1 Overview
This Privacy Policy explains how Ondivan ("Ondivan," "we," "our," or the "Platform") collects, stores, uses, shares, and otherwise processes the personal information of Clients and Psychologists who use our services.
This Policy applies to the Ondivan website, its subdomains, applications, software, and any other services operated by the Platform.
Ondivan is owned and operated by Inês Cristina Miranda Mata Cunha da Silva (Portuguese Tax ID / NIF: 292207778).
2 What Is Personal Information?
Personal information is any information that can identify an individual, either directly or indirectly.
This includes information provided by Clients and Psychologists when creating an account or using the Platform.
3 Your Consent
By creating an account or using the Platform, you acknowledge that you have read and accepted this Privacy Policy and consent to the collection, storage, use, and processing of your personal information as described herein.
3.1. Withdrawal of Consent
You may withdraw your consent to the processing of your personal information at any time by contacting Ondivan at geral@ondivan.net.
Requests will be processed within five (5) business days, subject to any legal or contractual obligations that require us to retain certain information.
4 Applicable Laws
Ondivan processes personal information in accordance with applicable data protection and privacy laws, including, where applicable:
- Brazil's General Data Protection Law (LGPD – Law No. 13,709/2018);
- Brazil's Marco Civil da Internet (Law No. 12,965/2014);
- The General Data Protection Regulation (GDPR) of the European Union; and
- Other applicable privacy and data protection laws in jurisdictions where Ondivan operates.
5 Data Protection Officer (DPO)
Ondivan has appointed Pedro Cunha da Silva as its Data Protection Officer (DPO).
The DPO is responsible for matters relating to privacy, data protection, communications with supervisory authorities, and responding to requests from Clients and Psychologists regarding the processing of personal information.
You may contact the DPO using the following information:
- Email: geral@ondivan.net
- Address: Rua José Augusto Torres, Lote 123, 5º Esq., Torres Novas 2350-086, Portugal
- Phone: +351 963 909 958
This appointment is made in accordance with Article 13 of the GDPR.
6 Contact Us
If you have any questions, comments, or concerns regarding this Privacy Policy or the way your personal information is processed, you may contact Ondivan at:
Email: geral@ondivan.net
7 How We Use Your Information
This Privacy Policy explains:
- What personal information we collect.
- How we use and protect that information.
- When we may share it.
- The safeguards we implement to protect your information against unauthorized access, disclosure, misuse, or loss.
8 Information We Collect
Ondivan may collect and process the following information.
Clients:
- Profile photo
- Full name
- Date of birth
- Country
- State or province
- City
- CPF or NIF (when applicable)
- Phone number
- Email address
- Preferred contact methods, such as WhatsApp, Google Hangouts, Facebook Messenger, or Skype
Psychologists:
- Profile photo
- Email address
- Full name
- Date of birth
- Country
- State or province
- City
- OPP registration number
- CRP registration number
- Academic qualifications
- Copies of professional registration documents (front and back)
- Areas of practice and professional specialties
9 Platform and Technical Information
When you use Ondivan, we may also collect technical and usage information, including:
- Files and information uploaded to the Platform.
- Information about how you access and use our services.
- Device information, including hardware model, operating system, browser version, language preferences, unique device identifiers, advertising identifiers, serial numbers, network information, and device activity.
- Server logs, including IP address.
- Website interaction data, such as clicks, browsing activity, analytics, demographic information, and other usage statistics.
This information helps us improve the Platform, maintain security, prevent fraud, and enhance the user experience.
10 When We Share Personal Information
Ondivan does not sell or disclose the personal information of Clients or Psychologists to third parties, except in the following circumstances:
- When required by law, court order, legal process, or a valid request from a governmental or regulatory authority.
- When disclosure is necessary to investigate or prevent fraud, illegal activity, security incidents, or other violations of applicable law.
- To protect the rights, property, safety, or security of Ondivan, our users, or the public.
- When disclosure is otherwise permitted or required under applicable law.
11 Communications
By using the Platform, Clients and Psychologists authorize Ondivan to contact them using any of the communication methods provided during registration, including email, telephone, SMS, WhatsApp, or other messaging services, when appropriate.
These communications may include appointment notifications, service updates, security alerts, account-related information, and other communications necessary for the operation of the Platform.
12 What Are Cookies?
Cookies are small text files stored on your computer or mobile device when you visit a website.
They help websites recognize your device, remember your preferences, improve functionality, analyze website performance, and enhance your browsing experience.
13 Types of Cookies We Use
Ondivan may use different categories of cookies, including:
Performance Cookies
These cookies collect anonymous information about how visitors use the Platform. They help us understand website performance, identify areas for improvement, and enhance the user experience. Performance cookies do not collect information that directly identifies individual users.
Functional Cookies
These cookies enable essential Platform features and remember your preferences, providing a more personalized browsing experience.
Advertising Cookies
These cookies collect information about browsing behavior to display advertisements and content that may be more relevant to your interests.
14 Managing Cookies
Most cookies remain active only while your browser session is open or for the period specified by the cookie itself.
You may choose to accept, reject, or manage cookies at any time through your browser settings or the cookie preferences available on the Platform, where applicable.
