---

WHO WE ARE:

PRISMATIC DENT SRL, headquartered in Timișoara, Aleea Martir Istvan Andrei 10-14, S.A.D, Sc.C, Ground Floor, registered in the Unique Register of Medical Offices under no. T94576, with Unique Registration Code 43781495 (“Medical Office”), as the author, owner, and administrator of the website STOMATOLOG-TM.RO (“Website”) and as a Data Controller under the General Data Protection Regulation No. 679/2016 (“GDPR”), processes personal data, committing to respecting the privacy rights of individuals accessing the Website and ensuring adequate protection of personal data processing for all users of the Website.

Regarding certain data processing operations (e.g., when the categories of processed data, means, and purposes of processing are jointly decided with other entities), the Medical Office acts as a joint controller under the GDPR. In this Policy, we provide you with relevant information regarding these operations/situations.

HOW TO CONTACT US:

You can contact us anytime for further information and clarifications regarding the processing of your personal data using the following contact details:

Postal Address: Timișoara, Aleea Martir Istvan Andrei 10-14, S.A.D, Sc.C, Ground Floor
Email Address: contact@stomatolog-tm.ro
Phone: 0722336800

GENERAL INFORMATION:

The purpose of this Personal Data Processing Policy (“Policy”) is to explain what personal data we process through the Website, why we process it, and how we do it.

Thus, in this Policy, you will find detailed information regarding:

• The categories of individuals whose personal data is processed through the Website;
• The personal data being processed;
• The purposes and methods of processing your personal data;
• The legal basis on which we rely when processing your personal data;
• The retention periods for your personal data;
• The entities with whom we share your data and the purpose of disclosure;
• Your rights as a data subject and how you can exercise them.

In cases where providing your data and its processing is expressly indicated in the Policy as necessary (for example: to fulfill contractual obligations, meet legal requirements, or achieve a legitimate interest), failure to provide the respective personal data will result in the inability to access the Website’s services/features. In such cases, we will not be liable if you cannot benefit from the Website’s services/features.

If certain aspects of this document are unclear or if you consider them to be so, please let us know using the contact details provided in the “HOW TO CONTACT US” section. We will try to resolve any reported situation, as our goal is for you to have all the necessary information and understand the conditions under which the Medical Office processes your personal data.

The provisions of this Policy take precedence over any other provisions in other documents available and/or communicated by the Medical Office regarding the Website and personal data processing through the Website.

APPLICABILITY – DATA SUBJECTS

This Policy applies to the following categories of individuals:

• Visitors – individuals who access the Website;
• Users – individuals who access the Website and voluntarily create an account to make appointments and perform other actions through this account;
• Patients – individuals who access the Website (as a Visitor or User) and schedule an appointment through it or by phone.

Although you can access the Website’s content without providing personal data, except for cookies (please refer to the Cookie Policy available here…), if you enter personal data on the Website, the Medical Office may use it for the purposes stated in this Policy.

Warning: The use of the Website by individuals under 18 years of age is strictly prohibited.

We process data of individuals under 18 years of age only with the consent of their legal representative, to ensure the proper provision of services contracted by the legal representatives of minors. If an event leads to the processing of personal data of children under 18 in situations other than those mentioned in this paragraph, we will immediately cease processing upon discovering such an event.

It is possible that we receive information about individuals under 18 due to fraud or deception by a third party. If we are informed of this, as soon as we verify the information, and when required by law, we will obtain immediate consent from the legal representative to use this information or, if we cannot obtain this consent, we will delete the information from our servers.

If you wish to notify us about receiving information regarding individuals under 18, please do so by sending an email to contact@stomatolog-tm.ro.

PROCESSED PERSONAL DATA. PURPOSES OF PROCESSING. LEGAL BASIS

5.1 Accessing the Website

Processed personal data:

When you, as a Visitor, interact with the Website (access/visit it), certain information is automatically transferred between your device and our server, which automatically records the transferred information.

Depending on how you access the Website, this may include: the IP address of the internet-connected device you use to access the Website, the pages accessed during your visit, requested information, request date and time, the source of access to our Website (e.g., the website or URL that referred you to our site), browser version, and operating system of the device.

