The health care provider Doutor na Hora, Lda., is committed to complying with the General Data Protection Regulation (hereinafter referred to as GDPR), as well as, in this regard, with the provisions of the Constitution of the Portuguese Republic (CRP), the Data Protection Law (LPD) and other special legislation on the protection of personal data, ensuring the protection of personal data and reinforcing the relationship of trust with the customer.

This Privacy and Personal Data Protection Policy is intended to provide information regarding the data collected and the corresponding purpose and processing carried out.

If you have any questions regarding the processing of your personal data, please contact us at the following address: doutordavidtorres@gmail.com.

By making your personal data available to the health care provider Doutor na Hora, Lda., the holder of personal data authorizes them to be processed in accordance with this Privacy and Personal Data Protection Policy.

Data controller

Doutor na Hora, Lda.., NIPC 519399536, headquartered at Rua Mouzinho de Albuquerque N36, 2025-353 Santarém, Amiais de Baixo, owner of the health care provider Doutor na Hora, Lda.

What is personal data?

Under the terms of the GDPR, personal data is considered to be any information relating to an identified or identifiable natural person (data subject). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data , online identifiers (IP address, cookies) or to one or more elements specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Personal data collected

The health care provider Doutor na Hora, Lda. collects different categories of data:

• Data that identifies you, such as your name, gender, date of birth, tax identification number, social security identification number, health user number, citizen card number and respective expiration date or image;
• Communication data, which includes, for example, telephone number, email address and address (city, postal code, country, district, county, parish);
• Data on private life, such as profession and employment status, family doctor, spouse’s name, father’s name, mother’s name (e.g. in the case of a minor), data related to insurance or health subsystem;
• Data about third parties who are authorised to make decisions on your behalf, or who should be contacted in an emergency;
• Information about health and health care data you have received or will receive;
• Payment data.

How your data is collected

• When you contact us;
• When you establish a relationship with us in connection with the provision of a service;
• When you post comments or images on our social media pages; or
• When you submit personal information to us in any way.

Purposes of collection and legal bases

The collection of personal data is for the purposes of executing contracts entered into with customers for the provision of health care and services, prevention or preparation of diagnoses and/or provision of health treatments, management of administrative services, namely for scheduling or rescheduling appointments and treatments, billing, accounting and auditing, marketing communications and other commercial communications,  quality control, statistical studies, to know better the preferences of customers, as well as for contact purposes.

The collection of your personal data is based on the law, the pre-contractual and contractual relationship, payment management, customer support, compliance with legal obligations, consent of the data subject and legitimate interests.

We may also process your data, with your consent, to carry out teleconsultations, publish photographs or videos for the purpose of disseminating, internally and externally, our activity, for example on social networks, as well as for marketing purposes or sending newsletters.

Personal data related to your health will only be processed by professionals who are bound to confidentiality and to the extent necessary.

Time and method of storage of personal data

We process and store your personal data only for the period necessary to achieve the respective purposes, to respond to your needs, your requests or to comply with legal obligations, which vary according to the category of data.

We may also retain some of your personal data to the extent necessary to administer or enforce our rights, including through legal recourse.

In cases where you have given your consent to the processing of your personal data, we will store your personal data in accordance with the consent given or until that consent is revoked.

Who we share your data with

We may use other companies to provide certain services, and we may transmit proprietary information and data to third parties, such as accounting and IT firms, competent authorities, legal service providers , consultants and others. We hereby guarantee that, in such situations, these third parties will have limited access to the information of the data subjects, restricted only to those necessary for the performance of the contracted tasks and that they are subject to the same guarantees of confidentiality. Likewise, we may communicate your personal data, when so required by law, in the context of legal proceedings or in the context of investigations of suspicious activities.

Security Measures

We have developed appropriate technical and organizational mechanisms and measures to maintain the confidentiality and secrecy of your personal information, taking into account that the information collected contains sensitive data under the terms of the GDPR, in order to ensure a level of security appropriate to the risk and to protect personal data against destruction, loss, alteration, unauthorized disclosure or accidental or illegal access. To this end, we implement several measures such as conditional access to clinical files (in physical or digital file), we define strong passwords and we keep antivirus software up to date. In addition, any employee of the health care provider establishment Doutor na Hora, Lda. who has access to your personal data is subject to the duty of secrecy and confidentiality.

Data Subject Rights

In accordance with the GDPR, Data Subjects may exercise, at any time, the right to information, obtain access to, rectify, delete and transfer their personal data, as well as to limit and oppose the processing of their personal data, including the revocation of consent. To do so, you should contact us via email doutordavidtorres@gmail.com.

Understand your rights:

1. Right to information: You have the right to obtain clear, transparent and understandable information about how we use your personal data.
2. Right of access: you can access your personal data that we process and store. In these cases, we will provide you with information about the personal data that is being processed. Note, however, that the right of access is not unlimited, and must be articulated with data protection legislation (and may therefore be rejected when, for example, access may harm the rights and freedoms of others) and health law legislation (for example, in cases where it is unequivocally demonstrated that access to information may be harmful to the patient, the requested information may not be provided – therapeutic privilege). Access can be made through a doctor if requested.
3. Right to rectification: you have the right to rectify personal data without undue delay, provided that you have made them available yourself, if they are incorrect, out of date or if you wish to complete them.
4. Right to erasure/right to be forgotten: You can request that we delete your data. However, please note that this is not an absolute right, as we may have legal grounds, such as legally prescribed retention periods, or legitimate interests for the retention of your personal data.
5. Right to object: you can object to the processing of your data on grounds relating to your particular situation. It may happen in relation to processing for scientific, statistical or historical research purposes, unless the processing is necessary for reasons of public interest.
6. Right to revoke your consent to data processing at any time: you can withdraw your consent to data processing when such processing is based on your consent. Please note that the right to revoke consent does not affect the lawfulness of processing based on consent given prior to its withdrawal.
7. Right to data portability: The data subject has the right to receive the personal data concerning him or her that he or she has provided to a controller , in a structured, commonly used and machine-readable format and the right to transmit such data to another controller.
8. Right to restriction of processing: you have the right to request the restriction of the processing of your data in the event that you contest the accuracy of the data, if the processing is unlawful and you do not want to erase your data, but only to limit it, if the data is no longer considered necessary or if you have exercised the right to object referred to above.

These rights, like any others, must be exercised in a reasonable manner and in good faith by their holder.

Final notes

• By using our services, you agree to our Privacy and Data Protection Policy.
• The Data Subject guarantees that the personal data communicated to us is correct and accurate and undertakes to notify us of any change or modification thereto and assumes sole responsibility for losses and damages caused by the erroneous, inaccurate or incomplete communication of their data.
• We warn you that when you provide personal information online, there is a risk that third parties may intercept and use this information, so for your privacy, we recommend that you do not include sensitive or confidential personal data through our website and in the emails you send us. In doing so, any leakage or damage arising therefrom is your sole responsibility.
• We also inform you that it is the responsibility of users of our social networks to ensure and ensure that the devices and equipment used to access them are adequately protected against harmful software, computer viruses and Therefore, we suggest that you keep your browser, operating system and antivirus software up to date.
• If you would like to contact us to inquire about your rights or have any questions about how we use your information, please contact us at doutordavidtorres@gmail.com. However, if you are still dissatisfied, you can contact the National Data Protection Commission, whose contact details can be found at cnpd.pt.

Changes to this Privacy and Personal Data Protection policy

We may implement changes or updates to this Privacy and Data Protection Policy at any time, so we invite you to consult this document regularly.

Date: 09/06/2026