Last updated: 30 September 2026.
This policy describes the processing of personal data on the website and in the osteopathy practice of Dr Carlos Piedade, Osteopath D.O., professional licence no. 100452 of the Administração Central dos Serviços de Saúde.
1. Data controller
The controller is Carlos Piedade, with main practice at Rua João de Deus no. 76, 2nd floor, room F, São João da Madeira, Portugal. Contact: osteopata@carlospiedade.pt · 963 713 341 · 911 158 230.
Clinics: São João da Madeira, Santa Maria da Feira (Consultórios Médicos), Vale de Cambra (Clinimano), Aveiro and Válega.
2. Data we collect
Through the website we may process:
- Contact and booking form: name, email, mobile number and message.
- Review form: name, email and the review text. Publication on the site only takes place after review by the practice.
- Requests made by phone, WhatsApp, email or the Setmore booking platform, when you use those channels.
- Minimum technical data of site access (IP address, date and page visited) in server logs, needed for operation and security.
We do not ask for health data through the public website forms. Clinical information is collected only in consultation, in the course of care.
3. Purposes and legal bases
Data are processed to:
- Reply to contact requests and book appointments (pre-contractual steps and the care contract, GDPR art. 6(1)(b)).
- Manage the patient relationship and meet legal and professional duties (art. 6(1)(c)).
- Publish reviews, when the text is accepted — based on consent, which you may withdraw at any time (art. 6(1)(a)).
- Keep the website secure and prevent abuse (legitimate interest, art. 6(1)(f)).
We do not use your data for marketing, newsletters or commercial profiling. Data are not sold.
4. Recipients
Data may be known by:
- The controller and, where needed, professionals assisting at the practice, bound by confidentiality.
- Providers who host the site, email and infrastructure, only to the extent of the service.
- Setmore, when you use online booking (a third-party service with its own privacy policy).
- Public authorities, if the law requires it.
Data are not transferred outside the European Economic Area unless a provider does so with the safeguards required by the GDPR.
5. Retention
- Contact and booking requests: for as long as needed to follow them up and then for the legal periods applicable to clinical and accounting records.
- Unpublished reviews: until they are accepted or refused; published reviews: while they remain on the site or until you ask for removal.
- Technical server logs: the usual security-log period.
6. Cookies
The public website does not use advertising or audience-analytics cookies. Strictly necessary cookies may exist for the administration session when you sign in to the private area. Setmore booking may set its own cookies on that service’s domain.
7. Your rights
You may request access, rectification, erasure, restriction, portability and objection, and withdraw consent (for example for a published review), under the GDPR. To exercise these rights, write to osteopata@carlospiedade.pt or use the phone numbers above. You may also lodge a complaint with the Portuguese Data Protection Authority, CNPD (www.cnpd.pt).
8. Minors
The forms are intended for adults. Requests concerning minors must be made by the holder of parental responsibility.
9. Security and changes
We apply appropriate technical and organisational measures to protect data against unauthorised access, loss or misuse. This policy may be updated; the date at the top shows the version in force.