Transparency

    Trust Center

    This page is maintained by the São João de Sobrado 27 Festival Committee to answer frequently asked questions about security, privacy, and data processing on this platform. It does not constitute independent certification.

    Encrypted connection

    All traffic is served via HTTPS, protecting data in transit between your device and the platform.

    Authentication

    Accounts use email and password authentication, with protection against compromised passwords.

    Access control

    Sensitive data (purchases, participants, teams) are restricted by role: admin, group leader, user, and member.

    Storage

    Data hosted on Supabase (EU) infrastructure, with Row-Level Security active on all tables with personal data.

    How we handle your data

    We collect only the data necessary to manage tickets, steward teams, members, and communications related to the São João de Sobrado Festivities. We do not sell personal data to third parties.

    You can exercise your rights of access, rectification, deletion, limitation, opposition, and portability under the GDPR by sending a request to organizacao@saojoaodesobrado.pt.

    Cookies and consent

    We use essential cookies for the session and, upon consent, analytical cookies. The choice is recorded immutably (using only anonymous hashes of the IP and user-agent) for compliance purposes. You can review your choice at any time in our Cookie Policy.

    Documents

    Report an incident

    If you detect a security vulnerability or have questions about the processing of your data, contact us by email at organizacao@saojoaodesobrado.pt. We commit to responding as quickly as possible.