Privacy Policy

DATA CONTROLLER	Associação Nacional das Farmácias (hereinafter reffered to as ANF)
HEADQUARTERS	Rua Marechal Saldanha, 1, 1249-069, Lisboa, Portugal
VAT	500 885 494
DPO	dpo@anf.pt
WHO WE ARE	ANF is an association that represents the Portuguese pharmacies.
NOTICE	We believe that any activity and solution involving the processing of personal data should be transparent to the individuals to whom the data belongs and that this is the ethically responsible and sustainable attitude. The purpose of this privacy policy is to explain how we process your personal data and what you should expect when using the website and its services. We recommend that you read this document to find out the conditions under which your personal data is collected and used.

1. WHAT IS THIS POLICY ABOUT?

1.1. This Privacy Policy explains how we collect and process the personal data that are necessary for the operation of the WEBSITE and the provision of services through it.

Examples of these services are the information update on the initiatives described in iniciatives described in the Portuguese Pharmacies´White Book.

2. WHAT ARE PERSONAL DATA?

2.1. Personal data are understood as any information (irrespective of nature or medium) relating to a person and which identify that person.

2.2. These data also include the information that makes a person identifiable.

2.3. An identifiable person is to be understood as a person who can be identified, directly or indirectly, in particular by reference to an identification number or to one or more factors specific to their physical, physiological, mental, economic, cultural or social identity.

Examples of personal data collected include “name” and “email”.

3. HOW WILL WE USE YOUR PERSONAL DATA?

3.1. ANF will use the personal data provided for the following purposes:

(a) WebApp Operations & Management;

(b) Adaptation, improvement and modification of services, in particular through the identification of usage trends, data analysis, audits;

(d) Manage and improve the services and the contents according to the user’ experience.

3.2. Your personal data will not be reused for any purposes other than those previously identified or for any purposes unrelated to those for which they were initially collected.

4. ON WHICH LEGAL BASIS DO WE PROCESS THE PERSONAL DATA?

4.1. ANF processes personal data based on specific legal basis, according to the purposes for which they are used.

4.2. The legal basis for processing personal data is shown below, in accordance with the purposes listed above:

(a) WebApp Operations & Management

ANF's legitimate interests and Consent (Cookies). It is in ANF's interest to carry out audits, analyse and review permissions and implement technical and support measures in order to better manage the WEBSITE.

(b) Adaptation, improvement and modification of services, in particular through the identification of usage trends, data analysis, audits

ANF’s legitimate interest and Consent (Cookies). It is in ANF's interest to develop the services and the content in order to better manage the WEBSITE.

(d) Respond to requests for contact and information

ANF’s legitimate interest and Consent (Cookies). It is in ANF's interest to respond to requests for contact and information made through the contacts made available by ANF (email, contact area, telephone and social networks), in an appropriate manner. By sending a request for contact and information, you also have a reasonable expectation that ANF will respond to you.

(e) Manage and improve the services and the contents according to the user’ experience

ANF's legitimate interests and Consent (Cookies). It is in ANF's interest to carry out improvements to all the services and contents in order to better manage the WEBSITE.

5. WHICH PERSONAL DATA DO WE COLLECT?

5.1. ANF only collects and processes the personal data deemed necessary and adequate to the purposes indicated:

(a) WebApp Operations & Management

Cookie data.

(b) Adaptation, improvement and modification of services, in particular through the identification of usage trends, data analysis, audits

Cookie data.

Name and e-mail address. and content of the request.

Cookie data.

(d) Collaborate in the development of services and content that meet the User's needs;

Name and e-mail address.

Cookie data.

(e) Manage and improve the services and the contents according to the user’ experience.

Cookie data.

6. HOW DO WE COLLECT YOUR PERSONAL DATA?

6.1. We collect personal data:

(a) Through forms you fill in on the WEBSITE, namely (i) user registration forms, (ii) contact request forms, (iii) through the website itself, namely through your activity on the website; (iv) through the communication and interaction that the WEBSITE makes with your equipment, namely through cookies installed on your equipment.

6.2. ANF commits to process your data in accordance with the applicable legislation and in a legitimate manner.

6.3. ANF will not sell, lease or share your personal data with third parties. However, ANF may disclose your personal data to third parties in specific cases, as clearly identified in this Privacy Policy. See Point 13 for additional information.

6.4. This Website and the services provided by ANF are not intended for minors; no personal data of minors will be processed intentionally.

7. WHAT ARE COOKIES?

7.1. Cookies are small files stored on your device by your browser for the purpose of collecting information.

7.2. Essential cookies are strictly necessary for the adequate functioning of the Website, namely by allowing the following:

(a) User identification and authentication; or

(b) Memorisation of user preferences; or

(c) Enabling users to complete tasks without needing to re-enter information (e.g. when navigating to a different page or returning to the previous page, as occurs with form data, shopping carts, etc.); or

(d) Managing, enabling, facilitating or supporting communications from/through the Website; or

(e) Providing features requested by users.

