Privacy Statement

Your privacy is important to us, from RPH Group. Thus, we developed this Privacy Statement (Statement) that sets forth the way we collect, obtain, use and store the information and data that you confide in us, as well as the way we protect and process such information.

The expressions “RPH Group”, “us”, and “ours” in this Privacy Statement refer to GSH CORP PARTICIPAÇÕES S.A and its subsidiaries. As controller of your personal information, RPH Group will make the decisions regarding the purpose and the way your information will be processed.

1. TO WHOM THIS STATEMENT APPLIES

The present Statement applies to users of https://www.gruporph.com.br/ website. We would like to provide all the necessary information for you to make your own decisions regarding the privacy of your data, including the way you can use, manage and delete it. Here, you can also understand how you can use our tools.

2. PERSONAL INFORMATION THAT WE COLLECT ABOUT YOU

The term “personal information” or “personal data” in this Statement means any information related to you and that allows us to identify you, whether directly identified or identifiable, when combined with other information we may retain.

We can obtain your personal information in the following hypothesis:

• Through your interaction with us and with our services, when you contact us, when you subscribe or register in campaigns from RPH Group, or when you request information through our customer service; and
• Through cookies or other similar technologies. If you would like to have more information about the use of cookies in our tools, read the section “HOW WE USE COOKIES” in this statement.

3.PURPOSE OF USING PERSONAL INFORMATION

In summary, we use your personal information for the purposes listed below:

• To confirm and complete your data, according to the relation established with you;
• To put into effect an active contract to which you are a party;
• To manage our relationship with clients, meet their requests and improve our services.
• To perform research activities, analysis, issuance of test results, innovations related to performance and improvement of our services our affiliates, or our partners;
• To fulfill our legal and regulatory obligations, such as the execution of applicable laws, regulations, resolutions, requests and demands from public and governmental authorities, or from dispute resolution courts;
• When you consent regarding the use of your personal data in situations that demand your authorization, such as sending newsletters;
• For our or third parties legit interest, for the purposes of prevention and protection of our rights;
• To customize your experience with our services through the customization of your account and content, creation of profiles according to the inferences or preferences informed previously.

If you would like to obtain information regarding the purposes to which we use your information, email us at: dpo@grupogsh.com.

4. SHARING OR TRANSFERRING THE INFORMATION

We can share your personal information with:

• The companies belonging to GSH CORP PARTICIPAÇOES S.A., including, but no limited to*, RPH Group (Radiopharmacy and Nuclear Medicine) and GSH Group (Hemotherapy Services Administrator);
• Business partners, suppliers or service providers that provides us goods or services, as long as we have obtained your consent or when the sharing is performed to fulfill a legal obligation or any other legit purpose determined by the law;
• An acquiring party, service providers or third parties related to the assessment, negotiation or conclusion of a transaction in which we are acquired or merged with another company, or in which we sell, pay or transfer the entirety of our assets; and
• Governmental authorities, regulatory agencies and other public authorities to which we are responsible for.

The sharing will serve the purposes established in this statement, including the hiring of outsourced service providers or subcontractors, who may act as data processors of your personal information, including in order to process, host and store data, to execute the contract in the most effective way or to fulfill the specific legal obligations to which we are subject.

In this process, we adopt appropriate measures to assure the security of your personal information and avoid its alteration, loss, processing or unauthorized access.
Specific contractual clauses and other mechanisms of transference legally acceptable are adequate and implemented in our procedures to protect the information. Contact us if you need more information regarding the safeguard adopted by RPG Group.

*The companies linked to GSH CORP PARTICIPAÇÃOES S.A. may be updated with the inclusion of new companies to the group, resulting in the possibility of sharing your data with a newly admitted company.

5. HOW LONG WE KEEP YOUR PERSONAL INFORMATION.

Your personal information will be used and stored by us for the necessary time to respond to RPH Group’s legal, contractual and commercial purposes, including the duration of you relationship with us and during the necessary period after that to take into account any legal, contractual or commercial obligations in course (for example, for the purposes of internal auditing, to meet the regulatory demands related to the retention of information or to respond to requests from government authorities and the time necessary to support any legal claims.

RPH Group declares that continuously implements and updates administrative, technical and physical safety measures to protect the information against unauthorized access, loss, destruction or alteration.

6. YOUR RIGHTS

You have the right to obtain from RPH Group, regarding the processed data, at any time and through request:

• Right of confirmation and access: to obtain details of personal information used by us.
• Right of correction: to correct, complete of update your data.
• Right to anonymization, block or elimination: to request that your data are restricted of eliminated, since this request doesn’t limit our rights of maintaining the data according to the legislation.
• Right of portability: to ask for the transfer of your personal information.
• Right to information about sharing: request information about the entities with whom we share your data.
• Right to withdraw your consent: manage your marketing preferences through the unsubscribe links in the communications you receive from us, as well as revoke any consent given to us to handle your personal information.

Please be aware that not all the rights mentioned above may apply in all cases. You can make any request you wish through our contact channel indicated at the end of this Statement. We recommend that you always keep your access account well protected and never share your access credentials to the Site with third parties.

7. HOW WE USE COOKIES

RPH Group uses cookies and other similar tracking technologies on its website to collect information about your online activities to ease the use of this website and optimize your navigation experience.

Cookies are small text files put in a computer or device to identify the used and collect information, which vary according to the function and purpose of the used cookies. Once you agree with the use of cookies, the files are added to your computer or device, and they help us analyze your navigations.

See below which categories of cookies are used, according to each function:

Types of Cookies	Function of Cookies
Performance	They are used to help us collect information about the traffic of users on the website, understanding the behavior and origin of the visitors. They collect information such as the browser used, number of visits, the average duration of the visit, and others.
Advertising	These cookies are used to provide relevant and interesting content to the users, once they track their habits of navigation. They can also be used to present direct advertising based on the users’ interests, allowing us to measure the efficacy of publicity campaigns.

You can manage the cookies on the Site by changing your browser settings to accept, reject, or disable cookies. However, some functions and features of the Site may not work properly due to this change, impairing your browsing experience on the Site.

In addition to cookies, we use other tracking technologies, such as web beacons (also known as Internet tags, tracking pixels, or transparent GIFs). These identifiers allow us to count the number of visitors to the Site and recognize when certain links have been accessed by users.

8.LINKS TO OTHER SITES

Our Site contains links to third-party websites or applications (for example, our pages on Instagram, Facebook, and our contact via WhatsApp). However, once you use these links to leave our Site, you should note that we will no longer have control over such platforms, and you should check the privacy policies and terms that apply to them.

9. HOW TO CONTACT US

If you have any questions or concerns about how we use your personal information, please contact us at the following email: dpo@grupogsh.com.

10. CHANGES TO THIS PRIVACY STATEMENT

We may make changes to this Statement from time to time. Any new version of this Statement will be duly updated on the communication channels of the RPH Group.

Last updated: January 2024.