Last updated: 2 October 2026
01 Introduction
Ricardo Covões, S.A. ("RC") recognises the importance of protecting the personal data of everyone who visits www.circocoliseu.com and complies with the applicable legislation, namely the General Data Protection Regulation (GDPR) and Portuguese Law no. 58/2019.
This policy explains which data are processed when you visit this website, for what purposes, and what your rights are.
02 Data controller
Ricardo Covões, S.A., company no. 502907037, registered office at Rua das Portas de Santo Antão, 96, 1150-269 Lisbon, Portugal.
For any data protection question: proteccaodedados@coliseulisboa.com.
General contact: geral@coliseulisboa.com.
03 What data we process
This is an informational website: it has no user registration, forms, newsletter or ticket sales. The only data processed are:
- Technical browsing data: IP address, date and time of access, requested page, browser and device type. These are recorded automatically by our hosting provider so that the website works and is protected against abuse.
- Data you send us on your own initiative when you contact us by email or telephone using the contacts shown on the website (for example, name, contact details and the content of your request).
Tickets are bought on www.coliseulisboa.com, which has its own privacy policy.
04 Purposes and legal basis
- Operation, security and abuse prevention of the website — RC's legitimate interest (Article 6(1)(f) GDPR).
- Replying to information requests and to bookings from schools, companies and groups — pre-contractual steps at the data subject's request and legitimate interest (Article 6(1)(b) and (f) GDPR).
We do not use data collected on this website for marketing or profiling.
05 Retention period
- Technical browsing logs: for a short period, as a rule no longer than 30 days, unless they are needed to investigate a security incident.
- Requests by email or telephone: for as long as necessary to reply and follow up on any booking, and thereafter for the period required by law.
06 Service providers and third parties
- Cloudflare, Inc. — hosting, delivery and security of the website, acting as RC's processor.
- Google — only if you click "Show map" on the Location page. Until then the website does not contact Google. From that moment on, Google's privacy policy applies.
The website contains links to other websites (ticket sales, Facebook, Instagram, schools platform). Those websites have their own privacy policies, for which RC is not responsible.
07 International transfers
Cloudflare and Google are headquartered in the United States, so some technical data may be processed outside the European Economic Area. Such transfers take place under the EU-US Data Privacy Framework and/or standard contractual clauses approved by the European Commission.
08 Your rights
You may, at any time and free of charge, exercise the rights provided for in the GDPR:
- access to your data;
- rectification;
- erasure ("right to be forgotten");
- restriction of processing;
- data portability;
- objection to processing.
To exercise these rights, write to proteccaodedados@coliseulisboa.com. You also have the right to lodge a complaint with the Portuguese Data Protection Authority, CNPD (www.cnpd.pt).
09 Security
The website is served exclusively over an encrypted connection (HTTPS), with protection against attacks and automated traffic. The content management area is restricted to the Coliseu team and requires authentication.
10 Cookies
This website does not use advertising or analytics cookies. Find out more in our cookie policy.
11 Changes to this policy
This policy may be updated, namely if the law or the website's services change. The current version is always published on this page, with the date of the last update.