We use a third-party hosting provider to host the Website, named STOMATOLOG-TM.RO

Descrierea prelucrarii	Scopul prelucrarii	Temeiul legal conform RGPD
Asigurarea conexiunii, accesului si utilizarii optime a Website-ului, serviciilor si functionalitatilor din Website	Asigurarea accesului la Website	Art. 6 al. 1 lit. b – Executarea unor demersuri/masuri precontractuale sau executarea contractului (a termenilor si conditiilor de utilizare a serviciilor Website-ului)
Colectarea, stocarea si analizarea urmelor informatice, precum si evaluarea sigurantei si stabilitatii sistemelor informatice prin care este operat Website-ul	Securitatea sistemelor informatice	Art. 6 al. 1 lit. f – interesul legitim al cabinetului medical de a identifica si preveni accesul neautorizat la retea si a asigura securitatea sistemelor informatice

5.2. Communication with the Medical Office (submitting questions, requests, complaints)

Depending on the communication channel through which you contact us, we process certain personal data in order to receive and manage your questions, requests, and complaints, as detailed below.

5.2.1. Via email

Personal data processed:

When you send a message to the email address associated with Customer Service, as displayed on the Website, we collect your email address and any other information you provide in that email, such as your name, phone number, and the information contained in any email signature block.

5.2.2. Via the contact form available on the Website

Personal data processed:

When you contact us using the contact form, we collect your first name, last name, email address, and phone number. Additionally, we collect any other information you provide when filling out the contact form in the message field.

If you do not provide the required information in the contact form, you will not be able to submit it, and we will not receive your request. Consequently, we will not be able to respond.

5.2.3. Via phone call

Personal data processed:

When you contact us by phone, we collect your phone number and any information you provide during the conversation.

The medical office records telephone calls made by you. Thus, we may process your voice (call recordings) only with your prior consent.

If you do not consent to the processing of your voice, we will not be able to continue the phone call, and as a result, we will not be able to answer your questions.

5.2.4. Via postal mail

Personal data processed:

When you contact us by mail, we will collect your first and last name, postal address, and/or any other information contained in the postal communication you send.

If you do not provide your postal address and identification details, although we will receive your request, we will not be able to respond to it.

Descrierea prelucrarii	Scopul prelucrarii	Temeiul legal conform RGPD
Primirea si gestionarea intrebarilor, solicitarilor si reclamatiilor legate de Website sau legate de serviciile si produsele oferite de Cabinetul medical	Suport si asistenta Vizitatori si Utilizatori	Art. 6 al. 1 lit. f – interesul legitim al Cabinetului medical de a asigura functionarea corecta a Website-ului precum si pentru a imbunatati permanent experienta vizitatorilor inclusiv prin solutionarea diferitelor intrebari sau reclamatii
Primirea si gestionarea intrebarilor, solicitarilor si reclamatiilor	Suport si asistenta Pacienti	Art. 6 al. 1 lit. f – interesul legitim al Cabinetului medical de a asigura un serviciu eficient de Relatii Clienti

5.3. Making an Appointment

Visitors to the Website have two options for scheduling an appointment for one of the services offered by the Medical Office: by phone, using the contact number, or through the online appointment form available on the Website. In order to schedule an appointment for medical services, we require the Patient’s data (your data or the data of the person for whom you are making the appointment, for example – a minor).

5.3.1. Through the Website – Online Appointment Form

5.3.1.1. Processed Personal Data:

When you schedule an appointment on the Website as a Visitor, we collect: your first name, last name, age, phone number, email address, and any additional information you provide regarding the appointment.

If you do not provide this information, you will not be able to submit the appointment form and, consequently, will not be able to schedule an appointment through the Website.

If you are scheduling an appointment for another person, such as a minor, we will collect your contact details and the minor’s identification data (as the patient), as well as any other information regarding the appointment, as provided directly and voluntarily by you.

Descrierea prelucrarii	Scopul prelucrarii	Temeiul legal conform RGPD
Plasarea si confirmarea programarii	Procesarea programarilor	Art. 6 al. 1 lit. b – Executarea contractului incheiat cu dumneavoastra
Corespondenta (ex. status programare). Gestionarea cererilor, sesizarilor si reclamatiilor Pacientului in procesul de plasare si confirmare programare, precum si furnizare servicii medicale. Furnizarea de asistenta si suport Pacient.	Suport si asistenta Pacienti	Art. 6 al. 1 lit. b – Executarea contractului incheiat cu dumneavoastra
Culegerea de opinii, prin intermediul chestionarelor de feedback, cu privire la serviciile furnizate, precum si analizarea acestora	Evaluarea satisfactiei Pacientilor	Art. 6 al. 1 lit. a – Consimtamantul dumneavoastra, atunci cand alegeti sa il exprimati

5.3.1.2. Special Categories of Personal Data

Special categories of personal data include information that reveals racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, and the processing of genetic data, biometric data for the unique identification of a natural person, health data, or data concerning a person’s sex life or sexual orientation.

