Privacy Policy

Last updated: 5 November 2026

This policy explains what personal data we collect through the detaliimed.ro website, why we use it, how long we keep it, and what rights you have regarding it. We've tried to write this document clearly, without unnecessarily complicated wording.

1. Who is the data controller

The controller of the personal data collected through this website is Plastic Med MP SRL, headquartered at Str. Vasile Lucaciu no. 77, Baia Mare, Maramureș County, Romania, registration number (CUI) 45331756, registered with the Trade Registry under no. J2023001566245, referred to below as "the Clinic" or "we".

For any question about your personal data, you can write to us at office@detaliimed.ro.

2. What data we collect

We collect personal data mainly through the consultation request form available on the website pages. The data requested is:

full name;
phone number;
email address;
the procedure you are interested in, if you specify it (optional);
your preferred doctor, if you have one (optional);
your preferred contact method (phone, email or either);
any additional information you choose to include in the message field (optional).

The form does not request, and should not contain, sensitive medical information (for example, diagnosis, detailed medical history or photographs). Such information is discussed directly with the doctor, during the consultation, under medical confidentiality.

We also automatically collect minimal technical data necessary for the website to function: the IP address (stored in anonymised form — a hash, not the plain address — to prevent automated spam submissions) and standard server logging information, for security purposes.

Data noted by reception

When you call us, write to us on WhatsApp or social media, or come to the clinic in person, reception records in the clinic's internal register: your name, phone number, the consultation or procedure you are interested in (for example "an excision" or "a dermatology consultation"), how you heard about us and, briefly, what was agreed for the appointment (for example the day you prefer or when we call you back). After your visit we may call you to ask how you felt with us; we note your name, phone number and the outcome of the call.

These notes only serve to organise the appointment and our communication with you. They do not replace your medical record: diagnosis, medical history and treatment are discussed and recorded only by the doctor, in the clinic's medical documents.

3. Legal basis for processing

We process the data submitted through the contact form based on your explicit consent, given by ticking the dedicated checkbox in the form, in accordance with Article 6(1)(a) of Regulation (EU) 2016/679 (GDPR). You can withdraw this consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

Technical security data (such as server logs) is processed based on the Clinic's legitimate interest in ensuring the website functions correctly and securely, under Article 6(1)(f) GDPR.

Data noted by reception when you ask for an appointment is processed to take the steps you request before a consultation, under Article 6(1)(b) GDPR. Because information about the procedure you are interested in may concern your health, we process it only for scheduling and medical care, by staff bound by confidentiality, under Article 9(2)(h) GDPR. The call after your visit is based on the Clinic's legitimate interest in knowing how patients were received (Article 6(1)(f)); if you tell us you do not want to be called, we will not call you again.

4. Purpose of processing

We use the collected data exclusively to:

respond to your consultation request and contact you in your preferred way;
organise and confirm appointments;
keep an internal record of received requests, for the proper organisation of the clinic's activity;
call you after your visit to ask how you felt with us; if you wish, we send you the link for a Google review, with no obligation and nothing in return;
if you agree to leave a testimonial, we send you a personal link where you write or check the text, choose how your name appears and tick your consent to publication (on the website and, separately, on the clinic's social media). We keep the approved text, the chosen name, the options ticked and the date of consent, as proof. You can withdraw consent at any time from the same link: the testimonial is removed from the website immediately;
ensure the security and correct functioning of the website.

Your contact details, the procedure you are interested in and reception's notes are used exclusively for your appointment and care. We do not use them for advertising, we do not pass them to advertising platforms (for example Google or Meta) and we do not use them for any other purpose. We do not use your data for direct marketing without a separate, explicit consent, and we do not make automated decisions or profile you based on it.

5. Who we share data with

The collected data is accessible to the Clinic's medical and administrative staff, strictly those involved in the appointment and patient care process. Each person accesses the internal register with their own account, and every note keeps the name of the person who wrote it.

We may share data with technical providers who host our website and database or who handle email notifications, acting exclusively as data processors, under contractual confidentiality and security obligations. We do not sell or rent your data to third parties for marketing purposes.

We may disclose data, strictly as necessary, to public authorities where the law expressly requires us to do so.

6. How long we keep the data

Requests submitted through the contact form are kept for up to 12 months from the submission date, after which they are deleted or anonymised, unless the request has led to an ongoing doctor–patient relationship, in which case the legal rules on retaining medical records apply. The same rule applies to requests noted by reception and to the register of calls after visits. You can ask us to delete them earlier at any time.

Consent for a testimonial and the approved text are kept while the testimonial is published and for one more year after consent is withdrawn, as proof that publication took place with your consent.

7. Data security

The website uses an encrypted connection (HTTPS), administration account passwords are stored exclusively in cryptographically hashed form, and access to request data is restricted to authorised Clinic staff, through a protected administration account requiring authentication.

8. Your rights

As a data subject, under GDPR you have the following rights:

right of access — you can request a copy of the data we hold about you;
right to rectification — you can ask us to correct inaccurate data;
right to erasure — you can ask us to delete your data, under the conditions provided by law;
right to restriction of processing, in certain situations;
right to data portability, where applicable;
right to object to processing, under certain conditions;
right to withdraw consent, at any time, without affecting prior processing;
right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), www.dataprotection.ro.

To exercise any of these rights, you can contact us at office@detaliimed.ro. We will respond within the timeframe provided by law.

If you subscribe to the Detalii Med newsletter (on the website, through the contact form or by asking at reception), we process your email address, your name if you give it, the topics you choose, the date of subscription and the date of confirmation, based on your consent (Article 6(1)(a) GDPR). The subscription becomes active only after you press the button in the confirmation email. We write at most once a month, only on the topics you chose.

You can unsubscribe at any time, in one click, from the link at the end of every email; you can also change topics there. We do not use tracking pixels for email opens; we only count clicks on links to the website, without linking them to a person. Emails may be sent through our sending provider (Mailgun, with servers in the European Union), acting as a processor. The subscriber list is not used for any other purpose and is not passed to other third parties.

We keep the data while you are subscribed. After you unsubscribe we keep only the address and the date of unsubscription, so that we do not write to you by mistake; you can also ask for their complete deletion.

9. Minors

Some procedures offered by the Clinic may also be aimed at minor patients (for example, otoplasty). In these cases, any request submitted through the form and any processing of a minor's data is carried out with the explicit consent of the parent or legal guardian, expressed directly within the relationship with the Clinic.

10. Cookies and similar technologies

Only with your consent in the cookie banner do we enable traffic analytics and Google Ads campaign measurement, without personalised ads and without remarketing. The website uses a minimal number of cookies and local storage technologies, necessary for basic functionality. Full details are available in our Cookie Policy.

11. Changes to this policy

We may periodically update this policy to reflect legal changes or changes in how the website works. The date of the last update is shown at the top of the document. We encourage you to check back periodically.

12. Contact

Plastic Med MP SRL
Str. Vasile Lucaciu no. 77, Baia Mare, Maramureș County
Email: office@detaliimed.ro
Phone: 0774 470 470