Privacy Policy
1. ABOUT US.
| DATA CONTROLLER | National Association of Pharmacies (ANF) |
| HEAD OFFICE | Travessa de Santa Catarina, 1, 1200-403 Lisboa |
| NIPC (Tax Identification Number) | 500 885 494 |
| DPO (Data Protection Officer) | Can be contacted via the email dpo@anf.pt |
2. WHAT DOES THIS POLICY COVER?
2.1. This Privacy Policy explains how we collect and process the personal data necessary for the operation of:
(a) The ANF WEBSITE at https://www.anf.pt/ (hereinafter, WEBSITE);
(b) The services made available by the WEBSITE.
3. WHAT IS PERSONAL DATA?
3.1. It is all information (regardless of nature and support) relating to an individual that identifies that person and all information that makes a person identifiable.
3.2. Identifiable means a person who can be identified, directly or indirectly, in particular by reference to an identification number or other specific elements of their physical, physiological, mental, economic, cultural, or social identity.
Personal data we collect: name and email.
4. HOW WILL WE USE YOUR PERSONAL DATA?
4.1. ANF will use the personal data you provide to us through the WEBSITE for the following purposes:
(a) Managing your access to the WEBSITE;
(b) Processing and responding to your contacts and requests;
(c) Conducting satisfaction assessment questionnaires and collecting opinions on improvements;
(d) Sending information, for example, through newsletters, related to the activity of ANF and the companies directly or indirectly owned by it;
(e) Managing and improving the WEBSITE;
(f) Ensuring security, preventing fraud or misuse of the WEBSITE.
4.2. Your personal data will not be reused for other purposes that have not been previously identified or that are unrelated to the purposes for which they were initially collected.
5. WHAT ARE THE LEGAL GROUNDS FOR PROCESSING THE PERSONAL DATA WE COLLECT?
5.1. The personal data processed by ANF have specific legal grounds, depending on their purposes, as shown in the following table:
| PURPOSE | Managing your access to the WEBSITE |
| LEGAL GROUND | Pre-contractual measures at the request of the data subject and execution of a contract to which the data subject is a party |
| PURPOSE | Processing and responding to your contacts and requests |
| LEGAL GROUND | Execution of a contract to which the data subject is a party; Legitimate interest of ANF in the exercise of its aims and competencies; Data subject's consent |
| PURPOSE | Conducting satisfaction assessment questionnaires and collecting opinions on improvements |
| LEGAL GROUND | Legitimate interest of ANF in assessing the data subject's satisfaction so that it can implement improvements, maintain the interest and relevance of the content and services provided |
| PURPOSE | Sending information, for example, through newsletters, related to the activity of ANF and the companies directly or indirectly owned by it |
| LEGAL GROUND |
Execution of a contract to which the data subject is a party; Legitimate interest of ANF in the exercise of its aims and competencies; Data subject's consent |
| PURPOSE | Managing and improving the WEBSITE |
| LEGAL GROUND | Consent (Cookies); Legitimate interests of ANF to ensure that the WEBSITE is used securely by its users. ANF may conduct audits, analysis, and review of permissions, implement technical and support measures, in order to perform more adequate management of the WEBSITE |
| PURPOSE | Ensuring security, preventing fraud or misuse of the WEBSITE |
| LEGAL GROUND |
Legitimate interests of ANF to ensure that the WEBSITE is used securely by its users. ANF may apply measures to ensure adequate security levels |
6. WHAT PERSONAL DATA DO WE COLLECT?
6.1. The personal data that ANF will collect and process are those necessary and adequate for the stated purposes:
| PURPOSE | DATA |
| Managing your access to the WEBSITE | IP Address Cookie data |
| Processing and responding to your contacts and requests | Name, email |
| Conducting satisfaction assessment questionnaires and collecting opinions on improvements | Name, email |
| Sending newsletters related to ANF and the companies directly or indirectly owned by it | Name, email Cookie data |
| Managing and improving the WEBSITE | Cookie data |
| Ensuring security, preventing fraud or misuse of the WEBSITE | IP Address Cookie data |
7. HOW DO WE COLLECT YOUR PERSONAL DATA?
7.1. We will collect your personal data through:
(a) Forms you fill out on the WEBSITE, namely, contact registration forms and requests to send newsletters and/or to register for initiatives and events;
(b) The WEBSITE itself, namely through your activity on the WEBSITE;
(c) The communication and interaction that the WEBSITE has with your device, namely through cookies installed on your device;
(d) Messages and requests you send to us.
7.2. ANF commits to processing your data in accordance with the law and legitimately.
7.3. ANF will not sell, rent, or share your personal data with third parties. However, in cases clearly identified in this Privacy Policy, ANF may disclose your personal data to third parties. You can consult Point 14 for more information.
7.4. This WEBSITE and the PORTAL are not directed at minors, and personal data of minors are not intentionally processed.
