PRIVACY POLICY

SUBJECT

This privacy policy applies to the processing of personal data of users of the NOVA Medical School (“NMS”) website.

WHO ARE WE?

Personal data will be processed by Universidade NOVA de Lisboa, legal person no. 501559094, with headquarters at Campus de Campolide, 1099-085 Lisboa, more specifically by NMS, as an organic unit of Universidade NOVA de Lisboa.

NMS is responsible for the processing of personal data that it carries out in the sense in which such expressions are defined and used in personal data protection legislation.

THE PURPOSES FOR WHICH PERSONAL DATA IS PROCESSED

NMS processes personal data for the following purposes:

a) To disseminate information relevant to users of the website, including institutional content, information materials, brochures, events and NMS's training offer;

b) Providing contact details for NMS representatives to facilitate direct contact with users interested in obtaining more information;

c) Managing registration for events and academic programs promoted by the NMS and its partners;

d) Managing requests for appointments and exams;

e) Receiving and monitoring suggestions and complaints submitted by website users;

f) Ensuring the development, maintenance, operation and security of the website.

Any re-use of personal data for a different purpose is assessed in the light of the criteria set out in Article 6(4) of the GDPR.

WHAT IS THE CONDITION FOR LAWFUL PROCESSING OF PERSONAL DATA?

The processing of personal data carried out by NMS is based on the following legal grounds:

- The legitimate interests pursued by NMS or by third parties, unless the interests or fundamental rights and freedoms of the data subject which require the protection of personal data prevail;

- The performance of a contract to which the data subject is a party, or to carry out pre-contractual steps at the request of the data subject;

- Compliance with NMS's legal obligations;

- The public interest pursued by NMS.

When none of the other conditions of lawfulness are able to support the data processing operation, NMS will only process personal data if it has obtained the consent of the data subject to process their personal data for specific, explicit and legitimate purposes.

The data subject may request information about the criteria applied to determine the legitimate interest at rgpd@nms.unl.pt.

TO WHOM DO WE TRANSMIT PERSONAL DATA?

In the course of its business, NMS transmits your personal data to subcontractors, other controllers and joint controllers. These entities include the following:

• Technology and web hosting service providers - To ensure the development, maintenance, operation and security of the website, ensuring its operability and protection against cybersecurity incidents.
• Communication platforms and customer service providers - To facilitate direct contact between users and NMS representatives, as well as to manage requests for information.
• Organizers and partners of events and academic programs - To manage registration and participation in events and initiatives promoted by NMS or in partnership with other institutions.
• Health service providers and clinical partners - For managing requests for appointments and examinations when carried out in partnership with other entities.
• Competent authorities - Whenever required by law or regulation, namely to comply with legal obligations related to data protection, digital accessibility and information security.

DO WE TRANSFER PERSONAL DATA OUTSIDE EEE?

NMS may transfer personal data to countries outside the European Economic Area (EEA), in accordance with the General Data Protection Regulation. Whenever the destination countries do not offer a level of protection equivalent to that of the European Union, NMS ensures the adoption of appropriate guarantees, such as verifying the existence of an adequacy decision by the European Commission or, failing that, the conclusion of Standard Contractual Clauses approved by the Commission. 
You can find out more about these guarantees at rgpd@nms.unl.pt.

HOW LONG DO WE KEEP PERSONAL DATA?

NMS keeps personal data for the period necessary to fulfill the purposes for which it was collected. To this end, a retention schedule has been drawn up which indicates the periods applicable to each purpose. For more information on retention periods, you can contact us through the means indicated in this policy.

WHAT ARE THE RIGHTS OF DATA SUBJECTS?

The data subject can exercise a set of rights at any time, under the terms and conditions laid down in the law. These rights include the right to object, which is often exercised in relation to certain types of communications, as well as other rights such as the right of access, the right to erasure, the right to restriction of processing and the right to rectification. In addition, the data subject has the right to withdraw consent at any time, without this affecting the lawfulness of the processing carried out on the basis of the consent previously given.

These rights can be exercised via the email address rgpd@nms.unl.pt. You can also contact NOVA's Data Protection Officer at dpo@unl.pt.

You also have the right to lodge a complaint with the National Data Protection Commission at https://www.cnpd.pt/.

CHANGES TO THE PRIVACY NOTICE

This privacy notice may be updated and data subjects will be informed within a reasonable period of time when the changes reveal a fundamental change in the nature of the processing, such as a change in the purposes of the processing, a change in the identity of the controller or an extension of the categories of recipients.

Version 2 | 21.07.2025

Use of Cookies

WHAT ARE COOKIES?

Cookies are files that are downloaded to your computer when accessing certain webpages. 

The cookies allow the webpage to, amongst other functions, store and recover information regarding the user's navigation habits or system. Depending on the information they contain and the way in which one uses their system, the cookies can be used to recognize the user.

There are different categories of cookies, that serve different purposes. There are cookies that are strictly necessary to the maintenance of a website, while others collect statistic information in order to review website user’s behavior; ensure additional functionalities on a website; or save user preferences when using the same device. Other cookies may also measure the success rate of applications and the efficiency of third-party marketing advertisements.

Except for strictly necessary cookies, the storage of cookies depends on the consent of the user. That consent can be withdrawn at any moment, using the cookie consent manager available on the website.

WHAT ARE THE PURPOSES OF COOKIES?

Cookies are used to simplify navigation and allow for a better user experience. For that purpose, users are recognized when accessing websites, eliminating the need to repeatedly type the same information, and therefore allowing for a faster and more efficient navigation.

Cookies are used on the NMS website to ensure adequate user experience. The information obtained has no other use.

Cookies are also used to create statistics regarding the website and its users’ preferences, as well as to provide advertising.

WHAT COOKIES DO WE USE?

NMS uses cookies for the following purposes:

• Strictly necessary cookies – these cookies are essential for you to browse the website and use its features, such as accessing secure areas of the site

• Preference cookies — These cookies allow a website to remember choices you have made in the past, like what language you prefer, what region you would like weather reports for, or what your username and password are so you can automatically log in.

• Analytics cookies – these provide statistic information regarding the use of the website.

• Marketing cookies: these create profiles or personalize content.

MANAGING COOKIE PREFERENCES

The user can, at any time, withdraw their consent or modify cookie preferences in the cookie consent manager available on the Website.

Changes to the Privacy Policy

NMS will occasionally update this Privacy Policy, so we encourage you to periodically review it to be informed of how NMS is protecting your information.