top of page

Privacy and Personal Data Protection Policy

Jb, Ortotraumatologia e Dano Corporal, Unipessoal Lda., with NIPC 515372951, is committed to complying with the General Data Protection Regulation, hereinafter referred to as GDPR, as well as, in this regard, the provisions of the Constitution of the Portuguese Republic (CRP), the Data Protection Law (LPD), and other specific legislation on the protection of personal data, ensuring the safeguarding of personal data and strengthening the relationship of trust with the client.

​

This Privacy and Personal Data Protection Policy is intended to provide information regarding the data collected, its purpose, and the corresponding processing carried out.

​

If you have any questions regarding the processing of your personal data, please contact us at: geral@drjaimebabulal.pt

By providing your personal data to Jb, Ortotraumatologia e Dano Corporal, Unipessoal Lda., the data subject authorizes the processing of such data in accordance with this Privacy and Personal Data Protection Policy.

Data controller

Jb, Ortotraumatologia e Dano Corporal, Unipessoal Lda., with NIPC 515372951, headquartered at Rua das Andrezas, No. 425, 5 3, 4100-053 Porto, is the entity responsible for the processing of the collected data.

What is personal data?

Under the GDPR, personal data is considered to be any information relating to an identified or identifiable natural person (data subject). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier (IP address, cookies) or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Personal data collected

 Jb, Ortotraumatologia e Dano Corporal, Unipessoal Lda., collects different categories of data:

  • Data that identifies you, such as your name, gender, date of birth, tax identification number, social security identification number, health user number, citizen card number and its expiration date or image;

  • Communication data, which includes, for example, telephone number, email address and address (city, postal code, country, district, municipality, parish);

  • Private life data, such as profession and professional status, family doctor, spouse's name, father's name, mother's name (for example in the case of a minor), data related to insurance or health subsystem;

  • Data about third parties who are authorized to make decisions on your behalf, or who must be contacted in an emergency;

  • Information about health data and health care you have received or will receive;

  • Payment related data.

How is your data collected?

  • When you contact us;

  • When you establish a relationship with us in the context of the provision of a service;

  • When you post comments or images on our social media pages; or

  • When, in any way, you send us personal information.

Purposes of collection and legal bases

The collection of personal data is intended for the execution of contracts entered into with customers for the provision of healthcare and services, prevention or preparation of diagnoses and/or provision of healthcare treatments, management of administrative services, namely for scheduling or rescheduling consultations and treatments, billing, accounting and auditing, marketing communications and other commercial communications, quality control, statistical studies, to better understand customer preferences, as well as for contact purposes.

The collection of your personal data is based on the law, pre-contractual and contractual relationships, payment management, customer support, compliance with legal obligations, consent of the data subject and legitimate interests.

We may also process your data, with your consent, to carry out teleconsultations, publish photographs or videos for the purpose of internal and external dissemination of our activity, for example on social networks, as well as for marketing purposes or sending newsletters.

Personal data related to your health will only be processed by professionals bound to confidentiality and to the extent necessary.

Time and method of retention of personal data

We process and store your personal data only for the period necessary to achieve the respective purposes, to respond to your needs, your requests or to comply with legal obligations, which vary depending on the data category.

We may also retain some of your personal data to the extent necessary to administer or enforce our rights, in particular through recourse to legal means.

In cases where the customer has given their consent to the processing of their personal data, we retain them in accordance with the consent given or until that consent is revoked.

Who do we share your data with?

We may use other companies to provide certain services, and we may also transmit data and information about data subjects to third-party companies, such as accounting and IT companies, competent authorities, legal service providers, consultants and others. We hereby guarantee that, in such situations, these third parties will have limited access to data subjects’ information, restricted solely to that necessary for the execution of the contracted tasks and that they are subject to the same guarantees of confidentiality. Likewise, we may communicate your personal data, when so determined by law, within the scope of legal proceedings or within the scope of investigations into suspicious activities.

Security Measures

We have developed mechanisms and implemented appropriate technical and organizational measures to maintain the confidentiality and privacy of your personal information, taking into account that the information collected includes sensitive data under the GDPR. These measures ensure an adequate level of security relative to the risks and protect personal data against destruction, loss, alteration, unauthorized disclosure, or accidental or unlawful access. To this end, we have implemented various safeguards such as restricted access to medical records (whether physical or digital), the use of strong passwords, and up-to-date antivirus software. Moreover, any staff member of Jb, Ortotraumatologia e Dano Corporal who has access to your personal data is bound by a duty of secrecy and confidentiality.

Data Subject Rights

In accordance with the GDPR, Data Subjects may, at any time, exercise their right to information, obtain access, rectify, delete and transfer their personal data, as well as to limit and oppose the processing of their personal data, including the revocation of consent. To do so, they should contact us via email geral@drjaimebabulal.pt.

Understand your rights:

  1. Right to information: you have the right to obtain clear, transparent and understandable information about how we use your personal data.

  2. Right of access: you may access your personal data that we process and store. In these cases, we will provide you with information about the personal data that is being processed. Please note, however, that the right of access is not unlimited and must be in line with data protection legislation (and may therefore be rejected when, for example, access may harm the rights and freedoms of third parties) and health law legislation (for example, in cases where it is clearly demonstrated that access to information may be harmful to the patient, the requested information may not be provided - therapeutic privilege). Access may be granted through a doctor if you so request.

  3. Right to rectification: you have the right to rectify your personal data without undue delay, provided that the data subject has made it available, if it is incorrect, out of date or if you wish to complete it.

  4. Right to erasure/right to be forgotten: the data subject may request that we delete their data. However, please note that this is not an absolute right, as we may have legal grounds, such as legally required retention periods, or legitimate interests for retaining your personal data.

  5. Right to object: you may object to the processing of your data for reasons relating to your particular situation. This may occur in relation to processing for scientific, statistical or historical research purposes, unless the processing is necessary for reasons of public interest.

  6. Right to withdraw your consent to data processing at any time: you may withdraw your consent to data processing when such processing is based on your consent. Please note that the right to withdraw consent does not affect the lawfulness of processing based on consent given prior to its withdrawal.

  7. Right to data portability: The data subject has the right to receive the personal data concerning him/her which he/she has provided to a controller, in a structured, commonly used and machine-readable format and the right to transmit those data to another controller.

  8. Right to restriction of processing: you have the right to request restriction of the processing of your data if you contest the accuracy of the data, if the processing is unlawful and you do not want your data to be deleted but only restricted, if the data is no longer considered necessary or if you have exercised the right to object referred to above.

 

These rights, like any others, must be exercised reasonably and in good faith by their holder.

Final notes

  • By using our services, you agree to our Privacy and Data Protection Policy.

  • The data subject guarantees that the personal data provided is accurate and up to date, and undertakes to notify us of any changes or modifications. The data subject is solely responsible for any losses or damages caused by the incorrect, inaccurate, or incomplete communication of their personal data.

  • Please note that when providing personal information online, there is a risk that third parties may intercept and use that information. For your privacy, we strongly advise against including sensitive or confidential personal data via our website or in emails sent to us. Any data breaches or resulting damage will be the sole responsibility of the data subject.

  • It is also the responsibility of users of our social media platforms to ensure that their devices and equipment are adequately protected against malicious software, viruses, and worms. We recommend keeping your browser, operating system, and antivirus software up to date.

  • If you wish to contact us for information about your rights or have any questions regarding how we use your information, please contact us via email at geral@drjaimebabulal.pt . If you remain unsatisfied, you may contact the Portuguese Data Protection Authority (National Data Protection Commission). Their contact details can be found at www.cnpd.pt.

bottom of page