8. WHAT ARE COOKIES, TRACKING PIXELS, AND OTHER SIMILAR TECHNOLOGIES?
8.1. Cookies are small files that collect information and are stored on your device through your browser.
8.2. They may be strictly necessary for the operation of the WEBSITE, for example, to:
(a) Identify and authenticate you on the WEBSITE; or
(b) Remember your usual preferences; or
(c) Allow you to complete tasks without having to re-enter information (e.g., when changing pages or returning, as in the case of form data, etc.); or
(d) Perform, enable, facilitate, or support communications of the WEBSITE and the PORTAL/through the WEBSITE; or
(e) Provide some functionalities you have requested; or
(f) Ensure the security of information systems and/or fraud prevention.
8.3. Strictly necessary cookies will be stored on your device and do not require consent.
8.4. Cookies may also be used to collect information, for example, to:
(a) Measure and obtain statistics on the use of the WEBSITE, for example, number of unique visitors, detect search engine keywords, detect navigation aspects such as visit duration, most visited pages, or most accessed content (analytics cookies); or
(b) Third parties, other than the WEBSITE owner, who collect your browsing information across different websites to create the aforementioned profiles (third-party cookies).
8.5. The storage of these tracking, advertising, analytics, and third-party cookies will always depend on your prior acceptance and consent, and this consent can be withdrawn at any time through specific tools and/or your browser.
8.6. Tracking pixels, web beacons, and other similar tools are images and/or snippets of code loaded when you visit a website, a page, or content, but also when you open an email.
8.7. The operation is recorded and noted in the server's log files, and may include various information, namely, the operating system, session duration, or the IP address.
8.8. The storage of these tools will always depend on your prior acceptance and consent, and this consent can be withdrawn at any time through specific tools and/or your browser.
8.9. To find out how to withdraw consent at any time, consult Section 13 of this Policy.
9. HOW DO WE USE COOKIES, TRACKING PIXELS, AND OTHER SIMILAR TECHNOLOGIES?
9.1. The following table describes and explains how these tools are used on the WEBSITE:
STRICTLY NECESSARY / PREFERENCES
| NAME | ORIGIN | DURATION | PURPOSE |
| conditionalTerms | WEBSITE | 400 days | Stores information about whether the user has accepted the cookies |
| Analysis Cookies | Google Analytics | 400 days | Collects data on the number of times the WEBSITE is visited, as well as the date of first and last access |
| Interaction with the WEBSITE | Google Analytics | 400 days | Records visited pages and actions performed on the WEBSITE |
10. HOW DO WE PROTECT YOUR PERSONAL DATA?
10.1. Your personal data is kept secure through the adoption of various technical and organizational security measures that seek to ensure the confidentiality, integrity, and availability of processing operations.
10.2. To protect your personal data, we only use data center providers that offer us adequate and documented security measures, namely, guarantees that your personal data is stored on servers that are maintained in controlled environments with limited access and that offer guarantees of resilience.
10.3. Personal data is maintained on servers that offer us the appropriate security guarantees for the protection of personal data against its dissemination, loss, misuse, alteration, processing, or unauthorized access, as well as against any other form of unlawful processing.
10.4. Similarly, when you browse the WEBSITE, we protect your data with encryption, such as Transport Layer Security (TLS, which is a security protocol that protects telecommunications via the internet).
10.5. Although we take the precautions and measures we deem appropriate to protect the personal data you provide and we collect, it is necessary to be aware that no security system is completely impenetrable.
11. HOW LONG DO WE RETAIN YOUR PERSONAL DATA?
11.1. Your personal data will be retained for the time necessary for the purposes for which they are intended, as listed in this Privacy Policy. Thus:
| PURPOSE | MAXIMUM TIME |
| Creating and managing your access to the WEBSITE | During your access to the WEBSITE |
| Processing and responding to your contacts and requests | For a period of 6 months after the completion of your contact and request |
| Conducting satisfaction assessment questionnaires and collecting opinions on improvements | For a period of 6 months after the collection of your assessment and opinion |
| Sending newsletters related to ANF and the companies directly or indirectly owned by it | Until you withdraw your consent |
| Managing and improving the WEBSITE | See the Cookies section |
| Ensuring security, preventing fraud or misuse of the WEBSITE | Five (5) years (Article 118(1)(c), Criminal Code) |
11.2. If any specific or mandatory period results from the law, that will be the data retention period.
11.3. Without prejudice, the indicated deadlines do not prevent the retention of personal data beyond those periods in the following situations:
(a) until the prescription period of any rights related to that purpose has not elapsed;
(b) for the purpose of declaring, exercising, or defending ANF's rights in legal proceedings;
(c) until a final court decision has not been rendered in case of a dispute related to that purpose;
(d) for compliance with new legal obligations to which ANF becomes subject;
(e) for compliance with orders from judicial authorities and/or criminal police bodies within the scope of a duly identified legal proceeding, in compliance with a reasoned order from the competent judicial authority;
(f) for compliance with acts issued by competent administrative authorities and regulatory bodies within the scope of their powers and competencies, namely, duly identified and reasoned administrative proceedings.
