This Privacy and Data Protection Policy aims to inform you of the rules governing the processing of personal data of the user of this website, collected through it, by Filipe Gonçalves, within the scope of his healthcare provision activity, namely Osteopathy.

This processing is carried out in strict respect and compliance with the applicable legislation in this area, namely Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 ("General Data Protection Regulation" or "GDPR") regarding the processing of personal data and the free movement of such data, as well as Law 58/2019 of August 8, which ensures the execution in the Portuguese legal order of the GDPR.

Filipe Gonçalves is committed to the protection and confidentiality of the personal data of the user of this website, having adopted the measures he considers appropriate to ensure their accuracy, integrity, and confidentiality, as well as all other rights that assist the respective data subjects.

For this purpose, he has prepared this Privacy and Data Protection Policy, whose following terms you should read carefully:


1. Scope of Application of this Policy
When browsing this website, no information or personal data of the User is collected, unless they are provided voluntarily and with consent, through the submission of appointment requests or information, contact forms, or the eventual download of documents and/or files inserted therein.

The provision of personal data implies the User's knowledge and acceptance of the conditions contained in this Privacy Policy, which is an integral part of the Terms of Use of this website, which you should also be aware of.

This Data Protection Policy applies, therefore, exclusively to the collection and processing of these personal data, whose processing is the responsibility of Filipe Gonçalves.


2. Your Personal Data
Personal data is any information, of any nature and regardless of its support, including sound and image, relating to an identified or identifiable natural person.

An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to a name, identification number, location data, electronic identifiers, or one or more specific elements of their physical, physiological, genetic, mental, economic, cultural, or social identity.  

If the User fills out and submits the Contact Form available on this website, the following personal data will be collected, which must be provided, otherwise it will not be possible to process the request:

Name/Email/Telephone/Mobile phone/Indication of the subject and message, with open fields available where the User can identify the subject and insert the respective description and/or other personal data, respectively, these already provided spontaneously.

The User guarantees that the personal data provided were entered by the respective data subject, parent or guardian, or that their entry was authorized by the same, and that they are true and accurate.

Location information may also be recorded and transmitted to organizations with legal competence to receive emergency and rescue calls, for the purpose of responding to received calls.


3. Your Consent
By providing your personal data, and/or that of a minor for whom you are a parent or guardian, through this website, the User is giving their express consent to the processing of such data for the purposes provided for in the following point of this Privacy and Data Protection Policy, for the respective purposes, agreeing with it.

The collected personal data may be processed electronically and in an automated or non-automated manner, ensuring in all cases strict compliance with personal data protection legislation, being stored in specific databases, created for this purpose, and under no circumstances will the collected data be used for any purpose other than that for which they were collected or for which consent was given by the data subject.  


4. Purposes of Processing Your Personal Data
The data that the User provides me are processed for the following purposes:
a) Provision of Osteopathy services:
The information mentioned above is used to carry out all operations for scheduling osteopathy appointments.

Legal Basis - performance of pre-contractual steps at the User's request (e.g., scheduling an appointment or clinical act) and/or performance of the healthcare service provision contract entered into with the User.

b) To communicate with the user and manage the entire process of providing my Osteopathy services:
I may contact you through different physical or digital communication channels - telephone contact, SMS, email, to provide information about the date and time of the appointment, any changes or unforeseen events regarding your appointments, for administrative or operational reasons, and to send the following health or other information (non-exhaustive list): invoices, invoice-receipts, credit notes, exam requests, attendance statements, reports, informed consents for clinical acts, consents for additional billing, and clinical process portability requests.

I may also use the User's personal data to respond to their suggestions or contacts and also within the scope of conducting satisfaction surveys.

Legal Basis - performance of the healthcare service provision contract entered into with patients or performance of pre-contractual steps at the request of patients (e.g., scheduling an appointment or clinical act).

c) To comply with legal obligations:
The User's data may be processed in response to requests for information from the Central Administration of the Health System ("ACSS"), the Health Regulatory Entity ("ERS"), and other public Portuguese entities in the health area, as well as the Courts, Solicitors, and criminal police bodies, in the exercise of their powers and attributions.
Location information may also be transmitted to organizations with legal competence to receive emergency and rescue calls, for the purpose of responding to received calls.

Legal Basis - Compliance with legal obligations of the Data Controller.

d) Improve the operation and functionalities of the website;

e) For any other legitimate purpose provided by law.
I may use the User's data to improve the quality, health, and well-being of patients, carrying out, whenever possible, procedures of pseudo-anonymization and anonymization so that it is not possible to establish a relationship between the identified/identifiable person and the processed personal data.


5. Protection of Your Information
Filipe Gonçalves is committed to ensuring the protection of the security of the personal data provided to him, having approved and implemented strict rules in this matter. Compliance with these rules is an obligation for all those who legally access them.  

