Privacy policy
The Alliance Against Leprosy Institute values the security of its data, respect for privacy and transparency with the users of its website, which is why we have dedicated this document to explaining how personal data is handled by the AAL Institute and what measures we apply to keep it secure.
To justify the collection of this data, we need users’ consent, i.e. authorization for us to collect and process personal data. Our Privacy Policy serves precisely to give users all the necessary information about why we need and what we do with their data, so that the user consents in a free, clear, and informed manner and we can keep a record of this authorization.
The Alliance Against Leprosy Institute, registered with CNPJ 33.246.584/0001-39, headquartered in the City of Curitiba, State of Paraná, at Rua Deputado Heitor Alencar Furtado, nº 3350, sala 103, Condomínio Opus One Ecoville – Bairro Campo Comprido, CEP 81200-452, and according to the definition brought by the General Data Protection Law “LGPD” (Federal Law nº 13.709.2018), will most of the time be the controller of its users’ information, and is therefore responsible for defining its uses and protecting it.
COLLECTING INFORMATION
What personal information does the Alliance Against Leprosy Institute collect?
We collect your personal information from health professionals and people affected by Hansen’s Disease who, of their own free will, wish to participate in the TECHansen and DOCHansen actions, as well as users who wish to receive news from the AAL Institute through our newsletters.
How is the information collected?
Automatic information: We automatically collect and store certain types of information about your use of the website, including your interaction with the content or when you download the support materials we make available on Hansen’s Disease. Like many websites, we use cookies and other unique identifiers and collect certain types of information when your browser or device accesses the pages of the site and other content provided.
Information that users provide to us: We collect data when the user subscribes to our newsletter form on our website to receive information about news and the AAL Institute, also accepting this Policy.
Information provided to us by healthcare professionals: We receive and store the information provided to us by healthcare professionals via the TECHansen patient registration form. The healthcare professional and/or the Hansen’s Disease patient can choose not to provide certain information, but in this case they will not benefit, as all the data is essential to prove the patient’s eligibility to receive the materials and devices donated by TECHansen.
What personal data do we collect and how is it used?
NEWSLETTER:
When you sign up to receive our newsletter, we collect the following data:
- FULL NAME
TECHANSEN ACTION:
When you fill in the TECHansen Device Request Form, we collect the following data:
- About the health professional
- FULL NAME
- TAX ID
- CELL PHONE
- PROFESSION
- REGISTRATION
- PROFESSIONAL
- WORKPLACE (NAME OF UNIT)
- PROFESSIONAL ADDRESS (street, number, complement, neighborhood, city, state, zip code)
- Patient information
- FULL NAME
- CLINICAL FORM
- DATE OF BIRTH
- TAX ID
- CONTACT TELEPHONE NUMBER (WITH DDD)
- DEGREE OF DISABILITY (WORLD HEALTH ORGANIZATION)
- TYPE(S) OF INJURY(S)
In this form, the health professional must also send, as an attachment, the Free and Informed Consent Form – TCLE completed and signed by the patient affected by Hansen’s Disease, with the appropriate authorizations and consent to participate in the action. For underage patients, the ICF is completed and signed by their legal guardians.
We asked for this information in the Informed Consent Form:
- PATIENT’S NAME
- GENDER
- DATE OF BIRTH
- FULL ADDRESS (street, number, complement, neighborhood, city, state, zip code)
- PHONE
- NAME OF THE LEGAL GUARDIAN OF THE UNDERAGE PATIENT
- RG
- TAX ID
When you submit your data, it will be processed and used for the following purposes by Instituo AAL:
- Allow us to communicate with healthcare professionals and patients, by telephone or e-mail, to answer questions and fulfill their requests to donate assistive technology devices and materials and/or to collect feedback on the TECHansen action.
- To send news and information to subscribers by e-mail about our actions, daily achievements, or Privacy Policy;
- Generate aggregated and totally anonymous statistical reports on the functioning and operation of our websites and social networks. In this case, no personal data will be used in the report;
- To safeguard the rights and duties of patients and the AAL Institute when participating in the TECHansen action.
What about sensitive personal data?
For the correct provision of health services, the user will need to provide information or documents that are considered Sensitive Personal Data. If the user chooses not to provide some of this Data, we may be unable to include all or part of it in our actions.
How is the personal data of children and adolescents processed?
Our actions are dedicated to assisting adults affected by Hansen’s Disease as well as children and adolescents, so we process the personal data of children and adolescents under the age of 18 on our website, including sensitive personal data. To process the personal data of minors, the legal consent of their parents or legal representatives is required. Users under the age of 18 cannot register in our digital environments on their own account and can only be registered by their legal guardians.
