Privacy Policy

Moodbuster 2 is a Web based platform that provides digital tools in order to help treating people with depression. Moodbuster 2 respects your privacy. We want to ensure that you get the information, content, and experiences that matter most to you. Credentials to access the Moodbuster 2 platform have been provided to you by a healthcare professional, ahead also designated as practitioner. Your practitioner and/or healthcare services provider is the data controller for the data collected through this platform. The data controller is the sole responsible for analyzing, studying and treating such data. Acting as a Hosting Entity INESC TEC is responsible for storing the Moodbuster 2 platform data. Under that role INESC TEC guarantees that your data will only be accessed by its authorized personnel where necessary for maintenance and troubleshooting purposes.

1. Scope

This privacy policy applies to all data collected through the interaction with the Moodbuster 2 platform.

2. What data will be collected?

The Moodbuster 2 platform collects the necessary information to provide practitioners with the insight to assess and help you improve your mental health state. This information is provided by you in a set of therapeutic modules about your behaviors, activities, thoughts, problems, routines, goals, among other relevant information for your therapy. Additionally, it also collects logging information in order to secure and maintain the platform, as described in the logging practices section below.

3. How will your data be used?

The Moodbuster 2 platform uses your information for the following purposes:

To communicate with you about a therapeutic appointment or the screening process. Your therapist may communicate with you through the Moodbuster 2 platform messaging system about a therapeutic appointment or the screening process. This may include details about the location of the therapeutic appointments and additional information about your therapy. Additionally, our automated systems analyze the content you provide to present you with personally relevant reminders, announcements and recommendations. This analysis occurs as the content is sent, received, and when it is stored.

To facilitate digital tools for treating depression. Moodbuster 2 collects information provided by you during an online therapy to allow your therapist to collect the necessary insight to evaluate and help improving your mental health state. Additionally, the information provided will also be used by the platform to provide you with reminders/notifications about your therapy and/or therapy progress.

To perform research activities and obtain new research insights. Given the fact that Moodbuster 2 is a Health research platform, collected information may be used for research purposes by the Moodbuster 2 Team members. In this scenario, such information which may include among others, the content you inserted during the online therapy and usage information, will be processed in a pseudo-anonymous way, not allowing your identification..

To allow you access to our platform. To use Moodbuster 2 you must have a registered user account. Your identity will remain unknown, unless your user name reveals it. In any case, the data that you provide will only be accessed by you and your healthcare provider, and will not be passed on to any other third party without your explicit signed consent. Each time someone logs in or tries to log in with an existing user account, the following technical data is also automatically linked to this user account:

• Timestamp of login
• IP address of the accessing client
• Browser type, browser version and operating system used (user agent)

These data will be used to track unauthorized access attempts and to assist in troubleshooting with the use of the platform.

Data about minors and children. Moodbuster 2 is not intended to be used by children under 16 without the permission of parent(s)/guardian(s). Please contact us, if you suspect that there might be any information on the platform that does not comply with the previous condition.

4. How will you know if the Privacy Policy is changed?

This Privacy Policy may be updated from time to time. If any material changes are made, this page will be updated and always made available here.

5. Technical information

Logging practices

Moodbuster 2 automatically records the Internet Protocol (IP) addresses of the Moodbuster 2 visitors. The IP address is a unique number assigned to every computer on the internet. Generally, an IP address changes each time you connect to the internet (it is a "dynamic" address). Note, however, that if you have a broadband connection, depending on your individual circumstance, the IP address may contain information that could be deemed identifiable. This is because, with some broadband connections, your IP address doesn't change (it is "static") and could be associated with your personal computer. Moodbuster 2 keeps track of the pages visited and the amount of time spent on those pages. This information is only for statistical purposes to find out which pages users find most useful and to improve the website. Moodbuster 2 also captures and stores information that you transmit. This may include:

• Browser/Device type/version
• Operating system used
• Request and referrer URL
• Date and time of the server request
• Volume of data transferred

These data are not combined with other data sources. These data are processed by INESC TEC for the following purposes:

• Securing the network infrastructure and technical administration
• Optimization and troubleshooting when using this website
• Identification and tracking of unauthorized access attempts
• Audit of the actions taken in the platform by registered users

External links behavior

Some of the Moodbuster 2 pages include links to or embed contents from other sites created and maintained by other public and/or private-sector organizations (e.g. YouTube videos). Moodbuster 2 provides these contents solely for your information and convenience. When you access external content, you are leaving the Moodbuster 2 domain, and Moodbuster 2 information management policies no longer apply. Moodbuster 2 encourages you to read the privacy statement of each external source that you visit before you provide any personal data.

Cookies and web beacons

Cookies and web beacons are electronic placeholders that are placed on your device by websites to track your individual movements on that website over time. Moodbuster 2 uses both session-based cookies (which last only for the duration of the user's session) and persistent cookies (which remain on your device, provide information about the session you are in and wait for the next time you use that site again). These cookies and web beacons provide useful information to the Moodbuster 2 platform, enabling the recognition of repeated users, facilitating the user's access to and use of the platform, allowing to track usage behavior and balancing the usage of the website on the web servers. Tracking cookies, third-party cookies, and other technologies such as web beacons may be used to process additional information, enable non-core functionalities on the Moodbuster 2 website and enable third-party functions.

Do Not Track (DNT)

This platform does not respond to DNT browser requests.

6. Collaboration with authorities

INESC TEC has appointed and mandated a data protection officer (DPO) who ensures proper communication with the relevant regulatory authority for privacy and can coordinate any investigative action, complaint handling or data breach notifications. The DPO will also monitor regulatory changes and consult the regulatory authority where implementation of a regulatory or technological change leads to doubt.

7. Your European Union privacy rights

Under the General Data Protection Regulation (Regulation EU 2016/679) (also known as GDPR), as a data subject, you have the right of access, rectification, erasure, restriction and portability regarding your personal data. The exercise of these rights may depend on the particularities of the data processing in question. To request information about or avail yourself of those rights, please send an email to dpo@inesctec.pt with "Moodbuster 2 - GDPR Request" in the subject line. In the email please describe, with specificity, the GDPR right you are requesting assistance with. Please note that additional information may be requested prior to initiating a response to a request and that INESC TEC reserves the right to charge a fee if the request is considered unfounded or excessive. Upon analysis of the request, INESC TEC will inform you if it is granted, denied, or not applicable due to the existence of any exemptions.

8. How can you contact us if there is an issue?

If you have any questions or concerns about this Privacy Policy or about the use of your personal information, please feel free to contact us by email at dpo@inesctec.pt.

Ver 1.0 - 14 January 2022