fábrica de Startups’ operational team, strictly for the purposes described in this Privacy Policy.
Data may also be accessed by third-party companies, clients or partners of Fábrica de Startups, provided that they comply with the GDPR and that such access is necessary within the scope of Fábrica de Startups’ commercial or operational activities.

Within the scope of Tourism Advance, data may be shared with entities involved in the organisation, evaluation and execution of the program, including Turismo de Portugal, participating companies, mentors, jury members, advisory board members, service providers and other program partners, whenever necessary for application evaluation, selection, matchmaking, program management, reporting or potential collaboration opportunities.

4. Where the Data Is Stored
The data provided by users may be stored in third-party databases and platforms that comply with the GDPR, including:

• MailChimp

• Google

• Facebook

• LinkedIn

• HubSpot

• Dropbox

• Typeform

• Google Forms

• SurveyMonkey

• Cognito Forms

• Eventbrite

• Wix

Whenever any of the databases or platforms listed above are added, removed or changed, Fábrica de Startups may update this Privacy Policy accordingly.

5. Information Stored
For marketing purposes, the following information may be stored:

• Full name

• Email address

• Phone number

For programs or events, including Tourism Advance, the following information may be requested and stored:

• Full name

• Email address

• Phone number

• Address

• Tax identification number, when applicable

• Company or startup name

• Company address

• Professional role

• Country and city

• Website and social media links

• Information about the startup, project, product or service

• Information submitted through the application form

• Information shared during interviews, meetings, bootcamps, matchmaking sessions or program activities

• IBAN, in cases where reimbursement or payment is applicable.

​

Image, voice and video recordings may also be collected during program sessions or events, whenever applicable.

6. Use of Data

The data provided by users may be used for the following purposes:

• To send commercial proposals;

• To send information about programmes or events that Fábrica de Startups is organising or will organise, including location, dates, agenda and other relevant information;

• To send direct invitations to participate in programmes or events organised by Fábrica de Startups;

• To manage applications and participation in Tourism Advance;

• To communicate information related to Tourism Advance, including application status, programme activities, sessions, events and follow-up communications;

• To support the organisation, management and reporting of Tourism Advance;

​

To share relevant information with entities involved in Tourism Advance, including Turismo de Portugal, participating companies, mentors, jury members, advisory board members, service providers or programme partners, whenever necessary for the management, evaluation and execution of the programme.

The user gives consent to the Data Controller to use the data provided in order to keep them updated about the commercial and/or operational objectives of Fábrica de Startups.

The Data Controller agrees not to transfer or lend the user’s data if the user has not accepted this Privacy Policy.
The Data Controller may not sell the user’s data without the user’s individual written consent.

For commercial or operational purposes, the Data Controller only sends emails to users who have accepted this Privacy Policy or who have otherwise provided valid consent, where applicable.

7. Period for Which Data Is Stored
All data will be stored for the period prescribed by applicable law governing the operations in which Fábrica de Startups’ services are included.

In the case of newsletters, data may be kept until the data subject requests to unsubscribe.
When the data subject requests to unsubscribe or requests deletion, Fábrica de Startups will have a period of one week to delete the data from the databases requested by the data subject and inform them of such deletion, whenever applicable.

Third-party databases and platforms may have their own information retention periods. It is the responsibility of the user to consult the privacy policies of each third-party platform for further information.

By accepting this Privacy Policy, the user confirms that they are aware of the above and that it is their responsibility to obtain information regarding the retention periods of third-party platforms.

8. Managing Your Data
All data shared with the Data Controller may be deleted from the databases through the following procedures:

• For newsletters: by clicking the “Unsubscribe” button available in the email

• For other data: by sending an email to talk@fabstart.pt requesting deletion

​

Users may contact Fábrica de Startups to remove their information by sending an email to:
talk@fabstart.pt
with the following request:
“Please delete and remove all personal information linked to my email address.”

Users may also request access, correction, update, restriction, blocking or deletion of their personal data, in accordance with applicable data protection legislation.

9. Use of the Website
When users access the Tourism Advance website, they are not necessarily connected to any online service and may browse anonymously.
During this browsing, no personal information is collected directly, unless voluntarily submitted by the user. However, the website may track how anonymous or registered users navigate the website.

One of the methods used is called a “cookie”. Cookies are identifiers stored on the user’s device and are used to recognise the user on a future visit, without requiring a new registration.

Cookies cannot retrieve information from the user’s device, download computer viruses or collect other personal information stored on the device.

The website may use the following cookie providers:

• Google Analytics

• Facebook Pixel

• Google Ads

• LinkedIn

Users may manage or disable cookies through their browser settings. Disabling cookies may affect some website functionalities.

10. Website Security
The Data Controller recognises the importance of security and seeks to protect users’ personal information.
Unauthorised access, use or disclosure is prevented through security technologies and processes. Personal information entered on the website is stored in systems with limited access and controlled environments.

Whenever the Data Controller detects a data breach, it will act in accordance with the GDPR and may be required to report the breach to CNPD. In cases where there is a high risk to the user, the user may also be notified.

11. Other Websites
The websites that users may access through links available on the Tourism Advance website or on Fábrica de Startups’ websites may have privacy policies that differ from this Privacy Policy.

To protect their privacy, users are encouraged to review the privacy policies of any third-party websites they access.
Fábrica de Startups is not responsible for the privacy practices, content or security of third-party websites.

12. Contacts
FABSTART - Fábrica de Startups, S.A.
Avenida Marginal, Edifício Parque Oceano, loja 8
2780-337 Oeiras, Portugal

Email: talk@fabstart.pt
This Privacy Policy is in force from the moment it is published on the website.
Last updated: Junho 2026

​

​

​

​

​

​

​