Privacy Policy
AQUALAB – Laboratório Clínico e de Saúde Pública S.A., with its head office in Albufeira, was created in 1992 and, over the years, has experienced an enormous growth in its activity, having surpassed all the set targets and objectives.
In 1999, AQUALAB took an important step by creating collection stations in different areas and took the decision to create a new space for the Central Laboratory to which they moved in 2003.
With the aim of responding to market demands and increasing the quality of its results, AQUALAB has started several accreditation processes, of which the accreditation as a Test Laboratory and the accreditation process for research and quantification of Legionella Pneumophilla, are worth mentioning.
Currently, the AQUALAB Group is growing and is a group of three laboratories which are part of an integrated network of healthcare and clinical analysis in the Algarve region.
AQUALAB – Laboratório Clínico e de Saúde Pública S.A. owns the domain https://www.aqualab.pt/, where its website and services are hosted.
AQUALAB – Laboratório Clínico e de Saúde Pública S.A. therefore makes a point of complying with the provisions of the General Data Protection Regulation (hereinafter, only GDPR) and other privacy and data protection related legislation.
In this Privacy Policy you can find all the information you need to know and understand how we handle your personal data.
1. Who is the data controller?
AQUALAB – Laboratório Clínico e de Saúde Pública, S.A., with headquarters at Quinta da Bellavista – Rua do Estádio, Lote E – 4, 8200 – 127 Albufeira, collective entity with number 502802251, is the controller of data collected on this website. You can contact us for general matters, in writing, through the e-mail address secretariado@aqualab.pt and for matters related to your personal data to rgpd@aqualab.pt.
2. What is personal data?
2.1 Personal data is all information, regardless of its nature and medium, which relates to an individual and which identifies that person.
2.2 Personal data is also information that makes a person identifiable.
2.3 An identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identification number or other factors specific to his or her physical, physiological, mental, economic, cultural or social identity.
2.4 Examples of personal data we collect are, name, email address, postal address.
3. Purposes of Processing and Legal Grounds
3.1 The processing of personal data consists of an operation or set of operations which is performed upon personal data or sets of personal data, whether or not by automatic means, such as collection, recording, organization, structuring, storage, adaptation, retrieval, consultation, use, disclosure, dissemination, comparison, interconnection, restriction, erasure or destruction.
3.2 In Table 1 below, you can see which categories of personal data we process, for what purposes, and also the legal basis on which we do so.
Please note that, without prejudice to the special situations described below, we generally process your data in order to manage our contractual relationship with you and to provide the services you have requested.
3.3 In the case of anonymous browsing, AQUALAB – Laboratório Clínico e de Saúde Pública, S.A. only obtains and keeps the domain number of the server that gives access to the network, the day and time of access to the website, and the daily number of users of each area of the website and their path.
The use of specific services or participation in other activities that AQUALAB – Laboratório Clínico e de Saúde Pública, S.A. may organise may determine the need to collect other personal data besides those mentioned in the table below, as well as imply the performance of other personal data processing activities.
In such a case, you will be provided with additional information on the conditions of data processing and registration, made available on the web page dedicated to these activities. Such terms shall be deemed to be an integral part of this Privacy Policy and shall prevail in case of conflict.
3.4 It is likely that not all situations will apply to you as the data collected will depend on the services you choose to use. However, we provide you with information on all possible scenarios.
3.5 The personal data collected in each case are those requested in the various registration forms and will be used for the specific purpose specified. The personal data marked with an asterisk (*) are compulsory as without them it is not possible to provide the requested service.
Table 1 – Data Categories, Purposes and Legal Grounds
Data Category | Purpose | Legal Grounds |
Browsing data: IP, browser used | Statistics on your use of our products or services, website management operations, adaptation, improvement and modification of services, in particular by identifying usage trends, data analysis. | Explicit consent (non-functional or necessary cookies) or legitimate interest where necessary. |
Sending a newsletter with information about AQUALAB, sending information about events, sending news. | Explicit consent. |
4. Category of data recipients
4.1 In order for your personal data to be processed appropriately for the purposes referred to in point 3 – Purposes of Processing and Legal Grounds -, AQUALAB – Laboratório Clínico e de Saúde Pública, S.A. will provide access to your personal data to the following entities:
(a) third parties that carry out part of the data processing activity, on behalf and under the responsibility of AQUALAB – Laboratório Clínico e de Saúde Pública, S.A., as processor, contracted under the terms of article 28 of the GDPR, or that carry out the data processing activities in co-responsibility with AQUALAB – Laboratório Clínico e de Saúde Pública, S.A. when applicable and according to information provided in the specific case;
(b) individuals, employees and/or collaborators who have been designated to carry out one or more processing activities on their data as “Authorised Persons”, as provided for in Article 29 of the GDPR;
(c) your personal data may be communicated to public bodies or judicial authorities if required by law or for preventing or punishing criminal offences.
