Privacy Policy

Last updated: 6 September 2026

This page tells you which of your data reaches us through allcountries.online, what we do with it, how long we keep it, and what you can ask of us at any point. It takes a few minutes to read, and it is written to be read rather than to bury the meaning in wording.

 

1. Who is responsible for your data

allcountries.online (All Portugal Space) is owned and run by DESCOBRILANÇA UNIPESSOAL LDA, sociedade por quotas, unipessoal (a private limited company with a single shareholder), NIPC 516940503. Registered office: Rua 2 da Matinha, Urbanização da Matinha, Lote A, 5D, Armazém J, 1950-073 Lisboa, Portugal.

That company is the data controller (responsável pelo tratamento) within the meaning of the General Data Protection Regulation (GDPR).

Synthesis Open Gate Portugal Association is a separate non-profit legal entity with its own privacy policy. Some of the events at the venue are run together with the Association. For the data you leave on this site, DESCOBRILANÇA UNIPESSOAL LDA answers.

Questions about your data, withdrawal of consent, and any of the requests in section 9: team@allcountries.online. We read every message and we reply to every message.

 

2. What data reaches us, and how

We do not buy contact lists and we do not gather information about you elsewhere. Everything we hold, you gave us yourself, in one of these ways.

Site forms. Your name, email address, phone number if you give one, and the text of your message.

Applications from teachers, experts and conference speakers. Professional background, experience, field of work, links to your own work. Some of this is published on the site as a profile card, but only where you allowed that separately in the form itself.

Your account. Username, email address, whatever you added to your profile, your purchase history and your activity in groups.

Groups and discussions. Everything you posted in a group on this site, including the name you posted it under. Group discussions are visible from outside, and the group page says so.

Site chat. Your messages and our replies, with the date and time.

Files you upload to a form or to the shared area. The file itself, plus what its properties show: name, size, date.

Online programmes. Where a programme runs as a course you work through, the system records which classes you opened and when, so that you can see where you left off.

Buying a plan or a gift card. What you bought, when, for how much, and the details needed to issue the invoice.

Payments. Amount, currency, date, transaction reference, payment status. Your card number never reaches us and is never stored by us. The payment provider handles it on its own systems.

Event registrations made here in the past. This site used to take event registrations, and those records are still in the system: name, contact details, event name and date. We take no new registrations here; how long the old ones stay is in section 4. Tickets and event registration now live at allportugalevent.com, and enrolling a child in classes happens at allportugalsmartacademy.com.

Surveys with no personal data. Sometimes we ask what you think of a topic without collecting a name or a contact. Those answers are not linked to you.

Technical data. IP address, browser type, the pages you opened. Section 6 covers this separately.

 

3. Why we hold your data, and on what legal basis

Every purpose has its own basis. We set them out one by one, because the basis decides what you can demand of us.

To do what you asked for. Open your access to an educational programme, issue a gift card, run your account, let you into a members-only area. This also covers the steps before a contract that you asked for: a quote, a date, an answer to a request for a proposal. Basis: article 6(1)(b) GDPR, performance of a contract and steps taken at the request of the data subject before entering into one.

To keep our books and pay tax. Invoices, receipts, payment records. We have no discretion here: the law requires us to issue these documents and to keep them. Basis: article 6(1)(c) GDPR, compliance with a legal obligation.

To answer you. If you wrote through a form or in the chat, we reply and keep the exchange, so we can follow the matter and not ask you the same thing twice. This also covers reviewing applications from teachers, experts and partners. Basis: article 6(1)(f) GDPR, our legitimate interest in answering people who write to us. You may object under article 21 GDPR, and we will stop unless we have overriding legitimate grounds.

To show what happens at the venue. Photographs and video from our events. The basis and your rights here are set out separately, in section 10.

To protect the site and the people on it. Filtering spam, intrusion attempts and fraudulent orders. Basis: article 6(1)(f) GDPR.

To publish your profile card, to send you our newsletter and to load non-essential cookies. Only with your consent, and only until you withdraw it. Basis: article 6(1)(a) GDPR.

We ask for consent exactly where consent is genuinely the basis. For a purchase or an invoice it is not required, and we do not pretend otherwise.

 

4. How long we keep things

Data received through site forms, including contact details and the content of your message, is kept for three years from your last contact with us. Chat conversations follow the same rule.

Accounting and tax documents, including invoices, payment records and customer contracts, have to be kept longer, for the period set by Portuguese tax law: article 123(4) of the Código do IRC (corporate income tax code) and article 52 of the Código do IVA (VAT code). Once that period ends, the data is deleted or anonymised.

Your account stays while you use it. If nobody signs in for 36 months in a row, we write to the address it is registered to and delete it 30 days later. You can close it sooner at any time, see section 8.

Posts you left in a group stay in the group until you delete them or until the group closes.

Records of event registrations made on this site in the past are kept for three years from the date of the event, and then deleted.

