1.REASON FOR THE PERSONAL DATA PROCESSING: According to the Personal Data Protection Legislation ((EU) 2016/679 ("GDPR") and Law 58/2019 of 8 August), personal data will be included in a file owned by SIGMA SAUDE and may be used to: Manage your demographic and health data for clinical analyses; Check the cover of your insurance policy (where applicable); Bill the services provided; Contact you to provide information related to the services provided (where applicable); Inform you via SMS that your results are available for collection; Conduct satisfaction surveys; Send marketing, communication and advertising regarding the SYNLAB Group; Carry out scientific statistics with prior anonymization.

2.LEGAL BASIS: Article 9 of the GDPR - Provision of the clinical analysis service by a health professional; Article 6 of the GDPR - Management of the data necessary for the management of the contractual relationship (invoicing; sending of results; verification of insurance policy coverage)

3.DATA RETENTION PERIOD: Data shall only be kept for the period necessary for the purposes for which it is processed, notwithstanding its retention to fulfil legal obligations for the periods defined by law. Finally, when you ask us to send your analyses to your prescribing physician, such data processing shall have your consent as a legal basis. You may withdraw your consent at any time.

4.DATA RECIPIENTS: The data may be sent to your insurer or the entity under whose cover the care is provided. For the purposes identified in point 1, your personal data will be shared with some companies in the SIGMA SAUDE. SIGMA SAUDE may use third parties to provide support services in carrying out the clinical analyses requested (e.g. providers of document management services, informationtechnology). These parties may have access to personal data to the extent necessary to provide these services and SIGMA SAUDE undertakes to enter into data processing agreements with them as required by applicable law.

5.WHAT ARE MY RIGHTS WHEN DATA IS MADE AVAILABLE? You have the right to obtain confirmation on the processing of your personal data by the laboratory and to obtain a copy of it (right of access). You have the right to request the rectification of data (right of rectification) or, as the case may be, its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected (right of deletion). In certain circumstances, you may request to limit the processing of your data, in which case we will only retain your data to exercise or defend claims (right of limitation). You have the right to ask SIGMA SAUDE to transmit your data directly to a third party (right of portability). You have the right to oppose the processing of your personal at any time and for reasons relating to your situation. In this case, SIGMA SAUDE stops processing your personal data unless it provides a legitimate basis for such processing. You can invoke your rights at [email protected] You also have the right to complain to the Portuguese National Data Protection Commission (www.cnpd.pt).

6.DATA COLLECTION: The data was collected in the presence of the holder or an authorized legal representative. I authorize the processing of the data to the extent and under the conditions indicatedabove. I authorize the collection and processing of my personal data by the SIGMA SAUDE, so that it may be used in its clinical analysis activity. I also authorize the sending of biological material to national or foreign laboratories, using data minimization.

7.SUBMISSION AND COMMUNICATION OF RESULTS: Your results are sent to the email contained in this document. If there is no email in this document, your results will be sent to the address ofresidence that you indicated at the time of registration. The results are communicated to the national Health Authorities. You will be contacted by national Health Authorities if the result of your diagnostic test on COVID-19 (or the user you represent here) is positive.