Privacy Policy
Who we are
Our website address is https://clinicasjtalha.pt.
The data controller responsible for processing personal data is Clinica Dentária São João da Talha, Unipessoal Lda, with its registered office at Rua de Alcobaça nº13 e 41, Edifício Leiria Plaza, Loja AO, 2400-086 Leiria, NIPC PT503359670, which can be contacted via info@clinicasjtalha.pt.
Data Protection Officer
You may contact our Data Protection Officer (DPO) by email at dpo@clinicasjtalha.pt for any question relating to the processing of your personal data.
What data we collect and for what purpose
Contact and appointment forms
When you complete forms on the website, we collect your name, email, telephone number and message. This data is used solely to reply to your enquiry or to book an appointment. The legal basis is your consent (Article 6(1)(a) of the GDPR) or pre-contractual steps (point (b)).
Comments
When you leave comments on the website, the data in the comment form, your IP address and your browser user agent string are stored to help detect spam. An anonymous string (hash) created from your email address may be sent to the Gravatar service for verification. See the Gravatar privacy policy.
Browsing data
We automatically collect technical data such as IP address, browser type, operating system and pages visited, for security purposes and aggregated statistical analysis.
Cookies
We use cookies to improve your experience on the website. You can set your preferences at any time through the cookie banner or in your browser settings.
Comment cookies
If you leave a comment, you may choose to save your name, email and website in cookies, for your convenience. These cookies will last for one year.
Login cookies
When you log in, cookies are set to save your login information and display preferences. Login cookies last for one year. If you select “Remember me”, your login persists for two weeks.
Editing cookies
If you edit or publish content, an additional cookie containing the content ID is saved. It includes no personal data and expires after one day.
Embedded content from other websites
Articles may include embedded content (videos, images, posts) that behaves exactly as if the user had visited those websites directly. These sites may collect data about you, use cookies, embed third-party tracking and monitor your interactions, including if you are logged in to those sites.
Clinical data
Health data collected in the context of providing clinical care is processed on the basis of explicit consent or the performance of a contract for the provision of care, and is managed as part of the clinical record in accordance with the applicable legislation (Law no. 12/2005, Law no. 26/2016 and the regulations of the Portuguese Dental Association (Ordem dos Médicos Dentistas)). The clinical record is kept for the period required by law.
This policy concerns the processing of data through the website. For information on the processing of clinical data, specific documentation is provided at the time of your first appointment.
Who we share your data with
Your personal data is neither sold nor disclosed to third parties for commercial purposes. We may share it with:
- Technical processors (hosting, email, management tools), bound by a data processing agreement under Article 28 of the GDPR;
- Public authorities, where legally required;
- Insurance companies and paying entities, where applicable and with your consent.
If you request a password reset, your IP address is included in the reset email.
International transfers
Some of our processors may be based outside the European Economic Area. In such cases, we ensure appropriate safeguards under Chapter V of the GDPR, namely standard contractual clauses approved by the European Commission.
How long we keep your data
- Comments: indefinitely, so that we can automatically recognise and approve any later comments.
- User account: for as long as the account is active. You may request its deletion at any time.
- Contact forms: up to 1 year after the last interaction, unless a clinical relationship is started.
- Clinical data: in accordance with the legal retention periods applicable to the clinical record.
Your rights
Under the GDPR, you have the following rights in relation to your personal data:
- Right of access, rectification and erasure;
- Right to restriction of and objection to processing;
- Right to data portability;
- Right to withdraw consent at any time;
- Right to lodge a complaint with the supervisory authority (CNPD — www.cnpd.pt).
To exercise any of these rights, please contact us via dpo@clinicasjtalha.pt.
Security
We implement appropriate technical and organisational measures to protect your data, including encryption in transit (HTTPS), access controls, regular backups and periodic audits.
Spam detection
Visitor comments may be checked through an automated spam detection service.
Changes to this policy
This policy may be updated periodically. Whenever material changes are made, a notice will be published on the website and the update date will be revised at the top of this document.