4.2 AQUALAB – Laboratório Clínico e de Saúde Pública, S.A., or its processors, may store your data outside the EEA. If so, we will ensure that such processors are subject to legislation which has been deemed by the European Commission to provide an adequate degree of protection and are therefore covered by an adequacy decision or equivalent.
5. Conservation Period
5.1 O AQUALAB – Laboratório Clínico e de Saúde Pública, S.A will keep your personal data for as long as you remain a registered user.
In case you are a subscriber to our Newsletter, after the termination of the subscription, we will keep your personal data only to comply with legal obligations and for a period not exceeding 10 years, counted from the date of termination of the contract, but under the conditions explained below.
After the termination of the subscriber’s contract, we may keep your data to prove compliance with legal obligations, including the GDPR, tax laws, among others.
In this case, we will only keep the data that is absolutely necessary for this purpose and this data will be kept duly blocked and pseudonymised. They will only be accessible to persons specially authorised for the fulfilment of the above mentioned purposes.
5.3 Some processing carried out within the framework of activities organised by AQUALAB – Laboratório Clínico e de Saúde Pública, S.A. may determine different conservation periods. In these cases, the respective periods will be mentioned in the respective specific privacy policies, in the web pages dedicated to them.
6. Rights of Data Subjects
6.1 You may exercise the following rights as provided by the GDPR by emailing rgpd@aqualab.pt.
- Right of access to your personal information;
- Right to rectify your data;
- Right to erasure of data;
- Right to restrict processing;
- Right to portability;
- Right of opposition;
- Right to object to marketing communications;
- Right to lodge a complaint with the CNPD – Comissão Nacional de Proteção de Dados (www.cnpd.pt); in this case, please contact us before lodging a complaint with the CNPD in order to solve the problem as soon as possible.
6.2 You can also contact us on +351 289 580 890 to request information on how to exercise your rights.
6.3 Where your data is processed on the basis of consent (see Box 1) you may withdraw your consent at any time, without this compromising the lawfulness of the processing carried out on the basis of the consent previously given.
6.4 To comply with your requests we may request additional information to identify you as set out in Article 11 of the GDPR in conjunction with Article 67 of the GDPR.
In the event of unjustified refusal to identify yourself, if AQUALAB – Laboratório Clínico e de Saúde Pública, S.A is not able to identify you in any other way, we reserve the right not to respond to your request.
7. Data Protection Officer
AQUALAB – Laboratório Clínico e de Saúde Pública, S.A has appointed a Data Protection Officer who can be contacted via email at rgpd@aqualab.pt.
8. Security
8.1 O AQUALAB – Laboratório Clínico e de Saúde Pública, S.A has implemented and maintained security measures and technical and organizational policies to ensure the security of the personal data we handle.
These measures include, in particular, the execution of confidentiality agreements with our employees and suppliers, policies to restrict and control access to personal data, destruction or anonymization of personal data which is no longer necessary for the purposes for which it was collected.
8.2 By default, no data transfers will occur outside the European Union Area.
8.3 The website may contain links to other websites which may collect and process your personal data for the purposes of those websites. Electronic communications for direct marketing may be sent, provided that the data subject’s right of objection is guaranteed at the time of collection and in each message sent, in the event that a customer relationship exists, or by prior and express consent in the event that no prior legal relationship exists.
Such processing is the sole responsibility of the owners of those websites, and AQUALAB – Laboratório Clínico e de Saúde Pública, S.A has no responsibility for their policies and/or practices.
8.4 Since the security of information depends in part on the security of the computer or electronic device you use to communicate with us, please take appropriate steps to protect this information.
9. Version and Amendments
The last wording of this Privacy Policy is dated 24 February 2022. AQUALAB – Laboratório Clínico e de Saúde Pública, S.A. may change the contents of this Privacy Policy, so we recommend its careful and periodic reading.
Albufeira, 24 March 2022
The Administrative Board,
A Administração,