Home
About us
Solutions
Clients
Partners
Contacts
Policies
The Executive Board of ST+I, aware of its strategic role in the sector of information technologies applied to healthcare and in line with
the fundamental pillars of the ISO 9001 standard, publicly undertakes to maintain, operate and continuously improve its Quality Management System (QMS).
This Quality Policy serves as the framework for defining our strategic objectives, incorporating operational excellence, regulatory compliance,
digital innovation and sustainable responsibility.
1. Technological Innovation, Safety and Regulatory Compliance
Ensure strict compliance with all applicable legal, regulatory and contractual requirements, with a particular focus on Regulation (EU) 2017/745 on medical devices (MDR), and the ISO 9001, ISO 13485, ISO/IEC 27001 and other applicable standards.
2. Sustainability, Digital Transformation and ESG (Environmental, Social and Governance) Criteria
Integrate emerging solutions into the lifecycle of our solutions in an ethical and responsible manner, ensuring that technological modernisation translates into environmental sustainability and social value for our stakeholders.
3. Continuous Improvement and Resilient Risk Management
Strictly implement organisational, cybersecurity and clinical risk management, supporting the product lifecycle through structured post-market surveillance (PMS) activities and corrective and preventive actions (CAPA).
4. Collective Responsibility and Organisational Culture
Promote a culture of excellence based on knowledge-sharing, institutional transparency and the active protection of the health and safety of end-users and patients.
5. Valorization of Talent and Relationships Based on Mutual Trust
Evaluate and recognise the merit of work carried out individually or collectively, extending this requirement for high standards of quality to external suppliers in order to build stable, long-lasting relationships based on mutual trust.
6. Information Security, Confidentiality and Reliability
Secure ST+I's technological know-how, source code and intellectual property, as well as clients clinical and administrative data, by safeguarding the organisation against emerging cybersecurity risks and fostering digital trust.
ST+I’s Management ensures that this Quality Policy is clearly communicated, understood by all staff nd applied at all levels of the organisation. Its suitability, effectiveness and alignment with the company’s strategic objectives and with the applicable standards and regulations are reviewed periodically during Management Review meetings.
At ST+I – Serviços Técnicos de Informática, Unipessoal, Lda. (NIPC 502246995), the privacy and security of our users’ personal data are key priorities. We are committed to processing all information collected in strict compliance with the data protection legislation in effect.
1. Collection and Use of Personal Data
The data provided on our website is collected via
Contact Form: Name and email address.
Job applications: Personal details and CVs (received via unsolicited applications or in response to open vacancies).
Prupose: The data collected is used exclusively for the purpose for which the user has given their consent (such as responding to enquiries or for recruitment purposes) and will never be shared for any other purpose.
2. Data retention and user rights
The data retention period varies depending on the purpose
Unsolicited applications: Retained for 1 year.
Targeted applications/open vacancies: Retained for 5 years, in accordance with applicable legislation.
The user's rights: As the data subject, the user has the right to access, update, rectify or request the erasure of their information at any time.
Privacy contacts: You may submit your request in writing to our address (Rua Dr. José Figueiredo, Lote 4, Loja 3, 5000-562 Vila Real),
by email to sti@sti.pt, or by contacting our Data Protection Officer (DPO), Rui Gonzaga, directly via email at rgonzaga@sti.pt.
3. Data Security
We have implemented rigorous technical and organisational measures to prevent unauthorised access to, alteration, loss or disclosure of your data. The website form uses data encryption, and the information is stored securely on servers located within the country.
4. Terms of Use and Liability
Copyright: : The materials and information on this website are the property of ST+I. It is expressly forbidden to copy, modify or distribute the content without our prior written authorisation.
External Links: You can accept, refuse or clear cookies at any time via your browser’s settings or preferences menu.
5. Cookies Policy
We use cookies on our website (www.sti.pt) solely for analytics and performance purposes.
This enables us to collect anonymous browsing information (such as browser type, language and number
of unique visits) to optimise the website’s performance.
Total Privacy: ST+I does not use advertising cookies, nor does it share browsing information with third parties. The information we collect never allows us to identify you.
Management: You can accept, refuse or clear cookies at any time via your browser’s settings or preferences menu.