Filipe Gonçalves informs that various security measures, of a technical and organizational nature, have been adopted to protect the personal data provided to him against their dissemination, loss, misuse, alteration, unauthorized processing or access, as well as against any other form of unlawful processing.  

In this sense, the personal data collection forms require encrypted browser sessions, and all personal data provided are stored securely in my systems, which, in turn, are located in a data center owned by me, covered by the physical and logical security measures that I deemed essential for the protection of personal data.

Notwithstanding the implemented security measures, I warn the user that they should adopt additional security measures, namely, ensure the use of an updated PC and Browser in terms of properly configured security "patches," with active firewall, antivirus, and anti-spyware, and that they verify the authenticity of the websites they visit on the internet, avoiding websites whose reputation they do not trust.  

"COOKIES"

"Cookies" are small software labels that are stored on access devices through the browser, retaining only information related to preferences, which are not used to personally identify users, therefore not including personal data.

All browsers allow the user to accept, refuse, or delete cookies, and also inform the user whenever a cookie is received, namely through the selection of the appropriate settings in the respective browser. The user can configure cookies in the "options" or "preferences" menu of their browser.  

You can accept the use of cookies through the "accept cookies" button present in the informative phrase that appears on our websites, or make your choices and manage them on the informative page through browsers and available tools.

Note, however, that by disabling cookies, you may prevent some web services from functioning correctly, affecting, partially or totally, the navigation on the website.

Filipe Gonçalves has implemented appropriate procedures that allow ensuring compliance with security obligations in processing, notification to the control authority and data subjects in case of personal data breach, data protection impact assessment, and prior consultation, as provided for in the applicable legislation.

Nevertheless, it is important to bear in mind that no method of data transmission or storage is 100% secure.

Therefore, Filipe Gonçalves declines any responsibility for any damages, of any nature, direct or indirect, incurred by you, or by any user, related to computer fraud, theft, robbery, or any other infraction or circumstance in which your information and data are accessed or disclosed without express authorization.  


6. Retention Period of Your Data
The personal data that you provide me will be kept while the purposes for which they were collected remain, without prejudice to the obligation to preserve them for a longer period due to legal imposition, namely for compliance with tax obligations.


7. Data Transfer
Filipe Gonçalves declares that your personal data will not be sold, exchanged, shared, or transferred to third parties, except with your express consent or for compliance with any legal or judicial obligation.

The collected and processed personal data are not made available to third parties established outside the European Union. If, in the future, this transfer happens, Filipe Gonçalves commits to ensuring that the transfer complies with the applicable legal provisions, namely regarding the determination of the adequacy of such country in terms of data protection and the requirements applicable to such transfers.


8. Guarantees and Warnings
The user guarantees that the personal data communicated to Filipe Gonçalves is communicated correctly and accurately and commits to notifying him whenever any change or modification occurs. If the user communicates their data to Filipe Gonçalves incorrectly, inaccurately, or incompletely, the user assumes exclusive responsibility for any resulting damages.


9. Data Subject Rights
In accordance with applicable legislation, the data subject has the right to be informed, in a clear, transparent, and understandable manner about the terms of use of their personal data, to access, rectify, limit, correct, request portability, erasure of the same, or oppose some or all of the purposes previously described for the processing of their data, by sending a letter, with acknowledgment of receipt, to the following address: R. Alfredo Keil, 501, Porto, or to the following email address: fg.osteopata@gmail.com.

If you consider that there has been a violation of the legislation in force regarding data protection concerning the processing of your personal data by Filipe Gonçalves, or if you have any questions regarding its processing, you can contact him through the email mentioned above.

The data subject also has the right to file a complaint with the National Data Protection Commission (CNPD). More information about the CNPD can be obtained through the website www.cnpd.pt


10. Changes to Our Privacy Policy
Filipe Gonçalves reserves the right to change, rectify, or update this Privacy and Personal Data Protection Policy whenever he deems it necessary and as long as it complies with the legislation in force.

Accordingly, we ask that you periodically review this document to stay updated.

Continued use of the website, services, and resources offered after such changes will be considered for due purposes as a manifestation of your agreement with such changes.


11. Declaration on Knowledge of the Use of Sensitive and Non-Sensitive Data Collected and Respective Consent
The user, being aware that Filipe Gonçalves will collect and process personal data, acknowledges that, by checking the "I have read and accept the Privacy and Data Protection Policy" checkbox, they intend to submit their personal data, correct and true, expressly authorizing the respective processing under the terms of this policy.

Data Controller: Filipe Gonçalves
Tax Identification Number: 192929119
Address: Rua Alfredo Keil, 305, Porto
Phone Number: 931725510
Data Protection Officer (DPO) Contact: fg.osteopata@gmail.com

1vs|19.03.2025