Privacy and Cookie Policy

Bússola Moral, Lda. (tax no. 518004155), trading as Serena Clínica Médica, with registered office at Alto do Poço, Rossio Grande, Lote E/F, Loja D, 8500-322 Alvor, Portugal, is the entity responsible for processing the personal data collected through this website. For any question relating to privacy and data protection, you can contact us by email at geral@clinicaserena.pt or by phone on +351 928 227 298.

We collect only the data you provide voluntarily when filling in the appointment booking form: name, phone number, email and, optionally, the area/professional you are looking for, your preferred format and time of day, and a free-text message. The message may contain health data, which is a special category of data and is treated with particular confidentiality.

We also collect anonymous or pseudonymised browsing data (site usage statistics), only when you consent to the use of analytics cookies.

The form data is used exclusively to respond to your booking request and to contact you. Processing is based on your explicit consent (given when you submit the form) and, with regard to health data, on your express consent for that purpose, under the General Data Protection Regulation (GDPR).

Analytics data is processed on the basis of the consent you give in the cookie banner, for the purpose of understanding how the site is used and improving our services.

We keep the booking form data only for as long as necessary to respond to your request. If no care relationship is established, the data is deleted within a maximum of 6 months after the last contact. If you become our patient, the relevant data is added to your clinical record and kept in accordance with the legal obligations applicable to the retention of health records.

To provide the service, we use the following processors:

• Resend — sending the emails generated by the booking form. Data is processed in the United States under the EU-US Data Privacy Framework and Standard Contractual Clauses approved by the European Commission.
• Amazon Web Services (AWS) — website hosting, on servers located in the European Union (Ireland).
• Google Analytics — site usage statistics, only with your consent. This may involve transferring data to the United States under the EU-US Data Privacy Framework.

These transfers outside the European Economic Area are subject to the appropriate safeguards required by the GDPR (Chapter V). We do not sell or pass on your data to third parties for marketing purposes.

This website uses two types of cookies:

• Necessary cookies — essential for the website to function; they do not require consent.
• Analytics cookies (Google Analytics) — help us understand how the site is used. They are only enabled if you accept them in the cookie banner.

Until you accept, analytics cookies remain disabled (Google Consent Mode). You can change your choice at any time by clearing the site data in your browser. No personal data or health data entered in the forms is sent to Google.

Under the GDPR, you have the right to access your data, request its rectification or erasure, restrict or object to processing, and request data portability. You may also withdraw your consent at any time, without affecting the lawfulness of processing carried out beforehand.

To exercise these rights, contact us at geral@clinicaserena.pt.

We adopt appropriate technical and organisational measures to protect your data against unauthorised access, loss or improper disclosure, including encrypted communications (HTTPS).

If you believe that the processing of your data does not comply with the GDPR, you have the right to lodge a complaint with the Portuguese Data Protection Authority (Comissão Nacional de Proteção de Dados, CNPD) — www.cnpd.pt.

This policy may be updated whenever necessary. The version in force is always the one published on this page.