Paula Pinto - Medical Writing & Consulting Privacy and Personal Data Processing Policy
May 26, 2022
Thanking you for your trust in Paula Pinto – Medical Writing & Consulting, the latter intends to inform you, with full transparency and in a simple language, about all the information regarding the treatment of your data, also giving you the opportunity to know all your rights under the legislation in force. This Privacy Policy seeks to describe how, for what purpose, by whom, on what basis and when Paula Pinto – Medical Writing & Consulting collects and processes your personal data.
The protection of your data is of utmost importance to Paula Pinto – Medical Writing & Consulting, which, over time, has sought to equip itself with the most appropriate technical and organizational means to defend its confidentiality. Nevertheless, we ask you, for your information, to carefully read the Privacy Policy below.
Who I Am
Your data will be processed by Paula Pinto – Medical Writing & Consulting (hereinafter referred to as “PPMWC”).
PPMWC will act, under the terms defined in the General Regulation on Data Protection (Regulation (EU) 2016/679 of the Parliament and of the Council of 27.04.2016) (hereinafter only referred to as “RGPD”), as Data Controller, undertaking to fully comply with the legislation in force at all times.
WHAT IS PERSONAL DATA?
Personal data means any information, of whatever nature and whatever its medium, including sound and image, which is capable of identifying a natural person, directly or indirectly, in particular by reference to an identification number or to more specific factors of his or her physical, physiological, mental, genetic, economic, cultural or social identity. Data is considered personal when it allows any person to relate the information to a specific person, even if the person or entity holding such data is not able to establish such a link.
HOW AND WHAT DATA IS COLLECTED
As a rule, personal data is requested when the data subject registers on the website, requests a contact, subscribes to a certain service, registers for an event or establishes a contractual relationship with PPMWC.
In the course of my business, I collect and process personal data in a variety of ways. In addition to collecting personal data that the data subject provides to us directly, I may collect data by recording how he or she interacts with my services, for example by subscribing to newsletters on the website or submitting an information request through the forms on the website.
The data collected by PPMWC are, as the case may be, the following: (i) full name; (ii) email; (iii) cell phone number;
In addition to the above, the provision of personal data (such as full name, email, telephone, nationality, date of birth, place of birth, gender, address, post code, city, tax number, education, whether you are a student or not, work experience, availability of time, position applied for, CV and cover letter) will also be required for the purposes of collaboration with PPMWC.
FOR WHAT PURPOSE AND ON WHAT BASIS I PROCESS YOUR DATA
Under the provisions of the GDPR, the processing of personal data is only lawful if it is based on one of the legal grounds expressly provided for therein. Depending on the purpose for which we process your data, the legal grounds for processing your data may be:
- My legitimate interest, best exemplified above;
- Your consent, e.g. for marketing purposes;
- The execution of a contract;
- Legal ground.
Your personal data is processed only for the purposes communicated to you and will not be used for any other purpose.
The data collected is also necessary for the proper provision of the services contracted and the adequacy of services to the needs and interests of users.
Without prejudice to the provisions of Directive 2002/58/EC of the European Parliament and of the Council of 12 July 2002 (E-Privacy Directive), PPMWC may collect and use your data for marketing purposes, sending you information about services, campaigns or promotions, provided that you have obtained your prior, free, explicit and informed consent. If you consent, you will receive marketing communications via email. You may, at any time, object to this data processing. Your consent is essential for PPMWC to process your personal data for these purposes; however, if you choose not to give your consent, your visit and use of our site will not be affected.
PPMWC will also process your data, for example, where it has a legitimate interest to do so, in particular for: (i) developing and maintaining our website; (ii) fraud prevention and detection; (iii) ensuring network and information security; (iv) event and workshop registration and management.
In addition to the above, personal data, where applicable, will also be processed for the purpose of recruitment. The legal basis for processing this data is a legal obligation and the performance of a contract or pre-contractual steps.
PPMWC assumes that the data collected have been entered by the respective holder and/or that their insertion has been authorized by the same or by the holders of parental responsibilities, and that they are true, current and accurate.
PPMWC does not adopt automated individual decisions, including profiling, that produce effects on its legal sphere or significantly affect it in a similar manner.
HOW WE PROTECT YOUR DATA
Personal data is processed with the legally required level of protection to ensure its security and prevent its alteration, loss, processing or unauthorized access, taking into account the state of technology, requiring PPMWC to its subcontractors equal measures.
To this end, PPMWC uses various security techniques, including encryption and authentication tools, in order to seek to ensure maximum protection, integrity and security of your personal data.
