PRIVACY POLICY
The HPA Health Group is a business group dedicated to the provision of health care and well-being and which, within the scope of its activity, processes the personal data of its patients.
The HPA Health Group and the Units that incorporate it (collectively referred to as “HPA Group”, “Company” or “We”) guarantee respect for the privacy of their patients and take the necessary measures to protect their personal data.
This Privacy Policy regulates the processing of patients personal data (hereinafter “User” or “Users”), collected by when using Hospital Particular do Algarve, S.A. (“HPA”), Website (hereinafter “Site”), the entity responsible for the treatment thereof.
This Privacy Policy is supplemented by the Terms of Use in this Website (available here) and the Cookies Policy (available here). This Privacy Policy regulates the collection and processing of personal data provided by Users when using this website, as well as when exercising their rights in relation to this data, under the terms applicable to personal data protection legislation.
Personal data availability implies knowledge and acceptance of the conditions contained in this Privacy Policy. When personal data is made available to a third party, the User guarantees that he has informed that holder on the conditions set out in this Policy and that he has obtained authorization to provide his personal data to the HPA Group for the purposes indicated herein.
Collection and Processing of Personal Data
Purpose
-
Opening of Personal File
(all are mandatory) -
Spontaneous application for specific vacancy
(all are mandatory, except those marked as optional) -
Application for CareCard
(all are mandatory) -
Subscribing for Newsletter
(only Email address is mandatory)
Collected Data
- Type of consultation and Unit
- Insurance or Health system
- Health Professional - Preference Name, Mobile/Telephone number, Date of birth, Email address
- Name, Email address, Telephone, Gender, Date of Birth, Residential Area and Nationality, Education Level and Professional Experience (optional), Unit you are applying for, Curriculum Vitae (optional), Applying for which Vacancy, Languages and Qualifications (optional)
- Name, Email address, Date of birth, Gender, Address and postal code, Tax number, Mobile phone, Family Members identification (when applicable)
- Email Address, Name, Gender, Date of Birth, Residential Area, Area of interest, Profession
Legal Basis
- pre-contractual steps, openintg a file at the request of the holder of the data, legitimate interests or compliance with legal obligations to which the HPA Group and its units are subject
- pre-contractual steps or opening file at the request or consent of the holder of the data
- pre-contractual steps or opening file at the request of the holder of the data
- consent
The User guarantees to be of legal age and that the data provided is true, accurate, complete and current, and confirms responsibility for any non-compliance. The HPA assumes that the data collected was entered by the respective file holder or that its contents were authorized by the same.
When the data provided consists of medical information, the HPA Health Group guarantees that it will only proceed with the treatment thereof to respond to the request made by the User, based on the need for medical treatment for the purpose of providing health care or treatment.
Data retention
Personal data will be kept in strict compliance with current legislation and for the period strictly necessary for the pursuit of each of the purposes indicated above, unless a longer period is declared by current legislation or from the need of the HPA Health Group and its units, to exercise judicial rights.
Security measures
The HPA uses its best efforts to protect Users' personal data from unauthorized access. For this purpose, it uses security systems, rules and other procedures, in order to guarantee the protection of personal data, as well as to prevent unauthorized access to data, improper use, disclosure, loss or destruction.
It is, however, the Users' responsibility to guarantee and ensure that the devices and equipment used to access our Site are adequately protected against harmful software, computer viruses and bugs.
User Rights
Users may, at any time and free of charge, exercise, in accordance with the law, the right of access, rectify, erase, oppose, limit the processing and portability of their data. Users may also withdraw their consent, when this is the basis for the legality of the treatment, knowing however, that this does not affect the treatment previously carried out based on the consent provided.
- Right to access: the right to obtain confirmation of personal data and to obtain a copy of personal data being processed.
- Right to rectify: the right to request rectification of personal data that is inaccurate or incomplete.
- Right to erase: the right to erase personal data.
- Right to limit treatment of data: the right to request a limit to the treatment of personal data, by suspending or limiting the scope of treatment or purpose of certain data.
- Right to transfer: the right to receive the data they have provided in a current automatic digital reading format or to request the direct transmission of data to another entity who then becomes the new person responsible for the said personal data, when based on consent or by contract.
- Right to object: the right to object to data processing
The User may, at any time, exercise the rights described above by written request addressed to HPA Health Group, by email to: dpo@grupohpa.com or by post to: Sítio Cruz da Bota, Lote 27, Estrada de Alvor, 8500-322 Portimão, Portugal (For this purpose, the HPA Health Group may request proof of identification from the User that may be strictly necessary to exercise its right.
The User also has the right to file a complaint with the National Data Protection Commission or another competent supervisory authority, if he considers that the processing of his personal data is unlawful.
Data Sharing
We may share your personal data with subcontracted entities for the aforementioned purposes, under the terms of the contracts entered into with them, ensuring compliance with subcontracting obligations under current legislation, namely with regards to security in the processing of your data.
