ERS Registration No. – 23378 – E122558 / E163932 / E163931

 

The new General Data Protection Regulation (GDPR) – Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, in force since May 25, 2018, with direct application to all legal or natural, public or private entities that process personal data of natural persons in all EU countries, repealed the previous Data Protection Law, and defines new rules guaranteeing and reinforcing the protection, processing and free movement of personal data, with the aim of avoiding serious situations of violation of such data.

In compliance with the provisions of the new General Data Protection Regulation (GDPR) and in defense of its security, the company 1013, Lda. has adopted new common principles and rules that are part of the Company’s Privacy Policy document, which we transcribe below:

 

Company Privacy Policy

 

The purpose of this document is to establish and make known the rules and mechanisms for guaranteeing the privacy of all personal data received and stored by the company in the context of its commercial and employment activity, in particular to inform you about which categories of personal data we collect, the purpose and legal basis for processing the data, with whom we share the data, the period for which the data will be kept, the rights you have and how you can exercise them, and the obligations in the event of a data breach.

The company’s Privacy Policy is shared through all available communication media and applies to all information collected through the company’s website, social networks (Facebook, LinkedIn), as well as information that you voluntarily share or have shared with us in person, in meetings, interviews, by telephone, SMS, e-mail, letter or other means of correspondence. Personal data will be processed by the company.

If you wish to obtain additional information or clarify any doubts about our Privacy and Personal Data Processing Policy, you can send your questions by letter or e-mail:

 

1013, Lda.

A/C Data Protection Officer/Privacy Policy

Av. Casal Ribeiro, nº 50, 1ºDto

1000-093 Lisboa

Phone: 308 809 688

E-mail: [email protected]

 

Our Privacy Policy contains the following sections:

1. What personal data is and what personal data we collect and use.

2. Indirect collection of other data.

3. Cookies.

4. Cookie management.

5. What are the foundations and purposes.

6. With whom we share personal data.

7. Security of personal data.

8. How long personal data is kept.

9. What are the rights of personal data subjects?

10. Competent authority.

11. External websites.

12. Share your Hugo Madeira Clinic posts on your social networks.

 

1. What is personal data and what personal data do we collect and use?

Personal data is any information that can identify a natural person.

We collect and use the following information:

• Information you give us:by filling in forms at www.clinicahugomadeira.com, by telephone, email or other means .
• Information we collect during your visit to the site.

We collect and use personal data in the context of the company’s commercial activities, as well as in our employment relationships (in the case of our employees). We use various types of personal data, including:

• Identification data (e.g. name, identification numbers, nationality, date and place of birth);
• Contact details (e.g. address, telephone number, e-mail address);
• Family situation (e.g. number of children, tax situation);
• Education (level of education);
• Bank and financial details (IBAN, NIB, credit cards);
• We do not collect data relating to sexual life or orientation, political opinions, religious, ethical or philosophical convictions, with the exception of trade union membership (applicable only to employees due to compliance with legal obligations).
• Without specific consent, we do not collect sensitive data resulting from clinical questionnaires and anamneses, which include various health data, such as biometric data, genetic data, race, medical history and background, allergies, etc., and, if specific consent is given, only for the purpose of diagnosing and possibly treating the clinical situation of the data subject.

 

2. Indirect collection of other data

We may indirectly have access to the personal data of:

• Family members;
• Legal representatives or proxies;
• Partners of the company;
• Employees of our clients, suppliers, service providers and partners

All this data will be treated with the same security and privacy.

 

3. Cookies

Our website uses cookies, helping us to provide you with a good experience when you browse our website and also allowing us to improve it.

Cookies are small files or packets of data exchanged between the website and your browser. This website may use several types of cookies:

• Session cookies: these are temporary cookies that are not stored on your computer after you leave the site and are used to analyze traffic patterns, allowing us to improve the content and usability of the site.
• Analytical cookies: these are used anonymously for statistical purposes and are processed by us or by third parties with the aim of analyzing browsing patterns on the website and improving the supply of products or services.
• Functional cookies: these store user preferences regarding the use of the site, so that you can log in automatically.
• Marketing cookies: target advertising according to the user’s interests, helping to measure its effectiveness, avoiding the display of duplicate ads, etc. These cookies may share this information with other organizations or advertisers. They are persistent cookies and almost always come from third parties.

 

4. Cookie management

Browsers allow the user to accept, refuse or delete cookies through their advanced settings. These can usually be managed in the “Options” or “Preferences” menu.
Please note that disabling cookies may prevent some pages or services on the website from working properly.

 

5. What is the basis and purpose

Fundamentals

• Consent

Based on the prior consent of the holder of the personal data, which must be free, informed and unambiguous;

• Legitimate interest

When the processing of the data corresponds to a legitimate interest on the part of the company with a view to developing our activity and providing our services, as well as its employment relations;

• Compliance with all legal, regulatory and judicial obligations

When the processing of personal data is necessary to comply with all legal, regulatory and judicial obligations to which the company is subject.

• Pre-contractual due diligence, execution and management of contracts

• Consent of the holder of the personal data for specific processing outside this scope

 

Purposes

The use of personal data is necessary in particular for:

• Managing and monitoring clients/suppliers;
• Diagnosis and possible treatment of the clinical situation of the data subject
• Marketing activities, such as presenting products/services, sending newsletters, promotional campaigns and actions, satisfaction surveys, market research, profile analysis.
• To measure or understand the effectiveness of the advertising we send to you and third parties, and in order to send relevant advertising.

• Tailoring our products or services to your needs and interests and sending you commercial or other news that may interest you.

