Privacy Policy

Who is responsible for your data

The entity responsible for processing your personal data is Sonetti Clinic, with premises at R. Cmte. Carvalho Araújo 1M, 2670-356 Loures, Portugal, registered with the Health Regulatory Authority (Entidade Reguladora da Saúde) under no. 181471.

For any question related to data protection, including exercising your rights, you can contact us by email at sonetticlinic@gmail.com or by phone on +351 920 500 970.

What data we collect

• Identification and contact data — name, date of birth, phone, email and address.
• Health data — medical history, background, medication, allergies, assessment results and records of treatments performed. These are special categories of data under Article 9 of the GDPR and benefit from enhanced protection.
• Clinical images — follow up photographs, where applicable and subject to specific, separate consent.
• Billing data — the data needed to meet tax obligations.
• Browsing data — information collected through cookies and similar technologies when you visit this website.

What we use your data for and on what legal basis

• Provision of healthcare — based on Article 9(2)(h) of the GDPR, which allows the processing of health data for preventive medicine, diagnosis and the provision of care.
• Booking and managing appointments — performance of the service contract, under Article 6(1)(b).
• Billing and tax obligations — compliance with a legal obligation, Article 6(1)(c).
• Marketing communications — only with your prior, freely given consent, which you can withdraw at any time.
• Website statistics and advertising effectiveness: only with your consent, given through the cookie banner, under Article 6(1)(a) of the GDPR.

How long we keep your data

Clinical data is kept for the periods required by law for clinical records. Billing data is kept for the period set by tax law. Data processed on the basis of your consent is deleted when consent is withdrawn or when it is no longer needed for the purpose for which it was collected.

Once the applicable periods have ended, data is deleted or irreversibly anonymised.

Who we share your data with

We do not sell or transfer your data to third parties for commercial purposes. Your data may be accessed by:

• Technical service providers acting as processors, namely website hosting and the appointment management system, contractually bound to confidentiality;
• Public authorities, where there is a legal obligation to disclose;
• Other healthcare professionals, only when necessary for the continuity of your care and with your knowledge.

This website loads fonts from Google servers (Google Fonts), which means your IP address is shared with that entity.

With your consent, we also use Google Analytics and Google Ads, services provided by Google Ireland Limited, to measure visits to the website and the effectiveness of our advertising campaigns, for example, whether an ad led to a booking request. These services may involve transferring data to the United States under the EU-US Data Privacy Framework. We do not share health data with these services.

Your rights

As a data subject, you have the following rights:

• Access — to know what data we hold about you and obtain a copy.
• Rectification — to correct inaccurate or incomplete data.
• Erasure — to request deletion, where there is no legal obligation to retain it.
• Restriction — to restrict processing in certain circumstances.
• Portability — to receive your data in a structured, commonly used format.
• Objection — to object to processing based on legitimate interest.
• Withdrawal of consent — at any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us using the details above. We will reply within the legal period of one month, extendable when the complexity of the request justifies it.

Complaints

If you believe that the processing of your data breaches applicable law, you have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD), the competent supervisory authority in Portugal.

Cookies

This website uses cookies that are strictly necessary for it to work, namely the appointment booking system, keeping your session while filling in forms and storing your cookie preferences. Under applicable law, these cookies do not require prior consent, as they are essential to provide the service you request.

With your consent, we also use statistics cookies (Google Analytics) and marketing cookies (Google Ads), to measure how the website is used and how effective our campaigns are. These cookies are only placed after you accept them in the banner shown on your first visit. Without that permission, Google tools run in consent denied mode and do not place analytics or advertising cookies.

You can change or withdraw your consent at any time through the “Manage consent” option. The full list of cookies used is available in our Cookie Policy.

You can still set your browser to block or delete cookies. In that case, some features may stop working properly.

Changes to this policy

This policy may be updated whenever necessary. The version in force is always the one published on this page.

See also

• Terms and Conditions
• Cookie Policy
• Contacts