We may also divulge personal data to third parties provided that we have unequivocally obtained the consent of the Users for this purpose , or when the transmission is carried out to comply with a legal obligation, a decision of the National Data Protection Commission or a court order; or when data sharing is carried out to protect the Users' vital interests or any other legitimate purpose provided for by law.
There will also be data sharing between the various Units of the HPA Health Group, to enable us to respond to requests made through our Site. For example, if the message relates to the services provided by one of the Health Units, the request will be forwarded to the Unit in question, for answers to User’s queries.
Interacting with social networks
Through our Site, the User can access social media pages of the HPA Health Group, namely: Facebook and LinkedIn. The HPA Health Group cannot be held responsible for the processing of personal data carried out by these platforms following access to these pages. Therefore, the User must carefully read the Terms and Conditions and Privacy Policies of these platforms before gaining access.
The User can find additional relevant information on the use of cookies or other tracking technologies to support the functionality of accessing our pages in our Cookies Policy (here).
Transfer of data to another country
The HPA Health Group will seek to ensure that the processing of personal data takes place entirely within countries of the European Union.
Exceptionally and when necessary, the HPA Health Group may transfer personal data to third countries or international organizations for which there is an adequate acceptance from the European Commission or subject to the appropriate safeguards provided for by law (e.g. adoption of standard data protection contractual clauses adopted by the European Commission). When transferring data to third countries or international organizations on the basis of adequate safeguards, the HPA Health Group will take additional measures to ensure that personal data enjoys a level of protection essentially equivalent to that existing in the European Union.
Links to third party websites
The links contained on this Site may lead to websites managed by third parties. We are not responsible for, approve of or in any way support or subscribe to the content of these sites, or the sites linked to or referred to in them.
This Policy is only applicable to information collected from our Site.
Contacts
The User may contact us on all matters related to the processing of personal data and to exercise the right conferred to them, by current legislation and, in particular, referred to in this Policy, through the following contacts:
E-mail: dpo@grupohpa.com
Address: Sítio Cruz da Bota, Lote 27, Estrada de Alvor, 8500-322, em Portimão, Portugal
Changes to the Privacy Policy
INFORMATION ON PROCESSING OF PERSONAL DATA FOR SUBSCRIPTION OF THE NEWSLETTER
The data collected on this form will be processed by Hospital Particular do Algarve S.A. (“HPA”), the entity responsible for the treatment thereof.
The information provided will be used, with your consent, solely for the purpose of disclosing useful information on the services and activities of the HPA and its network of Hospitals and associated Clinics, through the newsletter.
Your data will be kept for as long as you are interested in receiving our newsletter. Under the terms of the current legislation, you may, at any time, request access to your personal data, as well as its rectification, elimination or limitation of its use, the portability of your data or oppose its treatment, by e-mail addressed to dpo@grupohpa.com or by letter addressed to Hospital Particular do Algarve, SA, Sitio Cruz da Bota Lote 27, Estrada de Alvor, 8500-322, in Portimão. You may also withdraw your consent for processing of your personal data for the said purposes, which will not however, annul the processing of data carried out until such date, based on the consent previously given. Consent can be withdrawn on the section “I want to stop receiving this information”, which appears on the actual communications received, or by email addressed to dpo@grupohpa.com.
Without jeopardizing any other administrative or judicial means, you have the legal right to file a complaint with the National Data Protection Commission or with another competent supervisory authority, if you believe that at any time, the processing of your data by the HPA, violates the legislation currently in force.
For additional information, see the Privacy Policy.
Processing of personal data for recruitment purposes
The information collected in this form will be processed by Hospital Particular do Algarve, S.A. (“HPA”), as the part responsible for data treatment. The information provided, which is necessary for pre-contractual procedures and will be processed by the HPA for the purpose of recruitment and consideration of the possible collaboration of the applicant with the HPA, in relation to the vacancy(s) and/or unit( s) to which he applied.
For recruitment purposes, applicants’ personal data will be kept for 1 year after the conclusion of the recruitment or for the time legally necessary according to the required purpose of the application. Once consent is giver, the information collected may be kept for 2 years so that the applicant can be contacted for other vacancies that may be considered similar. Longer retention periods may apply where legally required.
Failure to provide information which is regarded to be mandatory, renders the application null and void for a possible position or collaboration of the applicant with the HPA.
Under the terms of current legislation, the applicant may at any time, request access to his personal data, as well as its rectification, elimination or processing limitation, its portability or transfer, or oppose its processing, by e-mail to dpo@grupohpa.com. The applicant may also, through the same channel, withdraw his consent for data processing for the said purposes. Legally the applicant has the right to withdraw his consent at any time, which does not, however, invalidate the processing of data carried out until such date based on the consent previously given.
Without prejudice to any other administrative or judicial means, the applicant has the right to file a complaint with the National Data Protection Commission or any other competent supervisory authority under the law, if he believes that the processing of his personal data by the HPA violates current legislation at any given time.
For further information, consult Policy on Privacy.