Privacy Policy
Information on Data Processing

Under current data protection legislation, we inform you that within the scope of the Commercial Relationship with its users, Quest Clinic is responsible for the processing of personal data which is necessary for the provision of healthcare.

Quest Clinic is committed to the confidentiality of the personal data of those it serves. Therefore, the necessary technical and organizational measures will be taken to comply with the regulations in force, ensuring that the processing of data is lawful, fair, transparent and limited to the legal purpose of medical and therapeutic acts, of which the following services stand out: Medical Consultations (General and Family Medicine, Psychiatry, Pulmonology); Technical Services (Physiotherapy, Speech Therapy, Nutrition and Psychology).

Internally, the data collected is processed by administrative staff, doctors and other healthcare professionals. All employees are subject to professional secrecy and confidentiality. Externally, the data may be consulted by State services and other public entities in the event of inspections, of which the ERS (Health Regulatory Authority) stands out. If the user activates the Health Insurance/System, the data is communicated to the latter within the scope of the contractual agreement with the user.

Everyone must sign the following informed consent:

“The data controller has informed me that I have the right to request access to my data at any time, as well as to rectify it, if necessary. I declare that I have read and understood my rights: Right to Information on how data is processed; Right to Object; Right to Limit Processing; Right to Portability”.

Invoicing data is retained for 10 years for tax purposes. Documents in physical form are shredded using a dedicated shredder that produces 4x40mm particles with security level P4 in accordance with the DIN security protocol. Digital documents are deleted digitally.

At any time, the user may contact our Data Protection Officer, by email info@questclinic.pt, or by telephone: 289 396 132, or 960 195 779. You also have the right to submit a complaint to the CNPD or another competent supervisory authority under the terms of the law.

Subcontractors also have access to the data:

iMed:

Computer program for billing management and clinical management of users. The following data can be entered into this program: full name, SNS number, NIF, date of birth, ID number and respective expiration date, gender, health system, marital status, education, address, mobile phone, e-mail, and also, photo of the cardholder when the ID is used behind the card reader, identification of responsible caregivers, contact details of responsible caregivers:

Situation 7:

Accounting company that has access to users' billing data.
Healthcare providers contracted for the areas of:
General and family medicine, Pulmonology, Psychiatry, Psychology, Physiotherapy, Nutrition and Speech Therapy.

Google WorkSpace:

Server used for managing e-mail, calendars and digital archiving of information. This server hosts the domain www.questclinic.pt.

Users can book appointments via the clinic's website. The data required for this purpose are: first and last name, telephone number and email address. Information about the date and time of the appointment is communicated to the administrative services via email: info@questclinic.pt.