Privacy Policy

Last updated: July 2026

ONCORE — Cancer Recovery & Survivorship Center (hereinafter "ONCORE", "we", "our") is the data controller of your personal data and is committed to protecting it, especially health data, in accordance with the General Data Protection Regulation (GDPR) and Portuguese Law 58/2019.

Elysium λ Development & Research acts as a processor: it provides and maintains the technological infrastructure on ONCORE's behalf and under its documented instructions, and does not process your data for its own purposes.

1. Data Collected

We collect strictly necessary data to provide our oncology recovery services. This may include:

• Identification data: Name, email, phone.
• Health data (Special Categories): Clinical history, oncology diagnosis, exams, physical and nutritional assessment. These data are subject to a higher level of protection.

2. Purpose of Processing

Your data is processed exclusively for:

• Scheduling and provision of health services (clinical exercise, oncology physiotherapy, nutrition and psycho-oncology).
• Clinical assessment and monitoring of functional recovery.
• Communication with the medical team and patient.

3. Lawful Basis and Consent

The processing of health data is based on your explicit consent and the necessity of processing for the purposes of preventive or occupational medicine, for the assessment of the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment.

4. Data Retention

We retain your data only for the period necessary for the purposes above, or as required by law for the retention of clinical records (usually 10 years).

5. Data Security

We have implemented robust technical (encryption, firewalls, access control) and organizational measures to ensure the confidentiality, integrity, and availability of your data. The technological infrastructure is provided, acting as processors, by Elysium λ Development & Research and Cloudflare.

6. Your Rights

Under the GDPR, you have the right to:

• Access, rectify, or request the erasure of your data ("Right to be Forgotten").
• Restrict or object to processing.
• Request data portability.
• Withdraw consent at any time (without affecting the lawfulness of processing based on consent before its withdrawal).

To exercise your rights, contact us at: info@oncorecrc.eu.