Privacy Policy

EDP – Energias de Portugal, SA (henceforth “EDP”) is committed to respecting the privacy of all users and protecting the security of their personal data. The purpose of this document is to inform users about the way EDP processes the personal data they provide on the EDP University Challenge registration form. Users should carefully read this privacy policy and freely decide whether they want to provide their personal data to EDP before filling out this form. 

Users warrant that they are of legal age, that the information they provide is true, accurate, complete and up to date, and that they accept full responsibility for any inconsistencies in this regard. If such information refers to a third party, users warrant that they have informed said third party of the conditions set out in this document and that the latter has agreed to provide their data to EDP for the purposes specified herein.

1.    Scope of use and data controller

This privacy policy applies to all personal data collected on the EDP University Challenge registration form.

The data controller of such data is EDP - Energias de Portugal, SA, (henceforth “EDP”), a company headquartered at Avenida 24 de Julho 12, 1249-300 Lisbon, and with the following email address «universitychallenge@edp.com». For any questions regarding this privacy policy, please get in touch with EDP by using one of the aforementioned channels and mention “EDP SA - Personal data privacy” as the subject.

2.    Purposes and legal basis of data processing

Personal data provided by the user will be processed in order to confirm compliance with registration conditions, initiate the necessary steps and prepare the communications to be sent during the competition timeline (as described in paragraph 4 of this Regulation), as well as to deliver the final prize. The legal basis for the processing of such data is the consent of the data holder upon prior acceptance of the competition's terms and conditions.

3.    Recipients

The user's personal data may be transferred to a suitable service provider outsourced by EDP, or to other companies within the EDP Group, which will process the data solely for the purposes established by EDP SA and under its instructions.  For this initiative, the outsourced service provider accessing the personal data processed by EDP is Premivalor - Estudos, Investimentos e Participações, Lda., headquartered on Rua Abel Manta 18, 3º Esquerdo, Oeiras, with the following VAT identification number and registration at the Commercial Registry Office: 504836773.

4.    International data transfers

Data processing for the aforementioned purposes may require that such data be shared with EDP Group companies based outside the European Economic Area (more information on the locations where EDP operates available at portugal.edp.com). In such cases, personal data will be transferred using information systems with appropriate information security measures, such as content and communication encryption and secure servers. Pursuant to GRPD provisions, such processing of personal data shall be carried out only with the explicit consent of the data holder, which will be requested in the form corresponding to the situation in which the transfer may occur.

5.    Retention period

Personal data will be kept for a period of 12 months, after which it will be deleted, unless EDP is obliged to retain it for a longer period in order to comply with legal requirements.

6.    User rights

Pursuant to personal data laws, users have the right to access, rectify and delete any personal data concerning them, as well as to exercise their data portability rights or limit or oppose the processing of their personal data. In order to exercise the aforementioned rights, users must contact the data controller by using the addresses listed in paragraph 1 of this policy.

Users also have the right to file a complaint with Portugal's Data Protection Commission if they believe that their personal data rights have been infringed.

For any question related to this privacy policy, users may also contact the EDP Data Protection Officer (DPO) at: