Personal Data Processing
The data controller is CUF - Serviços de Saúde, Administrativos e Operacionais, A.C.E
The personal data collected through this channel are intended for processing the malpractice report with respect to the matters described above. The processing of personal data is based on compliance with a legal obligation.
The processing of personal data shall be carried out by an independent service provider appointed by CUF ACE. Said service provider shall process the data exclusively for the purposes established by CUF ACE, according to the instructions issued by the latter, in strict compliance with the legal rules on personal data protection, confidentiality, information security and other applicable standards. Provided that the legal conditions set forth in the General Data Protection Regulation (GDPR) are met, CUF ACE may also transfer the data to other entities that qualify as data controllers for their own purposes, including public authorities such as: Tax Authorities, Judicial Courts or competent Regulatory Authorities.
Wherever the processing of personal data involves communicating the data to third parties established in countries outside the European Economic Area (EEA) territory, CUF ACE will ensure that such third parties implement appropriate guarantees to process the personal data, in view of the Data Subjects’ exposure to risk.
The reported personal data will be kept and retained for a period of five years. In case of disciplinary or court proceedings, the data shall be kept for the duration of those proceedings.
The personal data collected for processing any reports of irregularities as to Prevention of Money Laundering and Combating Terrorism Financing shall be retained, under the terms of Law No. 83/2017 of 18 August, for a period of seven years as from the date the processing of the irregularity report is completed, without prejudice to other legal obligations to retain such data.
Exercise of Rights
Data subjects may, at any moment and free of charge, exercise their rights of access to, rectification and erasure of data and of limitation of processing, or their right to oppose the processing, by submitting their request in writing through this channel or on the link provided below.
Data subjects have the right to file a complaint with the Portuguese Data Protection Office (CNPD) or with any other supervisory authority with adequate powers under the law, if they believe that the processing of their data by CUF ACE breaches at any moment any applicable laws.
For any question regarding personal data privacy, the data subject may contact CUF ACE’s Data Protection Officer (DPO) on the following link by selecting Subject - Data Protection.
For further details, please refer to our privacy policy.