Data Protection and Privacy Commitment

Zemir Pharma Consulting, Lda. (hereinafter referred to as Zemir Pharma) has implemented the technical and organizational measures necessary to comply with applicable community and national legal standards in the area of data protection, privacy and information security, in particular those contained in the General Data Protection Regulation.

Responsible for the Processing of Personal Data

Zemir Pharma is the entity responsible for processing all personal data provided to it for the provision of services requested by the data subject or their legal representative.

Collection and Processing of Personal Data

Zemir Pharma processes personal data strictly necessary to provide information, carry out administrative procedures within the scope of its duties and competences and to publicize its activities, in accordance with interactions through the different service and communication channels.

Personal data collected by Zemir Pharma are processed electronically whenever possible, ensuring protection, privacy and security in accordance with current legislation.

Legal Principles

All data processing operations are guided by the fundamental legal principles applicable within the scope of data protection and privacy, namely regarding their circulation, lawfulness, loyalty, transparency, purpose, minimization, conservation, accuracy, integrity and confidentiality, and Zemir Pharma , available to demonstrate its responsibility towards the data subject or any other third party that has a legitimate interest in this matter.

Lawfulness and Purpose of Processing

Data processing operations carried out by Zemir Pharma fall within one or more specific purposes, with the consent of the data subject constituting the basis for legitimacy and the processing being considered necessary for:

- The execution of a service provision contract in which the data subject is the contractor;

- Compliance with a legal obligation to which the controller is subject.

The personal data collected may also, and eventually, be processed for statistical purposes, for information dissemination or promotional purposes and for communication purposes, through direct communication, whether by correspondence, email, messages or any other electronic communications service.

However, prior information and the collection of express authorization for these latter purposes are always ensured, citizens may, at any time, exercise their right to object to the use of their personal data for other purposes.

Data Retention Periods

Personal data will be stored for the period necessary for the purposes for which they were collected or subsequently processed, in order to ensure compliance with all applicable legal standards regarding archiving.

Use of Cookies

The cookies policy is available at www.zemirpharma.com.

Communication of Data to Other Entities

The provision of information, through the various service and communication channels, may eventually imply the use of services from subcontracted third parties, which may imply access by these entities to personal data.

In these circumstances and whenever necessary, Zemir Pharma , will only hire entities that provide sufficient guarantees of implementing technical and organizational measures appropriate to meet applicable standards, with such guarantees being formalized in a contract signed between Zemir Pharma , and each of these third entities.

Data Recipients

Except in compliance with legal obligations, under no circumstances will personal data be communicated to third parties that are not subcontracted entities or legitimate recipients, nor will any communication be carried out for purposes other than those mentioned above .

Security Measures

Taking into account the most advanced techniques, the costs of application and the nature, scope, context and purposes of the processing, all entities that are ( sub )contracted by it implement the necessary technical and organizational measures to ensure a level of security appropriate to the risk.

To this end, various security measures may be adopted in order to protect personal data against dissemination, loss, misuse, alteration, processing or unauthorized access, as well as against any other form of unlawful processing.

It is the sole responsibility of the data subject to keep access codes secret and not share them with third parties. In the particular case of computer applications used to access channels, the data subject must maintain and keep access devices in secure conditions and follow the security practices recommended by manufacturers and/or operators, in particular with regard to the installation and updating of the necessary security applications, including antivirus applications.

If it is necessary to subcontract services to third parties that may have access to the data subject's personal data, Zemir Pharma's subcontractors, will be obliged to adopt security measures and protocols, as well as other technical measures adapted to protect the confidentiality and security of personal data, to prevent unauthorized access, loss or destruction of personal data.

Exercise of the Rights of Personal Data Holders

As holders of personal data, you may, at any time, exercise your data protection and privacy rights, namely the rights of access, rectification, erasure, portability, limitation or opposition to processing, under the terms and with the limitations provided for in the applicable rules.

Any request to exercise data protection and privacy rights should be addressed to Zemir Pharma , in writing, by the respective data subject, in accordance with the procedure and contact details described below.

Complaints and Suggestions

Data subjects have the right to file a complaint, either by registering in the Complaints Book or by submitting a complaint to the regulatory authorities.

You can also make suggestions by sending an email to the following address: dpo@zemirpharma.com.

Incident Reporting

Zemir Pharma appointed a Data Protection Officer and implemented measures in the area of data protection, privacy and information security.

Data Protection Officer

Priscila Vilhena Ganga

dpo@zemirpharma.com

In the event that data subjects wish to report the occurrence of any personal data breach that causes, accidentally or unlawfully, the destruction, loss, alteration, disclosure or unauthorized access to personal data transmitted, stored or subject to any other type of processing, they may contact the Data Protection Officer in accordance with the instructions and contact details described above.

Privacy Policy Changes

Zemir Pharma may, at any time, make any changes that are considered appropriate to this Data Protection and Privacy Policy, in order to ensure its updating, development and continuous improvement, with such changes being duly announced publicly on the website www.zemirpharma.com, in order to guarantee transparency and information.

 

Last updated: September 2024