Privacy Policy

Introduction

Allure Clinic is committed to protecting the privacy of all users of its website and has prepared this privacy policy for this purpose.

In order to ensure its commitment to the privacy of its users, Allure Clinic has adopted the best security and personal data protection practices (cf. “Privacy Policy”), under the terms best described below.

In this sense, and in order to ensure that all personal data is processed and protected in accordance with the new General Data Protection Regulation, we ask that you please read the new privacy and data protection policy carefully.

It is extremely important that you read and give your express consent for the maintenance and processing of your personal data, in order to authorize the sending of communications in accordance with the rules defined here.

This Website uses cookies (whose policy you can and should consult here) to provide better use for its visitors, as well as to ensure that it is fully operational.

1. Personal Data

Personal data corresponds to any information relating to an identified or identifiable natural person, of any nature and regardless of the type of support.

An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier (e.g. an identification number, location data, online identifiers or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person).

Through this website, and depending on the purpose of data collection, the following personal information may be collected: (i) name, (ii) date of birth, (iii) contacts (telephone and email), (iv) personal data transmitted in the “Message”.

2. Responsible for the Processing of Personal Data

Clínica Allure, Lda with NIPC 514277122 and headquarters at Avenida da Boavista, 117, 3rd floor, room 307 4050-115 Porto, is the entity responsible for the collection and processing of personal data for the purposes indicated below.

If you consider that the information contained in this privacy policy is not sufficiently clear and/or transparent, or for any other reason you consider relevant, please contact us via email: geral@allureclinic.pt .

3. Purpose of Personal Data Processing

The collection and processing of personal data on the Allure Clinic website is intended for: (i) contacting the patient and scheduling appointments, as well as (ii) sending newsletters and/or e-books, therefore, completing the form corresponding to each of the purposes corresponds to prior and express consent to the processing of the personal data transmitted.

If the user expressly and in advance allows the processing of their personal data (consent that may be withdrawn at any time – see point 5 below), Allure Clinic undertakes to ensure the processing of personal data to the extent and for the time necessary to pursue its purposes.

In view of the above, Allure Clinic clarifies that it does not request, nor encourage, on its website, the submission and sending of personal data relating to philosophical or political beliefs, party or union affiliation, religious faith, private life and racial or ethnic origin.

Any data relating to health and sexual life, including genetic data, should not be sent through the Allure Clinic Website.

Therefore, if personal data of this type is transmitted to Allure Clinic, it cannot be held responsible for its processing under the Privacy Policy.

4. Retention of Personal Data

The period of time during which personal data is stored and retained will vary depending on the purposes mentioned above.

In this sense, it is important to clarify that personal data relating to contacts that do not have any subsequent follow-up by either Allure Clinic or the patient will be kept for a period of 1 (one) year, after which Allure Clinic will proceed with their deletion, if this is not requested earlier by the data subject.

Personal data relating to contacts that have subsequent follow-up will be kept for the period necessary to fulfill contractual obligations, as well as all applicable legal obligations.

Personal data whose purpose is to send information regarding new products and/or services, as well as newsletters and/or e-books, will be kept for a period of 5 years, after which a new consent request will be sent, under penalty of the data being deleted.

5. Right of access, rectification, erasure, restriction of processing and right to portability of Personal Data

The user is guaranteed, at any time, the right to access their personal data, as well as their rectification, deletion, portability, limitation and/or opposition to processing – in this sense, you may exercise any of these rights by contacting Allure Clinic in writing, through the address of the head office or through the following electronic address geral@allureclinic.pt.

6. Security in the Processing of Personal Data

Personal data will be processed and stored electronically and on paper.

All personal data collected by Allure Clinic is stored on servers and databases where various security measures of a technical and organizational nature have been implemented, namely, restricting access to stored data to employees specifically authorized for that purpose.

Allure Clinic informs that the aforementioned security measures are reviewed and updated according to the needs and requirements of these matters.

If, for any reason, a security breach occurs that causes, accidentally or unlawfully, the destruction, loss, alteration, disclosure or unauthorized access to personal data, Allure Clinic undertakes, in accordance with applicable legislation, to communicate with the competent authorities without undue delay and, whenever possible, within 72 hours of becoming aware of such occurrence.

Additionally, and under the terms referred to in the immediately preceding paragraph, Allure Clinic undertakes to communicate the breach of personal data to the respective data subject, in accordance with applicable legislation.

Notwithstanding the security measures adopted by Allure Clinic, it is important to highlight and warn that users should also adopt additional security measures, namely, ensuring the existence of an active firewall, updated antivirus and anti-spyware.

7. Communication of Personal Data to Third Parties

As part of its activity, Allure Clinic may use third parties to provide certain services, which may, in some situations, involve access by such entities to users' personal data.

In such a scenario, Allure Clinic undertakes to take the necessary and appropriate measures to ensure that the entities that have access to such personal data are reputable and offer high guarantees at this level, which will be duly enshrined and safeguarded in a contract to be signed, in writing, between Allure Clinic and the third party(ies).

In fact, any entity subcontracted by Allure Clinic will process users' personal data, on its behalf and on its behalf, with the commitment to adopt the necessary technical and organizational measures to protect personal data against accidental or unlawful destruction, accidental loss, alteration, dissemination or unauthorized access and against any other form of unlawful processing.

In any case, Allure Clinic remains responsible for the processing of personal data.

8. Right to be Forgotten

The holder of personal data has the right to obtain, from the controller responsible for its processing, the deletion of his/her personal data, which, in turn, will be obliged to delete them, whenever one of the following reasons applies: (i) the data are no longer necessary for the purpose that motivated their collection or processing; (ii) the holder withdraws consent, when consent is the legal basis or the holder objects to the processing and there are no prevailing legitimate interests that justify their maintenance.

This does not compromise the lawfulness of the processing carried out based on the consent previously given.

9. Right to file a complaint

The data subject always has the right to file a complaint they deem appropriate with the supervisory authority of the country where the data is processed. In Portugal, the supervisory authority is the National Data Protection Commission.

10. Access to third-party websites

The privacy policy does not apply to third-party websites. In this case, whenever you visit another website from this one, you should always read the applicable privacy policy and confirm that you agree with its terms before providing your personal data.

Allure Clinic is not responsible for the applicable privacy policy or for the content made available on third-party websites.

11. Children's Privacy Protection

Allure Clinic recognizes the importance of protecting children's privacy in the interactive online world. The website covered by this privacy policy is not designed for, or intentionally targeted at, children under 16. It is not our policy to intentionally collect or maintain information about anyone under the age of 16.

12. Changes to the Privacy Policy

Allure Clinic reserves the right to, at any time, make adjustments or changes to this privacy policy, and such changes will be duly published on this website.