Privacy and Personal Data Protection Policy of the Nursing School of Coimbra
Nursing School of Coimbra
The Nursing School of Coimbra is a public higher education institution, whose mission is higher education, research, and service delivery to the community. The Nursing School of Coimbra is also a nonprofit organization and pursues social goals.
The Nursing School of Coimbra deals with personal data on a daily basis and it is committed to the policies and obligations imposed by the new European legislation on data protection, namely Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data), hereinafter referred to as GDPR.
The Nursing School of Coimbra is strongly committed to the protection of personal data for which it is responsible and intends to implement effective technical and administrative measures for the compliance with the principles of data protection, taking into account the nature, scope, context, and purposes of data processing, as well as the risks of failure in the protection of the rights and freedoms of the individuals.
Therefore, this personal data protection policy shall be approved with the purpose of reinforcing its commitment and compliance with the rules of privacy and protection of personal data. This policy shall apply to all operations carried out by the Nursing School of Coimbra.
Personal data means any information relating to an identified or identifiable natural person, both directly and indirectly.
Entity responsible for data processing
The entity responsible for data collection and processing is the Nursing School of Coimbra which, in its context, shall determine what type of data to be collected, the purposes and means of the processing, and the storage periods.
Type of personal data collected
The Nursing School of Coimbra, within the scope of its activity, shall collect and process personal data necessary for the pursuit of its mission and responsibilities, in accordance with the Legal Framework of Higher Education Institutions (Law no. 62/2007, of 10 September) and its Statutes (approved by Legislative Decree 50/2008, DR. no. 185, 2nd Series, of 24 September).
Collection of personal data
The Nursing School of Coimbra shall collect personal data on-site, in writing or through computer systems. Collected personal data shall be processed by both non-automated (e.g., manual files) and automated means, in compliance with the personal data protection law, and stored in specific databases created for that purpose. Under no circumstances shall collected data be used for any other purpose other than that for which consent has been given by the data subject or when required by law.
Lawfulness of personal data processing
In the Nursing School of Coimbra, the processing of personal data shall depend on the legitimate and lawful conditions for that processing, as well as the compliance with the principle of proportionality.
Specifically, personal data shall be processed at the Nursing School of Coimbra only if:
- it is necessary for the purposes of the legitimate interests and if the data subject has given consent to the processing;
- it is necessary for the performance of a contract or for compliance with a legal obligation to which the controller is subject;
- it is necessary in order to protect the vital interests of the data subject or of another natural person;
- is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
- it is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject;
- it is necessary for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes, under the terms foreseen in the GDPR.
Purposes of personal data processing
When personal data processing by the Nursing School of Coimbra is based on the data subject’s consent, information shall be provided about the specific and legitimate purposes of data collection.
When personal data is processed for purposes other than those for which they were initially collected, the Nursing School of Coimbra shall request explicit consent for that further processing, with the exception of cases in which data processing is lawful without consent, in accordance with the legislation in force.
Personal data processed by the Nursing School of Coimbra can be legitimately passed on to a third party whenever there is compliance with the purposes directly associated with the legitimate functions of the data owner or the responsible for data processing.
Collected data shall be used by the Nursing School of Coimbra in accordance with the purposes determined at the time of collection or for the compliance of legal obligations.
Collected data shall be processed in a confidential manner and can be accessed by a restricted number of workers/collaborators of the Nursing School of Coimbra in order to carry out their professional duties, within the limits applicable.
Personal data storage period
The storage period varies according to the purpose of the processing.
The Nursing School of Coimbra shall store personal data for as long as it is required for any liability arising from legal relations, contract processing, or the application of pre-contractual measures. If there are no specific legal requirements, data shall be stored only for the necessary period to fulfill the purposes for which data were collected, or for a time period authorized by the Control Authority, after which data shall be deleted.
At the Nursing School of Coimbra, personal data may be stored for longer periods insofar as the personal data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes, while ensuring appropriate safeguards, in accordance with the legislation in force, for the rights and freedoms of the data subject. Those safeguards shall ensure that technical and organizational measures are in place in particular in order to ensure respect for the principle of data minimization.
Rights of data subjects
In accordance with the legal framework on Personal Data Protection, the Nursing School of Coimbra shall ensure that data subjects have the right to access, update, rectify or erasure their personal data, within the limits of the legislation in force, upon a written request addressed to the data protection officer.
The data subject shall have the right to withdraw his or her consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
Furthermore, the data subject has the right to be notified in case of a personal data breach, in accordance with the GDPR.
The data subject’s right of access should be limited when it adversely affects the rights and freedoms of others.
Personal data protection
The Nursing School of Coimbra shall implement technical and organizational measures to secure personal data stored in the system against unauthorized access, use, alteration or destruction.
Personal data shall be stored for a period of time limited to what is necessary for the purposes for which they are collected and processed, in compliance with the legislation in force.
Processing of technical/anonymous information
The websites of the Nursing School of Coimbra collect anonymous information about its visitors which is made available by its browsers and web servers, such as browser type, language preference, originating website, pages visited, length of visit, date and time of each visit, search terms, among others. The Nursing School of Coimbra shall not intentionally collect personally identifiable information. This information helps to understand how our users use the website so as to improve the quality and usefulness of the services provided.
Notwithstanding the anonymous information collected and processed on our Web Analytics platform, technical information may be collected about your visit(s) by the technological infrastructure that supports the system. The Nursing School of Coimbra shall not share this information with third parties, without prejudice to the legal requirements imposed by the legislation in force (that is, this information may be shared with the competent public authorities, in compliance with the Portuguese and European legislation).
Cookies can be blocked and/or disabled by the user. Please check your browser settings for more information.
Changes to this Policy
Questions and suggestions
To learn more about how the Nursing School of Coimbra processes your personal data or to clarify any information, please submit a complaint or comment regarding our privacy and personal data protection policy to:
Escola Superior de Enfermagem de Coimbra
Av. Bissaya Barreto, S/N
Data Protecion Officer
Date of approval: 12/07/2018