PRIVACY POLICY

The Future Healthcare Group, founded in 2003, is a private Portuguese-owned economic group whose mission is to provide its clients with access to the best conditions in health, life, and well-being.

This Privacy Policy applies to the entire Future Healthcare Group (FH Group), which includes, among others, the following entities:

FH – FUTURE HEALTHCARE – SERVIÇOS DE SAÚDE E ASSISTÊNCIA, S.A., NIPC 506518434, with registered office at Avenida Marechal Craveiro Lopes nº 6, Lisbon;
FHGSS – GESTÃO DE SISTEMAS DE SAÚDE, LDA., NIPC 508367433, with registered office at Avenida Marechal Craveiro Lopes nº 6, Lisbon;
FUTURE HEALTHCARE CORPORATE SERVICES, UNIPESSOAL, LDA., NIPC 514411252, with registered office at Avenida Marechal Craveiro Lopes nº 6, Lisbon;
UNLIMITEDCARE – SERVIÇOS DE SAÚDE E ASSISTÊNCIA, S.A., NIPC 510367615, with registered office at Avenida Marechal Craveiro Lopes nº 6, Lisbon;
FHVC – FUTURE HEALTHCARE VIRTUAL CLINIC, UNIPESSOAL, LDA., NIPC 516037170, with registered office at Avenida Marechal Craveiro Lopes nº 6, Lisbon;
FUTURE HEALTHCARE, SGPS, S.A., NIPC 509683282, with registered office at Rua das Murtas, no. 40, Sintra;
FH TECHNOLOGY, LDA., NIPC 509670130, with registered office at Avenida Marechal Craveiro Lopes, no. 6, Lisbon;
REDSA FUTURE HEALTH, SL., CIF B88500558, with registered office at C/ Vía de los Poblados No. 1-3, Building B, 6th Floor, Offices B and D, Madrid (28033);
FUTURE HEALTHCARE ESPAÑA, S.L., CIF B88433057, with registered office at C/ Vía de los Poblados No. 1-3, Building B, 6th Floor, Offices B and D, Madrid (28033);
FUTURE HEALTHCARE ROMANIA, SRL, RO 39495592, with registered office at room 101, floor 1, Offices Building Premium Point, 76-80 Buzești street, District 1, Bucharest, Romania.

Each of these entities, depending on the relationship established with the Data Subject, is the Data Controller of their personal data, as defined by data protection legislation.

This document aims to set out the principles governing the protection and processing of personal data followed by the FH Group, under Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, the General Data Protection Regulation (GDPR), as well as any other privacy and personal data legislation in force from time to time.

1. DATA CONTROLLER

The Data Controller may vary depending on the time of collection and the relationship established with the Future Healthcare Group.

In the case of this website, we only collect data through the available forms when you send us a contact request and/or through cookies. In both cases, the Data Controller will be FH – FUTURE HEALTHCARE – SERVIÇOS DE SAÚDE E ASSISTÊNCIA, S.A., NIPC 506518434, with registered office at Av. Marechal Craveiro Lopes, no. 6, 1700–284 Lisbon.

2. DATA COLLECTION

The data collected by the FH Group are adequate for its activity, relevant, and limited to the purposes pursued, namely for the provision of services contracted by the Data Subjects and/or by other Data Controllers when we act as processors, particularly in cases where we manage your health insurance and your data are provided to us by your insurer.

Likewise, your data may be shared with us by partners with whom we have a commercial collaboration for the provision of a service, in which case we act jointly with the respective partners as Joint Controllers.

Your personal data may thus be collected through various means: in person, by telephone, email, or via forms.

3. DATA CATEGORIES

In the course of its activity, the FH Group may access two types of data: personal data and health data.

Personal data means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;

data concerning health means personal data related to the physical or mental health of a natural person, including the provision of health care services, which reveal information about his or her health status;

Some of the personal data we request are mandatory, without which we will be unable to provide the requested product and/or service. In such cases, you, as the Data Subject, will always be informed of this requirement.

