Privacy Policy

Last updated: 31 May 2026

Natural Athletics Portugal, responsible for the website wnbfportugal.pt and the WNBF Portugal circuit, is committed to protecting the privacy of its users and athletes, in accordance with the General Data Protection Regulation (GDPR — Regulation (EU) 2016/679) and applicable Portuguese law.

This Privacy Policy explains what personal data we collect, how we use it, how long we retain it, who we share it with, and what rights you have as a data subject.

---

1. Data Controller

Entity: Natural Athletics Portugal
Email: info@wnbfportugal.pt
Website: wnbfportugal.pt

For any questions regarding the protection of your personal data, please contact us at the email address above.

2. Personal Data We Collect

2.1. Registration and account data

• First and last name
• Email address
• Password (stored in encrypted form)

2.2. Membership and competition registration data

• Date of birth
• Gender
• Height and stage weight
• Instagram username
• VAT number (when requested for invoice issuance)
• Selected competition categories
• Membership and registration history

2.3. Payment data

• Payments are processed through external payment gateways (Multibanco, MB WAY and others). Natural Athletics Portugal does not store credit or debit card data — this data is handled directly by payment processors.
• For bank transfer payments, only transfer confirmation data is collected.

2.4. Navigation and cookie data

• IP address
• Browser and device type
• Pages visited and time spent
• Data collected by Google Analytics (see section 6)

2.5. Communication data

• Content of messages sent via the contact form or by email

3. Purposes and Legal Bases for Processing

3.1. Performance of a contract (Art. 6(1)(b) GDPR)

• Management of annual memberships and competition registrations
• Invoice issuance and payment processing
• Sending transactional confirmation emails
• User account management on the website

3.2. Legal obligation (Art. 6(1)(c) GDPR)

• Tax and accounting obligations
• Retention of commercial documents within legal time limits

3.3. Legitimate interests (Art. 6(1)(f) GDPR)

• Security and fraud prevention
• Website improvement and user experience
• Anonymous statistical traffic analysis (Google Analytics)

3.4. Consent (Art. 6(1)(a) GDPR)

• Use of non-essential cookies (Google Analytics)
• Sending marketing communications, if expressly authorised

3.5. Sporting public interest

• Public disclosure of anti-doping test results, as consented to at the time of registration and in accordance with WNBF circuit rules

4. Sharing Data with Third Parties

Natural Athletics Portugal does not sell personal data to third parties. Data may only be shared with:

4.1. Essential service providers

• Sendinblue SAS — transactional email platform, data processor with servers in the EU
• Automattic, Inc. — website infrastructure and e-commerce platform
• Wise Payments Limited — international payment processing
• Google LLC — Google Analytics (see section 6)

4.2. International WNBF organisation

Some athlete data (name, competition results, membership status) may be shared with the World Natural Bodybuilding Federation (WNBF) for the purposes of managing the international circuit, qualifications and Pro Card allocation, as consented to at the time of registration.

4.3. Competent authorities

Where legally required, data may be disclosed to tax, judicial or other competent public authorities.

5. Data Retention

• User account data: while the account is active, and up to 3 years after the last login or deletion request
• Registration and membership data: 10 years, due to tax and accounting obligations (Portuguese Commercial Code)
• Competition results and anti-doping data: retained indefinitely, for legitimate sporting interest and in accordance with WNBF rules
• Cookie and navigation data: as per Google Analytics configuration (maximum 26 months)
• Email communications: up to 3 years after the last contact

6. Google Analytics

This website uses Google Analytics for traffic analysis. This tool collects navigation data in an anonymous or pseudonymised form, including pages visited, time spent and traffic source.

Google LLC may transfer this data to servers in the United States of America, under the EU-US Data Privacy Framework. You can consult Google’s privacy policy at: policies.google.com/privacy

You can opt out of analytical cookies via the website’s cookie consent banner, or by installing the Google Analytics opt-out browser add-on available at: tools.google.com/dlpage/gaoptout

7. Cookies

This website uses essential cookies (required for the website and shop to function) and analytical cookies (Google Analytics, with prior consent).

You can manage your cookie preferences at any time via the cookie banner or our Cookie Policy.

8. Your Rights

As a data subject, you have the following rights under the GDPR:

• Right of access — you can request a copy of your personal data
• Right to rectification — you can correct inaccurate or incomplete data
• Right to erasure — you can request deletion of your data, except where there is a legal obligation to retain it
• Right to object — you can object to processing for marketing purposes or based on legitimate interests
• Right to restriction of processing — you can request suspension of processing in certain circumstances
• Right to data portability — you can receive your data in a structured, machine-readable format
• Right to withdraw consent — you can withdraw consent at any time, without affecting the lawfulness of prior processing

To exercise any of these rights, send an email to info@wnbfportugal.pt with the subject “Data Protection” and a clear description of your request. We will respond within 30 days.

You also have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD): www.cnpd.pt

9. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss or destruction, including SSL/HTTPS encryption, access controls and regular backups.

10. International Transfers

Some service providers (Google LLC, Automattic Inc.) may process data outside the European Economic Area. Such transfers are carried out under adequacy mechanisms recognised by the European Commission, namely standard contractual clauses or certification under the EU-US Data Privacy Framework.

11. Minors

The website wnbfportugal.pt is intended for users aged 16 or over. Athletes under 16 require express authorisation from their legal representative to participate in competitions. We do not intentionally collect data from persons under 16 without parental consent.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be published on this page with the update date. In the event of significant changes, registered users will be notified by email.

13. Contact

Natural Athletics Portugal
Email: info@wnbfportugal.pt
Website: wnbfportugal.pt