Início Login Registo
Informações
Terms of Use Privacy Policy Cookie Policy Technical Support and FAQ

Privacy Policy

Última atualização: 03/02/2026 11:08
Official System: This information is provided by the National Civil Aviation Authority.

Privacy, Data Protection and Security Policy

1. Introduction

This Privacy and Data Protection Policy describes how we collect, use, store and protect users’ personal data within the scope of the Unmanned Aircraft Systems (UAS) Operator Registration System platform.

Personal data are processed in accordance with Regulation (EU) 2016/679 (GDPR) and other applicable legislation, namely for the purposes of the submission, management and monitoring of UAS operator registration applications and the associated priority objects, by ANAC, pursuant to Article 14 of Commission Implementing Regulation (EU) 2019/947 of 24 May, as amended, as well as for the purposes of the information repository referred to in Commission Implementing Regulation (EU) 2023/2117 of 12 October, as amended, without prejudice to any transmission to the Portuguese Courts, the European Anti-Fraud Office (OLAF), internal audit services, entities carrying out external audits of ANAC, and the Court of Auditors, in order to safeguard the financial interests of Portugal and the European Union.

2. Data Controller

The data controller is ANAC, which is responsible for ensuring that personal data are processed lawfully, fairly and transparently.

3. Purposes of Processing

Personal data are processed for the following purposes:

  1. Provision of the registration service:
    • registration and identification of UAS owners;
    • registration of UAS characteristics and technical information;
  2. European interoperability;
  3. Compliance with legal and regulatory requirements applicable to the registration and operation of UAS;
  4. Communication of relevant information regarding operational safety, updates or legislative changes;
  5. User account management and technical support;
  6. Statistical analysis and service improvement (with anonymised data whenever possible).

4. Personal Data Collected

We may collect and process the following categories of data:

  • Identification data: name, tax identification number and nationality;
  • Contact details: email address, telephone number, postal address;
  • Equipment data: brand, model, serial number, weight and technical characteristics;
  • Authentication data: username and password (protected and encrypted);
  • Browsing data: IP address, access logs and platform usage records;
  • Other data: registration and information relating to registered aircraft, authorisations and operating certificates issued by ANAC.

5. Legal Basis for Processing

Personal data are processed on the basis of:

  • Compliance with legal obligations – namely Article 14 of Commission Implementing Regulation (EU) 2019/947, as well as ensuring information interoperability under Commission Implementing Regulation (EU) 2023/2117 and the identification service under Commission Implementing Regulation (EU) 2021/664 (U-space);
  • Performance of a contract or pre-contractual steps;
  • Public interest in the regulation and safety of UAS operations;
  • Consent of the data subject, where applicable (e.g. for optional communications).

6. Data Sharing

Personal data may be shared with:

  • National competent authorities;
  • Authorities responsible for oversight and aviation safety;
  • Law enforcement and security services;
  • Civil aviation authorities of other European Union Member States;
  • Public or private entities where required by law;
  • Service providers acting on behalf of ANAC in the maintenance and management of the platform (e.g. cloud hosting services), subject to appropriate security and confidentiality safeguards.

Some data may be shared with civil entities for the purposes of:

  • Provision of U-space services, namely to determine whether a UAS operator is registered to receive such services, thereby facilitating the network identification service;
  • Facilitating the identification of authorised and unauthorised UAS operators for the purposes of detection through countermeasure systems.

No transfers of personal data outside the European Union are carried out without appropriate protection mechanisms.

7. Data Retention

Personal data are retained only for the period necessary to fulfil the purposes for which they were collected or in accordance with mandatory legal retention periods. After such periods, the data will be deleted or anonymised.

8. Data Subjects’ Rights

The user may, at any time:

  • Access their personal data;
  • Rectify inaccurate or outdated data;
  • Request the erasure of personal data, in accordance with legal requirements (which implies revocation of the registration number);
  • Request restriction of processing;
  • Request data portability;
  • Withdraw consent, where applicable.

Requests should be submitted through the contact details provided on the platform.

9. Security Measures

We implement appropriate technical and organisational measures to protect personal data, including:

  • Data encryption;
  • Access control based on the principle of least privilege;
  • Access monitoring;
  • Backup and recovery policies;
  • Periodic security audits.

10. Contact

For privacy-related matters, please contact: epd@anac.pt

The user also has the right to lodge a complaint at any time with the national supervisory authority, the Portuguese Data Protection Authority (CNPD), in the event of a personal data breach. By registering as an operator of unmanned aircraft systems (UAS), the data subject agrees to ANAC’s Privacy Policy.

11. Changes to the Policy

This policy may be updated from time to time. Any significant changes will be communicated to users through the platform.

New user?

Register to start using the system

Register
Already have an account?

Login to access the system

Login