Register

Privacy Policy

Last updated: 30 May 2026

This Privacy Policy explains how Associação CannaReporter® (“PTMC”, “we”, “us” or “our”) collects, uses, shares and protects your personal data when you visit www.ptmc.pt (the “Website”), purchase tickets, contact us, or otherwise interact with the PTMC – Portugal Medical Cannabis conference. We are committed to protecting your privacy and to processing your personal data lawfully, fairly and transparently, in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, “GDPR”) and Portuguese Law No. 58/2019.

1. Who we are 

The entity responsible for your personal data is:

Associação CannaReporter®

Tax number (NIPC): PT516945211
Address: Machico, Madeira, Portugal
Email: info@ptmc.pt

If you have any questions about this Policy or about how we handle your personal data, please contact us at info@ptmc.pt. 

2. Scope

This Policy applies to personal data we collect through the Website, through ticket sales, through email and form-based communications, and at the PTMC conference itself. It does not apply to third-party websites we link to, which have their own privacy policies. PTMC is a professional conference. The Website and our services are not directed at children under the age of 16, and we do not knowingly collect their personal data.

3. What personal data we collect

Depending on how you interact with us, we may collect the following categories of personal data:
a) Ticket purchases and registration. When you buy a ticket, we collect your name, email address, billing address, company/organisation, VAT number (where applicable), the ticket type purchased, and transaction details. Payment card details are entered directly with our payment provider and are not stored on our servers.
b) Communications. When you email us or fill in a contact, press, sponsorship or speaker form, we collect your name, email address, and the content of your message.
c) Marketing and newsletters. If you subscribe, we collect your name and email address to send you event and industry updates.
d) Information collected automatically. When you browse the Website, we and our service providers may collect your IP address, browser type and version, device information, pages visited, referring URLs, and similar usage data, through cookies and similar technologies. See Section 6 (Cookies). We do not intentionally collect special categories of personal data (such as health data) through this Website.

4. How and why we use your data

We process your personal data for the following purposes, each with a legal basis under Article 6 of the GDPR:

  • Process your ticket purchase, issue your ticket and confirmation, and provide event access – Performance of a contract (Art. 6(1)(b))
  • Respond to your enquiries and communications – 
    Our legitimate interests in answering you (Art. 6(1)(f))
  • Organise and run the conference (logistics, attendee lists, networking) – Performance of a contract and our legitimate interests (Art. 6(1)(b) and (f))
  • Send you marketing communications and newsletters – Your consent, or our legitimate interest in marketing to existing customers about similar events (Art. 6(1)(a)/(f))
  • Comply with accounting, tax and other legal obligations – Legal obligation (Art. 6(1)(c))
  • Set non-essential cookies and analytics – Your consent (Art. 6(1)(a))
  • Maintain the security and integrity of the Website – Our legitimate interests (Art. 6(1)(f))

Where we rely on your consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal (see Section 9).

5. Who we share your data with

We do not sell your personal data. We only share it with the following categories of recipients, as necessary: Service providers (processors) acting on our behalf under appropriate data processing agreements, including:

Payment processing: Stripe / EuPago, which processes your payment securely.
Website hosting: PSIsp
Email and marketing: Brevo, used to send transactional and/or marketing emails.
Analytics: Google Analytics 4
Embedded content: the Website loads content from third parties such as Google Fonts, the SociableKit news widget, and social media platforms (LinkedIn, YouTube, Instagram, Facebook), which may receive your IP address and device data.
Other recipients: professional advisers (accountants, lawyers), and public authorities where required by law. 

6. Cookies and similar technologies

The Website uses cookies and similar technologies to function, to remember your preferences, to analyse traffic, and to enable embedded content. Non-essential cookies are only set with your consent, which you give through our cookie banner and can change at any time.

7. International data transfers

Some of our service providers may process your data outside the European Economic Area (EEA), for example in the United States. Where this happens, we ensure an appropriate safeguard is in place — such as an adequacy decision (including the EU–US Data Privacy Framework) or the European Commission’s Standard Contractual Clauses.

8. How long we keep your data

We keep your personal data only for as long as necessary for the purposes set out above: Ticket and transaction records: retained for the period required by Portuguese accounting and tax law (currently 10 years). Enquiries and communications: retained for as long as needed to handle your request and for a reasonable period afterwards. Marketing data: retained until you unsubscribe or withdraw consent. Analytics data: retained for the period configured in our analytics tool. When data is no longer needed, we securely delete or anonymise it.

9. Your rights

Under the GDPR, you have the right to: Access the personal data we hold about you; Rectify inaccurate or incomplete data; Erase your data (“right to be forgotten”), where applicable; Restrict or object to our processing, including objecting to direct marketing at any time; Data portability — receive your data in a structured, machine-readable format; Withdraw consent at any time, where processing is based on consent; Lodge a complaint with a supervisory authority. To exercise any of these rights, contact us at info@ptmc.pt.

We will respond within one month. You also have the right to lodge a complaint with the Portuguese supervisory authority: Comissão Nacional de Proteção de Dados (CNPD) Av. D. Carlos I, 134 – 1.º, 1200-651 Lisboa, Portugal Website: www.cnpd.pt

10. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse or alteration. However, no transmission over the internet can be guaranteed to be completely secure. As a reminder, also stated on our Website: PTMC will never sell or distribute your contact information. If anyone tries to sell you an attendee mailing list, contact information or travel reservations on our behalf, it is a scam — please report it to info@ptmc.pt.

11. Third-party links

The Website contains links to external sites (for example, sponsors, speakers and CannaReporter®). We are not responsible for the privacy practices of those websites, and we encourage you to read their privacy policies.

12. Changes to this Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the most recent version. Material changes will be communicated through the Website.

13. Contact

For any question about this Privacy Policy or your personal data: Associação CannaReporter® Email: info@ptmc.pt Machico, Madeira, Portugal