Cookie Policy

Last updated: October 15, 2025

This Cookie Policy describes, in a way... complete and granular, as DaTerapia (“we”, “Platform”) uses Cookies and similar technologies no website psicologo-online.pt, This policy outlines the purposes of your data, the applicable legal basis, retention periods, consent management/withdrawal options, and the privacy safeguards adopted. This policy complements our Privacy Policy and complies with the... GDPR and the Law 41/2004 (with the respective amendments).

Contact for privacy and cookies (DPO): dpo@psicologo-online.pt | +351 911 559 506.

1) What are cookies and similar technologies?

Cookies These are small text files placed on your device when you visit a website. They allow the website to recognize your device, remember your preferences, and improve your experience.
Similar technologies They include:
• LocalStorage/SessionStorage e IndexedDB (local storage in the browser);
• Web beacons/pixels (invisible images or web calls that measure interactions);
• Tags e scripts third parties (e.g., metering, security, anti-fraud);
• Device identifiers generated by the browser;
• Fingerprinting (techniques for combining device/browser attributes).
At DaTerapia we restrict these technologies to strictly necessary or to whatever it has prior consent.

2) Who places the cookies?

• First-party cookies: defined by the domain psicologo-online.pt.

• Third-party cookies: defined by distinct domains/providers (e.g., payment services, security, metrics). These third parties no They receive health data; they only receive the minimum data necessary for the purpose (minimization).

3) Categories of cookies and purposes

We classify and present cookies by purpose, with examples e legal basis:

1. Strictly necessary (essential)
   They guarantee basic functionalities and security: login/session management, load balancing, fraud prevention, compliance with consent preferences, CSRF protection.
   Legal basis: Legitimate interest (provision of the requested service) and legal obligation (security).
   Consent: not required.
   Impact if rejected: The website may not function correctly.

2. Functional (preferences)
   They remember choices (language, accessibility, layout, cart/scheduling reminder) to improve the experience.
   Legal basis: consent.
   Consent: required (opt-in).
   Impact if rejected: Functionalities may degrade.

3. Analytics/Measurement
   They measure usage, performance, and errors in an aggregated/pseudonymized way to improve reliability, experience, and accessibility.
   Legal basis: consent (and, when strictly anonymized and without identification/correlation, we may operate under legitimate interest, but by default we request consent).
   Consent: required (opt-in).
   Impact if rejected: We lost non-essential metrics; the service remains.

4. Marketing/remarketing
   They evaluate the effectiveness of campaigns and, where applicable, allow for more relevant communication without disclosing sensitive data.
   Legal basis: consent.
   Consent: required (opt-in).
   Impact if rejected: There will be no personalized advertising.

5. Advanced security and anti-fraud measures
   Detection of anomalous behavior, protection against form abuse or bots.
   Legal basis: legitimate interest/legal obligation (security).
   Consent: Not required when strictly necessary and proportionate.

Notice: No We use cookies or technologies to collect, infer, or share information. health data with third parties. Clinical content is never tracked.

4) List of cookies and technologies (example)

Below you will find a table template which we publish and update when a cookie is added/removed. The names are illustrative; on your website, we will fill in the actual identifiers and effective retention times.

LocalStorage/SessionStorage/IndexedDB They will be described in the same format, indicating key, purpose, and expected duration.

5) How do we provide and record consent?

We use a Center of Preferences (CMP) what:
• shows, on first access, a consent banner Sure, with the option to “Accept”, “Reject” and “Manage preferences”;
• Locks by default any non-essential tag/cookie until the user chooses;
• Allows for granularity by category and, where applicable, by supplier;
• guard one consent registration (date/time, policy version, accepted categories) for up to 24 months;
• allows remove/change You can give your consent at any time (link “Manage Cookies” in the footer).

6) Withdraw consent and manage cookies

He can change or withdraw consent at any time through our Preference Center (footer “Manage Cookies”).
Additionally, you can manage cookies in your browser:
• ChromeSettings → Privacy and security → Cookies and other site data → Block/clear.
• Firefox: Definitions → Privacy & Security → Cookies and website data.
• SafariPreferences → Privacy → Manage website data.
• Edge: Definitions → Cookies and site permissions.
Removing/blocking cookies not necessary It does not compromise access to the service, although some preferences may be lost.

7) Specific technologies and limitations we apply

• Anonymization/PseudonymizationMetrics are aggregated whenever possible.

• Fingerprinting: no We use fingerprinting for marketing profiles; only minimal and proportional indicators of anti-fraud security, when necessary.

• Cross-site trackingWe do not share identifiers for cross-referencing with sensitive data.

• "Do Not Track" signs“Some browsers send DNT; although there is no legally binding standard, We respect enhanced privacy settings. when technically detectable.

• Local storagewe limit LocalStorage/SessionStorage/IndexedDB interface preferences and states, never clinical data.

• Pixels and tagsThey carry just after obtaining consent (when applicable) and are audited periodically.

8) Children and young people

When the service involves younger, The banner and the Preference Center are presented to the holder of parental responsibilities (when legally required). We do not conduct marketing profiling directed at minors.

9) International Transfers

We prioritize suppliers in EEE. If a cookie/service involves transfer to a third country, we apply Standard Contractual Clauses e complementary measures (encryption, minimization, access controls). We will indicate in the table the location of the treatment for each relevant supplier.

10) Conservation

• Consent logs: until 24 months (or a shorter period defined by law/recommendation).

• Session cookiesDeleted when browser is closed.

• Persistent cookies: as per table; reviewed periodically and deleted/shortened if they cease to be necessary.

• Keys in local storagesubject to the same principle of minimization and periodic review.

11) Security

We have taken measures to prevent unauthorized access to cookie identifiers: flags HttpOnly/Secure/SameSite where applicable, CSP (Content Security Policy) to reduce script injection, Subresource Integrity in critical resources, and technical reviews before introducing new tags.

12) Third parties and liability

Each third party that places cookies on your device acts as a responsible for your treatment. We only select suppliers with contractual commitments suitable, prohibition of sensitive data, limits of purpose e security measures Robust. DaTerapia does not authorize The use of data for purposes other than those described herein.

13) Updates to this Policy

We update this Policy to reflect legal, technical, or operational changes (new categories, new suppliers, deadlines). Whenever we make significant changes, we will update the... date at the top and we will reflect the changes in Preference Center.

14) How to contact us

Questions about cookies, consent, or this Policy: dpo@psicologo-online.pt | +351 911 559 506.