1. Data Controller

The controller responsible for the processing of personal data is:

district.space
Website: https://district.space
Email: dataprivacy@district.space

For all privacy and data protection matters, including the exercise of your legal rights, you may contact us at:
dataprivacy@district.space

2. Scope of This Policy

This Policy applies to:

• Visitors of the Website
• Prospective clients and partners
• Event participants
• Newsletter subscribers
• Community members
• Investors, stakeholders, and business contacts
• Individuals interacting with district.space through forms, communications, or digital services

3. Categories of Personal Data We Collect

We collect only data that is adequate, relevant, and limited to what is necessary for the purposes described below.

3.1 Data You Provide Voluntarily

Depending on your interaction with us, we may collect:

• Full name
• Email address
• Telephone number
• Company or organization name
• Job title
• Event registration information
• Messages, inquiries, or communications submitted through forms or email
• Marketing and communication preferences

3.2 Data Collected Automatically

When visiting our Website, certain technical information may be collected automatically, including:

• IP address
• Browser type and version
• Device identifiers
• Operating system
• Website navigation behavior
• Referring URLs
• Pages visited and session duration
• Date and time of access
• Cookie identifiers and analytics information

4. Purposes of Processing

We process personal data for the following purposes:

• Website operation and security
• Responding to inquiries and communications
• Managing partnerships and business relationships
• Event management and registrations
• Sending newsletters and marketing communications
• Analytics and website performance monitoring
• Compliance with legal obligations
• Fraud prevention and cybersecurity

5. Legal Bases for Processing Under GDPR

In accordance with Article 6 of the GDPR, processing activities are based on one or more of the following legal grounds:

• Consent
• Performance of a contract
• Compliance with legal obligations
• Legitimate interests pursued by district.space
• Pre-contractual measures requested by the data subject

Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6. Cookies and Similar Technologies

The Website uses cookies and similar technologies to ensure proper operation, enhance user experience, analyze traffic, and support communications and marketing activities.

Non-essential cookies will only be activated after obtaining your explicit consent through our cookie management platform, in accordance with:

• GDPR
• Portuguese Law no. 41/2004 (Electronic Communications Privacy)
• ePrivacy Directive requirements

For more information, please see the Cookie Policy below.

7. Data Sharing and Third Parties

We do not sell personal data.

Personal data may be shared with carefully selected third-party service providers acting on our behalf, including providers related to:

• Website hosting
• Cloud infrastructure
• Analytics services
• CRM and communication tools
• Event management platforms
• IT and cybersecurity services

All third-party processors are contractually bound through Data Processing Agreements (DPAs) and are required to implement appropriate technical and organizational security measures in compliance with Article 28 GDPR.

8. International Transfers of Personal Data

Where personal data is transferred outside the European Economic Area (EEA), district.space ensures that adequate safeguards are implemented, including:

• European Commission adequacy decisions
• Standard Contractual Clauses (SCCs)
• Additional technical and organizational safeguards where necessary

9. Data Retention

Personal data is retained only for the period necessary to fulfill the purposes for which it was collected, including legal, contractual, accounting, or regulatory obligations.

Retention periods may vary depending on:

• Nature of the relationship
• Legal requirements
• Legitimate business needs
• Consent duration

Once data is no longer required, it will be securely deleted or anonymized.

10. Data Subject Rights

Under GDPR and Portuguese data protection law, you have the right to:

• Access your personal data
• Request rectification of inaccurate or incomplete data
• Request erasure (“right to be forgotten”)
• Restrict processing
• Object to processing
• Withdraw consent at any time
• Request data portability
• Not be subject to automated decision-making where applicable
• Lodge a complaint with the Portuguese Data Protection Authority (“CNPD”)

Requests may be submitted to:
dataprivacy@district.space

We may request proof of identity before processing certain requests.

11. Security Measures

district.space implements appropriate technical and organizational measures designed to protect personal data against:

• Unauthorized access
• Accidental loss
• Destruction
• Disclosure
• Alteration
• Misuse

These measures include access controls, encryption where appropriate, secure infrastructure, and periodic security reviews.

However, no electronic transmission or storage system can be guaranteed to be 100% secure.

12. Third-Party Websites

The Website may contain links to external websites or services operated by third parties.

district.space is not responsible for the content, security, or privacy practices of such third-party websites.

Users are encouraged to review the privacy policies of any external services they access.

13. Children’s Privacy

The Website and services are not directed toward individuals under the age of 16.

district.space does not knowingly collect personal data from minors without appropriate legal authorization.

14. Changes to This Privacy Policy

district.space reserves the right to update or amend this Privacy Policy at any time to reflect legal, operational, or technological developments.

Any changes will become effective upon publication on this page.

15. Contact Information

For all questions related to privacy, personal data, or this Policy, please contact:

district.space
Email: dataprivacy@district.space
Website: https://district.space