15 Consent to Cookies
Where required by applicable law, Ondivan will request your consent before placing non-essential cookies on your device.
By accepting cookies through our cookie banner or preference center, you consent to their use as described in this Privacy Policy.
16 Using the Platform Without Cookies
You may choose to disable or reject cookies at any time.
Doing so will not prevent you from accessing most areas of the Platform. However, certain features, services, or functionalities may not operate properly without cookies.
17 Accessing and Correcting Your Personal Information
Clients and Psychologists have the right to access, review, update, or request correction of the personal information maintained by Ondivan.
To exercise these rights, you may contact us at:
Requests are handled during regular business hours, Monday through Friday, from 9:30 a.m. to 6:00 p.m., according to the applicable local time zone.
18 Right to Erasure
Clients have the right to request the deletion of their personal information held by Ondivan at any time, without undue delay, subject to any legal, regulatory, or contractual obligations that require us to retain certain information.
19 Accuracy of Personal Information
Users are responsible for keeping their personal information accurate and up to date.
If Ondivan becomes aware that information is inaccurate, incomplete, or outdated, we may update, correct, or remove such information when appropriate, except where retention is required for legitimate business purposes or to comply with legal obligations.
20 Security Measures
Ondivan implements appropriate technical, organizational, and administrative safeguards designed to protect the personal information of Clients and Psychologists against unauthorized access, disclosure, alteration, misuse, loss, or destruction.
Although we take commercially reasonable measures to protect your information, no method of electronic transmission or data storage can be guaranteed to be completely secure.
21 Protecting Your Account
Clients and Psychologists are responsible for maintaining the confidentiality of their passwords, usernames, and other account credentials.
Users should take appropriate measures to protect their accounts and must notify Ondivan immediately if they suspect any unauthorized access or security breach.
22 Changes to This Privacy Policy
Ondivan may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or privacy practices.
If we make material changes to the way we process personal information, we will notify Clients and Psychologists through the Platform or by email before those changes become effective, where required by applicable law.
Your continued use of the Platform after such changes become effective constitutes acceptance of the updated Privacy Policy.
23 Minor Updates
Ondivan may make minor editorial, administrative, or operational updates to this Privacy Policy that do not materially affect the way personal information is collected, used, or protected.
These minor changes may be made without prior notice.
24 Communications and Marketing
By creating an account, Clients and Psychologists agree to receive emails and other communications from Ondivan relating to:
- Appointment confirmations and reminders;
- Account and security notifications;
- Updates about the Platform and its services;
- Newsletters, educational content, and promotional communications, where permitted by applicable law.
24.1. Opting Out
You may unsubscribe from marketing or promotional emails at any time by clicking the "Unsubscribe" link included in our emails or by contacting Ondivan directly.
Please note that you may continue to receive essential service-related communications, such as appointment confirmations, security notifications, and account updates.
25 Anti-Spam Policy
Ondivan is committed to responsible communication practices and takes reasonable measures to prevent the sending of unsolicited or spam emails.
We only send communications in accordance with applicable laws and user preferences.
26 Confidentiality
Ondivan maintains strict confidentiality regarding all personal information collected through the Platform.
Access to contact information, including email addresses and telephone numbers, is limited to authorized personnel who require such access to perform their job responsibilities.
27 Data Storage
Personal information belonging to Clients and Psychologists is stored using secure cloud-based database services, including JawsDB MySQL, with servers located in the United States.
Access to personal information is limited to authorized Ondivan personnel who are contractually bound by confidentiality obligations and required to protect user privacy in accordance with this Privacy Policy.
28 Information Security
Ondivan uses industry-standard security measures to help protect personal information.
Data transmissions are encrypted where appropriate, and personal information is safeguarded through administrative, technical, and organizational security controls designed to reduce the risk of unauthorized access, disclosure, alteration, or destruction.
29 International Data Transfers
Because Ondivan operates internationally, personal information may be transferred to and processed in countries other than the country where it was originally collected.
Whenever international data transfers occur, Ondivan implements appropriate safeguards in accordance with applicable data protection laws, including Article 33 of Brazil's LGPD and Article 44 of the GDPR, where applicable.
30 Data Breach Notification
If Ondivan becomes aware of a personal data breach affecting its systems or those of its service providers, including unauthorized access by third parties, we will investigate the incident and, where required by applicable law, notify the appropriate supervisory authorities and affected users.
Where the GDPR applies, notifications will be made within 72 hours of becoming aware of the breach, whenever legally required.
Notifications will include, whenever reasonably possible, information regarding:
- The nature of the incident;
- The categories of information involved;
- The potential impact on users;
- The measures taken or planned to address the incident.
31 User Cooperation
Clients and Psychologists are responsible for complying with this Privacy Policy.
If a user's intentional misconduct or violation of this Privacy Policy causes damages, losses, or legal claims against Ondivan, the user may be held responsible for those damages to the extent permitted by applicable law.
32 Third-Party Websites
This Privacy Policy applies only to the collection and processing of personal information by Ondivan.
If Clients or Psychologists choose to visit third-party websites or services through links available on the Platform, those websites will be governed by their own privacy policies and terms.
Ondivan is not responsible for the privacy practices, content, or security of third-party websites or services.