This document is reviewed periodically to keep pace with changes in legislation and industry practices.
The ST+I Management is committed to leading, supporting and actively promoting Information Security, recognising it as a responsibility that cuts across the entire organisation and as an integral part of the business’s processes and objectives.
The Management is committed to:
• Ensuring the protection of the confidentiality, integrity, availability, authenticity and traceability of information;
• Establishing, implementing, maintaining and continuously improving the Information Security Management System (ISMS);
• Ensure that information security is integrated into business processes, decision-making and the planning of the organisation’s activities;
• Promote a risk-based approach, ensuring that information security risks are systematically identified, assessed, addressed, monitored and reviewed;
• Ensure compliance with legal, regulatory, contractual and other requirements applicable to, or to which the organisation has subscribed;
• Provide the human, technological, financial and organisational resources necessary for the effective implementation and maintenance of the ISMS;
• Define, monitor and periodically review information security objectives, ensuring they are consistent with the organisation’s strategy and context;
• Promote awareness, training and accountability amongst staff regarding their responsibilities in relation to information security;
• Promote and strengthen an organisational culture of security, encouraging participation, communication and the timely reporting of incidents, vulnerabilities and situations that may compromise information security;
• To ensure that information security requirements are considered in dealings with customers, suppliers, service providers and other relevant stakeholders;
• Ensure that appropriate mechanisms are in place to prevent, detect, respond to and recover from information security incidents;
• Ensure the protection of information throughout its entire lifecycle, regardless of format, support or location;
• Promote business resilience and continuity by implementing appropriate measures for the protection and recovery of information assets;
• Periodically assess the performance, suitability, adequacy and effectiveness of the ISMS, using the results of monitoring, audits, incidents, risk assessments and Management Review as inputs for improvement;
• Ensure the continuous improvement of the ISMS, adapting security measures to evolving risks, threats, vulnerabilities, applicable requirements and the organisation’s needs.
Management recognises that the effectiveness of Information Security depends on the commitment and involvement of everyone; therefore,
every employee and stakeholder covered by this Policy must act in accordance with their responsibilities and contribute to the protection of ST+I’s information and assets.
Management also ensures that this Policy is communicated, understood, implemented and maintained throughout the organisation and made available to relevant stakeholders, where applicable.
At ST+I – Serviços Técnicos de Informática, we believe that technology and innovation only generate real value when combined with rigorous, transparent and responsible ethical conduct. Our Code of Ethics and Conduct reflects our organisation’s identity and sets out the guidelines that govern all our employees, partners and service providers.
Our Identity
Mission: To develop innovative technological solutions and services that add value for our clients and partners, promoting excellence, efficiency and cybersecurity.
Vision: To be a national and international leader in the development of technological solutions for the healthcare sector, distinguishing ourselves through quality and trust.
Values: We base our day-to-day work on integrity, innovation, confidentiality, social responsibility, sustainability and respect for people.
Commitments and Fundamental Principles
Legality, Equality and Inclusion
We operate in full compliance with current legislation. We actively promote equal opportunities and maintain a zero-tolerance policy towards any form of discrimination based on gender, age, sexual orientation, religion or nationality.
Cybersecurity and Data Protection
We take our responsibility to rigorously protect information and personal data seriously. All our systems are used securely, ensuring the confidentiality of our clients’ data and that of the company itself.
Anti-corruption and Impartiality
We uphold a stance of absolute integrity in all commercial and institutional relationships, with zero tolerance for fraud, bribery, corruption or undue advantage.
Prevention and Combat of Workplace Harassment
ST+I is committed to ensuring a dignified, safe, healthy and inclusive working environment. We do not tolerate any unwanted behaviour, whether of a moral or sexual nature, that undermines dignity or creates a hostile environment in the workplace.
Internal Reporting Channel:
Any situation that breaches the law or the provisions of this Code must be reported by email to the Human Resources Department or to the immediate line manager.
Protection and Confidentiality:
We guarantee the prompt and impartial investigation of all reports, ensuring anonymity, complete confidentiality and the absolute protection of complainants and witnesses against any form of retaliation.
Note:
This summary reflects the guidelines set out in the revised ST+I Code of Ethics, which is currently in force. Our staff can consult the full document on the company intranet.
