Savassi, Belo Horizonte, Brazil
contato@hadadme.com
Privacy policy
Institutional record · sheet 2 of 2This sheet records what the Ebenezer website receives from the people who open it, what is done with that, and whom a visitor turns to with a question or a request. It follows Brazil's Law No. 13.709/2018, the General Data Protection Law (LGPD), and was written for a site that collects almost nothing.
Who answersthe controller
The party responsible for any personal data this website receives is Hamanda Tereza Batista Santos Ltda, Brazilian registry number 56.084.581/0001-41, with its seat in Belo Horizonte's Savassi district. The address in full sits at the bottom of this sheet.
The company itself acts as its own data protection officer: requests, questions and complaints about this policy go to the channel named under "Whom to ask", further down, and are read by the clinic's administration.
What arrivesthe data received
There is no sign-up, no form, no login area and no comment box on this website. What the clinic receives over the internet comes down to two things.
The first is the message a visitor decides to send to the e-mail address shown on these sheets: the sender, the subject, the text and whatever attachments the visitor chose to include, even when that means telling the clinic something about their own health in order to book a visit.
The second is the technical log every server produces when it delivers a page: IP address, date and time, page requested, browser and operating system, in lines the hosting provider keeps on its own and for a short while, for security and for an aggregate count of traffic.
What forpurposes and legal ground
A message received is used to answer the person who wrote, to book or move an appointment and to settle administrative matters. The legal ground is the carrying out of what the person asked for and, where the message mentions health, the consent given by telling.
The server logs exist so the site stays up, so abuse can be spotted, and so the clinic knows roughly how many people came by. The ground is the company's legitimate interest in keeping a secure address on the internet.
No data described on this sheet feeds targeted advertising, a behavioural profile or any sale to outsiders.
Who handles itprocessors and third parties
The pages are served by Cloudflare, Inc., which hosts the files and routes the contact e-mail to the clinic's mailbox; Cloudflare sees the technical logs described above and the passage of messages. Typefaces are delivered from the Google Fonts servers, which receive the visitor's browser request in order to serve them.
Apart from these two providers, no one receives data from this website, except under an order from a competent authority, in which case the company hands over only what is required.
Cookiesand what the site does not store
This website sets no cookie of its own, runs no analytics tool, loads no social media pixel and saves nothing in the reader's browser. If a visitor finds a technical cookie when opening these pages, it comes from the hosting provider's security layer and identifies no one to the clinic.
Retentionfor how long
E-mail messages stay in the clinic's mailbox while the conversation they belong to is open and, afterwards, for as long as Brazilian law requires commercial correspondence to be kept; past that period they are deleted. Server logs expire on their own, in the provider's routine, within days or a few weeks.
What to askrights of the person concerned
Anyone whose personal data this website has handled may, at any time, ask whether the clinic keeps anything on them and obtain a copy of it; have anything inaccurate or stale corrected; have the data deleted, frozen or stripped of identity when no reason remains to hold it; find out which other party has had sight of it; revoke a consent given earlier; and push back against a use they find unfair.
The request goes to the e-mail address in the next section, with no form and at no cost. Before replying, the clinic may want some confirmation that the request comes from the person it concerns, so that one person's data is never handed to another.
Whom to askchannel, deadline and the ANPD
Officer's channel: contato@hadadme.com. Reply within 15 business days, counted from the day the request arrives.
Should the deadline pass without a reply, or should the reply leave the question open, the person is free to bring the case before Brazil's National Data Protection Authority, the ANPD, through the channels it keeps at gov.br/anpd.
When it changesrevisions of this sheet
This sheet may be rewritten when the site changes hosting, gains a new feature or whenever the law asks for it. Whatever version stands at this address when you open it is the one in force; meaningful changes get a dated line at the foot of the sheet.