Privacy and Data Protection Policy

Gastropedia, available at gastropedia.pub/en, recognizes the significant importance of the electronic records and personal data left by you (“Data Subject”) when using our website. This Privacy Policy (“Policy”) is intended to regulate, in a simple, transparent, and objective manner, what personal data will be collected, as well as when and how they may be used. This policy is primarily aimed at doctors and health professionals, and broadly outlines the ways in which we process personal data. For any additional questions or requests, please contact our Data Protection Officer, DR. BRUNO MARTINS, via email at contato@brunomartins.med.br. To better illustrate how we handle data processing, we present a summary of our Privacy and Personal Data Protection Policy (“Policy”):

Summary Table:

Data Processing Agent	Gastropedia
Role in Data Processing	Controller
Nature of Processed Data	Personal Data provided by the Data Subject
Primary Purpose of Processing	PURPOSE: Registration of users for information receipt and to enable them to publish their articles. LEGAL BASIS: Consent (Article 7 of LGPD).
Data Sharing	Personal data (email) shared with newsletter service. Only for users who voluntarily subscribed through the website. The email list is also used in our advertising accounts on Meta and Google for marketing actions and ad personalization, using the policies and tools of these platforms; direct and unauthorized emails are not sent.
Data Protection	Appropriate security measures, both technical and administrative.
Rights of the Data Subject	Confirmation of data processing, access, correction, portability, request for deletion, etc.

This policy may be updated at any time by Gastropedia, with notice provided on the website.

Definitions:

If you have any questions about the terms used in this policy, we suggest consulting the table below:

TERM	DEFINITION
Personal Data	Any information related to a natural person, directly or indirectly, identified or identifiable.
Sensitive Personal Data	A special category of personal data regarding racial or ethnic origin, religious belief, political opinion, membership in a trade union or an organization of a religious, philosophical, or political nature, related to health or sexual life, genetic or biometric data pertaining to a natural person.
Data Subject	A natural person to whom the personal data refers, such as former, current, or potential clients, employees, contractors, business partners, and third parties.
Processing	Any operation performed on personal data, such as those referring to: collection, production, reception, classification, use, access, reproduction, transmission, distribution, processing, archiving, storage, elimination, evaluation or control of information, modification, communication, transfer, dissemination, or extraction.
Anonymization	A process by which data loses the possibility of direct or indirect association with an individual, considering the reasonable and available technical means at the time of processing.

The User is aware that they provide information consciously and voluntarily through registration forms. The Personal Data provided by the User when registering and/or filling out forms on the website will be kept confidential and used only for the purposes defined below:

Data Collected	Purpose of Use/ Data Processing	Legal Basis	Consent
Full Name, Degree, Email, Photo, CRM, and Date of Birth.	Registration for article dissemination on the website.	Consent	I agree to provide my Name, Degree, Photo, CRM, and Date of Birth. I am aware that my provided data will be used internally.
Email	Registration for newsletters and marketing emails.	Consent	I agree to provide my email for receiving newsletters as per the privacy policy.

Gastropedia may collect the information actively entered by the Data Subject at the time of their contact or registration.

Personal Data Processing:

The collection of personal data occurs when the Data Subject actively enters or sends information to the Gastropedia website, such as full name, email, date of birth, CRM (medical registration number), degree, and photo when filling out forms. Regardless of which data the Data Subject actively provides to Gastropedia, we will only use those that are truly relevant and necessary to achieve the declared purposes, on a case-by-case basis. The Data Subject may access, update, and supplement their data, as well as request the deletion of their data collected by Gastropedia, by email: contato@gastropedia.pub

How We Use the Data:

The personal data processed by Gastropedia are intended for the registration of professionals for the dissemination of articles authored by the Data Subject on our website and for sending information via newsletters.

How We Use Cookies:

Cookies are files or pieces of information that may be stored on your devices when you visit the Gastropedia website online. Generally, they contain the name of the site that originated them, their lifespan, and a value generated randomly. Gastropedia uses cookies to facilitate usage and better tailor its pages to the interests and needs of the Data Subjects, as well as to compile information about the use of its site, assisting in improving its structures and content. They can also be used to speed up your activities and future experiences on our portal.

