Privacy Policy
This policy explains what personal data we collect through the detaliimed.ro website, why we use it, how long we keep it, and what rights you have regarding it. We've tried to write this document clearly, without unnecessarily complicated wording.
1. Who is the data controller
The controller of the personal data collected through this website is Plastic Med MP SRL, headquartered at Str. Vasile Lucaciu no. 77, Baia Mare, Maramureș County, Romania, registration number (CUI) 45331756, registered with the Trade Registry under no. J2023001566245, referred to below as "the Clinic" or "we".
For any question about your personal data, you can write to us at office@detaliimed.ro.
2. What data we collect
We collect personal data mainly through the consultation request form available on the website pages. The data requested is:
- full name;
- phone number;
- email address;
- the procedure you are interested in, if you specify it (optional);
- your preferred doctor, if you have one (optional);
- your preferred contact method (phone, email or either);
- any additional information you choose to include in the message field (optional).
The form does not request, and should not contain, sensitive medical information (for example, diagnosis, detailed medical history or photographs). Such information is discussed directly with the doctor, during the consultation, under medical confidentiality.
We also automatically collect minimal technical data necessary for the website to function: the IP address (stored in anonymised form — a hash, not the plain address — to prevent automated spam submissions) and standard server logging information, for security purposes.
3. Legal basis for processing
We process the data submitted through the contact form based on your explicit consent, given by ticking the dedicated checkbox in the form, in accordance with Article 6(1)(a) of Regulation (EU) 2016/679 (GDPR). You can withdraw this consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
Technical security data (such as server logs) is processed based on the Clinic's legitimate interest in ensuring the website functions correctly and securely, under Article 6(1)(f) GDPR.
4. Purpose of processing
We use the collected data exclusively to:
- respond to your consultation request and contact you in your preferred way;
- organise and confirm appointments;
- keep an internal record of received requests, for the proper organisation of the clinic's activity;
- ensure the security and correct functioning of the website.
We do not use your data for direct marketing without a separate, explicit consent, and we do not make automated decisions or profile you based on it.
5. Who we share data with
The collected data is accessible to the Clinic's medical and administrative staff, strictly those involved in the appointment and patient care process.
We may share data with technical providers who host our website and database or who handle email notifications, acting exclusively as data processors, under contractual confidentiality and security obligations. We do not sell or rent your data to third parties for marketing purposes.
We may disclose data, strictly as necessary, to public authorities where the law expressly requires us to do so.
6. How long we keep the data
Requests submitted through the contact form are kept for up to 12 months from the submission date, after which they are deleted or anonymised, unless the request has led to an ongoing doctor–patient relationship, in which case the legal rules on retaining medical records apply.
7. Data security
The website uses an encrypted connection (HTTPS), administration account passwords are stored exclusively in cryptographically hashed form, and access to request data is restricted to authorised Clinic staff, through a protected administration account requiring authentication.
8. Your rights
As a data subject, under GDPR you have the following rights:
- right of access — you can request a copy of the data we hold about you;
- right to rectification — you can ask us to correct inaccurate data;
- right to erasure — you can ask us to delete your data, under the conditions provided by law;
- right to restriction of processing, in certain situations;
- right to data portability, where applicable;
- right to object to processing, under certain conditions;
- right to withdraw consent, at any time, without affecting prior processing;
- right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), www.dataprotection.ro.
To exercise any of these rights, you can contact us at office@detaliimed.ro. We will respond within the timeframe provided by law.
9. Minors
Some procedures offered by the Clinic may also be aimed at minor patients (for example, otoplasty). In these cases, any request submitted through the form and any processing of a minor's data is carried out with the explicit consent of the parent or legal guardian, expressed directly within the relationship with the Clinic.
10. Cookies and similar technologies
The website uses a minimal number of cookies and local storage technologies, necessary for basic functionality. Full details are available in our Cookie Policy.
11. Changes to this policy
We may periodically update this policy to reflect legal changes or changes in how the website works. The date of the last update is shown at the top of the document. We encourage you to check back periodically.
12. Contact
Plastic Med MP SRL
Str. Vasile Lucaciu no. 77, Baia Mare, Maramureș County
Email: office@detaliimed.ro
Phone: 0774 470 470