7.3. These cookies will be stored on your device and consent is not required.

7.4. Cookies can also be used to collect information, namely for the following purposes:

(a) Measuring and obtaining Website use statistics, such as the number of individual visitors; detecting search engine keywords; measuring browsing parameters, such as visit duration, most visited pages or most frequently accessed contents (analytics cookies); or

(b) Certain cookies are used by third parties, i.e. other than the website owner, to collect browsing information on different websites, in order to create user profiles (third-party cookies).

7.5. The use of tracking, advertising, analytical and third-party cookies will always be conditional upon your acceptance and prior consent, which can be withdrawn at any time, through specific tools and/or your browser.

7.6. Similarly to cookies, tracking pixels, web beacons and similar tools are images and/or pieces of code loaded when users visit websites, pages or contents, and also when they open certain emails.

7.7. These tools establish a connection to a server and track user behaviour for the purpose of obtaining data used in online marketing, analytics and retargeting.

7.8. When a user visits the target website, the visit is recorded in the server log and information collected, which may include several user data, namely their operating system, duration of the visit or IP address.

7.9. The use of these tools will always be conditional upon your acceptance and prior consent, which can be withdrawn at any time, through specific tools and/or your browser.

7.10. To find out more about the cookies we use, you should consult the Cookie Notice of the Cookie Management Tool, which you can access via the hyperlink in the footer of the WEBSITE.

7.11. To find out how to withdraw consent, you can open the Cookie Management Tool at any time and adjust and define the cookie settings.

8. HOW DO WE PROTECT YOUR PERSONAL DATA?

8.1. Your personal data is kept secure by adopting various technical and organisational security measures to ensure the confidentiality, integrity and availability of processing operations.

8.2. We only use data centre providers that offer us adequate and documented security measures, namely guarantees that your personal data is stored on servers that are kept in controlled environments with limited access and that offer guarantees of resilience.

8.3. Personal data is kept on servers that provide us with adequate security guarantees to protect personal data from unauthorised disclosure, loss, misuse, alteration, processing or access, as well as from any other form of unlawful processing.

8.4. Similarly, when you browse the WEBSITE, we protect your data with encryption, such as Transport Layer Security (TLS, a security protocol that protects telecommunications over the Internet).

8.5. Although we take the care and precautions we deem appropriate to protect the personal data you provide and that we collect, you should be aware that no security system is impenetrable.

8.6. Therefore, we remind you of the need to take certain precautions when browsing and using the WEBSITE, particularly when browsing on public or shared networks. You should also take care to log in and log out every time you close your browser.

9. HOW LONG DO WE KEEP YOUR PERSONAL DATA?

9.1. Your personal data will be kept for the period of time deemed necessary for the purposes for which they are intended, as described in this Privacy Policy. Therefore:

(a) WebApp Operations & Management

For the duration of the cookies used or until you withdraw your consent.

(b) Adaptation, improvement and modification of services, in particular through the identification of usage trends, data analysis, audits

For the duration of the cookies used or until you withdraw your consent.

(d) Respond to requests for contact and information

For twelve (12) months after the request.

(e) Manage and improve the services and the contents according to the user’ experience

In the event that a specific or mandatory period of time is provided for by law, that period shall be the period of data storage.

9.2. Without prejudice, the periods indicated do not affect the storage of personal data beyond those periods in the following situations:

(a) as long as the limitation period for any rights related to that purpose has not expired;

(b) for the purposes of declaring, exercising or defending the legal rights of ANF in any legal proceedings;

(d) in order to fulfil new legal obligations to which ANF may become subject;

(e) in order to fulfil orders from judicial authorities and/or criminal law enforcement agencies within the scope of duly identified judicial proceedings, in compliance with a reasoned order from the competent judicial authority;

(f) in order to comply with acts issued by administrative authorities and competent regulatory bodies within the scope of their powers and competences, namely duly identified and substantiated administrative proceedings.

9.3. In all other cases, personal data will be kept for no longer than the periods indicated above, which ANF deems necessary to fulfil the purposes indicated above.

9.4. At the end of the storage period, all personal data collected will be deleted or anonymised.

10. HOW YOU CAN EXERCISE YOUR RIGHTS:

10.1. You should know your rights before we explain how they can be exercised. In this sense, you are entitled by law to exercise the following rights:

(a) Access: Confirmation as to whether or not personal data concerning you are being processed and, where that is the case, access to your personal data.

(b) Retification: Rectification of inaccurate personal data concerning you and the right to have incomplete personal data completed.

(d) Restriction of processing: Restriction of processing in any of the situations specified in the legislation.