Although the personal data of children and adolescents is processed with their consent, parents or legal representatives must supervise the online activities of minors in our environments, especially in our digital environments.
What are cookies and what are they used for?
Alliance Against Leprosy Institute makes use of Cookies, which are text files sent by our website to your computer, cell phone or other access devices and stored there, containing information related to browsing the website. In short, cookies are used to enhance the user experience. By accessing our website and consenting to the use of Cookies, the user declares that they are aware of and accept the use of a system for collecting browsing data with the use of Cookies on their device.
You can, at any time and at no cost, change permissions, block, or refuse Cookies. However, withdrawing consent for certain cookies may prevent some of the platform’s features from working properly.
To manage your browser’s cookies, simply do so directly in your browser settings, in the Cookies management area.
Which third-party cookies do we use on our website?
Google Analytics – Classification: Statistics
Tool for analyzing the behavior of visitors to our sites.
- AdOpt – Rating: Required (GDPR Compliance Platform – AdOpt (goadopt.io))
- AdoptID – generated when the user and new visitors log in and receive the 60-day notice, using two types of storage in the visitor’s browser, Cookie, and Local Storage, thus reinforcing the storage of consents:
- IP
- Device (e.g. cell phone model).
- Operating System (Android, IOS, Win)
- AdoptConsent – generated at the time of consent, with the description of the visitor’s choice 60 days validity.
Google Ads – Classification: Marketing
Ad network, used for marketing campaigns.
- Pixels – are pieces of installed JavaScript code added to our website for the purpose of tracking and collecting information about user activities, allowing us to identify their access and browsing patterns.
- Web beacon – a technique that allows you to map who is visiting a particular web page, identifying user behavior with different websites or web servers.
What personal data is shared with third parties?
The AAL Institute does not sell or share information that can identify its users individually with other companies, organizations, or individuals.
However, so that we can carry out our actions in the best possible way, we may share some information and personal data with third parties in the following cases:
- Google Workspace: Google’s tools for email services, as well as a secure cloud for company documents, so that our team can work and operate all our internal processes.
- Cognito: a tool for storing data and sending information via an electronic form, used for submitting requests for donations from the TECHansen action.
- Mailchimp: marketing automation platform and e-mail marketing service used to produce and send the AAL Institute’s newsletters.
What about international data transfer (storage on foreign servers)?
The AAL Institute may process your data in Brazil or abroad, through third parties such as the suppliers mentioned earlier in this policy. Regardless of the case, we will take all measures to ensure compliance with this Privacy Policy and current legislation, to guarantee your rights related to the protection of personal data inside and outside Brazil. Therefore, by browsing our website or submitting information through the forms, you authorize us, under the terms of this Privacy Policy, to transfer, process, store and use your personal data in other countries.
How long will the data be kept?
Personal data will continue to be processed until the user informs us that they no longer wish to participate in our actions, or do not wish to receive information sent via our newsletter. The user can, at any time, request the deletion of their data and also ask for the sending of emails or notifications to be suspended.
Just let us know in the following ways:
- Write an e-mail to [email protected]
- Click on the unsubscribe link in the footer of the emails we send via the Mailchimp platform.
All the security measures we take apply to your information only from the moment we receive it and for as long as we keep it in our custody. The operation and security of the device that the user uses to access our services, as well as the networks over which the data travels, are not the responsibility of the AAL Institute.
What are your rights and how can you exercise them?
Basic rights: the user may request confirmation of the existence of the processing of Personal Data, as well as the display or rectification of their Personal Data, by e-mailing [email protected].
Limitation, opposition, portability, and deletion of data: by e-mailing [email protected], the user can request
- limiting the use of your personal data;
- express their opposition and/or revoke their consent to the use of their personal data;
- request the deletion of your personal data that has been collected by the AAL Institute.
If you withdraw your consent for purposes that are fundamental to the proper functioning of our website and digital channels, these environments and services may become unavailable.
If the user requests the deletion of their personal data, it may happen that the data needs to be kept for a period longer than the deletion request, under the terms of article 16 of the General Data Protection Act, for (i) compliance with a legal or regulatory obligation, (ii) an ongoing study by a research body, and (iii) transfer to a third party (respecting the data processing requirements set out in the same Law). In all cases by anonymizing the Personal Data.
At the end of the maintenance period and legal necessity, personal data will be deleted using secure disposal methods, or used in an anonymized form for statistical purposes.
INFORMATION ABOUT THIS POLICY
Inapplicability. If any point of this Policy is deemed inapplicable by the National Data Protection Authority or the courts, the other conditions shall remain in full force and effect.
