Privacy and Cookies Policy
Regional Directorate of Statistics of Madeira (DREM)
Last updated: 27/01/2026
1. Data controller and contacts
The Regional Directorate of Statistics of Madeira (DREM) is the entity responsible for the processing of personal data carried out on this website.
- General email: This email address is being protected from spambots. You need JavaScript enabled to view it.
- Data protection email (GDPR): This email address is being protected from spambots. You need JavaScript enabled to view it.
Data Protection Officer (DPO): Regional Office for Digital Compliance, Data Protection and Cybersecurity (GCPD) – This email address is being protected from spambots. You need JavaScript enabled to view it..
Supervisory authority: Portuguese Data Protection Authority (CNPD) – www.cnpd.pt.
2. Purposes, legal bases and categories of data
DREM processes personal data lawfully, fairly and transparently, only for specified, explicit and legitimate purposes, collecting only the data necessary for each purpose.
| Activity / interaction | Personal data (examples) | Purpose | Legal basis |
|---|---|---|---|
| Contact form / information requests | Name, email, organisation, content of the request | Respond to the request, administrative record, user relationship management | Performance of steps at the request of the data subject and/or legal obligation/public interest arising from applicable statistical legislation |
| Newsletter subscription | Email (and name, if applicable) | Sending informative communications about statistics, studies and DREM initiatives | Consent (Art. 6(1)(a) GDPR) |
| Website browsing (technical logs and statistical cookies) | IP address, date/time of access, pages visited, session identifier, browser type and operating system | Ensure website security and integrity, prevent abuse, produce aggregate usage statistics | Legitimate interest of DREM in ensuring information security and, in the case of statistical/marketing cookies, user consent |
Each specific form provided by DREM (for example, statistical data requests, surveys, censuses, etc.) presents its own Data Protection Notice, which specifies the purposes, legal basis and retention periods applicable to that processing.
3. Recipients, processors and international transfers
Personal data may be disclosed to:
- internal DREM services responsible for processing the request or service;
- other public entities with legal competence, where this arises from a legal obligation or institutional cooperation (for example, Statistics Portugal - INE);
- service providers contracted by DREM (processors), who process personal data on its behalf and according to documented instructions, under contracts that comply with Article 28 of the GDPR.
When service providers or platforms located outside the European Economic Area are used, DREM ensures that adequate data transfer mechanisms exist (such as European Commission standard contractual clauses), in accordance with Articles 44 to 49 of the GDPR.
4. Retention periods
Data is retained only for the period strictly necessary for the purposes that motivated its processing or for the time required by applicable legal or regulatory obligations.
| Data category | Indicative retention period | Criterion |
|---|---|---|
| Information requests / contact | (e.g.: 3 years after final response – adjust to internal policy) | Period appropriate to process management and administrative archiving obligations |
| Newsletter subscriber data | For the duration of the subscription, or until consent is withdrawn | Deletion or anonymisation when the data subject cancels the subscription |
| Technical and security records (logs) | (e.g.: 3 to 12 months – adjust to security policy) | Proportionality in relation to security and audit purposes |
5. Data subject rights
Under the GDPR, the data subject has, where applicable, the following rights regarding their personal data:
- Right of access;
- Right to rectification;
- Right to erasure ("right to be forgotten");
- Right to restriction of processing;
- Right to data portability;
- Right to object;
- Rights related to automated decision-making and profiling, where applicable.
To exercise any of these rights, you may contact:
- Email: This email address is being protected from spambots. You need JavaScript enabled to view it.
- or use the channels provided on the Regional Government's privacy portal (where applicable).
DREM responds, as a rule, within a maximum period of 1 month from receipt of the request, which may be extended under Article 12(3) of the GDPR.
The data subject also has the right to lodge a complaint directly with the CNPD, via This email address is being protected from spambots. You need JavaScript enabled to view it. or through the channels indicated at www.cnpd.pt.
6. Security and confidentiality
DREM adopts appropriate technical and organisational measures to protect personal data against unauthorised destruction, loss, alteration, disclosure or access, taking into account the state of the art, implementation costs, the nature of the data and the associated risks.
7. Personal data breaches
In the event of a personal data breach likely to result in a high risk to the rights and freedoms of data subjects, DREM undertakes to:
- notify the CNPD, where required, within a maximum of 72 hours after becoming aware of the breach (Articles 33 and 34 of the GDPR);
- communicate the breach to the affected data subjects, where legally required.
To report a possible security incident, you may use DREM's security contact (to be defined/confirmed) and/or the address This email address is being protected from spambots. You need JavaScript enabled to view it..
8. Cookies and similar technologies
This website uses cookies and similar technologies to ensure its operation and, with consent, to remember user preferences, produce aggregate statistics and support communication/marketing activities.
Cookies may be session cookies (deleted when you close the browser) or persistent cookies (stored for a defined period).
8.1 Consent management
When you visit the website for the first time, you are presented with a cookie banner that allows you to:
- accept only strictly necessary cookies;
- accept additional cookies (preferences, statistics and marketing);
- configure granularly which categories you wish to authorise.
