Privacy Policy and Data Protection
This Privacy Policy details how VORTICEPACIFICO ENGENHARIA LDA collects, processes, and protects data when you access bodyaestheticcenters.org/us/, adhering to the General Data Protection Regulation (EU 2016/679 - GDPR) and international data privacy principles.
1. Core Data Protection Principles
We process personal data in strict alignment with recognized international principles:
- Lawfulness, Fairness, and Transparency: Processing is transparent and strictly limited to stated legitimate purposes.
- Purpose Limitation: Collected data is never processed incompatibly with the original directory indexing purpose.
- Data Minimization: We only collect information strictly necessary to operate a fast, functional directory.
- Accuracy: Active mechanisms for clinics and users to rectify outdated listings promptly.
- Storage Limitation: Technical access logs are kept only as long as required for server security.
- Integrity and Confidentiality: State-of-the-art TLS/HTTPS encryption across all user interactions.
2. Categories of Processed Data
| Data Category | Description and Fields | Operational Purpose | Legal Basis |
|---|---|---|---|
| Technical Server Logs | IP address, request timestamp, browser user-agent, operating system, and referral headers. | Edge security, bot protection, DDoS mitigation, and server performance monitoring. | Legitimate interest in maintaining server resilience (Art. 6.1.f GDPR). |
| Public Business Records (Listings) | Clinic name, physical address, public phone numbers, corporate emails, websites, and social links. | Indexing and displaying aesthetic centers and medical practices for consumer navigation. | Legitimate interest in organizing publicly accessible business directory services (Art. 6.1.f GDPR). |
| Direct Inquiries | Name, email address, and message content sent to our contact mailboxes. | Responding to listing updates, removal requests, or user questions. | Consent of sender and compliance with statutory legal obligations (Art. 6.1.a & c GDPR). |
3. Data Retention Periods
- Technical Edge Logs: Stored for 30 to 90 days for cybersecurity analysis, after which they are automatically anonymized or purged.
- Inquiries and Support Communications: Kept for the duration necessary to resolve the inquiry and up to 3 years to document statutory compliance.
- Directory Listings: Retained while publicly active in commerce, or until a verified request for listing correction or removal is submitted.
4. Third-Party Data Sharing
VORTICEPACIFICO ENGENHARIA LDA does not sell, lease, or monetize personal data to data brokers or advertisers. Data is only accessible to essential infrastructure providers (cloud hosting, content delivery networks, and DDoS security partners operating under GDPR-compliant Standard Contractual Clauses).
5. Your Privacy Rights
Regardless of residency, you possess full, free rights to exercise:
- Access: Inquire whether your personal information is processed and receive a clear overview.
- Rectification: Request correction of inaccurate, incomplete, or obsolete listing details.
- Erasure (“Right to be Forgotten”): Request the permanent removal of your listing or contact records.
- Restriction of Processing: Request suspension of listing display pending factual verification.
- Objection: Object at any time to listing inclusion based on legitimate interests.
To exercise any privacy rights, simply email our Data Protection Officer at legal@vorticepacifico.com. All verified requests receive a formal response within 30 days without charge.
6. Supervisory Authority Contacts
If you believe our data processing violates statutory privacy standards, you have the right to lodge a complaint with our lead supervisory authority: Comissão Nacional de Proteção de Dados (CNPD) (www.cnpd.pt), or your local state privacy regulator.