IMP | Website privacy policy
Privacy
WE ARE COMMITTED TO PROTECTING THE PRIVACY AND PERSONAL DATA OF CLIENTS AND USERS OF THE IMP PLATFORM, AND THEREFORE WE HAVE PREPARED THIS POLICY AND THE PRACTICES DESCRIBED HEREIN. IN THIS POLICY, WE EXPLAIN HOW YOUR PERSONAL DATA IS COLLECTED AND PROCESSED, AND WE ADVISE YOU TO READ IT CAREFULLY.
1. IDENTIFICATION OF THE ENTITY RESPONSIBLE FOR DATA PROCESSING
Entity: ISABEL MACEDO PINTO DIAGNOSTICS PORTUGAL, LDA. (hereinafter, “IMP”) | NIPC: 504 470 353 | Headquarters: Edifício do Bom Sucesso, nº 61, 8.º andar, sala 809, 4150-146 Porto
Email: geral@impdiagnostics.com
2. WHAT IS THIS POLICY ABOUT?
This Privacy Policy explains how we collect and process the personal data necessary for the data subject to:
- exercise their rights, and
- submit a complaint through the platform made available by IMP, describing the practices adopted for this purpose.
3. WHAT IS PERSONAL DATA?
Personal data is any information relating to an individual that identifies them or makes them identifiable, regardless of the nature or medium of the information, including sound and image.
A person is identifiable when they can be identified, directly or indirectly, in particular by reference to an identification number or to specific elements of their physical, physiological, psychological, economic, cultural, or social identity.
4. HOW WILL WE USE YOUR PERSONAL DATA?
Personal data processing operations are essential tools for IMP’s activity and are carried out in accordance with applicable law and best practices.
Your personal data will not be reused for purposes other than those previously identified or that are incompatible with the purposes for which they were originally collected.
5. PURPOSES, LEGAL GROUNDS AND RETENTION PERIODS
The personal data we process has specific legal grounds depending on the purposes for which it is used, and will be retained for as long as necessary to fulfil those purposes, as outlined in this Privacy Policy.
We only collect the personal data that is necessary and adequate for the purposes described.
Below is a table with the purposes of processing, data collected, legal basis, and retention periods:
| PURPOSE | LEGAL BASIS | DATA COLLECTED | RETENTION PERIOD |
|---|---|---|---|
| Form for exercising data subject rights | Compliance with a legal obligation | Name, Email, Message | One month for response, extendable by two months. May be retained longer for proof of rights exercised. |
| Form for submitting a “complaint” | Compliance with a legal obligation | Name, Email, Phone, Description | 5 years, without prejudice to longer retention due to ongoing judicial or administrative proceedings. |
| Platform management operations (cookies) | Consent (cookies) | IP address, cookies | See Cookie Policy. |
| Fraud prevention and information system security | Compliance with a legal obligation, when applicable | IP address, cookies | See Cookie Policy. |
If a specific legal retention period exists, that period will prevail. In all other cases, data will be retained for the periods indicated above, deemed sufficient for the respective purposes.
At the end of the retention period, all personal data collected will be deleted.
6. HOW DO WE COLLECT YOUR PERSONAL DATA?
We collect your personal data through the forms on the IMP platform, as well as through the platform itself and its communication with your device, and through the emails you send us.
Your personal data is collected from your device in the following ways:
- Through your browser
- Through cookies
- Through pixel tags and similar technologies
- IP Address
- Through your User data
IMP undertakes to process your data lawfully and legitimately.
IMP will not sell, rent, or share your personal data with third parties except in the specific cases identified in this Privacy Policy (see Section 11).
7. WHAT ARE COOKIES?
Cookies are small information files that help identify your browser and may store information such as user settings and preferences.
IMP will store cookies on your device to personalise and facilitate navigation and also for troubleshooting, statistics, quality assurance, and security monitoring.
Except for cookies strictly necessary for the platform’s performance, the storage of other cookies always depends on user consent, which may be withdrawn at any time through browser tools.
See our Cookie Policy for more information.
8. HOW DO WE PROTECT YOUR PERSONAL DATA?
Your personal data is kept secure through technical and organisational security measures that ensure that only authorised employees, according to the need-to-access principle, can access your data.
We only use data centre providers that offer adequate and documented security measures, specifically ensuring that your data is stored on servers maintained in controlled environments with restricted access.
Personal data is stored on secure servers with [CORPORATE NAME] (hereinafter, “[COMPANY 2]”), with NIPC [NNN.NNN.NNN] and headquarters at [ADDRESS], which provides adequate security guarantees for protecting data against disclosure, loss, misuse, alteration, unauthorised access, or any other unlawful processing.
When you browse the IMP platform, we also protect your data with encryption technologies such as Transport Layer Security (TLS).
Although we take all measures we deem appropriate to protect the personal data you provide or that we collect, no security system is impenetrable.
9. YOUR RIGHTS
You have the following rights under the law:
- Access: to confirm whether your personal data is processed and, if so, to access it.
- Rectification: to correct inaccurate or incomplete data.
- Erasure: to delete your data in cases provided by law, such as:
- Data no longer needed for original purpose
- Withdrawal of consent without other legal basis
- Legitimate objection
- Unlawful processing
- Compliance with a legal obligation
- Data collected in relation to information society services
- Restriction of processing: when:
- You contest data accuracy
- Processing is unlawful and you oppose deletion
- Data is needed for legal claims
- You objected to automated decision-making
- Objection: to processing at any time
- Portability: to receive your data in a structured, commonly used, machine-readable format and to transmit it to another controller.
- Complaint: to the supervisory authority (in Portugal: CNPD at www.cnpd.pt).
10. HOW TO EXERCISE YOUR RIGHTS
Through the IMP platform.
If you request deletion of some or all of your personal data, some services may no longer be provided. IMP will retain only what is necessary to comply with legal obligations.
11. WHEN DO WE SHARE DATA WITH THIRD PARTIES?
IMP may use third parties for specific services (maintenance, technical support), which may require access to some personal data, limited to what is necessary.
IMP ensures these entities are trustworthy and provide high levels of protection, and IMP remains responsible for your data.
For example, for data centre management, [COMPANY] uses the services of [COMPANY 2].
IMP may also share your data with:
- Companies within the IMP corporate group or business partners for the relevant purposes
- Other partners outside the group (with your prior authorization)
IMP may also transfer data to third parties as part of investigations, inquiries, judicial or administrative proceedings, if ordered by a court.
12. THIRD-PARTY WEBSITES
The IMP platform may contain links to third-party websites that may collect and process your personal data. IMP is not responsible for their policies or practices.
Examples include Facebook, YouTube, and LinkedIn through buttons on the IMP platform.
13. DATA TRANSFERS OUTSIDE THE EUROPEAN UNION
Your data will be processed within the European Economic Area.
14. MINORS
The IMP platform is not intended for minors under 18. They should not provide personal data.
If the user is under 18, they may only exercise rights through their legal guardian.
15. SENSITIVE PERSONAL DATA
IMP requests that you do not provide any sensitive personal data (racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, genetic data, biometric data, sexual life or orientation). Such data will be deleted.
If you provide health-related data when exercising your rights, IMP will process it only for that purpose.
16. CHANGES TO THE PRIVACY POLICY
IMP reserves the right to amend this Privacy Policy at any time; such changes will be disclosed.
17. CONTACT DETAILS
For questions about this Privacy Policy, contact us using the details in Section 1.
You may also contact our Data Protection Officer, Dr. Dulce Dinis Ferreira, at:
dpo@impdiagnostics.com
18. LATEST VERSION
8 December, Porto, Portugal.