You may, at any time, review and change your cookie preferences via the "Cookie settings" link or equivalent, available in the website footer.
8.2 Categories of cookies used and cookie list
8.2.1 Necessary cookies (2)
Necessary cookies help make the website usable by enabling basic functions such as page navigation and access to secure areas of the website. The website may not function properly without these cookies.
| Cookie name | Provider | Type | Maximum storage duration | Purpose / description |
|---|---|---|---|---|
| CookieConsent | estatistica.madeira.gov.pt | HTTP | 1 year | Stores the user's cookie consent state for the current domain. |
| hex (32) | estatistica.madeira.gov.pt | HTTP | 1 year | Used to manage server calls to the website's backend systems. |
8.2.2 Preference cookies (2)
Preference cookies allow the website to remember information that changes how the website behaves or looks, such as the preferred language or the region the user is in.
| Cookie name | Provider | Type | Maximum storage duration | Purpose / description |
|---|---|---|---|---|
| AGS_ROLES | gisserver.ine.pt | HTTP | 1 day | Used in the context of the website's map integration; stores user interaction with the map to optimise its functionality. |
| templateColor | estatistica.madeira.gov.pt | HTTP | Session | Remembers user preferences regarding font size and website colours. |
8.2.3 Statistical cookies (4)
Statistical cookies help website owners understand how visitors interact with the website by collecting and reporting information anonymously.
| Cookie name | Provider | Type | Maximum storage duration | Purpose / description |
|---|---|---|---|---|
| _pk_id# | estatistica.madeira.gov.pt | HTTP | 1 year | Collects statistics about the user's visits to the website, such as the number of visits, average time spent and pages viewed (Matomo). |
| _pk_ses# | estatistica.madeira.gov.pt | HTTP | 1 day | Used by the Piwik/Matomo platform to track visitor page requests during the session. |
| cookiesession1 | dremanalytics.madeira.gov.pt | HTTP | 1 year | Sets an ID for the visitor, allowing the counting of specific visitors to the website. |
| cookiesession1 | estatistica.madeira.gov.pt | HTTP | 1 year | Sets an ID for the visitor, allowing the counting of specific visitors to the website. |
8.2.4 Marketing cookies (17)
Marketing cookies are used to track visitors across websites. The intention is to display ads or content that are relevant and engaging for the individual user.
| Cookie name | Provider | Type | Maximum storage duration | Purpose / description |
|---|---|---|---|---|
| __Secure-ROLLOUT_TOKEN | youtube.com | HTTP | 180 days | Cookie not classified by the provider; associated with embedded YouTube video content. |
| __Secure-YEC | youtube.com | HTTP | Session | Stores user preferences related to the video player in embedded YouTube videos. |
| __Secure-YNID | youtube.com | HTTP | 180 days | Cookie not classified by the provider; associated with embedded YouTube video content. |
| LAST_RESULT_ENTRY_KEY | youtube.com | HTTP | Session | Used to track user interaction with embedded video content. |
| LogsDatabaseV2:V#||LogsRequestsStore | youtube.com | IndexedDB | Persistent | Used to track user interaction with embedded video content. |
| remote_sid | youtube.com | HTTP | Session | Required for the implementation and functionality of YouTube video content on the website. |
| TESTCOOKIESENABLED | youtube.com | HTTP | 1 day | Used to check whether the user's browser supports cookies (YouTube). |
| VISITOR_INFO1_LIVE | youtube.com | HTTP | 180 days | Cookie not classified; associated with embedded YouTube video content. |
| YSC | youtube.com | HTTP | Session | Cookie not classified; associated with embedded YouTube video content. |
| YtIdbMeta#databases | youtube.com | IndexedDB | Persistent | Used to track user interaction with embedded video content. |
| yt-remote-cast-available | youtube.com | HTML | Session | Stores user preferences related to the video player (cast functions) in embedded YouTube videos. |
| yt-remote-cast-installed | youtube.com | HTML | Session | Stores user preferences related to the video player (cast functions) in embedded YouTube videos. |
| yt-remote-connected-devices | youtube.com | HTML | Persistent | Stores connected devices used to play YouTube content. |
| yt-remote-device-id | youtube.com | HTML | Persistent | Stores a device identifier for YouTube content playback. |
| yt-remote-fast-check-period | youtube.com | HTML | Session | Stores user preferences related to the video player in embedded YouTube videos. |
| yt-remote-session-app | youtube.com | HTML | Session | Stores user preferences related to the video player in embedded YouTube videos. |
| yt-remote-session-name | youtube.com | HTML | Session | Stores user preferences related to the video player in embedded YouTube videos. |
8.3 How to disable cookies in your browser
In addition to the consent management mechanisms provided on the website, you can configure your browser to block or delete cookies. Disabling certain cookies, particularly necessary ones, may affect the functioning of the website.
9. Changes to this policy
This Privacy and Cookies Policy may be updated whenever necessary. Any relevant changes will be communicated through the website, with an indication of the most recent update date.
Regular consultation of this page is recommended.
