1. Data controller
The entity responsible for the processing of personal data is EMH - ElectroMagnetic Healing, Lda., with registered office at Rua Custódio Inácio A-LT 1, CCI 5709, Brejos do Poço, 2965-221 Poceirão - Palmela, Portugal. For personal data protection matters, contact info@emh-med.com.
2. Personal data collected
EMH collects data provided through the contact form: name, email address, phone number when voluntarily provided, subject and message. The website may also generate technical and security logs necessary for operation, technical diagnosis, abuse prevention and service protection.
3. Purposes of processing
Personal data is processed to respond to enquiries, manage related pre-commercial communications, ensure website security, prevent abuse of the form and comply with legal obligations where applicable.
4. Legal bases for processing
The applicable legal bases are steps requested by the data subject before entering into a contract, EMH's legitimate interest in responding to enquiries, managing communications and protecting the website, and compliance with legal obligations where applicable. Withdrawal of consent applies only where processing is based on consent.
5. Recipients and processors
Data may be processed by hosting, email and technical support providers acting under EMH's instructions and only to the extent necessary to provide those services. EMH does not sell personal data to third parties.
6. International data transfers
If any processing involves transferring data outside the European Economic Area, EMH will seek to ensure that the transfer occurs only with appropriate safeguards under applicable law. EMH does not state unconfirmed providers or safeguards in this policy.
7. Data retention
As an operational policy, contact enquiries are retained for 12 months after the last relevant communication, unless a longer period is necessary for contractual, legal or dispute-related reasons. Technical and security logs are retained for a proportionate limited period, generally up to 90 days, unless needed for incident investigation, abuse prevention or compliance with a legal obligation.
8. Security of personal data
EMH applies appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, improper disclosure or destruction. No electronic system is absolutely secure, so measures will be adjusted to risk and the available state of technology.
9. Rights of data subjects
The data subject may request access, rectification, erasure, restriction of processing, objection to processing and portability where applicable. Where processing is based on consent, the data subject may also withdraw that consent. Rights may be exercised by contacting info@emh-med.com.
10. Complaint to the supervisory authority
The data subject has the right to lodge a complaint with the Portuguese Data Protection Authority, Comissão Nacional de Proteção de Dados (CNPD), through www.cnpd.pt, without prejudice to contacting EMH first for clarification or resolution.
11. Health information
The contact form is not intended for medical records, diagnoses or special-category health data. Users should not include sensitive medical information in the message. If such information is received unsolicited, EMH should limit its processing to what is necessary and apply minimisation and deletion measures where possible.
12. Cookies and local storage
The website uses only necessary storage or equivalent technologies for operation and preference management. For more information, the Cookie Policy available on this website should be consulted.
13. Links to external websites
The EMH website may contain links to partner, brand or third-party websites. EMH is not responsible for the privacy policies, content or practices of such external websites.
14. Last updated
Last updated: July 13, 2026. This policy may be updated to reflect relevant legal, technical or operational changes.