IMP | Website privacy policy
Privacy
WE ARE COMMITTED TO PROTECTING THE PRIVACY AND PERSONAL DATA OF CUSTOMERS AND USERS OF THE IMP PLATFORM. Therefore, we have prepared this policy and the practices described herein. In this policy, we explain how your personal data is collected and processed, and we recommend that you read it carefully.
1. IDENTIFICATION OF THE ENTITY RESPONSIBLE FOR DATA PROCESSING
Entity: ISABEL MACEDO PINTO DIAGNOSTICS PORTUGAL, LDA. (hereinafter “IMP”)
Tax ID (NIPC): 504 470 353
Registered Office: Edifício do Bom Sucesso, No. 61, 8th Floor, Room 809, 4150-146 Porto
Email: geral@impdiagnostics.com
2. WHAT IS THIS POLICY ABOUT?
This Privacy Policy explains how we collect and process personal data required for the data subject to:
- Exercise their rights; and
- Submit a report/complaint through the platform provided by IMP,
while describing the practices adopted for this purpose.
3. WHAT IS PERSONAL DATA?
Personal data means any information relating to an individual that identifies them or makes them identifiable, regardless of the nature or format of that information, including sound and image.
An identifiable person is someone who can be identified directly or indirectly, particularly by reference to an identification number or other factors specific to their physical, physiological, psychological, economic, cultural, or social identity.
4. HOW WILL WE USE YOUR PERSONAL DATA?
The personal data processing operations we carry out are essential tools for IMP’s activities and are conducted in accordance with applicable legislation and best practices.
Your personal data will not be reused for purposes other than those previously identified or unrelated to the purposes for which it was originally collected.
5. PURPOSES, LEGAL BASIS, AND DATA RETENTION PERIODS
The personal data we process is based on specific legal grounds depending on the intended purpose and will be retained only for as long as necessary for those purposes.
Collected personal data is limited to what is necessary and appropriate.
Examples:
- Data Subject Rights Form
- Legal Basis: Compliance with a legal obligation
- Data Collected: Name, Email, Message
- Retention Period: One month for response, extendable by up to two additional months. Data may be retained longer for proof of rights exercised.
- Reporting/Complaint Form
- Legal Basis: Compliance with a legal obligation
- Data Collected: Name, Email, Telephone Number, Description
- Retention Period: 5 years, without prejudice to longer retention if legal or administrative proceedings are ongoing.
- IMP Platform Management
- Legal Basis: Consent (cookies)
- Data Collected: IP Address, Cookies
- Retention Period: See Cookie Policy
- Fraud Prevention and Information Security
- Legal Basis: Legal obligation where applicable
- Data Collected: IP Address, Cookies
- Retention Period: See Cookie Policy
Where a specific legal retention period exists, that period will apply. Otherwise, personal data will be retained only for the periods considered necessary by IMP.
At the end of the retention period, all collected personal data will be deleted.
6. HOW DO WE COLLECT YOUR PERSONAL DATA?
We collect your personal data through forms available on the IMP platform, through the platform itself and its interaction with your device, and through emails you send us.
Data may be collected through:
- Your browser
- Cookies
- Pixel tags and similar technologies
- IP address
- User account information
IMP undertakes to process your data lawfully and legitimately.
IMP will not sell, rent, or share your personal data with third parties except in cases specifically identified in this Privacy Policy.
7. WHAT ARE COOKIES?
Cookies are small information files that help identify your browser and may store information such as user settings and preferences.
IMP stores cookies on your device to personalize and simplify browsing, solve problems, compile statistics, ensure quality, and monitor system security.
Except for cookies strictly necessary for platform functionality, storing cookies always depends on the user’s consent, which may be withdrawn at any time through browser tools.
Further details are available in our Cookie Policy.
8. HOW WE PROTECT YOUR PERSONAL DATA
Your personal data is kept secure through various technical and organizational measures ensuring access only to employees who require it.
To protect your personal data, we use data center providers that offer appropriate documented security measures and controlled environments with restricted access.
Personal data is stored on secure servers and protected against disclosure, loss, misuse, alteration, unauthorized processing, or unlawful access.
IMP also protects data during platform use through encryption technologies such as Transport Layer Security (TLS).
Although we take precautions we consider appropriate, no security system is entirely impenetrable.
9. YOUR RIGHTS
Under applicable legislation, you have the following rights:
- Right of Access
- Right to Rectification
- Right to Erasure
- Right to Restrict Processing
- Right to Object
- Right to Data Portability
You also have the right to lodge a complaint with the competent supervisory authority. In Portugal, this is the Comissão Nacional de Proteção de Dados (CNPD).
10. HOW CAN YOU EXERCISE YOUR RIGHTS?
You may exercise your rights through the IMP platform.
If you request deletion of some or all personal data, some services may no longer be available, and IMP may retain only the information necessary to comply with legal obligations.
11. WHEN DO WE SHARE DATA WITH THIRD PARTIES?
IMP may use third parties for maintenance and technical support services, who may have access to some personal data necessary for those services.
IMP ensures such entities are trustworthy and provide high levels of data protection.
Your data may also be shared:
- With companies within IMP’s corporate group
- With authorized business partners
- To comply with legal obligations
- In response to judicial or governmental requests
- With third-party doctors when required by pathology legislation
12. THIRD-PARTY WEBSITES
The IMP platform may contain links to third-party websites which may collect and process your personal data independently.
Examples include Facebook, YouTube, and LinkedIn buttons on the IMP platform.
13. TRANSFERS OF DATA OUTSIDE THE EUROPEAN UNION
Your data will be processed within the European Economic Area (EEA).
14. MINORS
The IMP platform is not intended for individuals under 18 years of age.
If under 18, rights may only be exercised through a legal representative.
15. SENSITIVE PERSONAL DATA
IMP requests that you do not send sensitive personal data, such as:
- Racial or ethnic origin
- Political opinions
- Religious or philosophical beliefs
- Trade union membership
- Genetic data
- Biometric information
- Information concerning sexual life or orientation
Such information will be deleted if received.
Health data submitted in connection with exercising legal rights will only be processed for that specific purpose.
16. CHANGES TO THE PRIVACY POLICY
IMP reserves the right to revise or modify this Privacy Policy at any time. Any changes will be publicly communicated.
17. CONTACT DETAILS
For questions regarding this Privacy Policy, contact IMP in writing using the details in Section 1.
You may also contact the Data Protection Officer, Ms. Dulce Dinis Ferreira, via email: dpo@impdiagnostics.com.