Website Personal Data Protection and Privacy Policy
NUAURA ensures compliance with the obligations arising from Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR), Law No. 58/2019 of August 8, and other legislation on personal data protection and privacy.
1.
Who is the Controller of my personal data?
HSpan Journey, Unipessoal, Lda., legal entity no. 518668649, with headquarters at Avenida da Liberdade, 129B 1250 - 140 Lisbon (hereinafter referred to as "NUAURA"), is the controller of your personal data for the purposes indicated below.
2.
For what purpose will my personal data be processed, what is the legal basis and how long will it be stored?
The processing of your personal data has the following purposes, legal bases, and retention periods:
Pre-contractual procedures and performance of a contract
Up to one (1) year after the last log-in or until the termination of the subscription, if any, whichever occurs first
Pre-contractual procedures and performance of a contract; Compliance with legal obligations
Until the termination of the subscription and for 10 (ten) years for tax purposes
Consent
Until the subscription ends or as long as the user maintains their consent, whichever occurs first
Consent
Until the subscription is terminated or as long as the user maintains their consent, whichever occurs first
Pre-contractual procedures and performance of a contract
Until the subscription ends
Legitimate interest
Until the subscription ends
Consent
As long as the user maintains their consent or up to one (1) year after data collection
Legitimate interest
Up to one (1) year after data collection
Pre-contractual procedures and performance of a contract
For a period of one (1) year after data collection
Legitimate interest
For a period of one (1) year after data collection
If the legal basis for the processing of your personal data is consent or legitimate interest, you may withdraw your consent or object to the processing at any time, without any consequences, but without compromising the lawfulness of the processing carried out in the meantime. If consent is withdrawn or your express objection is verified, NUAURA will immediately cease processing your personal data for the purpose in question, unless there is a need to process the data to comply with legal and/or contractual obligations.
3.
What personal data will be processed?
In the context of the purposes set out above, NUAURA will process the following categories of personal data:
- Personal identification and contact details
- Data relating to means of payment and transactions
- Health data
- Data provided by the user when using the chatbot
4.
How will my personal data be processed?
Your personal data will be processed by NUAURA, in the context of the purposes indicated above, in accordance with internal policies and standards and using appropriate technical and organizational measures to promote its security and confidentiality, particularly in relation to the unauthorized or unlawful processing of your personal data and its accidental loss, destruction, or damage. Your data may also be processed subsequently for statistical purposes.
5.
Who are the recipients of my personal data?
Your personal data may be provided to companies responsible for providing services to NUAURA ("Data Processors"), which are bound to it by written contract, may only process your personal data for the purposes established and are not authorized to process it, directly or indirectly, for any other purpose, for their own benefit or that of a third party.
Your personal data may also be shared with entities with whom NUAURA establishes partnerships under joint liability agreements, namely with healthcare professionals in the context of medical services provided to you via the platform made available by NUAURA.
In compliance with legal and/or contractual obligations, your personal data may also be transmitted to third parties for their own purposes, namely to network operators, banks and insurance companies, judicial, administrative, supervisory or regulatory authorities, and entities that lawfully carry out data compilation, fraud prevention and combating, market research, or statistical activities.
NUAURA may also transfer your personal data outside the European Economic Area, if justified in the context of the performance of a contract or in compliance with a legal obligation, ensuring that personal data is only transferred under an adequacy decision by the European Commission, standard contractual clauses, binding rules applicable to companies, or any other legally provided means that is appropriate for the transfer.6.
What rights do I have over my personal data?
As a data subject, you have the right, where applicable, to: (i) request access to, rectification, restriction, objection, portability, and erasure of your personal data; (ii) lodge a complaint with the competent supervisory authority—in Portugal, the National Data Protection Commission ("CNPD") - or (iii) obtain redress and/or compensation if you consider that the processing carried out violates your rights and/or the applicable legislation on personal data protection and privacy.
You may exercise your rights by emailing info@nuaurahealth.com or by lodging a complaint with the CNPD, available at www.cnpd.pt.7.
Information about cookies
We advise you to read the Cookie Policy, which forms an integral part of this Personal Data Protection and Privacy Policy, to learn more about the processing of your personal data through this feature.
8.
Changes to the Personal Data Protection and Privacy Policy
NUAURA may, at any time, change this Personal Data Protection and Privacy Policy in accordance with new legal or regulatory requirements or update it if justified. We advise you to consult this Policy regularly to check the most up-to-date versions.