Privacy Policy
Last updated: [A DEFINIR]
1. Data controller
The controller of the personal data collected through this website is Bruno Bouça, Specialist in Endocrinology and Nutrition (Ordem dos Médicos no. 62537). For any question about personal data, you can contact: [email protected].
2. What data is collected
This website has no forms, client area or booking system. The only personal data processed is what you send us voluntarily by email, for example when you request a video consultation or get in touch: your email address, your name and the content of your message.
We recommend that you do not include detailed clinical information in your first email. If you do, that information is considered a special category of data (health data) and will be processed only to respond to your request.
3. Purpose and lawful basis
The data is used solely to reply to your message and, where applicable, to arrange the appointment requested. The lawful basis is taking steps at your request prior to entering into a contract and, for health data, the provision of healthcare (Articles 6(1)(b) and 9(2)(h) of the GDPR). [A CONFIRMAR NA REVISÃO JURÍDICA]
4. Retention
Emails are kept only for as long as needed to respond to the request and meet applicable legal obligations: [PRAZO A DEFINIR].
5. Data sharing
The data is not sold or passed on to third parties for marketing purposes. Email is handled through a Google email service (Gmail), which acts as a service provider. The website is hosted by a web hosting service which, for technical and security reasons, may process visitors’ IP addresses. [CONFIRMAR SUBCONTRATANTES E TRANSFERÊNCIAS INTERNACIONAIS]
In-person appointments are booked directly with the healthcare providers listed in the Locations section. Any data you give to those providers is processed by them under their own privacy policies.
6. Cookies
This website does not use cookies or any advertising tools. We use Cloudflare Web Analytics, which collects aggregated, anonymous visit statistics, without cookies or personal identification. The maps are simple links to Google Maps and are not embedded in the page. When you click an external link (maps, YouTube, Instagram or healthcare providers’ websites), that site’s privacy policy applies.
7. Your rights
Under the General Data Protection Regulation (GDPR), you have the right to:
- access your personal data;
- ask for inaccurate data to be corrected;
- ask for your data to be erased;
- ask for processing to be restricted;
- object to processing;
- ask for data portability;
- withdraw your consent at any time, where processing is based on consent.
To exercise these rights, send an email to [email protected].
8. Complaints
If you believe your data is not being handled properly, you have the right to lodge a complaint with the Portuguese Data Protection Authority (Comissão Nacional de Proteção de Dados, CNPD): www.cnpd.pt.
9. Changes
This policy may be updated. The date of the last update is shown at the top of the page.