Oncoclínicas do Brasil Serviços Médicos S.A., on behalf of all its subsidiaries, affiliates, or entities that in any way are part of its structure (“Oncoclínicas”), complying with the transparency requirements set forth in Law 13.709/2018 (“General Data Protection Law” or “LGPD”), hereby issues this Privacy and Data Protection/Treatment Notice (“Notice”), to explain how the personal data and sensitive personal data (collectively, “personal data”) of its customers, employees, outsourced workers, and/or service providers, collectively referred to as “Users,” are collected, processed, and shared.
All personal data processing practices carried out by Oncoclínicas are subject to applicable laws in the locations where it operates in Brazil or abroad and are aligned with the purpose of the LGPD.
If you have any questions about the content of this Notice, please contact Oncoclínicas’ data protection responsible area at dpo@oncoclinicas.com.
I. How is the User’s personal data collected?
Following the LGPD protocol, Oncoclínicas collects personal data during interactions with the company, such as: during hiring and selection processes; when registering the User at the clinics or at the shared service center; through registration on our website https://grupooncoclinicas.com; during the provision of services by/on behalf of Oncoclínicas; through the company’s compliance channel; among other situations, such as during business relationships with third parties involving the transfer of personal data.
Data obtained through access to the Oncoclínicas website, such as IP address and cookies, are anonymized and aggregated for purposes that include: testing IT systems, creating marketing and promotion models, and improving, enhancing, and developing the services provided by Oncoclínicas.
II. How is the User’s personal data processed?
The processing of personal data by Oncoclínicas occurs, in certain cases, with the User’s consent in accordance with our mission, vision, and values. However, this consent is not necessary when these data are processed to protect the User’s health; or for the legitimate interests of the company; or to comply with legal or regulatory obligations; and/or when necessary for the execution of a contract in which the User is a party.
Furthermore, Oncoclínicas uses the personal data collected in accordance with the LGPD transparency principle for: (i) User support; (ii) research and development of services; (iii) establishment of a contractual relationship or management, administration, provision, expansion, and improvement of services to the User; and (iv) handling LGPD complaints or any other User complaints/suggestions.
All collected information may be used for relationship purposes with the User, such as sending information about new services and specialties offered by Oncoclínicas, promoting events, or conducting satisfaction surveys.
Additionally, Oncoclínicas may subcontract a third party for data processing, in accordance with applicable law, ensuring that it is subject to the obligations of this Notice.
III. In what situations can User data be shared?
Personal data will only be shared with the express authorization of the User regarding anonymization and/or sharing of personal data; and/or in cases where consent is not necessary, as defined by applicable law. If these conditions are met, this data may be shared:
- With subsidiaries, controlled companies, affiliates, and companies that in any way integrate Oncoclínicas’ structure, as well as their respective successors;
- With third parties, for the development of services aimed at the User;
- With authorities or government entities, to comply with a legal obligation or within the scope of any inquiry or judicial/administrative process; and
- With any other individuals or legal entities, for any other purposes expressly consented to by the User.
IV. What are the rights of Users regarding the collected data?
As provided for in the applicable legislation and unless limited by it, Users have the following rights regarding their personal data:
- Right to confirmation of the existence of data processing;
- Right of access to the data;
- Right to correct incomplete, inaccurate, or outdated data;
- Right to anonymization, blocking, or deletion of unnecessary, excessive, or data processed in non-compliance with applicable law;
- Right to data portability to another service or product provider, safeguarding Oncoclínicas’ trade secrets;
- Right to delete personal data processed with the consent of the data subject, except in cases of legal retention and other cases provided for in applicable law;
- Right to information from public and private entities with which Oncoclínicas has shared Data;
- Right to information about the possibility of not providing consent and about the consequences of refusal; and
- Right to revoke consent.
V. Information Security
Oncoclínicas is committed to protecting Users’ personal data in accordance with LGPD terms. All efforts are made to protect your personal data from misuse, interference, loss, unauthorized access, modification, or disclosure.
To this end, Oncoclínicas relies on updated information security tools. In addition, all internal policies and guidelines have been updated to ensure the security of Users’ personal data, and all Oncoclínicas employees and medical service providers have been instructed to undergo mandatory training on how to handle the personal data to which they have access.
Despite the measures taken, no system is completely secure. Therefore, Oncoclínicas undertakes to inform the User in case of any incident involving their personal data, in accordance with Law No. 13,709/2018.
VI. Data Retention
We at Oncoclínicas group keep your personal data under our custody for as long as necessary to fulfill the purpose for which they are processed, or for the time legally required, when there is a retention period defined by law or any other applicable regulation.
VII. Questions and Clarifications
If you have any questions about the content of this Privacy Notice, please contact Oncoclínicas’ area responsible for personal data protection at dpo@oncoclinicas.com.
Learn more about how your data is processed in our Privacy Policy and Data Treatment of Oncoclínicas Por Você (“policy”).