Depending on the context, we may process the following personal data:

Data Categories	Time of Collection (non-exhaustive examples)
– Identification data (Name, Address, Telephone Contact, Date of Birth, Email Address, Gender, Tax Identification Number, Relationship, IBAN, Academic Qualifications)	When you perform a simulation; During the subscription process for a product or contracting of a service; When you create an account in one of the client areas managed by FH Group entities; When you contact our services and/or are contacted by them; When you lodge a complaint and during its handling; In the context of an application and/or recruitment process;
Product/service subscription data (Policy Number, Contract Number)	During the subscription process for a product and/or service marketed or managed by an FH Group entity;
Health Data (data related to illnesses, health status, and medical history)	During the subscription process for insurance managed by an FH Group entity;
Your comments and/or messages on our Social Media	When, using your profile, you voluntarily share your personal data on FH Group social media;
Your comments and/or messages in our Satisfaction Surveys	When you answer to satisfaction surveys about our products/services. By voluntarily and deliberately responding to the satisfaction surveys sent by our services, you agree that your assessment becomes public and grant the FH Group and its duly authorized partners the right to publish it for advertising purposes, while always safeguarding your privacy, as your personal data will always be anonymized.
Browsing data	Through the collection of cookies when you access and navigate in our websites.
Image	Whenever you visit one of our premises, where we use video surveillance systems to protect people and property, with image recordings kept for a period of 30 (thirty) days.

4. DATA PROCESSING

When we process your personal data, which may fall into one of the categories indicated above, we do so in full compliance with the applicable data protection rules.

We only process your personal data for specific purposes and where a legal basis exists.

Purpose	Legal Basis
Management of the pre-contractual and contractual relationship, including evaluation of the quality of services provided.	Pre-contractual and contractual measures; Legitimate interest of the Controller for risk assessment as well as service quality evaluation; With the Data Subject’s consent;
Product development and improvement of services provided;	Legitimate interest of the Data Controller;
Promotion of products and/or services marketed	Legitimate interest of the Data Controller when the Data Subject has a prior customer relationship with the FH Group. With the Data Subject’s consent;
Evaluation of services provided	Legitimate interest of the Data Controller
Compliance with legal obligations, management control and anti-fraud	Legitimate interests in controlling the activity of the Data Controller, including prevention of losses due to fraud; Compliance with legal obligations.

Purpose: Management of pre-contractual and contractual relationship, including quality assessment of services provided
Legal Basis: Pre-contractual and Contractual Steps; Legitimate interests of the Data Controller for risk assessment and service quality; Consent of the Data Subject;
Purpose: Product development and service improvement
Legal Basis: Legitimate interests of the Data Controller;
Purpose: Promotion of products and/or services
Legal Basis: Legitimate interests of the Data Controller when the Data Subject has previously purchased a product; Consent of the Data Subject;
Purpose: Evaluation of services provided
Legal Basis: Consent of the Data Subject;
Purpose: Compliance with legal obligations, management control, and anti-fraud
Legal Basis: Legitimate interests in controlling the Data Controller’s activity, including fraud loss prevention; For the establishment, exercise, or defense of legal claims in judicial, administrative, or tax proceedings.

4.1 Call Recording

Whenever you contact us, and subject to your consent, we may record calls for the management of pre-contractual and contractual relationships, namely as evidence of contracted services and information provided, and for the improvement and quality control of our services. Whenever this occurs, call recordings will be retained in compliance with the resolutions of the Portuguese Data Control Authority and applicable law.

5. RETENTION PERIOD

The FH Group retains your personal data for as long as necessary to fulfill the purposes for which they were collected or until you exercise your right to object, right to be forgotten, or withdraw your consent. Once the purpose for which the data were collected has ended, the FH Group reserves the right to retain your personal data solely to comply with legal obligations and whenever necessary to ensure the exercise of rights in judicial, administrative, and tax proceedings.

6. DATA PROCESSING SECURITY

The FH Group applies all appropriate technical and organizational measures to protect and secure your personal data, ensuring the confidentiality, integrity, availability, and resilience of processing systems and the ability to restore timely access to data in the event of an incident. To ensure processing security, the FH Group has processes to regularly test, assess, and evaluate the effectiveness of technical and organizational measures.

