The healthcare service provider establishment Clínica Veterinária Fernão Magalhães, owned by Crucial & Positivo, Lda., is committed to complying with the General Data Protection Regulation, hereinafter referred to as GDPR, as well as, in this matter, with the provisions of the Constitution of the Portuguese Republic (CRP), the Data Protection Law (LPD), and other special legislation on personal data protection, ensuring the protection of personal data and strengthening the relationship of trust with the client.

This Privacy and Personal Data Protection Policy is intended to provide information regarding the data collected and the corresponding purpose and processing carried out.

If you have any questions regarding the processing of your personal data, please contact us at the following address: geral@cvfm.pt.

By providing your personal data to the healthcare service provider establishment Clínica Veterinária Fernão Magalhães, the data subject authorizes its processing in accordance with this Privacy and Personal Data Protection Policy.

Data Controller

Clínica Veterinária Fernão Magalhães, owned by Crucial & Positivo, Lda., represented by Dr. Marta Machado, NIPC 516183664, with headquarters at Rua Contumil, No. 785, 4350-130 Porto, holder of the healthcare service provider establishment Clínica Veterinária Fernão Magalhães.

What are personal data?

Under the GDPR, personal data means any information relating to an identified or identifiable natural person (data subject). An identifiable natural person is one who can be identified, directly or indirectly, particularly by reference to an identifier such as a name, an identification number, location data, electronic identifiers (IP address, cookies), or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

Personal data collected

The healthcare service provider establishment Clínica Veterinária Fernão Magalhães collects different categories of data:

• Data that identifies you, such as your name, date of birth, tax identification number, social security number, identification number and its validity date;
• Communication data, including, for example, telephone number, email address, and address (locality, postal code, country, district, municipality, parish);
• Insurance-related data;
• Data about third parties authorized to make decisions on your behalf or who should be contacted in case of emergency;
• Information regarding health data and healthcare received or to be received;
• Data relating to

How your data is collected

• When you contact us;
• When you establish a relationship with us within the scope of providing a service;
• When you post comments or images on our social media pages; or
• When, in any way, you send us information

Purposes of data collection and legal bases

The collection of personal data aims at executing contracts entered into with clients for the provision of healthcare services, prevention or diagnosis and/or provision of treatments, management of administrative services, namely for scheduling or rescheduling appointments and treatments, billing, accounting and auditing, marketing communications and other commercial communications, quality control, statistical studies, better understanding customer preferences, as well as for contact purposes.

The legal bases for collecting your personal data include the law, pre-contractual and contractual relationships, payment management, customer support, compliance with legal obligations, the data subject’s consent, and legitimate interests.

We may also process your data, with your consent, for teleconsultations, publication of photographs or videos for internal and external promotion of our activity, for example on social media, as well as for marketing purposes or sending newsletters.

Personal data related to your health will only be processed by professionals bound by confidentiality and only to the extent necessary.

Retention period and method of personal data

We process and retain your personal data only for the period necessary to achieve the respective purposes, respond to your needs, your requests, or to comply with legal obligations, which vary depending on the category of data.

We may also retain some of your personal data to the extent necessary to administer or enforce our rights, namely through legal proceedings.

In cases where the client has given consent for the processing of personal data, we retain such data in accordance with the consent given or until that consent is withdrawn.

With whom we share your data

We may rely on other companies to provide certain services and may share information and data with third parties such as accounting and IT companies, competent authorities, legal service providers, consultants, and others. We guarantee that, in such situations, these third parties will have limited access to the data, strictly necessary for the performance of the contracted tasks, and are subject to the same confidentiality obligations. Likewise, we may disclose your personal data when required by law, within judicial proceedings, or investigations of suspicious activities.

Security Measures

We have developed mechanisms and appropriate technical and organizational measures to maintain the confidentiality and secrecy of your personal information, considering that the information collected includes sensitive data under the GDPR, in order to ensure a level of security appropriate to the risk and to protect personal data against destruction, loss, alteration, unauthorized disclosure, or accidental or unlawful access. For this purpose, we implement measures such as restricted access to clinical records (physical or digital), use of strong passwords, and updated antivirus software. Additionally, any employee of Clínica Veterinária Fernão Magalhães with access to your personal data is bound by a duty of confidentiality.

Rights of the Data Subject

Under the GDPR, Data Subjects may, at any time, exercise the right to information, access, rectification, erasure, and portability of their personal data, as well as the right to restrict or object to processing, including withdrawal of consent. To do so, please contact us via geral@cvfm.pt.

Understand your rights:

• Right to information: You have the right to obtain clear, transparent, and understandable information about how we use your personal data.
• Right of access: You may access the personal data we process and store. However, this right is not unlimited and must comply with data protection and healthcare laws.
• Right to rectification: You have the right to correct inaccurate or outdated personal data without undue delay.
• Right to erasure (right to be forgotten): You may request deletion of your data, although this is not absolute due to legal retention obligations or legitimate interests.
• Right to object: You may object to the processing of your data for reasons related to your particular situation.
• Right to withdraw consent: You may withdraw your consent at any time, without affecting the lawfulness of prior processing.
• Right to data portability: You may receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller.
• Right to restriction of processing: You may request restriction of processing in certain situations (e.g., contesting accuracy or unlawful processing).

All rights must be exercised reasonably and in good faith.

Final Notes

By using our services, you agree to our Privacy and Data Protection Policy.

The Data Subject guarantees that the personal data provided is accurate and commits to informing us of any changes, assuming responsibility for damages caused by incorrect or incomplete information.

We warn that providing personal information online carries risks of interception and misuse by third parties. Therefore, we recommend not including sensitive or confidential personal data via our website or emails. Any resulting damage is your responsibility.

Users of our social media must ensure their devices are protected against harmful software. We recommend keeping browsers, operating systems, and antivirus software updated.

If you wish to contact us regarding your rights or questions about how we use your data, please email geral@cvfm.pt. If still dissatisfied, you may contact the Portuguese Data Protection Authority (CNPD) via cnpd.pt.

Changes to this Privacy Policy

We may update this Privacy and Data Protection Policy at any time, and we encourage regular consultation of this document.