1. Context and Scope

The Agency for the Management of the Education System, IP (AGSE, IP), created by Decree-Law No. 99/2025 of August 28, is an indirect state administration body, endowed with administrative, financial and patrimonial autonomy, under the supervision of the Ministry of Education, Science and Innovation (MECI).

AGSE, IP, has the mission of managing and operating the education system in its various dimensions, ensuring the integration and efficiency of the structures and services that comprise it, within the framework of the MECI's responsibilities, in accordance with the principles of legality, transparency, good administration and the protection of personal data.

This Privacy Policy applies exclusively to the institutional website of AGSE, IP, hereinafter referred to as the "website," and is intended to inform users about the conditions under which their personal data is collected, processed, stored, and protected, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation – GDPR), and Law No. 58/2019 of 8 August, which ensures the implementation of the GDPR in the national legal order.

Use of this website implies knowledge and acceptance of the terms of this Policy, which aims to ensure that the processing of personal data is carried out lawfully, fairly, transparently and securely, safeguarding the fundamental rights, freedoms and guarantees of the respective data subjects.

The AGSE, IP website is intended for the public dissemination of institutional and service information, as well as for providing channels of contact with citizens and entities within the education system, including the use of electronic forms and mechanisms for subscribing to informative communications (newsletter).

In these contexts, the personal data provided by users is collected voluntarily, consciously and informedly, and is processed exclusively for the purposes that motivated its collection, as described below.

AGSE, IP is committed to ensuring that the processing of personal data carried out through its website:

• Limit yourself to what is strictly necessary for the pursuit of the legitimate purposes of your administrative activity;
• Respect the principles of minimization and proportionality;
• be supported by technical and organizational measures appropriate for protection against unauthorized or unlawful processing, accidental loss, destruction or damage to data;
• and that data subjects are properly informed about their rights and the means to exercise them.

This Privacy Policy should be read in conjunction with the AGSE, IP Cookie Policy., a supplementary tool that clarifies how automatic information gathering mechanisms work.

2. Data Controller

AGSE, IP legal entity no. 518985024, with registered office at Avenida Infante Santo, No. 2, 1350 – 178 Lisbon, is responsible for the processing of personal data collected on this website, determining the purposes and means of its processing, in accordance with the GDPR and Law No. 58/2019, of August 8.

3. Data Collected

The collection of personal data through the institutional website will occur exclusively on a voluntary basis, with the data being provided by the data subject themselves when filling out the electronic forms provided or subscribing to the institutional newsletter.

Specifically, the following categories of data may be collected:

• Contact forms:

The information necessary for user identification and contact is requested, namely full name, email address, telephone number (when applicable), and the content of the message or request submitted. This data is intended to allow AGSE, IP to respond quickly, accurately, and personally to requests for information, suggestions, complaints, or other institutional contacts addressed to it digitally.

• Newsletter subscription:

For the purpose of sending informational, institutional or public interest communications, the name and email address of the data subject are collected. This collection is always based on the prior, free, specific and informed consent of the user, which may be withdrawn at any time, without prejudice to the lawfulness of the processing previously carried out.

The data collected is used exclusively for the purposes communicated at the time of collection, and will not be subject to further processing incompatible with those purposes, nor will it be transferred to third parties without legal basis or the express consent of the data subject.

4. Purposes of Treatment

The data is processed exclusively for:

• Respond to contact or information requests submitted through the forms;
• Sending informational and institutional communications (newsletter), subject to prior consent;
• To fulfill legal obligations applicable to the activities of AGSE, IP.

5. Legal Basis

Specifically, the treatment may be based on:

• The free, specific, informed and unambiguous consent of the data subject (Article 6(1)(a) of the GDPR), in particular in cases where the user voluntarily provides their data through electronic forms or subscribes to the institutional newsletter, expressly authorizing its use for the indicated purposes;
• The fulfillment of legal obligations or the exercise of functions of public interest (Article 6, paragraph 1, points c) and e), of the GDPR), whenever the processing of data is necessary for the execution of the legal and administrative powers attributed to AGSE, IP within the scope of the education system and public policies under the supervision of the Ministry of Education, Science and Innovation (MECI).

In either case, AGSE, IP ensures that the processing of personal data is carried out lawfully, fairly and transparently, fully respecting the rights of data subjects and the fundamental principles of data protection.

6. Data Preservation

Personal data is kept only for as long as necessary for the purposes for which it was collected.

• Forms: until the request is processed;
• Newsletter: until consent is withdrawn.

After this period, the data is securely deleted.

7. Rights of Data Subjects

The data subject may exercise the following rights at any time:

• Access, rectification and erasure;
• Limitation or opposition to treatment;
• Data portability;
• Withdrawal of consent.

Requests must be submitted in writing to geral@agse.pt

The data subject may also file a complaint with the National Data Protection Commission (CNPD), accessible at: www.cnpd.pt.

8. Communication of Data to Third Parties

AGSE, IP, ensures that the personal data collected is not disclosed to third parties, except when this is necessary for compliance with legal obligations, the pursuit of missions of public interest, or when the disclosure results from an express request by judicial, administrative or supervisory authorities in the exercise of their powers.

Whenever, for the purposes of website maintenance, digital platform management, or the provision of complementary technological services, it becomes necessary to resort to duly qualified external entities, these entities act as subcontractors, bound by written contracts that guarantee strict compliance with personal data protection regulations, namely regarding security, confidentiality, integrity, and limitation of processing purposes.

AGSE, IP undertakes to select only subcontractors that provide sufficient guarantees of implementing appropriate technical and organizational measures to protect personal data, and to ensure that such entities process the data exclusively in accordance with AGSE, IP's documented instructions, and may not use it for any other purposes.

9. International Transfers

AGSE, IP does not transfer personal data outside the European Economic Area. Should this occur, appropriate safeguards will be applied.

10. Information Security

AGSE, IP adopts appropriate technical and organizational measures to guarantee the security and confidentiality of personal data, protecting it against destruction, loss, alteration, disclosure or unauthorized access.

11. Changes to the Privacy Policy

This Policy may be updated whenever necessary. The most recent version will be published on this website, indicating the date of the last update.