Privacy policy
Who we are
The controller of your data is the Dr. Voinea dental practice. Its full legal name, registered address and tax code are shown at the bottom of every page, and its contact details are on the contact page.
This policy explains what personal data we process when you use the site or contact us, why, how long we keep it, and what rights you have under Regulation (EU) 2016/679 (GDPR).
What data we process
What you give us when you call, write on WhatsApp, email us or use the appointment form: your name, phone number, email address, the service you chose and the content of your message.
Information about your health, only as far as you share it for an appointment or treatment. Your medical record is kept at the practice, not through the site.
Technical data (IP address, browser type), in server logs and when the form is sent, to keep the site secure and to tell real requests from automated ones.
Visit statistics through Google Analytics, only if you agree in the cookie banner. See the Cookie policy.
Why, and on what basis
To answer your requests and book appointments: steps taken at your request before a contract (Art. 6(1)(b) GDPR).
To provide medical care and keep the records the law requires: legal obligation (Art. 6(1)(c) and Art. 9(2)(h) GDPR).
To keep the site secure: our legitimate interest (Art. 6(1)(f) GDPR).
Visit statistics: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
Who receives your data
IT service providers that help us host the site, deliver messages and protect the form against abuse. They process the data only on our instructions and are bound to keep it confidential. Some of them may process data in the USA, under the EU–US Data Privacy Framework or the standard contractual clauses approved by the European Commission.
Google Ireland Limited, for statistics, only with your consent. Data may reach the USA under the EU–US Data Privacy Framework.
Meta (WhatsApp), only if you choose to write to us there.
We do not sell personal data or use it for advertising.
How long we keep it
Appointment requests and correspondence: at most 6 months from receipt, then deleted. If you become a patient, the data needed for treatment goes into your medical record and is kept as long as the law requires. Visit statistics: 2 months.
Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection, and the right to withdraw your consent at any time.
For any of them, email us at the address on the contact page. We answer within one month.
You may lodge a complaint with the Romanian data protection authority (ANSPDCP), www.dataprotection.ro.
Changes
When we change this policy, we update the version and the effective date on this page.