In this regard, we will collect and process sensitive information that falls under special categories of personal data, which will be provided directly by you, voluntarily, at the time of making an appointment, such as:

• Personal health data (e.g., medical conditions, examinations, procedures, previous treatments).

Descrierea prelucrarii	Scopul prelucrarii	Temeiul legal conform RGPD
Asigurarea conditiilor desfasurarii programarii si realizarii actului medical	Gestionarea programarii si a actului medical solicitat	Art. 9 al. 2 lit. h – realizarea actului medical si gestionarea serviciilor de sanatate

5.3.2. Phone
5.3.2.1. Personal data processed:
When you contact us by phone to make an appointment, we collect: name, surname, age, phone number and your phone number and any additional information you provide regarding the appointment.

The medical office records the telephone calls made by you. So that we can also process your voice (telephone conversation recording), only with your prior consent.

If you do not express your agreement regarding the processing of your voice, we will not be able to continue the telephone call and consequently, we will not be able to answer your questions.

If you make the appointment for another person, for example – a minor, we will collect your contact details and the minor’s identification data (as a patient), as well as any other information regarding the appointment, as provided by you, directly and voluntarily.

Descrierea prelucrarii	Scopul prelucrarii	Temeiul legal conform RGPD
Plasarea si confirmarea programarii	Procesarea programarilor	Art. 6 al. 1 lit. b – Executarea contractului incheiat cu dumneavoastra
Corespondenta (ex. status programare). Gestionarea cererilor, sesizarilor si reclamatiilor Pacientului in procesul de plasare si confirmare programare, precum si furnizare servicii medicale. Furnizarea de asistenta si suport Pacient	Suport si asistenta Pacienti	Art. 6 al. 1 lit. b – Executarea contractului incheiat cu dumneavoastra
Culegerea de opinii, prin intermediul chestionarelor de feedback, cu privire la serviciile furnizate, precum si analizarea acestora	Evaluarea satisfactiei Pacientilor	Art. 6 al. 1 lit. a – Consimtamantul dumneavoastra, atunci cand alegeti sa il exprimati

5.3.2.2. Special categories of personal data
The special categories of personal data are personal data that reveal racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership and the processing of genetic data, biometric data for the purpose of unique identification of a natural person, health data or data on a natural person’s sexual life or sexual orientation.

In this sense, we will collect and process sensitive information, being part of the special categories of personal data, which will be provided directly by you, voluntarily, at the time of making an appointment, such as:

Personal health data (for example: ailments, investigations, interventions, previous treatments);

Descrierea prelucrarii	Scopul prelucrarii	Temeiul legal conform RGPD
Asigurarea conditiilor desfasurarii programarii si realizarii actului medical	Gestionarea programarii si a actului medical solicitat	Art. 9 al. 2 lit. h – realizarea actului medical si gestionarea serviciilor de sanatate

5.4. Registration on the Website
Personal data processed:

When you register and create an account on the Website, we collect the following information: name, surname, e-mail address, telephone, age, etc.

If you do not provide all the mandatory information required by the registration form, you will not be able to register or create an account on the Website and you will not benefit from the functionalities associated with the account.

However, the lack of creating an account does not in any way affect your ability to browse the Website and access the services provided through it.

Descrierea prelucrarii	Scopul prelucrarii	Temeiul legal conform RGPD
Crearea contului (inclusiv efectuarea formalitatilor prealabile de validare a crearii contului) pentru utilizarea serviciilor/functionalitatilor asociate contului	Creare cont – care permite Utilizatorului: a.    efectuarea de programari si alte actiuni in Website asociate contului; b.    accesul la unele servicii, functionalitati si beneficii in Website	Art. 6 al. 1 lit. b – Executarea unor demersuri / masuri precontractuale

The information you provide us through the registration form on the Website will be stored on the servers of an authorized third party, our web hosting service provider STOMATOLOG-TM.RO.

