Legal - Privacy Policy

Controller and scope

FACUL is the controller for personal data collected through the Grupo FACUL website and the Central portal for the purposes described in this policy.

FACUL — CENTRO ACADÉMICO DIGITAL, S.A., tax identification number 5000514683, with its registered address at Cidade Financeira, Block 4, first floor, Talatona, Luanda, Angola. Privacy contact: geral@facul.ao.

This website presents Grupo FACUL activities and allows business enquiries and newsletter subscriptions. It does not collect academic enrolments or medical-care records. Other group companies and platforms have their own processing arrangements.

Information and purposes

Enquiries may include a name, email address, organisation, phone number where available, subject, message and language. Invitations may also include an intended date and location. This information is used to assess, follow up and respond to the enquiry. Please avoid including sensitive information that is unnecessary for the enquiry.

The newsletter records an email address, language, the date and version of permission, and subscription status. Permission applies to Grupo FACUL communications and is separate from enquiries and the other websites’ newsletters. You can unsubscribe at any time.

Forms record the originating website and information needed for follow-up and abuse prevention. Usage statistics are optional and depend on the choice presented in Privacy preferences.

Central administration

Central is used by authorised publishing managers, editors, viewers and support providers. It processes account information, session identifiers, editorial activity, images, credits and audit records. Passwords are protected using cryptographic password-hashing functions; the service does not store them as plain text.

Access is limited by the account’s role and assigned websites. Publication of content, sources, photographs and professional information is managed according to the editorial context and the rights of the respective holders.

Providers and external channels

Vercel provides hosting and file delivery, including Vercel Blob; Neon provides the database service. Vercel Web Analytics provides optional statistics after permission. Resend may be used for operational notifications when that workflow is enabled. AspireVerse provides authorised technical and operational support and may access information for that purpose.

The hosting, database, storage and communication services used may involve processing outside Angola. FACUL is responsible for assessing the conditions and obligations applicable to that processing.

Links to WhatsApp, email, social networks and other websites open separate services. Conversations through those channels are not automatically imported into Central. FACUL processes communications it actually receives to respond to the enquiry; external providers also apply their own privacy information.

Retention

Enquiries and subscriptions have a planned maximum retention period of 24 months. Notification copies in the database are limited to 30 days; protected network identifiers used to limit abuse expire within 24 hours. Unsubscribing withdraws sending permission and does not, by itself, immediately erase every copy.

Accounts, editorial history, security records, correspondence and backups have their own retention criteria, related to access, follow-up, service recovery, compliance with obligations and the exercise or defence of rights. A session cookie’s validity does not determine erasure of those records.

Rights and contact

You can contact geral@facul.ao with privacy questions and requests for information, access, rectification, updating, objection or erasure under the applicable legal provisions. Please identify the website concerned and provide only the information needed to locate the records and establish your entitlement.

Requests are assessed according to their nature and the applicable legal conditions. A legal obligation or other legal basis may require retention or restriction of certain information. You may also complain to Angola’s Agência de Protecção de Dados.

Security and legal framework

The services use HTTPS, authentication, permissions and technical controls to reduce the risk of unauthorised access, alteration or disclosure. Security is managed as an ongoing process; these measures do not guarantee that incidents cannot occur.

Processing is governed by Law no. 22/11 of 17 June on Personal Data Protection and other applicable provisions. The operational security framework also considers Law no. 9/26 of 28 September on Cybersecurity, according to the activities and obligations that apply.