YOUR PRIVACY IS, OF COURSE, IMPORTANT TO US
Any collection of personal data is carried out in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR – General Data Protection Regulation) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and other applicable legislation.
PERSONAL DATA CONTROLLER
Clínica Terrace, represented here by Mara Marques – Atividades Médicas, Lda., with head office at Avenida Mestre António Duarte, 1C – loja D, 2500-760 Caldas da Rainha, with NIPC 513951644, is responsible for processing your personal data for the purposes set out in this privacy policy. You can contact us at:
- Postal address: Avenida Mestre António Duarte, 1C – loja D, 2500-760 Caldas
da Rainha; - Telephone: (+351) 928 100 076;
- Email address: [email protected].
PURPOSES AND LEGAL BASIS FOR PROCESSING PERSONAL DATA
Your personal data is processed, through physical or electronic means, for the following purposes, and under the respective legal grounds:
- Enrolment in clinical analyses, health consultations/treatments, aesthetics and well-being, with the processing of personal data constituting a pre-contractual diligence, with a view to the conclusion and execution of a health provision contract. The absence of personal data necessary for this purpose makes it impossible to sign such contracts;
- Conclusion of a contract for the provision of healthcare, through clinical analyses, health consultations/treatments, aesthetics and well-being, where the processing of personal data is a necessity for the execution of said contract. The absence of personal data necessary for this purpose makes it impossible to fulfil the contract;
- For administrative/accounting/tax purposes, where the processing of personal data is a legal obligation of Mara Marques – Atividades Médicas, Lda. The absence of personal data necessary for this purpose renders the respective effects unfeasible;
- Sending information and communications on the provision of health, aesthetics and well-being, and associated products, within the scope of the previously established health and aesthetic services relationship, with the processing of personal data constituting a legitimate interest of Cínica Terrace, and of the data subject. The absence of personal data necessary for this purpose jeopardises the proper pursuit of this relationship;
- Sending other information and communications, outside the scope of the previously established relationship, within the scope of the provision of health, aesthetics and well-being services, when the consent of the holder of the personal data has been previously given, through a free, specific, informed and explicit expression of will.
WHAT PERSONAL DATA WE COLLECT
For the purposes set out in this privacy policy, and as part of a policy of minimisation, the personal data collected is only that which is appropriate, relevant and limited to what is necessary, namely identification, contact and tax data, on personal, family and professional status, health, aesthetics and well-being.
RECIPIENTS OR CATEGORIES OF RECIPIENTS OF PERSONAL DATA
The processing of your personal data for the purposes indicated will be carried out by Mara Marques – Atividades Médicas, Lda., its employees and subcontractors responsible for managing the website, accounting, customer service and software management, who will process your personal data exclusively in the name of, on behalf of and in accordance with instructions from Mara Marques – Atividades Médicas, Lda. Your personal data may also be disclosed to the authorities or organisations that may legitimately receive it under legal or regulatory terms.
RETENTION PERIOD FOR PERSONAL DATA
Mara Marques – Atividades Médicas, Lda. will retain your data only for as long as is necessary for the purpose(s) set out in this privacy policy (unless a longer retention period is required by applicable law). However:
- The personal data collected in the context of enrolment for health, beauty and wellness consultations/treatments will be deleted if the contract is not executed within two years of the date of enrolment;
- Personal data collected under consent will be deleted immediately when consent is withdrawn, and may be deleted at any time, without prejudice to processing carried out on another lawful basis. Withdrawal of consent does not compromise the lawfulness of the processing of your personal data carried out on the basis of the consent previously given;
RIGHTS OF PERSONAL DATA SUBJECTS
With regard to the protection of personal data, the data subject has the right to ask Mara Marques – Atividades Médicas, Lda. for access to personal data concerning them, as well as for it to be rectified or erased. The data subject also has the right to demand, in certain circumstances, the restriction of the processing of personal data, as well as the right to object to the processing and the right to data portability. The data subject also has the right to withdraw their consent to the processing of their data.
HOW YOU CAN EXERCISE YOUR RIGHTS
You can exercise these rights of access, rectification, erasure, limitation or opposition to processing, portability or withdrawal of consent, by means of written communication, addressed and sent to Clínica Terrace’s postal or electronic address.
The exercise of these rights may jeopardise the possibility of concluding or maintaining contracts for the provision of health and beauty services, particularly in cases of erasure or opposition to the processing of personal data that is indispensable to the performance of the contract.
The exercise of these rights and the provision of the relevant information or communications are free of charge. However, if the exercise of these rights is manifestly unfounded or excessive, in particular requests for non-existent data, limited exercise of these rights by virtue of Union or national law, or repetitive nature of requests, without prejudice to other specially assessed reasons, the request may be refused on the grounds of lack of legal basis, or payment of a fee may be required taking into account the administrative costs of providing the information, communications or taking the measures requested.
In the event of doubt as to the identity of the natural person submitting the request, with a view to exercising the rights of the data subject, namely when the information provided by the person is insufficient or incorrect, Mara Marques – Atividades Médicas, Lda. may request that additional information be provided so that it can safely confirm the identity of the data subject.
AUTOMATED DECISIONS
Mara Marques – Atividades Médicas, Lda. may draw up profiles of the data subjects’ consumption and lifestyle habits in the field of health, aesthetics and well-being, but will not make automated decisions based on personal, professional or other characteristics for the purposes envisaged.
CROSS-BORDER PROCESSING
Mara Marques – Atividades Médicas, Lda. does not transfer personal data outside the territory of the European Union, namely to a third country or an international organisation.
THE RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY
The data subject has the right to lodge a complaint with the competent supervisory authority, in particular the National Data Protection Commission, in the event of non-compliance with the legal rules on the protection and processing of personal data under the responsibility of Mara Marques – Atividades Médicas, Lda.
SECURITY OF PERSONAL DATA
Mara Marques – Atividades Médicas, Lda. adopts appropriate technical and organisational measures to protect personal data against accidental or unlawful loss, destruction or damage, as well as to ensure that the data provided is protected against access or use by unauthorised third parties.
CHANGES TO THE PRIVACY POLICY
This Privacy Policy may be altered, when justified, by publication on Clínica Terrace’s website and premises, without the need for prior express consent from the data subject. Any changes of a significant nature will be communicated with the degree of publicity corresponding to their relevance, either by highlighting them in the online publication or, if the relevance justifies it, by individualised communication to the data subjects.