Demo template: on a real website, this text is reviewed by the clinic and its data protection officer.
Data controller
Clínica Serena, [company name, tax number and address]. Privacy contact: [email].
What we collect
Through the booking form: name, phone, email, area of interest, preferred time and any message you choose to write. Please do not include detailed medical information in the form.
What it is used for
To respond to your request and schedule your consultation. Health data collected later, in consultation, is processed for the provision of healthcare and protected by medical confidentiality.
Legal basis
Your consent, given in the form, and steps taken at your request before entering into a contract.
How long we keep it
Booking requests that do not lead to a consultation are deleted after [period to be defined]. Clinical records are kept for the applicable legal periods.
Your rights
You can request access, rectification, erasure, restriction or portability of your data, object to processing and withdraw consent at any time by writing to [email]. You can also lodge a complaint with the Portuguese data protection authority (CNPD).
Sharing
We do not sell or give away your data. It may be processed by service providers (website hosting, email, booking calendar) acting on behalf of the clinic, with the safeguards required by the GDPR.