(e) Objection: Object, at any time, to processing of personal data concerning you.

(f) Porability: Receive the personal data concerning you, which you have provided to a controller, in a structured, commonly used and machine-readable format.

(g) Withdraw consent: You have the right to withdraw consent previously provided for some processing activities.

10.2. You also have the right to submit a complaint to the competent supervisory authority (in Portugal, the National Data Protection Commission, at www.cnpd.pt)

10.3. In order to exercise the aforementioned rights, you should contact ANF through the following email address: dpo@anf.pt.

10.4. If you do not wish to be photographed or filmed on the day of Expofarma, please contact someone from the organisation.

10.5. If you ask us to delete some or all of your personal data, ANF may only keep the personal data necessary to fulfil its legal obligations.

11. HOW TO WITHDRAW CONSENT

11.1. You have the right to withdraw your consent at any time and without any justification.

11.2. We remind you that the withdrawal of consent does not compromise the lawfulness of the processing carried out on the basis of the consent previously given and that ANF will keep a record of that consent in order to fulfil its legal obligations (to demonstrate the lawfulness of the processing up to the moment of withdrawal of consent).

11.3. To withdraw consent:

(a) WebApp Operations & Management

(b) Adaptation, improvement and modification of services, in particular through the identification of usage trends, data analysis, audits

(d) Collaborate in the development of services and content that meet the User's needs;

(e) Manage and improve the services and the contents according to the user’ experience.

By opening the Cookie Management Tool, which you can access through the link in the footer of the WEBSITE, and adjust and define your settings; or through your browser settings, deactivating cookies and other tools; or using a blocking tool that can be used as an extension to your browser.

12. WHEN DO WE DISCLOSE DATA TO THIRD PARTIES?

12.1. ANF may use third parties to provide certain services, for example, data centre management, maintenance, technical support and marketing, which may have access to some of the personal data, namely the data necessary for the contracted purposes.

12.2. ANF ensures that the entities that have access to the data are credible and offer high guarantees of protection, and that no data is transmitted to them beyond what is necessary for the provision of the contracted service(s), remaining ANF as the data controller of the personal data made available.

12.3. ANF may also disclose your data to the following entities:

(a) Companies in the business group to which ANF belongs and with which it has shared services or commercial partnerships for the creation and offer of benefits;

(b) Other partners outside your business group (with your prior authorisation);

(c) Legal representatives and courts, for the purposes of representing, declaring, exercising or defending ANF's rights in legal proceedings;

(d) Judicial authorities or competent criminal police bodies within the scope of duly identified legal proceedings, in fulfilment of a reasoned order from the competent judicial authority.

13. THIRD-PARTY WEBSITES.

13.1. The Website may contain links to other third-party websites and apps, which may collect and process your personal data for the purposes of those third-party websites and apps. Processing of these data is the sole responsibility of the owners of those third-party websites and apps. ANF is not responsible for their policies and/or practices.

14. DATA TRANSFERS OUTSIDE THE EUROPEAN UNION.

14.1. In the event of transfers of data to third countries outside the European Union, in particular when necessary for the purpose of providing services to ANF, the legal rules on transfers will be complied with, with respect to (i) the adequacy of the country of destination with regard to the protection of personal data and the requirements applicable to such transfers, or (ii) the existence of adequate guarantees to carry out such transfers, in particular standard contractual clauses approved by the European Commission and, if necessary, the implementation of supplementary measures to guarantee the proper protection of personal data.

15. MINORS.

15.1. This Website is not intended for minors under the age of thirteen (13); therefore, we request them not to provide us any personal data through this Website.

16. SPECIAL CATEGORY DATA.

16.1. ANF requests you not to send us nor share with us any information relating to (i) physical or mental health, including information related to the provision of healthcare services or other medical information, (ii) race, ethnicity, political opinions, religious or philosophical beliefs, trade union membership, genetic information, biometric information, sex life or sexual orientation.

16.2. If you still send us or share personal these categories of personal data, the data received will be deleted immediately.

17. CHANGES TO THE PRIVACY POLICY.

17.1. ANF reserves the right to adjust or change this Privacy Policy at any time. All changes will be publicised.

18. OUR CONTACT DETAILS.

18.1. If you have any questions or doubts about this Privacy Policy, please email us, at dpo@anf.pt.

19. LEGAL BASIS AND DISPUTE RESOLUTION.

19.1. The Privacy Policy, as well as the collection, processing or transmission of User Data, are governed by the provisions of Regulation (EU) 2016/679, of the European Parliament and of the Council, of 27 April 2016, and by the laws and regulations applicable in Portugal.

19.2. Any disputes arising from the validity, interpretation or execution of the Privacy Policy, or that are related to the collection, processing or transfer of

20. VERSION.

Lisbon (PORTUGAL), 18th March 2024