PRIVACY POLICY

SUBJECT

This Privacy Policy is applicable to the personal data processing of the users of NOVA Medical School’s website (hereinafter NMS website).

WHO ARE WE?

For the purposes of the applicable data protection legislation, personal data will be processed by Universidade Nova de Lisboa (hereinafter “NOVA”), specifically by NMS – an organisational unit of NOVA - legal person number 501 559 094, with headquarters in Campo Mártires da Pátria, 130, 1169-056 Lisboa.

NMS is, therefore, the data controller for the processing of personal data, according to all definitions and provisions present in the General Data Protection Regulation (hereinafter “GDPR”). 

WHAT PERSONAL DATA IS COLLECTED AND PROCESSED?

In compliance with the principle of data minimization, NMS collects and processes the strictly necessary personal data for the purposes of processing.

Information about your computer hardware and software is automatically collected by NMS. This information can include: your IP address, browser type, domain names, access times and referring website addresses. This information is used by NMS for the operation of the service, to maintain quality of the service, and to receive general statistics regarding use of the NMS website.

Login information is also collected when NMS peers log into their reserved area through the NMS website.

What are the purposes of the processing carried out BY nms?

NMS processes your personal data in order to operate the NMS website and deliver the services you have requested.

NMS also processes your personal data in order to authenticate your login data and provide you, in the reserved area, with communications regarding NMS’s reality.

NMS does not use or disclose sensitive personal information, such as race, religion, or political affiliations, without your explicit consent.

Surveys and forms that might be linked to on NMS website (i.e., for participating in events or applying for courses) will have their own privacy notice, in compliance with the GDPR.

What is the legal basis for the processing of personal data?

NMS will process personal data on the basis of its legitimate interest in operating its website and providing the services requested adequately. 

HOW LONG Will THE PERSONAL DATA be RETAINED?

In order to comply with the storage limitation principle and keep personal data for no longer than the required time to fulfill the purposes established in this privacy notice, NMS will establish time limits for the erasure or anonymization of personal data. The data will be kept only for as long as it is necessary. In any case, data will not be kept for longer than 2 years.

WHAT SECURITY MEASURES HAVE BEEN ADOPTED TO PROTECT PERSONAL DATA? 

Information security and data protection are priorities for NMS. For that reason, NMS has implemented a set of technical and organizational measures that, taking into account the most advanced available techniques, implementation costs, nature, scope, context, and purposes of each processing of personal data, allow to mitigate the risks for the data subjects and prevent the occurrence of personal data breaches and security incidents in general.  

In particular, the following measures were or will be taken: 

·        NMS secures the personally identifiable information you provide on computer servers in a controlled, secure environment, protected from unauthorized access, use or disclosure.

TO WHOM DO WE TRANSFER YOUR PERSONAL DATA?

Personal data is not shared with third-parties.

Is the DATA TRANSFERED OUTSIDE OF THE EUROPEAN UNION?

Yes. Personal data may be transferred outside the European Economic Area (EEA) by NMS due to the use of cookies provided by third parties such as Google and Facebook, located outside of the European Union. In such cases, NMS will verify the recipient's level of maturity and adopt appropriate guarantees to mitigate the risks of each transfer of personal data, including through the European Commission’s Standard Contractual Clauses and, where the risk of the transfers justifies it, additional safeguards in the form of technical and organizational measures, including pseudonymization, that ensure a degree of protection equivalent to that conferred by the GDPR. 

What are the rights of the data subjects?

As a data subject for the purposes of the GDPR, you can, at any time, exercise your rights, in particular, your right to request additional information about the processing of your personal data, the right to data rectification, as well as, within certain limits, the right to request the erasure of your data or to oppose to the processing of your personal data, among others, via email to rgpd@nms.unl.pt.

You may also contact NOVA’s Data Protection Officer at dpo@unl.pt. 

If you don’t agree with the way your personal data is being handled, you also have the right to submit a complaint to the Portuguese Supervisory Authority at https://www.cnpd.pt/.

Data subjects must be aware that, in certain cases (for instance, due to legal obligations) their request might not be complied with. In any case, the data subject will be informed of the measures taken, within one month counting from the moment the request was submitted.  

Use of Cookies

WHAT ARE COOKIES?

Cookies are files that are downloaded to your computer when accessing certain webpages. 

The cookies allow the webpage to, amongst other functions, store and recover information regarding the user's navigation habits or system. Depending on the information they contain and the way in which one uses their system, the cookies can be used to recognize the user.

There are different categories of cookies, that serve different purposes. There are cookies that are strictly necessary to the maintenance of a website, while others collect statistic information in order to review website user’s behavior; ensure additional functionalities on a website; or save user preferences when using the same device. Other cookies may also measure the success rate of applications and the efficiency of third-party marketing advertisements.

Except for strictly necessary cookies, the storage of cookies depends on the consent of the user. That consent can be withdrawn at any moment, using the cookie consent manager available on the website.

WHAT ARE THE PURPOSES OF COOKIES?

Cookies are used to simplify navigation and allow for a better user experience. For that purpose, users are recognized when accessing websites, eliminating the need to repeatedly type the same information, and therefore allowing for a faster and more efficient navigation.

Cookies are used on the NMS website to ensure adequate user experience. The information obtained has no other use.

Cookies are also used to create statistics regarding the website and its users’ preferences, as well as to provide advertising.

WHAT COOKIES DO WE USE?

NMS uses cookies for the following purposes:

• Strictly necessary cookies – these cookies are essential for you to browse the website and use its features, such as accessing secure areas of the site

• Preference cookies — These cookies allow a website to remember choices you have made in the past, like what language you prefer, what region you would like weather reports for, or what your username and password are so you can automatically log in.

• Analytics cookies – these provide statistic information regarding the use of the website.

• Marketing cookies: these create profiles or personalize content.

MANAGING COOKIE PREFERENCES

The user can, at any time, withdraw their consent or modify cookie preferences in the cookie consent manager available on the Website.

Changes to the Privacy Policy

NMS will occasionally update this Privacy Policy, so we encourage you to periodically review it to be informed of how NMS is protecting your information.