Privacy and Data Protection Policy
1 – General information and definitions
This Privacy and Data Protection Policy intends to clarify Hospital BDW S/A’s commitment to guarantee the protection of the personal data of its CLIENTS/VISITORS/USERS of the website www.blanchospital.com.br.

This policy contains important information about who we are, when, how and why we collect, store, use and share personal data, as well as providing an explanation of the legal rights of visitors, based on the provisions of the GDPR (General Data Protection Regulation) and in Law No. 13.709, of August 14, 2018.

For this reason, it is recommended that you read this Privacy and Data Protection Policy carefully, as by visiting the website www.blanchospital.com.br, visitors agree with the terms and conditions set forth herein. Should any doubts or concerns arise in relation to this policy, visitors can contact us via e-mail contato@blanchospital.com.br.

1.1 Who are we?
HOSPITAL BDW S/A, entitled Blanc Hospital registered in Porto Alegre/RS under the company number CNPJ 26.947.257/0001-49, collects, uses and is responsible for certain personal information about its customers and visitors. When we do this, we are governed by the GDPR (General Data Protection Regulation) and the General Data Protection Law, No. 13.709/2018, taking responsibility as those responsible for the control of this personal information for the legally prescribed purposes.

2 – Information collected
Blanc Hospital may collect “personal information and “non-personal information” about its visitors, who, by this clause, ratify that they have read and accept this Data Protection and Privacy Policy, expressly authorizing the collection and processing of the data in question, in the form in which they are detailed in this instrument.

Personal information is that which is individually identifiable, consisting of any information that allows the identification of an individual, such as name, fixed or e-mail address, personal qualification, registration with the CPF or CNPJ, telephone number, other contact information, billing data or any other data sufficient to be linked to such information.

Non-personal information may also be collected from visitors whenever they interact with the website www.blanchospital.com.br. This information includes, but is not limited to, IP addresses, timestamps, browser details, and preference pages. None of this information can personally identify specific visitors.

Information can be tracked for routine administration and maintenance purposes.

3 – The use of information
By accessing the Blanc Hospital website (www.blanchospital.com.br), the visitor declares knowledge and agreement that the information collected may be used and shared for the following purposes and situations, within the limits required and authorized by law:

l. With its customers and partner companies when necessary and/or appropriate to the provision of related services;

ll. With partner companies, for commercial purposes, enabling the identification of the user’s profile, preference and needs, in order to refine the offer of products and/or services offered.

Ill. With companies and individuals contracted to perform certain activities and services on behalf of Blanc Hospital;

IV. With group companies;

V. With suppliers and partners to carry out the services contracted with the company (such as information technology, accounting, among others);

Vl. For administrative purposes such as research, planning, service development, security and risk management;

VII. When necessary, as a result of a legal obligation, determination of competent authorities, or court decision;

VIII. In the event of sharing personal data with third parties, all subjects mentioned in items 1 to VII must use the data consistently and in accordance with the purposes for which they were collected, in accordance with what has been determined by this Privacy Policy , other statements and privacy of websites or countries, as well as all applicable privacy and data protection laws.

4 – Information sharing
Blanc Hospital will not sell, rent or share personal information, except as set out in this Policy (item 3).

5 – Obtaining information
Information is automatically received and stored on the company’s servers through the use of cookies.

Cookies are small text files that are sent and stored on the visitor’s computer, with the purpose of recognizing, tracking, identifying navigation data, customizing access. By accessing the website www.blanchospital.com.br, the visitor automatically authorizes the recognition and use of their activity information on devices that

6 – Means of obtaining
Information is collected:

l. By accessing or browsing the Blanc Hospital website: aware of this, the company generally collects and records data using cookies and other tracking technologies;

ll. Through voluntary provision of information: the company collects personal data filled in and provided by the visitor when registering on the website www.blanchospital.com.br or through other contact channels, such as e-mail;

Visitors, through this Policy, agree that Blanc Hospital may confirm the accuracy of personal data provided to public entities, specialized companies or credit protection databases.

7 – Personal Information Security
All personal data will be stored on the company’s servers, and your privacy will be maintained, duly in accordance with current data legislation. The company undertakes to use sufficiently adequate technology for data protection, keeping the environment safe, with the use of security tools and procedures to protect the confidentiality and integrity of your personal data, preventing the occurrence of any damages due to the processing of these data. However, although the company uses security measures and monitors its system to check for possible vulnerabilities and attacks to protect its information from unauthorized disclosure, the user understands and agrees that there are no guarantees that the information cannot be accessed, disclosed, changed or destroyed for violations of any of the physical, technical or administrative safeguards.

8 – Data retention
Blanc Hospital will store visitors’ personal and non-personal information indefinitely, retaining the information even after their license expires. The company may keep the information after receiving your exclusion request, as it proves necessary to comply with any legal or regulatory obligation to which the company is subject, or for the purpose of exercising any right in a judicial or extrajudicial proceeding, or even in the cases mentioned by art. 16 of Law No. 13.709, of August 14, 2018.

9 – Right to access and control your personal data
Blanc Hospital is committed to complying with the LGPD’s standards, respecting the inherent rights of customers, users and visitors.

The visitor can:

l. Access to personal data:

The visitor may request Blanc Hospital to inform and provide the personal data it holds in relation to you;

II. Correction of personal, incomplete, inaccurate or outdated data:

Visitors can request the rectification of their data if there is any inaccuracy or if they are out of date;

III. Anonymization: Visitors can request the anonymization of the data collected, as provided by law;

IV. Impose objections, limits or restrictions on the use of data:

Visitors may request to stop using all or some of their information, limiting its use;

V. Access to your data:

Visitors may request a copy of their personal data and other data provided in a readable format in printed form or by electronic means. The request can be made by contacting our Data Protection Officer via email, foreman.lgp@blanchospital.com.br. The order will be considered in accordance with applicable laws;

SAW. Deletion of personal data processed with consent:

Visitors can request the deletion of their personal data collected with consent;

VII. Revocation of consent:

Visitors can revoke the authorization given for the processing of their personal data. Revocation of consent may result in the impossibility of using some features of www.blanchospital.com.br or even in the termination of the services provided, but it does not prevent the use of (i) anonymized data; and (ii) data whose treatment is based on another legal hypothesis provided for in the LGPD;

VIII. Portability:

Visitors may request data portability to another service provider, upon express request and observing the commercial and industrial secrets of Blanc Hospital, as well as any other legal provision;

Taken decisions:
Visitors can request a review of decisions made solely on the basis of automated processing of personal data.

10 – Change of Privacy Policy
This Privacy and Data Protection Policy is

If there is a change in the Privacy and Data Protection Policy, Blanc Hospital undertakes to inform visitors of the content of the changes made. By continuing access, visitors automatically agree and accept the content of the changes made.

11- Contact
Visitors may request a copy of their personal data and other data provided in a readable format in printed form or by electronic means. The request can be made by contacting our Data Protection Officer, Fernando Prietsch, via e-mail, contato.lgp@blanchospital.com.br. The order will be considered in accordance with applicable laws.