Electronic Communication: You acknowledge that all communication carried out by the AAL Institute by e-mail (to the addresses informed in your registration), SMS, instant communication applications or any other digital form. They are also valid, effective, and sufficient for the disclosure of any matter relating to our actions, your data, the conditions under which it is provided, or any other matter dealt with therein, with the exception of only what is provided for in this Policy.
Service channel. Em caso de qualquer dúvida com relação às disposições constantes nesta Política, o usuário poderá entrar em contato por meio do e-mail [email protected].
Applicable law and jurisdiction. This Policy will be interpreted in accordance with Brazilian law, in the Portuguese language, and the jurisdiction of your domicile will be elected to settle any dispute involving this document, unless specific personal, territorial or functional jurisdiction is waived by applicable law.
Should the user not be domiciled in Brazil, it is hereby established that Brazilian law shall apply, and the user therefore agrees that in the event of a dispute to be resolved, the action shall be brought in the Courts of the District of Curitiba, State of Paraná.
Updates to this privacy policy
To check the latest version of our Privacy Policy, simply visit our website https://aal.org.br/en/privacy-policy/.
GLOSSARY
For the purposes of this Policy, the following definitions and descriptions should be considered for better understanding:
- Anonymization: Use of reasonable technical means available at the time of Processing, whereby a piece of data loses the possibility of being associated, directly or indirectly, with an individual.
- National Data Protection Authority: the government body responsible for ensuring and monitoring compliance with the General Personal Data Protection Law.
- Cloud Computing: A service virtualization technology built on the interconnection of more than one server via a common information network (e.g., the Internet), with the aim of reducing costs and increasing the availability of supported services.
- Cookies: Small files sent by the platform, saved on your devices, which store your preferences and a little other information in order to personalize your browsing according to your profile. For further information, please check out our Cookies Policy.
- Data: Any information entered, processed, or transmitted through Our Environments.
- Personal Data: Data relating to an identified or identifiable natural person.
- Sensitive Personal Data: Personal data on racial or ethnic origin, religious conviction, political opinion, membership of a trade union or religious, philosophical, or political organization, data relating to health or sex life, genetic or biometric data, when linked to a natural person.
- Uniquely automated decisions: These are decisions affecting a user that have been programmed to work automatically, without the need for human operation, based on automated processing of personal data.
- Data Protection Officer (DPO): Person appointed by Us to act as a communication channel between the controller, the data subjects and the National Data Protection Authority (ANPD).
- Session ID: Identification of the user session when accessing Our Environments.
- Instituto AAL: Alliance Against Leprosy Institute, registered with CNPJ 33.246.584/0001-39, with headquarters in the city of Curitiba, state of Paraná, at Rua Deputado Heitor Alencar Furtado, nº 3350, sala 103, Condomínio Opus One Ecoville – Bairro Campo Comprido, CEP 81200-452
- IP: Abbreviation for Internet Protocol. It is an alphanumeric set that identifies users’ devices on the Internet.
- Informed Consent Form – ICF: According to Brazilian law, the ICF is the document that guarantees the participant in the research/action respect for their rights. Resolution CNS466/2012, item II-23 of Terms and Definitions, clarifies: Informed Consent Form – ICF is the document in which the free and informed consent of the participant and/or their legal guardian is explained, in written form, and must contain all the necessary information, in clear and objective language, easy to understand, for the most complete clarification about the research to which they propose to participate. Parents/guardians will sign the ICF, consenting for minors (Term of Assent).
- Data Subject: natural person to whom the personal data being processed refers.
- Processing: Any operation carried out with personal data and sensitive personal data, such as those relating to the collection, production, reception, classification, use, access, reproduction, transmission, distribution, processing, archiving, storage, deletion, evaluation or control of information, modification, communication, transfer, dissemination or extraction.
- User: the person who holds the personal data, i.e., visitors to our environments and other internet users.
Acceptance of the privacy policy
Now that you have all the necessary information, you just need to understand that by accepting our privacy policy, you declare that you have legal capacity, giving your express consent to everything presented in it.
If you have any questions, just drop us a line at [email protected].
National Data Protection Authority
Esplanada dos Ministérios, Bloco C, 2º andar, CEP 70297-400 – Brasília – DF.
Service Channels – Portuguese (Brazil) (www.gov.br)
Alliance Against Leprosy Institute
CNPJ: 33.246.584/0001-39
Address: Rua Deputado Heitor Alencar Furtado, nº 3350, sala 103, Condomínio Opus One Ecoville – Bairro Campo Comprido, CEP 81200-452, Curitiba – PR
Phone: +55 41 98839.1024 (WhatsApp)
