Privacy and cookies

Last updated: 28 October 2026

1. Who we are

The data controller is RAIL CoLAB - Collaborative Laboratory for the Future Railway System, tax number 517 189 224, Parque Oficinal de Guifões, Rua do Ferroviário, 4460-020 Guifões, Matosinhos, Portugal. For any privacy question, write to geral@railcolab.pt.

2. What data we process

This website has no user accounts, visitor analytics or advertising. You do not need to give us any personal data to browse it.

• When you use the “Contact us” form: we process the data you enter (name, organisation, email, phone if given, and your message), with your consent, only to review and reply to your request. It is stored by the website's host (Cloudflare) and may be emailed to the RAIL CoLAB team through Microsoft 365. We delete it once it is no longer needed for that purpose.
• When you email us: we process the data you send (for example your name, email address and the content of your message) only to reply to your request, and keep it only for as long as needed for that purpose.
• Technical access data: the website is hosted by Cloudflare, which, like any server, processes technical data from each request (such as IP address, browser and page requested) to deliver the website and protect it against attacks.

3. Cookies and storage in your browser

• The public website does not use cookies.
• To keep the language you chose (PT or EN) across pages, the website stores that choice in your browser's local storage, under the name rc-lang. It does not identify anyone and is not sent anywhere. You can remove it by clearing this site's data in your browser.
• The website's management area, used only by the RAIL CoLAB team, uses a strictly necessary session cookie (rc_admin, valid for 12 hours) to keep the session signed in.

As the website only uses storage that is strictly necessary for it to work, no consent is requested. An informative notice is shown when you first visit; when you close it, that choice is stored in your browser under the name rc-ck, so the notice does not appear again.

4. Data sharing

We do not sell or pass on personal data. The only providers involved are Cloudflare (hosting) and Microsoft (email for form messages), which may process data outside the European Union under the safeguards set out in the General Data Protection Regulation (GDPR).

5. Links to other websites

The website links to other websites, such as LinkedIn, ANI, FCT and the project platforms. Those websites have their own privacy and cookie policies.

6. Your rights

Under the GDPR, you may request access to, rectification or erasure of your data, or restriction of its processing, object to processing and request data portability, by writing to geral@railcolab.pt. You also have the right to lodge a complaint with the Portuguese data protection authority, CNPD (www.cnpd.pt).

7. Changes

This policy may be updated. The date of the last update is shown at the top of the page.