What Data are Collected About You

Personal data collection is essential to allow us to render our Services to Users. What data are collected about Users?

• Personal data supplied by third party: Rede D’Or is provided with personal data by third parties such as partners or service providers that are somehow connected to you. Data provided by such sources allow Rede D’Or to render better services to you.
• Personal data supplied by User: Rede D’Or will collect all the personal data entered or sent by Users as they sign up and log in to our portal. Data may vary according to the type of service Users access. Below you will find a non-exhaustive list of the services provided by Rede D’Or and the data they collect:

What Cookies Are

Cookies are files or data that may be stored in the Users’ devices whenever they brose the website or use Rede D’Or’s online services.

When Users sign up and log in to Rede D’OR portal they are informed of the types of cookies that are used and why they are used.

To collect any type of personal data, Rede D’Or will always comply with the following rules:

• only data considered essential for the target services will be collected;
• in case other types of personal data are deemed necessary, we will take all necessary measures to notify and request the Users’ consent to collect them;
• any consent is granted by Users on a voluntary and informed basis;
• personal data that are collected will be used for the sole purposes informed to Users.

How We Use Your Personal data

Personal data are processed by Rede D’Or for various purposes. Below you will find the major purposes for which Users’ data will be processed.

• to manage, provide, expand and improve the Services offered to Users;
• to be used in our communication with Users and to provide them and other Rede D’Or’s client with information about our products and services;
• to assess the offering of specific products or services and under what conditions.

• storing medical records for as long as 20 (twenty) years commencing on the date of the latest record, pursuant to art. 6 of Brazilian Law no. 13.787/2018;
• issuing compulsory notification in cases of suspected child abuse, pursuant to art. 13 of the Brazilian Statute on Children and Adolescents;
• collecting a patient’s informed consent for medical procedures that involve inherent risks, pursuant to art. 22 of the Brazilian Code of Medical Ethics;
• sharing data with the Brazilian Department of Health to be encompassed by a Minimum Set of Data (MSD), pursuant to art. 47 of Brazilian Law no. 8.080/1990 and to art. 4 of Brazilian   Ordinance no. 29/2017;
• releasing compulsory notification of diseases, pursuant to Brazilian Law no. 6.259/1975;
• storing access records to the WiFi system made available at all Rede D’Or’s Hospitals and Laboratories, pursuant to art. 13 of the Brazilian Civil Rights Framework for the Internet.

• such as medical examinations during which personal data such as the User’s height, weigh, eating habits, blood pressure, amongst other data, are collected.

• in the event of emergency care in emergency rooms, for instance, when informed consent for high-risk procedures is impossible to be obtained.

• For instance, concerning identification procedures in order to grant Users access to Rede D’Or’s Hospitals and Laboratories.

• internal investigations/audits that may require the use of the User’s sensitive personal data.

• any communication sent with marketing and information purposes;
• releases about events or research that is pertinent to Rede D’Or’s activities.

1. partners and suppliers, particularly healthcare carriers with whom Rede D’Or hospitals and laboratories are licensed to operate with, so as to develop and provide Users with healthcare services;
2. government officials and entities, as well as with other third parties, aiming to protect Rede D’Or’s interests with respect to any type of conflict, including law suits and administrative cases;
3. in the case of transactions and any type of amendment in corporate equity holding positions that concern Rede D’Or, in which case disclosing personal data may be required for the continuation of Services;
4. whenever requested by court order or administrative authorities who have legal powers to request so.

In additional to our technical efforts, Rede D’Or undertakes institutional measures to protect the Users’ personal data as provided by our privacy governance program, which applies to all our governance structure and activities and which is regularly updated and managed by  our Personal Data Protection Officer.

Although Rede D’Or endeavors its best efforts to safeguard privacy and protect the Users’ personal data, it should be acknowledges that no information sharing is ever totally secure, hence susceptible to technical failures, viruses or malware activities.

Anyway, in the remote hypothesis that events of the aforementioned nature occur, Rede D’Or will endeavor all its efforts to remediate any possible adverse outcomes of such events, and shall share all its efforts as clearly and straightforwardly as possible with Users.

How Long Your Personal Data Shall Be Stored

Personal data processed by Rede D’Or shall be eliminated whenever they cease to be useful for the purposes they were collected, or whenever any User requests that they be eliminated, except when elimination prevents complying with any legal or regulatory obligation. Examples of the latter obligations are the Electronic Medical Record Law (art. 6 of Brazilian Law no. 13.787/2018), which provides that such records be kept for at least 20 (twenty) years commencing on the date of the latest record; data transfer to third parties (provided data processing requirements are complied with); and exclusive use by Rede D’Or, also in what refers to Rede D’Or exercising its rights in law suits or administrative cases.

Applicable Legislation And Amendments

The present document was written out in compliance with the Brazilian Federal Law no. 13.709/2018 – General Personal Data Protection Law – “LGPD”.

Rede D’Or maintains the right, at its own discretion, to change, modify, amend or eliminate portions of the present document at any time.