Gift card records are kept until the card's validity ends. The invoice and the payment record for the card carry on under the accounting rule above.

The address our newsletter goes to is kept until you unsubscribe.

 

5. Who your data goes to

We do not sell your data and we do not rent it out. The circle of people who see it is short and explainable.

Wix.com Ltd., the platform the site runs on. It processes data on our instructions.

Wix, for payment processing. Your payment details go there; they do not come to us.

The certified accountant (contabilista certificado) who keeps our books. Invoices and payment documents go to them, not your correspondence with us.

Autoridade Tributária e Aduaneira, the Portuguese tax and customs authority, as part of mandatory reporting and to the extent it requires.

Other group members and site visitors see whatever you posted yourself in an open group.

Beyond that, data may be disclosed on a binding demand from a court or another competent authority. We check such a demand rather than complying automatically.

Some of the companies above may process data outside the European Union. Those transfers rely on European Commission adequacy decisions and on standard contractual clauses under chapter V GDPR.

 

6. Cookies

Essential cookies load straight away, because without them the site will not open. Everything else loads only after you agree to it.

Which files end up on your device, and what each is for, is described separately. You can change your mind at any time in your browser settings.

 

7. Newsletter

We send you news and invitations only if you subscribed. Consent to the newsletter is given separately from everything else: the box is not pre-ticked and it is not hidden inside the purchase terms. That is what article 22 of Decreto-Lei n.º 7/2004 (the Portuguese e-commerce decree-law) requires, setting the rule of prior consent for commercial communications.

Every message carries an unsubscribe link at the bottom. It works on one click and asks for no explanation. After you unsubscribe, your address stays on a suppression list so that we do not write to you again by accident.

Messages about a purchase or an invoice are not marketing and reach you whether or not you subscribed.

 

8. Your account

If you created an account on the site, it holds your email address and username, whatever you added to your profile, your purchase history, your gift cards and invoices, your progress through an online programme, correspondence with us tied to the account, and your activity in groups.

You can change your profile at any time once you are signed in.

To delete the account, write to team@allcountries.online from the address it is registered to. We delete it and the data attached to it. What stays is only what tax law obliges us to keep, meaning invoices and payment records, and we detach those from your profile. Posts you left in groups go with the account, unless you ask us to leave them.

 

9. Your rights

You have the right to:

• know what data about you we hold, and get a copy of it;

• correct anything inaccurate;

• ask for erasure;

• restrict processing;

• receive your data in a portable format;

• object to processing based on our legitimate interest;

• withdraw consent where the processing rests on it. Withdrawal works forwards and does not undo what was done while the consent stood.

These are articles 15 to 22 GDPR. Write to team@allcountries.online and we will answer within the period set by article 12(3) GDPR, which is one month.

If you believe we handled your data badly, you can complain to the Portuguese supervisory authority: Comissão Nacional de Proteção de Dados, www.cnpd.pt.

 

10. Photography and filming at the venue

A photographer and a camera operator work at some of the events at the venue. The pictures exist so we can show how an evening went and put together the announcement for the next one. We do not sell this material and we do not hand it to anyone else to advertise with.

The room, the stage, the queue at the coffee table: that is reporting on a public event, and we film it on our legitimate interest, article 6(1)(f) GDPR. A close-up, a portrait or an interview to camera is filmed only if you agree to it, article 6(1)(a) GDPR. Children appear in published material only where a parent or other legal guardian has given separate written consent.

How long the pictures last. Originals that were not published are deleted once work on the material about that event is finished. Published frames stay on our pages and our own accounts for as long as the account of that event exists, and come down when you ask.

Your rights. You may object to being filmed and to a frame being published, article 21 GDPR, and consent to a portrait or to filming a child can be withdrawn at any moment by writing to team@allcountries.online. How to say no before an event, at the door and after publication, and how quickly we take material down, is set out in full in section 14 of the Terms and Conditions.

 

11. Children's data

Classes and events for children take place at the venue. Enrolling a child in classes happens at allportugalsmartacademy.com, so the child's details reach us there rather than here.

The forms on this site are addressed to an adult. We do not invite a child to fill in a form, leave contact details or create an account.

Health data is not collected through this site at all. Allergies, developmental particularities, diagnoses and medical instructions are special categories of data under article 9 GDPR. Where something like that matters for a class, you tell us in person, at enrolment. Please do not write it into a notes field: we do not want to receive this kind of data by a route that was not built for it.

Photographs and video of children are published only with your separate written consent. It is given once and can be withdrawn at any moment, with no reason given, by writing to team@allcountries.online. Once it is withdrawn we take published material down. More than GDPR applies here: the right to one's own image is protected by article 79 of the Portuguese Civil Code (Código Civil), and for a child that right is exercised by the parent.

Saying no to photographs of your child changes nothing else.

 

12. Changes to this page

We update this page when what it describes changes: a new service, a new form, a new purpose. The date at the top shows when that last happened. If a change is significant, we will tell you directly rather than hope you come back to reread.