PRIVACY AND COOKIES POLICY
This Privacy and Cookies Policy regulates the processing of personal data of users (hereinafter “User” or “Users”), collected in the context of the use of this website (hereinafter “Site”), by Bocca Clinic, headquartered at Praceta Professor Egas Moniz, nº48, 4100-221 Porto, and registered under unique registration number and corporate entity number 508411378, as the data controller.
The privacy of our customers, along with full compliance with our legal obligations in terms of data protection, is one of our priorities. We take all necessary measures to protect your personal data.
Providing personal data on the Site implies awareness of the conditions stated in this Privacy and Cookies Policy, as described below.
1. COLLECTION AND PROCESSING OF PERSONAL DATA
1.1. Use of the Site
The User may browse and access the Site without necessarily providing personal data. However, the Site includes certain features and services that cannot be offered without access to some of your personal data. For example, we need access to your data if you wish for us to contact you to schedule an appointment or to process your suggestions properly.
1.2. Contact Requests
Whenever the User wishes to provide suggestions/complaints or request estimates for medical procedures or exams through the contact form available on the Site, Bocca Clinic will collect a set of personal data related to your request. This includes name, phone number, and email address. Providing this information is mandatory; without it, we may not be able to respond to your request adequately. Optionally, you may provide your address, postal code, insurance or health subsystem data, and the doctor you wish to direct your request to. This additional data may help us respond more appropriately and fully to your request. In the open text field provided, you may also voluntarily share other personal data that you consider relevant.
2. RIGHTS OF THE DATA SUBJECT
2.1. According to applicable data protection law, the User, as the data subject, may at any time request access to their personal data, as well as its rectification, deletion, or restriction of processing, the portability of data, or object to its processing. You can exercise these rights via the “Contact Us” form (if you have created an account on this platform) and by submitting a written request to the Data Protection Officer (DPO) at Bocca Clinic via dpo@boccaclinica.com.
2.2. The following table provides a brief description of your rights under applicable data protection legislation:
Rights of the Data Subject Description
Right of Access The right to obtain confirmation of which personal data is being processed and to receive a copy of this data. This right does not infringe upon third-party rights or freedoms, including trade secrets or intellectual property rights.
Right to Rectification The right to request the correction of inaccurate personal data or the completion of incomplete personal data.
Right to Erasure The right to request the deletion of personal data. However, this right does not apply when data processing is necessary to comply with a legal obligation.
Right to Restriction of Processing The right to request the suspension of data processing or the restriction of processing to certain data categories or purposes.
Right to Data Portability The right to receive data provided to Bocca Clinic in a commonly used digital format and, if technically feasible, request the direct transmission of data to another data controller.
Right to Object The right to object to data processing, such as for the purpose of direct marketing communications or online targeted advertising, based on the legitimate interests of Bocca Clinic.
2.3. The provisions above also apply, with necessary adaptations, to the exercise of rights by the holder of parental responsibilities or a legal guardian, on behalf of data subjects under 16 years of age or those who are incapacitated.
3. USE OF PERSONAL DATA
3.1. Bocca Clinic processes personal data for the purposes of managing client relationships, responding to suggestions/complaints or requests for estimates for medical procedures, as well as managing appointments booked through the Site.
3.2. The legal basis for processing Users’ personal data is the necessity of processing to fulfill a contract in which the data subject is a party or to carry out pre-contractual steps at the request of the data subject, according to Article 6(1)(b) of the General Data Protection Regulation (GDPR). When processing involves health-related data or other special categories of personal data, only professionals bound by confidentiality will access this data. This processing is necessary for health system management (Article 9(2)(h) GDPR).
3.3. For unsolicited job applications, data collected will be processed to evaluate future collaboration opportunities. We will request the following data: name, nationality, date of birth, gender, ID card number and validity, email, phone number, and CV. Optionally, you may also provide your address, postal code, city, and other relevant information.
3.4. With your consent, your data may also be processed to send you informative or promotional content from Bocca Clinic.
4. SHARING OF PERSONAL DATA
4.1. Bocca Clinic may also disclose your data to third parties when required by law, an order from the Data Protection Commission or another regulatory authority, or a court order, or when necessary to protect the User’s vital interests.
5. SECURITY MEASURES
5.1. Bocca Clinic strives to protect Users’ personal data against unauthorized access. We use security systems, rules, and other procedures to ensure the protection of personal data and prevent unauthorized access, misuse, disclosure, loss, or destruction.
5.2. As data circulates on the Internet, in an open network, it is impossible to eliminate the risk of unauthorized access entirely. Users are responsible for ensuring that devices used to access the Site are properly protected against harmful software, viruses, and worms.
6. RETENTION OF PERSONAL DATA
6.1. Bocca Clinic will retain personal data only as long as necessary to respond to User requests.
6.2. In case of pending litigation, personal data may be retained for up to six months after a final court ruling.
7. COOKIES POLICY
7.1. When accessing the Site, small files called cookies may be installed on the User’s device. Cookies are standard on most websites and help provide a better browsing experience.
7.2. Bocca Clinic uses cookies to distinguish Users when using the Site, helping improve navigation.
7.3. Cookies are small information files stored on your device through your browser.
7.4. Cookies allow the Site to recognize your browser for future visits. You can configure your browser to accept, reject, or notify you of cookies.
7.5. Types of cookies include session cookies (deleted upon closing the browser) and persistent cookies (stored for future visits). Cookies can be first-party (from Bocca Clinic) or third-party (from other domains).
7.6. We use analytical cookies (Google Analytics) and advertising cookies (e.g., YouTube, Facebook, LinkedIn) for data collection.
7.7. You can manage cookies through your browser settings.
8. THIRD-PARTY PAGES
8.1. The Site contains links to websites operated by third parties, which have independent privacy policies. Bocca Clinic is not responsible for the information collected by these third-party sites.
9. CLARIFICATIONS
If you wish to obtain clarification regarding how Bocca Clinic processes your data or exercise your rights under data protection law, please contact us as mentioned in Section 2.1.
10. COMPLAINTS
If you believe Bocca Clinic’s data processing is not compliant with data protection laws, you have the right to lodge a complaint with the Data Protection Commission or another relevant authority.
11. CHANGES TO THE PRIVACY AND COOKIES POLICY
Bocca Clinic may amend this Privacy and Cookies Policy at any time. Any changes will be published on the Site. Should these changes affect the way your data is processed, Bocca Clinic will notify you using the contact details you provided.
Last updated: November 2024