PPMWC submits its security systems and policies to periodic reviews to ensure that your data is safe and secure. However, the transmission of information over the internet is not completely secure, and we cannot guarantee, in an absolute way at least, the security of the information transmitted through our site, existing the risk of being seen and used by unauthorized third parties.
WITH WHOM WE SHARE YOUR DATA
For the purposes of delivering the development of our website or the provision of Email Marketing services, PPMWC will permit trusted third parties with whom it has entered into a data processing agreement to have access to your personal data. PPMWC may also share your information when it uses third parties to provide certain services to you, as such third parties may need access to your personal information. In fact, your personal data will be processed by the following categories of persons in charge of the processing: event and workshop organizers, persons authorized to manage and/or maintain electronic media and data security measures, or persons responsible for the storage and management of consents for the use of personal data.
Any subcontracting entity of PPMWC will process our users’ personal data in the name and on behalf of PPMWC, under the strict obligation to follow our instructions.
PPMWC shall ensure that such subcontracting entities provide sufficient guarantees to perform appropriate technical and organizational measures so that the processing will meet the requirements of applicable law and ensure the security and protection of the rights of data subjects, in accordance with the subcontracting agreement concluded with such subcontracting entities.
PPMWC will not transfer your personal data outside the national territory, nor will it allow its subcontractors to do so.
HOW LONG WE KEEP YOUR PERSONAL DATA
Where there is no specific legal requirement, your personal data will be stored and kept only for the minimum period necessary for the purposes that motivated their collection or their further processing.
Once the maximum storage period is reached, your personal data will be irreversibly anonymized or securely destroyed.
For the marketing purposes referred to in this Privacy Policy, your personal data will be kept up to a maximum period of 12 months from the collection of your consent or the last contact made (whichever occurs last). Such period will apply to the strict extent that, within this period, you have not withdrawn your consent.
All of the above time limits may extend for the duration of any legal proceedings and up to six months after the judgment has become final.
YOUR RIGHTS
PPMWC would also like to inform you that, under the RGPD and as a data subject, you have the following rights:
- Right of access: At any time, you may request confirmation as to whether PPMWC processes your data, access to your personal data and information on the processing thereof. In addition, you may also obtain a copy of the personal data being processed;
- Right to rectification: If your personal data is incorrect or incomplete, you may request that it be rectified or completed;
- Right to erasure: In certain situations, you have the right to request the erasure of your personal data. This right may be limited in certain situations such as when the processing of the data is necessary to comply with legal obligations to which PPMWC is subject, or when such processing is necessary for the establishment, exercise or defense of a right in a legal proceeding;
- Right to data portability: Where the data processing is based on a contract to which you are a party or on your consent, you may request PPMWC to deliver to you the data you have provided in a structured, commonly used and machine-readable format. You may also request PPMWC, provided that this is technically possible, to transmit such data to other controllers.
Subject to certain conditions, you shall also have the right to object, on grounds relating to your particular situation, to the processing of your personal data by PPMWC (provided that the data processing is based on the legitimate interest of PPMWC or when the data processing is carried out for purposes other than, but compatible with, those for which the data were collected) or to request the restriction of the processing.
Should the processing of your personal data depend on your consent, you have the right to withdraw it at any time, without this compromising, however, the lawfulness of the processing carried out until then on the basis of the consent previously given. Please also note that, thereafter, data processing that is not dependent on your consent will not be affected or interrupted by the withdrawal of consent to data processing that is based on such grounds.
To withdraw your consent (for example, to our processing your data for marketing purposes), simply contact us by email at geral@paula-pinto.pt.
PPMWC also informs you that you may exercise your rights of access, rectification, erasure and objection by sending a written communication to the following email address: geral@paula-pinto.pt.
PPMWC promises to be prompt in examining your requests and requests and undertakes to inform you of the measures then taken within a maximum period of one month. Nevertheless, should you consider that we are not taking due care of your rights, you are entitled to lodge a complaint with its supervisory authority, the Comissão Nacional de Proteção de Dados (Rua de São Bento, nº 148, 3º, 1200-821 Lisboa; Phone:+351213928400; Fax:+351213976832; email: geral@cnpd.pt / www.cnpd.pt).
Should you have any questions about this Privacy Policy and Treatment of Personal Data, please do not hesitate to contact us.
YOUR RIGHTS
PPMWC reserves the right to change this Privacy Policy at any time. In case of modification of the Privacy Policy, the date of the last change, available at the top of this page, is also updated.
If the change is substantial, a notice will be posted on the website.
Any disputes arising from the validity, interpretation or execution of the Privacy Policy, or which are related to the collection, treatment or transmission of our clients’ personal data, shall be submitted exclusively to the jurisdiction of the judicial courts of the district of Lisbon, without prejudice to the applicable mandatory legal rules.