5.5. Account Management on the Website
Personal data processed:
The user logs in (accesses the account on the Website) by providing the email address with which they are registered and entering the password they selected when creating the account (these login data are collectively referred to as “Access Data”).

After logging in, the user can perform various operations or submit requests that involve the collection and processing by the Medical Practice of certain data, including special categories of personal data, such as:

• Access data for the account;
• Initial data collected when creating the account;
• New/modified personal data provided by the user when editing/modifying the data provided at the time of account creation (excluding the email address) or during profile completion;
• Billing data that the user adds to the account, such as billing address (city/sector, street, street number, block, staircase, floor, apartment, postal code);
• Data managed in the account: appointment history (details of previous appointments), medical history (investigations, interventions, previous treatments);
• Interaction of the user with communications received from the Medical Practice;
• Other data: reviews of the medical services the user has received at the Medical Practice.

Descrierea prelucrarii	Scopul prelucrarii	Temeiul legal conform RGPD
Administrarea contului pentru oferirea acesului si utilizarii informatiilor din cont, serviciilor si functionalitatilor aferente contului	Administrarea contului	Art. 6 al. 1 lit. b – Executarea contractului incheiat cu dumneavoastra
Furnizarea facturii catre Pacient (si, dupa caz, alte documente financiar-contabile justificative)	Emiterea facturii si a documentelor financiar -contabile justificative	Art. 6 al. 1 lit. c – Obligatie legala
Asigurarea de asistenta si suport (furnizarea de clarificari si raspunsuri) la solicitarile privind functionarea contului (ex. disponibilitatea sau indisponibilitatea unor functionalitati)	Asistenta si suport cont de client	Art. 6 al. 1 lit. b – Executarea contractului incheiat cu dumneavoastra
Prelucrarea prin analiza datelor furnizate (ex. recenzii) pentru imbunatatirea serviciilor medicale oferite, structurarea programelor de loializare/beneficiilor	Imbunatatirea serviciilor Cabinetului medical, imbunatatirea/evaluarea produselor comercializate, concepere/structurare beneficii/programe loializare	Art. 6 al. 1 lit. f RGPD – Interesul legitim al cabinetului medical de a asigura imbunatatirea serviciilor prestate si furnizarea unor servicii calitative

5.5.2. Special categories of personal data
The special categories of personal data are personal data that reveal racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership and the processing of genetic data, biometric data for the purpose of unique identification of a natural person, health data or data on a natural person’s sexual life or sexual orientation.

In this sense, we will collect and process sensitive information, being part of the special categories of personal data, which: (i) will be provided directly by you, voluntarily, at the time of registration on the Website and/or on the occasion of making an appointment and/or on the occasion of presentation at the Medical Cabinet to obtain medical services or (ii) will be obtained by us as a result of the completion of the medical act and/or the diagnosis:

Personal health data (for example: ailments, investigations, interventions, previous treatments);

Descrierea prelucrarii	Scopul prelucrarii	Temeiul legal conform RGPD
Administrarea programarilor efectuate prin intermediul contului creat pe Website si pastrarea unei evidente corecte a dosarelor medicale	Gestionarea si evidenta programarilor si a actelor medicale solicitate; accesul dumneavoastra la dosarul medical, continand (investigatii, interventii, tratamente precedente).	Art. 9 al. 2 lit. h – realizarea actului medical si gestionarea serviciilor de sanatate

5.6. Direct marketing
Personal data processed:

During your interaction with the Medical Cabinet through the Website (for example: when you browse the Website as a Visitor), you will be able to opt to receive news regarding the services provided, according to your consent.

You can express your consent for data processing for this purpose by completing and checking the appropriate box in the form for providing commercial communications available on the Website.

Also, you can withdraw your consent at any time, without affecting the legality of the processing activities carried out up to that moment. With each marketing message we send you, we will give you the opportunity to withdraw your consent through the unsubscribe button in each commercial communication.

Providing your data for this purpose is voluntary. The refusal to provide consent for the processing of your data for this purpose will not have negative consequences for you.

Descrierea prelucrarii	Scopul prelucrarii	Temeiul legal conform RGPD
Transmiterea, prin intermediul adresei de e-mail, sms, apel telefonic, posta, platforme de socializare, de comunicari comerciale privind produsele si serviciile oferite de Cabinetul medical	Marketing direct	Art. 6 al. 1 lit. a – Consimtamantul dumneavoastra, atunci cand alegeti sa il exprimati

However, to the extent that you have provided us with your e-mail address when purchasing a service from us, we may use the e-mail address, in accordance with the legal provisions in force that allow us to send you commercial communications regarding similar products or services, based on our legitimate interest.

