Privacy Policy

The data controller is Vivage Clinique, located at Av. São Lourenço da Barrosa, Edifício Arcoliz (V6), Loja 14, 8500-510 Portimão, Portugal. For any enquiries regarding your personal data, you may contact us at geral@vivage.pt.

We collect the following categories of personal data: identification data (name, date of birth, tax identification number); contact data (telephone, email address, postal address); health data (medical history, clinical records, treatments performed, photographs for clinical purpose); and website usage data (through cookies and analytics tools).

Health data is considered sensitive data under the GDPR and is processed with the highest level of protection, exclusively for the purpose of providing medical care.

Your personal data is processed for the following purposes: provision of healthcare services (legal basis: performance of a contract and processing of health data for medical treatment purposes, under Article 9(2)(h) GDPR); appointment management and clinical follow-up; fulfilment of legal obligations (billing, tax obligations); and communication for appointment reminders or relevant clinical information, with your prior consent.

Marketing communications are only sent when you have explicitly consented to receive them. You may withdraw consent at any time.

Clinical records are retained for the minimum periods required by Portuguese healthcare legislation — generally 10 years after the last clinical act or, in the case of minors, until 10 years after they reach the age of majority.

Data collected for marketing purposes is retained until you withdraw your consent.

We do not sell, rent or share your personal data with third parties for commercial purposes. Data may be shared with: partner laboratories when necessary for diagnosis or treatment; health professionals to whom you are referred; payment processors, strictly for billing purposes; and public authorities, when required by law.

All third parties with whom we share data are required to maintain appropriate security standards and process data only for the specified purpose.

Under the GDPR, you have the following rights regarding your personal data: right to access your data; right to rectification of inaccurate data; right to erasure ('right to be forgotten'), where legally permissible; right to restriction of processing; right to data portability; right to object to processing; and right to withdraw consent at any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at geral@vivage.pt. You also have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD) at www.cnpd.pt.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration or destruction, in accordance with the requirements of the GDPR.

This privacy policy may be updated periodically to reflect changes in our practices or applicable legislation. The date of the last revision is indicated at the top of this page. We recommend that you review this policy regularly.