CERENA portal privacy policy

Data controller

The controller of your personal data is CERENA, Centre for Natural Resources and Environment, a research centre of Instituto Superior Técnico (IST), Lisbon.

Data we process

To register and authenticate your account we process: your email, name (optional), institutional username (Active Directory accounts), multi-factor authentication factors (factor label + email, server-side-encrypted TOTP secrets), and a usage log of the services. Passwords are stored hashed (never in clear text).

Legal basis

Processing is based on the performance of a contract (access to the requested services) and the institution's legitimate interest in securing accounts.

Retention

Account data is kept while the account is active and then for the applicable legal period. Sessions end at sign-out or cookie expiry.

Your rights

You may exercise your rights of access, rectification, erasure, portability, and objection, and withdraw consent at any time (Cookie preferences). Contact us via CERENA / IST.

Cookies

We use only first-party cookies: strictly necessary (session, security, consent) and one functional language cookie. We do not use analytics or third-party cookies. See Cookie preferences in the footer to manage.