11.4. In all other cases, personal data will be retained for a maximum of the times indicated above, periods that ANF considers sufficient to fulfill the purposes indicated above.
11.5. At the end of the retention period, all collected personal data will be deleted or anonymized.
12. HOW YOU CAN EXERCISE YOUR RIGHTS:
12.1. The legislation grants you the right to request the exercise of the following rights from us:
| ACCESS | Confirmation as to whether or not personal data concerning you are being processed and, if so, the right to access your personal data. |
| RECTIFICATION | Rectification of inaccurate personal data concerning you and to have your incomplete personal data completed. |
| ERASURE | Erasure of your personal data when one of the reasons listed in the legislation applies. |
| RESTRICTION | Restriction of processing if one of the situations listed in the legislation applies. |
| OBJECTION | To object, at any time, to the processing of personal data concerning you or to being subject to decisions based solely on automated processing, including profiling. |
| DATA PORTABILITY | To receive the personal data concerning you that you have provided in a structured, commonly used, and machine-readable format. |
| WITHDRAW CONSENT | To withdraw the consent previously provided for some processing activities. |
12.2. You also have the right to lodge a complaint with the competent supervisory authority (in Portugal, the Comissão Nacional de Proteção de Dados at www.cnpd.pt);
12.3. To exercise the rights indicated above, you should contact ANF through the following email dpo@anf.pt;
12.4. If you request the deletion of some or all of your personal data, ANF may retain only the personal data necessary for compliance with the legal obligations to which it is bound.
13. HOW TO WITHDRAW CONSENT:
13.1. You have the right to withdraw your consent at any time and without any justification.
13.2. We remind you that the withdrawal of consent does not compromise the lawfulness of processing carried out based on the consent previously given, and ANF will maintain a record of this consent to comply with its legal obligations (demonstrate the lawfulness of processing until the time of consent withdrawal).
13.3. To withdraw consent:
| PURPOSE | WHAT TO DO |
| Sending newsletters related to ANF and the companies directly or indirectly owned by it | Each newsletter edition has a button associated with it for removal from the subscription list and withdrawal of consent |
| Managing and improving the WEBSITE |
By opening the cookie management tool, which you can access through the link found in the website footer, and adjust and define your settings;
By using a blocking tool that can be used as an extension for your browser. |
14. WHEN DO WE DISCLOSE DATA TO THIRD PARTIES?
14.1. ANF may use third parties (subcontractors) for the provision of certain services, for example, for data center management, maintenance and technical support, marketing, provision of the live chat tool, and these may have access to some personal data, namely, the data necessary for the contracted purposes.
14.2. ANF ensures that the entities that have access to the data are credible and offer high guarantees of protection, and data will never be transmitted to them beyond what is necessary for the provision of the contracted service(s), with ANF remaining responsible for the personal data provided.
14.3. ANF may also disclose your data to the following entities:
(a) Companies directly or indirectly owned by ANF and with which it has shared services or commercial partnerships for the creation and offering of benefits;
(b) Other partners (with your prior authorization);
(c) Judicial agents and courts, for the purposes of representation, declaration, exercise, or defense of ANF's rights in legal proceedings;
(d) Competent judicial authorities or criminal police bodies within the scope of a duly identified legal proceeding, in compliance with a reasoned order from the competent judicial authority.
15. THIRD-PARTY WEBSITES AND APPS
15.1. The WEBSITE may contain links to other third-party websites and apps, which may collect and process your personal data for the purposes of those same third-party websites and apps, and such processing is the sole responsibility of the owners of those third-party websites and apps, with ANF having no responsibility for their policies and/or practices.
16. DATA TRANSFERS OUTSIDE THE EUROPEAN UNION
16.1. ANF does not carry out any data transfers outside the European Union Area.
16.2. Should data transfers to third countries outside the European Union occur, namely when necessary for the purposes of any service provision by ANF, ANF will require compliance with legal rules, particularly regarding the adequacy of the destination country with respect to personal data protection and the requirements applicable to these transfers.
17. MINORS
17.1. The WEBSITE is not directed at minors under thirteen (13) years of age, and we therefore ask that these minors do not provide us with personal data.
18. SPECIAL CATEGORIES OF PERSONAL DATA
(a) ANF asks that you do not send us or disclose any information related to (i) physical or mental health, including information on the provision of health services or information revealing information about your health status, (ii) racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic information, biometric information, or data concerning sex life or sexual orientation.
18.1. Should you nevertheless send us or disclose these categories of personal data, they will be immediately deleted.
19. CHANGES TO THE PRIVACY POLICY
19.1. ANF reserves the right to readjust or change this Privacy Policy at any time, and these changes will be published.
20. OUR CONTACT DETAILS
20.1. If you have any doubts or questions related to this Privacy Policy, please contact us in writing via the following email dpo@anf.pt.
21. LAST VERSION
21.1. LISBON (PORTUGAL) June 4, 2025