1. Personal Data
What is personal data?
Personal data is any information of any nature, regardless of its support, relating to an identified or identifiable natural person. A person is considered identifiable if they can be identified directly or indirectly, for example, by name, identification number, location data, electronic identifier, or other elements that allow the identification of that natural person.
The privacy and protection of personal data of all Clients and users of the services provided by Medbloom, at all times, constitute an essential aspect of the way it operates and organizes itself.
Medbloom’s Privacy Policy aims to ensure that all its Clients are aware, at all times, of the rules and principles regarding the protection and processing of personal data, with Medbloom making every possible effort to ensure the security of such data, in accordance with the rules and procedures defined in the applicable legislation.
In the online communication media of Medbloom, you may find links to access other websites that are unrelated to our entity. The availability of such links is made in good faith, and Medbloom cannot be held responsible for the collection and processing of personal data carried out on those websites, nor can it be held responsible for the accuracy, credibility, and functionality of websites belonging to third parties. Thus, the availability of links to other websites unrelated to Medbloom does not imply any assumption of responsibility for them.
Medbloom also recommends that its Clients adopt additional security measures, including keeping equipment and programs properly updated and configured, using anti-malware and firewall protections, and refraining from browsing websites for which they do not have the proper guarantees of authenticity.
This Privacy Policy may, at any time, be subject to change or revision, and any changes or revisions will be duly disclosed and communicated in Medbloom’s online communication media.
Who are the holders of personal data?
- The Client or User, the natural person to whom the data refers and who has used Medbloom’s services or products.
- The Client will be the person who enters into the contract with Medbloom, and the User is the person who uses Medbloom’s services or products.
2. Processing of personal data
Who is responsible for processing your personal data?
The entity responsible for processing your personal data will be the Medbloom entity that provides you with the service or product and that, in this context, decides which data to collect, the means of processing, and the purposes for which the data will be used.
3. Basis for data processing
These are the circumstances in which we process your personal data:
- Consent
When your express consent is obtained – in writing, or by validating an option on an electronic form – and if such consent is free, informed, specific, and unequivocal.
- Consent of minors
In the case of processing personal data of minors, which may be subject to consent, Medbloom will require consent from the holders of parental responsibilities.
- Execution of contract and pre-contractual diligences
When the processing of personal data is necessary for the conclusion, execution, and management of the contract entered into with Medbloom, such as for the preparation of a service proposal, for the management of contacts, information, and requests, for the management of invoicing, collection, and payments.
- Compliance with legal obligation
When the processing of personal data is necessary to comply with a legal obligation to which Medbloom is subject.
4. Purposes of data processing
For what purposes do we process your Personal Data?
- Marketing and Sales
- Customer Management and Service Delivery
- Accounting, Fiscal and Administrative Management
- Compliance with legal obligations
Medbloom may, in the course of its activity and within the scope of the Services it provides, subcontract third parties for the prosecution of the aforementioned purposes, which may imply the access by such entities to personal data of its Clients. When this happens, Medbloom takes the appropriate measures, so that the entities that will have access to the data offer the highest technical, organizational, and human guarantees at that level. Thus, Medbloom’s Subcontractors will be obliged, under the legally foreseen terms, as well as by force of a contract signed with Medbloom, to put in place appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, dissemination, alteration, disclosure, unauthorized access, and against any other form of unlawful processing, as well as to be bound by special duties of professional secrecy and confidentiality.
Apart from these cases, Medbloom will only transmit the personal data of its Clients to Third Parties when:
a) it is obliged to do so by force of legal provision and only to the strict extent of its obligations;
b) If the Client expressly and specifically authorizes such transmission and is duly informed, in writing, about the recipients of the
5. Data Collection
We collect personal data with your consent when you purchase products or services from Medbloom. The collection can be done verbally, in writing, or through Medbloom’s online communication channels.
However, your personal information may also be collected from publicly accessible sources or other sources. Medbloom only collects and processes personal data of Clients with their express consent, in accordance with each specific purpose of the processing in question, under the terms provided for in the General Data Protection Regulation (whose enforcement in the Portuguese legal system is ensured by Law No. 58/2019, of August 8).
The consent provided by Clients may be withdrawn by them at any time.
However, there is some personal data that is essential for the provision of Services by Medbloom, with Clients being duly and previously informed of this very need and the consequences of not providing said data.