To promote efficiency in insurance management procedures, the FH Group reserves the right to implement mechanisms for decision-making based solely on automated means, when necessary for the conclusion or performance of a contract or based on the Data Subjects’ consent. Whenever this occurs, the FH Group will apply appropriate measures to safeguard the rights, freedoms, and legitimate interests of the Data Subject, namely the right to obtain human intervention, express their point of view, and contest the decision.

7. DATA TRANSFERS

In the context of the activities carried out by the FH Group, your personal data may be provided to subcontracted companies to process your data according to the purposes, duration, nature, and instructions set out in the contract concluded with them. We may also share your personal data within the FH Group companies.

Finally, where we are bound by legal and/or contractual obligations, your personal data may also be disclosed to third parties, such as entities in the banking, regulatory, and insurance sectors, public authorities, among others.

The protection of your personal data transferred by the FH Group outside the European Economic Area is ensured in compliance with applicable laws and this policy. In cases where any of our websites uses the Google Analytics tool, your personal data may be transferred to the United States of America; the User may disable this function at any time through cookie settings.

8. RIGHTS OF THE DATA SUBJECT

The FH Group guarantees Data Subjects the following rights:

Rights	Content
Right of Access	The Data Subjects may access their personal data and request information on which of their personal data are processed by the Data Controller.
Right to Erasure (Right to be forgotten)	The Data Subjects may request the erasure of their data, without undue delay, whenever (i) the data are no longer necessary for the purpose that justified their collection, (ii) the Data Subjects withdraws consent, (iii) the data have been unlawfully processed, or (iv) erasure is necessary for compliance with a legal obligation;
Right to Rectification and Updating of Data	The Data Subjects have the right to have their data that are incorrect, outdated, and/or incomplete corrected and/or updated by the Data Controller.
Right to Data Portability	The Data Subjects have the right to obtain the personal data they have shared with the Data Controller or to have the data transmitted directly between controllers when it’s possible. This right may only be exercised when the lawful basis for processing is the Data Subject’s consent, the performance of contractual obligations, or when processing is carried out by automated means.
Right to Restriction of Processing	In certain circumstances, the Data Subjects may request the restriction of processing of their personal data by the Data Controller.
Right to Object	The Data Subjects may object to the processing of their data unless the Data Controller has legitimate reasons that prevail over the Data Subject’s interests or rights or for judicial purposes;
Right not to be subject to Automated Decisions	The Data Subjects have the right not to be subject to any decision based solely on automated processing, without human intervention, in cases where such decision produces effects in their legal sphere or substantially affects them, except in cases provided by law.
Right to Lodge a Complaint	The Data Subjects may lodge a complaint before the Data Controller and/or before the applicable Control Authority: Portugal: – Comissão Nacional de Proteção de Dados – www.cnpd.pt Spain: “Agencia Española de Protección de Datos – www.agpd.es Romania: “Autoritatea Naţională de Supraveghere a Prelucrării Datelor cu Caracter Personal – www.dataprotection.ro

When the legal basis for data processing is consent, the Data Subject may withdraw consent at any time. Please note that withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal, but it may impact the provision of certain future services.

The FH Group has established specific procedures to ensure the exercise of these rights by the Data Subject. In certain cases, you may be asked to provide additional information to confirm your identity.

The exercise of rights by Data Subjects must be carried out by completing the appropriate form or by using one of the means indicated in the “CONTACTS” section of this policy.

9. COOKIES

The FH Group uses cookies on its websites as a tool to improve user experience. For more information, please consult the Cookies Policy.

10. CHANGES TO THE PRIVACY POLICY

This policy may be amended at any time without prior notice and shall take effect upon publication on the website.

11. CONTACTS

If you have any questions about how the FH Group processes your personal data or if you wish to exercise any of the rights listed above, please contact us through one of the following channels:
Email: protecaodados@future-healthcare.eu
Address: Avenida Marechal Craveiro Lopes, nos. 6 and 6A, 1700-284 Lisbon

Updated on 06.11.2025