• Compliance with all legal, regulatory or judicial obligations to which the company is bound in the commercial and employment spheres;
• Administrative, accounting and financial management;
• Training management;
• Collections and litigation management;
• Complaints management;
• Access control to facilities;
• Recruitment processes;
• Internship processes

 

6. Who we share personal data with

In order to fulfill the purposes described above, it may be necessary to share your data with:

• Official, Regulatory, Judicial and Police Entities

To comply with all legal obligations, as well as to participate in programs and support.

• Service providers and subcontractors

It may be necessary to share personal data with third parties within the scope of the activity and according to each objective, such as, for example, insurance companies, occupational health and safety service companies, travel agencies, training companies, technical assistance, support for e-commerce activities, hosting of our websites, among others.

• Marketing-related services
• Analysis partners and search engines that help us improve and optimize our site

• Business partners

In these cases, we may share your data with these partners in order to optimize our products and services.

• Customers and suppliers

Some of the employees’ personal data may have to be shared with customers and suppliers as part of their duties.

These entities, if they belong to the EU, will be responsible for complying with the provisions of the GDPR, but the company will take all possible measures to ensure that all entities with which it shares personal data respect our Privacy Policy and therefore protect the personal data entrusted to them.

Under no circumstances does Clínica Hugo Madeira share your personal data with other companies or brands for other commercial purposes.

 

7. Security of personal data

Clínica Hugo Madeira undertakes to process only the personal data that is strictly necessary for the purposes described above, and will make every effort to ensure the security and protection of personal data, including administrative and technical measures to prevent access to your data, its misuse, or its unauthorized disclosure.

All the information you provide us with is stored on secure servers. Where we give you (or where you choose) a password that allows you to access certain parts of our site, you are responsible for keeping that password confidential. We ask that you do not share passwords with anyone, do not re-use passwords on other sites and do not use obvious passwords.

8. How long personal data is kept

Personal data will be stored for an indefinite period of time, i.e. until the data subject requests its total or partial deletion or withdraws their consent, provided that this request does not conflict with the fulfillment of contractual or legal and regulatory obligations to which the company is bound.

 

9. What are the rights of personal data subjects?

The holder of personal data, in accordance with the applicable regulations, has the right to information, access, rectification, deletion, limitation, objection and data portability, as well as to contest automatic decisions and to withdraw their consent.

• Right to information, access and rectification

The data subject may, at any time, access the data they have provided us with, request its rectification, as well as obtain information regarding its processing, and we undertake to follow up within a maximum of 30 days.

• Right to elimination

The right to deletion is also recognized, with personal data being deleted within the above-mentioned period from the date of the request, provided that there are no valid legal grounds for its retention.

• Right to restriction and objection

You can request restriction, as well as object to the processing of personal data, particularly when the data is processed for direct marketing purposes.

• Portability of personal data

The data subject has the right to ask the company, when legally permissible, to send their personal data to another organization, unless this transfer, due to its extent, involves high costs and means.

• Automatic decisions

Where applicable, the data subject has the right to contest automatic decisions such as profiling by requesting human intervention by the Data Controller.

• Withdraw your consent

The data subject may withdraw their consent to the extent legally permissible. This situation does not compromise the lawfulness of the processing carried out up to that date.

If you wish to exercise your rights as set out above, you can do so by registered letter or by e-mail to the contacts listed below. In order to guarantee the security and confidentiality of the process, proof of your identity is essential. However, please note that we may need to retain certain information, for example, for legal or administrative purposes (e.g. keeping accounting records).

 

1013, Lda.

A/C Data Protection Officer/Privacy Policy

Av. Casal Ribeiro, nº 50, 1ºDto

1000-093 Lisboa

Phone: 308 809 688

E-mail: [email protected]

 

10. Competent authority

It should be noted that if there are legal rules or imperatives that override these rights, the company will respond to the impossibility and the reason for not being able to comply with the request, within a maximum of 30 days.

You will also always have the right to lodge a complaint with the competent authority: Comissão Nacional de Proteção de Dados – CNPD (National Data Protection Commission). http://www.cnpd.pt .

11. External websites

Our website contains links to and from websites. To the extent that links or banner advertisements incorporating hyperlinks are used to access third party websites, you should be aware that these third party websites are not controlled by us and have their own privacy policies. We accept no responsibility for these policies. Please check them before sending any information to these sites.

12. Share your Hugo Madeira Clinic posts on your social networks

We’re looking forward to seeing your posts from the Hugo Madeira clinic on social media!

For this reason, we may ask you to share your photos or videos on our social media channels (Facebook, Instagram, LinkedIn, Twitter, Tiktok, Pinterest and Website).

By responding positively to our request and tagging Clínica Hugo Madeira with @clinica_hugomadeira or @drhugomadeira you give us permission to use your photos or videos on our social media channels and other communication tools for marketing and/or advertising purposes, including the right to modify and edit your photos, taking responsibility for all the people who appear in the photos. We are allowed to use these photos and videos until you withdraw your permission in writing.

The company, valuing the trust that the data subject places in us by granting their consent, has adopted the technical, physical and organizational measures appropriate to the GDPR, ensuring that personal data is duly protected against unauthorized or unlawful use, alteration, unauthorized access or disclosure, accidental or purposeful destruction and loss.

The company’s Privacy Policy applies to its employees, sole proprietors and will also be extended to legal persons whenever the processing of personal data of managers, legal representatives and/or their employees is involved.

The company reserves the right to change its Privacy Policy in the light of legislative changes or as a result of its activity.

 

Lisbon, December 14, 2023