If the personal data, considered essential, is not provided by the Clients or proves to be insufficient, incorrect, or outdated, Medbloom will not be able to provide the contracted Service(s), with Clients assuming full and exclusive responsibility in this case for the insufficiency or inaccuracy of the data transmitted.
6. Data Protection Rights
What are your rights?
- Right of access
- Right to obtain confirmation of what personal data of yours is being processed and information about it, such as the purposes of the processing, the storage periods, among others.
- Right to rectification
- Right to request the rectification of your personal data that is inaccurate or request that incomplete personal data be completed (such as address, tax identification number, email, telephone contacts, etc.).
- Right to erasure or to be “forgotten”
- Right to obtain the erasure of your personal data, in cases where this is legally possible and provided that there are no valid grounds for its retention, such as cases where the data must be kept to comply with a legal obligation.
- Right to portability
- Right to receive the data you provided to us in a commonly used and machine-readable digital format or to request the direct transmission of your data to another entity that becomes the new controller of your personal data.
- Right to object and automated individual decisions
- Right to object or withdraw your consent at any time to data processing, in cases where this is legally possible (such as in the case of data processing for marketing purposes).
- Right to restriction
- Right to request the restriction of the processing of your personal data, in cases where this is legally possible, in the form of:
- Suspension of processing
- Limitation of the scope of processing to certain data categories or processing purposes.
- Right to request the restriction of the processing of your personal data, in cases where this is legally possible, in the form of:
- Right to complain
- Right to lodge a complaint with the supervisory authority, the CNPD (National Data Protection Commission).
How can you exercise your rights?
The exercise of rights is free of charge, except in the case of a manifestly unfounded or excessive request, in which case a reasonable fee may be charged based on the costs involved. Medbloom must confirm proof of your identity and may request additional information that is necessary for this purpose.
The response to requests must be provided within a maximum period of 30 days, unless it is a particularly complex request (in which case the aforementioned period of 30 days may be extended up to 2 months).
Exercise your rights through the following addresses:
Entity: Medbloom
Address: Av. Almirante Reis, 127 – 1º Esq. 1150-007 – Lisbon Portugal
Email: info@medbloom.pt
7. Protection of Personal Data
How does the Entity protect your personal data?
Medbloom applies the technical and organizational measures necessary to ensure that, by default, only the personal data of Clients necessary for each specific processing purpose are processed, with said measures being reviewed and updated periodically by the responsible department.
Medbloom has implemented the appropriate, necessary, and sufficient logical, physical, organizational, and security measures to protect your personal data against accidental or unlawful destruction, loss, alteration, disclosure, or unauthorized access.
Whenever it is necessary to communicate personal data of its Clients to Third Parties, Medbloom guarantees that:
a) the sharing of personal information complies with current legal regulations; b) the transmission is carried out securely; c) third parties are contractually obliged to observe the duties of confidentiality and secrecy and to ensure the security of the personal data that is communicated to them for this purpose, and may not use such data for any other purposes, for their own benefit or that of third parties, nor may they correlate it with other data that is available to them.
Medbloom Cookie Policy
What are cookies?
Cookies are small text files stored on your computer or device when you visit a website. They are used to store information about your visit, such as your language preference, browser settings, and login status. This information can be used to make your next visit to the website easier and more efficient.
What types of cookies does Medbloom use?
Medbloom uses two types of cookies:
- Essential cookies: These cookies are necessary for the website to function properly. They allow you to navigate the website and use its features, such as logging in and adding items to your shopping cart.
- Analytical cookies: These cookies collect information about how you use the website. This information is used to improve the website’s performance and user experience.
How can I manage cookies?
Most web browsers allow you to control cookies through your browser settings. You can choose to block all cookies, or only allow certain types of cookies. You can also clear cookies that have already been stored on your device.
To learn more about cookies, please visit the following websites:
- Wikipedia: https://en.wikipedia.org/wiki/HTTP_cookie
- Information Commissioner’s Office: https://ico.org.uk/global/cookies/
Medbloom’s Cookie Policy
Medbloom uses cookies to improve your experience on our website. By using our website, you agree to our use of cookies.
How to contact us
If you have any questions about Medbloom’s Cookie Policy, please contact us at:
- Email: info@medbloom.pt
- Address: Av. Almirante Reis, 127 – 1º Esq., 1150-007 Lisbon, Portugal