1. GENERAL DATA PROTECTION REGULATION (GDPR)
Personal data is any information relating to an already identified individual or that can identify an individual directly or indirectly, such as their name and their civil or tax identification number.
In order to protect the data that is collected and processed, this policy may be updated.
Any update will be communicated via the website.
2. DATA CONTROLLER’S IDENTITY AND CONTACT DETAILS
Veranatura — Apoio a Empresas, Lda.
R. Augusto Macedo 12, 1600-503 Lisboa
3. DATA COLLECTED
Veranatura respects the privacy of its users. You are not required to provide any personal data in order to use the Veranatura website as a visitor.
Direct collection of data
Your personal data is only collected if you sign up for the events organised by Veranatura (congresses, seminars or corporate events), at the request of its clients, namely:
When signing up for an event: full name, title, clinical name, institution, address, postcode, country, telephone contact and email.
To issue an invoice/receipt: name, tax number, address, postcode and country.
To collect and manage data for events, Veranatura uses a digital platform called Admeus, provided by the company EVS-Eventservices, which is the entity responsible for processing the data on the Admeus platform, and which undertakes to meet the requirements of the GDPR.
Veranatura has a contractual business relationship with Eventservices.
Indirect collection of data:
Using Google Analytics, Veranatura collects the following aggregate data for statistical purposes:
Geographic origin (city, country)
Type of device
Date and time of access
Reference data addresses
All statistical information relating to the use of the website is monitored in aggregate and anonymous form. The data used for this purpose does not contain personal identification or private information details.
This information will be used to analyse the website use patterns and to improve the levels of service and user satisfaction. This information may be revealed to third parties or publicly.
4. LAWFUL BASIS FOR PROCESSING YOUR PERSONAL DATA
To draw up a contract or to provide a service.
5. WHAT WE DO WITH YOUR DATA (THE PURPOSE FOR DATA PROCESSING)
Your data will be processed with the purpose of registering for and participating in different events, contact management, publicity and invoicing.
6. HOW LONG WE WILL STORE YOUR DATA (DATA RETENTION PERIODS)
Personal data can be kept for a maximum period of 10 years, but may be kept longer in the event of pending legal action, limited to three months once the final court decision has been rendered.
7. TRANSFER TO THIRD COUNTRIES
Veranatura does not transfer data to third countries.
8. DATA PROCESSING AUTOMATED DECISION MAKING AND PROFILING
Data will not be processed for automated individual decisions or for defining profiles.
9. DATA SECURITY
Veranatura takes the necessary and legally required precautions to ensure the protection of information gathered from its users via the website. These precautions ensure the offline security of this information.
The following technical and organisational measures are amongst those taken to ensure the safety and confidentiality of personal data: physical security (through access control), logical separation of records, access passwords and levels of access, firewalls and antivirus software. The data is encrypted when stored.
10. DATA SUBJECTS RIGHTS
The Data Subject has the right to make a complaint to the Portuguese Data Protection Commission or to any other supervisory authority.