Types of Cookies	What do they do?
Necessary	These are essential for the Gastropedia pages to load correctly and allow you to navigate our site and use all of its functionalities.
Performance	They help us understand how visitors interact with Gastropedia pages, providing information about the areas visited, the time spent on the site, and any issues encountered, such as error messages.
Functional	They allow Gastropedia pages to remember your choices, to provide a more personalized experience. Also, they enable users to watch videos and use social tools, comment fields, forums, among others.
Marketing	Used to provide more relevant content and of interest to the Users. They can be used to present more targeted advertising or limit the number of times it is shown on Gastropedia pages. They also allow for the measurement of the effectiveness of a Gastropedia advertising campaign. Additionally, they can be used to track the Gastropedia site pages that the User visited and the company may share this information with third parties, such as contracted advertising agencies.

After the Data Subject authorizes their use, when using the Gastropedia pages, a cookie will be stored on their device to remember them in the next session. At any time, the Data Subject can revoke their consent regarding cookies and should delete them using the settings of their preferred browser. Finally, we remind you that if the Data Subject does not accept some cookies from the Gastropedia site, certain services may not function optimally.

With whom we share the data:

The only data provided by the data subject and shared with a third party is the email for sending newsletters and marketing actions.

How we keep the data secure:

Gastropedia uses reasonable market and legally required means to preserve the privacy of the personal data it collects. Therefore, it adopts various precautions in compliance with guidelines on security standards, such as:

Protection against unauthorized access to your systems
SSL Encryption
WAF – Web Application Firewall
Software Update Policy
Maintenance of an inventory indicating the time, duration, identity of the employee, or the person responsible for the access, and the file object, based on connection and application access logs.

In addition to technical efforts, Gastropedia also adopts institutional measures aimed at the protection of personal data, maintaining a structure and a privacy governance program applied to its activities, constantly updated. Although we make every effort to preserve privacy and protect the data of the Data Subjects, no transmission of information is completely secure, so Gastropedia cannot fully guarantee that all data it receives or sends will not be subject to unauthorized access carried out through methods developed to improperly obtain information. For this reason, in addition to our internal regulations that handle data exchange, we encourage Data Subjects to take appropriate measures to protect themselves, such as keeping their logins and passwords confidential. It is important to note that such information is personal, non-transferable, and the exclusive responsibility of the Data Subjects.

Retention of collected information:

To protect the privacy of the Data Subjects, the personal data processed by Gastropedia will be deleted when they are no longer useful for the purposes for which they were collected, or when the Data Subject requests their deletion, except if their maintenance is expressly authorized by applicable law or regulation. The information may be retained for the fulfillment of the controller’s right in judicial or administrative proceedings. The data subject can request the deletion of data through a direct request to the email address contato@gastropedia.pub.

Rights of the Data Subject:

In compliance with applicable regulations regarding the processing of personal data, Gastropedia respects and guarantees the Data Subject the possibility of submitting requests based on the following rights:

Confirmation of the existence of data processing
Access to data
Correction of incomplete, inaccurate, or outdated data
Anonymization, blocking, or deletion of unnecessary, excessive data, or data processed non-compliantly
Data portability to another service or product provider, upon express request by the Data Subject
Deletion of data processed with the consent of the Data Subject
Information about the public or private entities with whom Gastropedia has shared your data
Information about the possibility of not providing consent, as well as being informed of the consequences in case of refusal
Revocation of consent.

Some of these rights can be exercised directly by the Data Subject through the management of information about their account, while others will depend on sending a request to our Data Protection Officer via email at contato@gastropedia.pub, for further evaluation and adoption of other measures by Gastropedia. The User is aware that the deletion of essential information for the management of their account with Gastropedia will result in the termination of their registration, with the consequent cancellation of the services then provided. Gastropedia will make every effort to respond to requests in the shortest possible time. However, justifiable factors, such as the complexity of the requested action, may delay or prevent prompt response. Finally, the Data Subject must be aware that their request may be legally rejected, either for formal reasons (such as an inability to prove their identity) or legal reasons (such as a request for data deletion whose maintenance is the free exercise of rights by Gastropedia).

Policy Revisions:

Should Gastropedia modify this policy, such changes will be prominently posted on the website, and whenever possible, the data subject will be informed.

Legislation and Jurisdiction:

This policy shall be governed, interpreted, and enforced in accordance with the laws of the Federative Republic of Brazil, particularly Law No. 13.709/2018, regardless of the laws of other states or countries, with the jurisdiction of the data subject’s domicile being competent to resolve any doubts arising from this policy.