Privacy Policy

Regional Directorate of Statistics of Madeira (DREM)
Version 2.1. Last updated: 26/10/2026

1. Controller and Data Protection Officer

The controller of the personal data collected on this website is the Regional Directorate of Statistics of Madeira (Direção Regional de Estatística da Madeira, DREM).

• Address: Calçada de Santa Clara, n.º 38, 9004-545 Funchal, Portugal
• Telephone: +351 291 145 110 (call to the national landline network)
• General e-mail: This email address is being protected from spambots. You need JavaScript enabled to view it.
• Data protection e-mail: This email address is being protected from spambots. You need JavaScript enabled to view it.

Data Protection Officer (DPO): Regional Office for Digital Compliance, Data Protection and Cybersecurity (Gabinete Regional para a Conformidade Digital, Proteção de Dados e Cibersegurança, GCPD), Palácio do Governo Regional, Avenida Zarco, 9004-527 Funchal, Portugal; telephone +351 291 145 175 (call to the national landline network); e-mail This email address is being protected from spambots. You need JavaScript enabled to view it..

2. Scope

This policy applies to the website estatistica.madeira.gov.pt, including the web version of RAMStats provided on the same domain. DREM's specific forms, surveys and requests have their own data protection notice, which sets out the purposes, legal basis and retention periods of each processing operation. The RAMStats mobile app has its own privacy policy, available in the app. Information on cookies and other data stored on the visitor's device is provided in the Cookie Notice.

3. What data we process, for what purposes and on what legal basis

4. Who has access to the data

The data are processed by DREM staff who need them for the purposes stated. The following entities also provide technical services to DREM:

• Statistics Portugal (Instituto Nacional de Estatística, I.P., INE), which provides and manages DREM's e-mail service and part of its IT infrastructure;
• the Regional Directorate for Information Technology (Direção Regional de Informática, DRI), which hosts the website and the usage statistics server (Matomo) in its data centres in Funchal;
• Twilio Inc. (SendGrid service), which sends the newsletters on behalf of DREM and, for that purpose, receives the subscriber's e-mail address, name (if provided) and the content of each newsletter.

The data are not disclosed to any other entity, unless required by law, and are never passed on for commercial or advertising purposes.

5. Third-party content and international transfers

To display its pages, the website uses resources provided by third parties from their own servers:

• charts (Google Charts, at www.gstatic.com), from Google;
• the jQuery library, from code.jquery.com.

Fonts are hosted on the website itself. When a page is opened, the visitor's browser connects to the servers of the resources listed above, which receive the IP address and technical information about the browser. These resources do not store cookies on the device.

Some pages show YouTube (Google) videos. A video is only loaded after the visitor clicks on it. From that moment, the browser connects to Google's servers, which receive the IP address and may store information on the device, under Google's own privacy policy (policies.google.com/privacy).

The links to DREM's pages on social networks (Facebook, Instagram, X (Twitter), YouTube and LinkedIn) are plain links: the website does not load content or cookies from those networks before the visitor opens them.

Google and Twilio Inc. may process the data referred to above in the United States of America under the EU-U.S. Data Privacy Framework (Commission Implementing Decision (EU) 2023/1795); Twilio Inc. is included in the official list of organisations certified under that framework. Details of what is stored on the device are provided in the Cookie Notice.

6. Retention periods

7. Data subjects' rights

Under the terms and within the limits laid down in the GDPR, data subjects may exercise the rights of access, rectification, erasure, restriction of processing, data portability (where processing is based on consent) and objection (where processing is based on the public interest), and may withdraw consent at any time, without affecting the lawfulness of processing carried out before its withdrawal (Articles 7, 15 to 18, 20 and 21 of the GDPR). The data are not used for solely automated decision-making or for profiling.

To exercise these rights, contact This email address is being protected from spambots. You need JavaScript enabled to view it. or use the form for exercising data subject rights (in Portuguese). To protect the data, DREM may ask the person making the request to confirm their identity (Article 12(6) of the GDPR). DREM replies within one month of receipt of the request, which may be extended under Article 12(3) of the GDPR.

Data subjects also have the right to lodge a complaint with the supervisory authority, the Portuguese Data Protection Authority (Comissão Nacional de Proteção de Dados, CNPD): Av. D. Carlos I, 134, 1.º, 1200-651 Lisboa, Portugal; telephone +351 213 928 400; e-mail This email address is being protected from spambots. You need JavaScript enabled to view it.; www.cnpd.pt (Article 77 of the GDPR).

8. Security

DREM applies appropriate technical and organisational measures to protect personal data against destruction, loss, alteration, unauthorised disclosure or access, taking into account the state of the art, the costs of implementation, the nature of the data and the risks to data subjects (Article 32 of the GDPR). Communications with the website are encrypted (HTTPS).

9. Personal data breaches

In the event of a personal data breach, DREM notifies the CNPD within 72 hours of becoming aware of it, unless the breach is unlikely to result in a risk to the rights and freedoms of data subjects, and communicates the breach to data subjects where it is likely to result in a high risk (Articles 33 and 34 of the GDPR). To report a possible security incident, use This email address is being protected from spambots. You need JavaScript enabled to view it..

10. Cookies

The cookies and other data that the website stores on the visitor's device, their purpose and duration, and how to delete or block them, are described in the Cookie Notice. As the website only uses cookies that are necessary for its operation or that store the visitor's own choices, it does not ask for consent: on the first visit it only shows an informative notice, and the choice to close it is stored in the drem_aviso_cookies cookie for 180 days.

11. Changes to this policy

This policy may be updated whenever necessary. The date and version of the latest update are shown at the top of this page.