This Privacy Policy sets out the terms under which EMHA processes the personal data of its users, as well as the rights they may exercise, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation - GDPR) and other applicable national legislation relating to privacy and data protection.
This Privacy Policy applies exclusively to the processing of personal data carried out by EMHA within the framework of the use of its website and its legal duties and responsibilities. Processing activities carried out in the context of clinical research projects, studies, and investigations are subject to specific assessment in accordance with the project submission procedures established by EMHA.
EMHA positions itself as an organization committed to guiding academia and healthcare providers along the path of scientific and technological innovation, enabling the clinical qualification of healthcare professionals, improving the quality of care provided, and contributing to the health and well-being of every citizen.
The definitions below are adapted from the GDPR and are intended to facilitate the understanding of this Privacy Policy.
Personal Data: Any information, regardless of its nature or format, including sound and image, relating to an identified or identifiable person. Certain personal data may be more sensitive in nature and are classified under the GDPR as “special categories of data”, including data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, genetic information, biometric identifiers, data concerning health, sex life, or sexual orientation.
Processing of Personal Data: Any operation or set of operations performed on personal data, whether by automated or non-automated means, such as collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure, dissemination, alignment, restriction, erasure, or destruction.
Data Subject: An identified or identifiable person to whom the personal data relates.
Responsible for data treatment: An individual or legal person, public authority, agency, or other body that determines the purposes and means of processing personal data, either alone or jointly with others; where the purposes and means of such processing are determined by Union or Member State law, the responsible for data treatment or the specific criteria for its nomination may be provided for by Union or Member State law.
Processor: A natural or legal person, public authority, agency, or other body that processes personal data on behalf of the controller.
Data Protection Officer (DPO): A person or entity designated to ensure compliance with the GDPR within an organization, facilitating communication with data subjects and cooperation with supervisory authorities. The DPO acts independently and reports directly to the organization’s management bodies.
Consent: Any freely given, specific, informed, and unambiguous indication of the data subject’s wishes by which they signify agreement to the processing of their personal data.
Supervisory Authority: An independent public authority responsible for monitoring the application of data protection legislation. In Portugal, this is the Portuguese Data Protection Authority (CNPD).
EMHA is the entity responsible for processing personal data within the scope of the services it provides. As data controller, EMHA:
EMHA processes personal data in accordance with the principles of lawfulness, fairness and transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, confidentiality, and accountability.
EMHA only processes personal data when authorized to do so by law. The processing of personal data depends on verifying the conditions of legitimacy and the lawfulness of the purpose. Processing will occur only where: [emha.pt]
To exercise their rights, data subjects may contact the data controller via dpo@emha.pt. Under the GDPR, data subjects are entitled to:
EMHA may lawfully disclose personal data to third parties when:
Due to the nature of its activities, EMHA may engage external service providers (processors), which may involve the transfer of personal data. In such cases, EMHA adopts appropriate technical and organizational measures to ensure compliance with applicable data protection requirements.
For purposes of public interest archiving, scientific or historical research, or statistical analysis, EMHA may retain personal data for extended periods, while implementing appropriate safeguards to protect the rights and freedoms of data subjects.
Specifically:
EMHA is committed to ensuring the confidentiality, protection, and security of personal data through the implementation of appropriate technical and organizational measures designed to minimize risks associated with unauthorized processing, accidental loss, or destruction of data.
Recognizing the sensitive nature of much of the data it processes, EMHA ensures that all clinical research projects are reviewed by multidisciplinary teams, including Data Protection Officers and Ethics Committees, to guarantee compliance with applicable regulations.
What are cookies?
Cookies are small electronic files stored on a user's computer through a web browser. These files are necessary to allow the server to distinguish individual users and maintain session information during navigation.
What types of cookies are used on our website?
Strictly essential cookies are always active and are required for the proper functioning of the website. These cookies do not, under any circumstances, identify individual users.
How can you manage cookies?
All web browsers allow users to accept, refuse, or delete cookies through their settings. Cookies can usually be managed through the "Options" or "Preferences" menu of the browser.
Please note that disabling cookies may prevent certain web services from functioning correctly and may affect, partially or entirely, the user experience on the website. For more information about cookies, please refer to the website All About Cookies
EMHA reserves the right to modify or update this Privacy Policy at any time and without prior notice; such changes will be duly updated on our online channels and platforms.
For suggestions for improvement, please contact us at dpo@emha.pt.