Privacy and Data Protection Policy

This is a courtesy translation of TH's privacy policy, provided for informational purposes only. The Portuguese version is the legally binding document and prevails in case of any divergence.

1. Who we are

TH – Tecnologia Hospitalar Ltda, registered under CNPJ 42.160.334/0001-72, with registered office at Dr. Carlos Ferrari, 375, Suite 01 — Ferrarópolis, Garça/SP — ZIP 17.400-090, Brazil, is the controller of the personal data processed through this website.

2. Data we collect

This website collects only data voluntarily provided by the user through the contact and job application forms:

• Full name
• Employer institution name
• Professional e-mail
• Phone number
• Facility type and area of interest (drop-down selection)
• Message or experience summary, depending on the form

We do not collect patient clinical data, personal health data, identity documents, or banking details through this website.

3. How we use your data

• To respond to your commercial inquiry or job application.
• To follow up and continue the conversation.
• To forward your application to our internal recruitment process, where applicable.

We do not use your data to send unsolicited marketing, nor do we share it with third parties for commercial purposes.

4. Legal basis (LGPD — Law no. 13,709/2018)

Processing is based on the legitimate interest of the data subject who submits the form (art. 7, IX, LGPD) and, where applicable, on the performance of a contract or pre-contractual steps (art. 7, V).

5. Data sharing

We do not sell or transfer your data to third parties. Data may be shared with IT service providers strictly necessary for the operation of this website and corporate e-mail, all of whom are bound by confidentiality obligations compatible with the LGPD.

6. Retention period

Data submitted through the commercial contact form is retained for as long as necessary to respond to the request and, if there is mutual interest, for the duration of the business relationship. Job application data is retained for up to 12 months after the end of the selection process, unless the applicant consents to a longer period.

7. Your rights

In accordance with the LGPD, you may at any time:

• Confirm the existence of processing;
• Access your data;
• Correct incomplete or inaccurate data;
• Request anonymization, blocking, or deletion of unnecessary data;
• Object to processing or withdraw consent.

To exercise these rights, send a request to: dpo@thosp.com.br

8. Cookies

This website does not use tracking cookies, third-party analytics, or advertising scripts. There is no automatic collection of browsing data beyond the standard access logs of the web server.

9. Security

We adopt technical and organizational measures to protect data against unauthorized access, loss, or improper disclosure. This website is transmitted over a secure connection (HTTPS).

10. Data Protection Officer (DPO)

To exercise rights or clarify questions about data processing, contact our DPO at dpo@thosp.com.br.

11. Changes to this policy

This policy may be updated at any time. The last updated date appears at the top of this document. We recommend reading it periodically.