In this case, upon obtaining your e-mail address and subsequently, with each marketing message we may send you, we will offer you the opportunity to oppose this use of your e-mail address by means of the unsubscribe button in each commercial communication.

5.7. Defense of the rights of the Medical Cabinet
Personal data processed:

In order to defend the rights of the Medical Cabinet, we can process the following personal data: data related to the customer account, invoices, orders placed and the execution of purchases/orders, as well as other personal data that we hold based on this Policy and whose processing is necessary in order to achieve the intended purpose.

Scopul prelucrarii	Descrierea prelucrarii	Temeiul legal conform RGPD
Apararea drepturilor Cabinetului medical in justitie / fata de autoritati / institutii de control	Exercitarea oricaror aparari/ drepturi ale Cabinetului medical in fata instantelor de judecata sau autoritatilor sau institutiilor publice / de control (recuperarea unor sume datorate, protejarea intereselor impotriva unor pretentii/ reclamatii), in demersuri precum: formularea de intampinari, concluzii scrise, cereri.	Art. 6 al. 1 lit. f – Interesul legitim al Cabinetului medical constand in necesitatea apararii drepturilor acesteia

6. USE OF COOKIES AND SIMILAR TECHNOLOGIES
   When you visit the Website, we may use cookies and/or similar technologies, files that allow recognition of the user’s device and proper display of the Website, which can be adapted to the individual preferences of the Visitor.

The primary purpose of using cookies is to help you have an improved browsing experience and also for advertising purposes, to provide you with personalized content tailored to your interests and preferences. As a result, to the extent you have consented to the use of various categories of cookies or other similar technologies, we will use them to offer you a personalized and relevant browsing experience and to understand how you interact with our advertising content.

For more information about the use of cookies on the Website and the purposes for which they are used, as well as how to control and/or disable cookies, please consult the Cookie Policy on the Website, available here: https://stomatolog-tm.ro/cookies/

When you visit the Website, we may use cookies and/or similar technologies, files that allow recognition of the Visitor’s device and proper display of the Website, which can be adapted to the individual preferences of the user.

For more information about the use of cookies on the Website and the purposes for which they are used, as well as how to control and/or disable cookies, please consult the Cookie Policy on the Website, available here.

Data processing through some of the cookies is based on your consent. If you do not consent to the placement of these cookies, you can use the Website without any negative consequences for you.

7. CATEGORIES OF RECIPIENTS
   Your personal data may be disclosed, strictly to the extent necessary for the purposes detailed above or in cases where this is required by law, to the following categories of recipients:

• Competent authorities (e.g., tax authorities, health authorities, courts);
• Companies authorized to process data on our behalf and for us, such as our service providers (IT system maintenance services, web hosting service providers, etc.);
• Service providers related to the provision of medical services (e.g., laboratories);
• External consultants (e.g., lawyers, specialists in auditing, legal, tax consulting, accounting);
• Third-party entities involved in providing services related to cookies and similar technologies, as detailed in the Cookie Policy on the Website, available on the Website;
• Third parties expressly indicated by you;
• Third-party buyers, to the extent that our business is transferred (in whole or in part), and the data of the data subjects are part of the assets subject to such a transaction;
• Other service providers (e.g., marketing service providers).

8. DURATION OF DATA PROCESSING
   The medical office will process personal data for the duration necessary to fulfill the purposes specified in this Policy, and thereafter, in order to comply with applicable legal obligations.

As a general principle, the medical office will process personal data throughout the duration of the contractual relationship. Afterward, personal data will be stored for the periods applicable to various types of personal data, as determined in accordance with applicable legal provisions, such as the retention period for medical records (in accordance with the legislation regarding the archiving of medical files) or financial-accounting documents, for which the retention period specified by law is 5 years, calculated from July 1 of the year following the one in which the financial year in which they were issued ended.

If the processing is based on your consent, in case you withdraw your consent for data processing and there are no other legal grounds for processing (e.g., a legal obligation, a contractual relationship, or the legitimate interest of the medical office), or you object to the processing and there are no overriding legitimate grounds for processing, the medical office will cease processing your personal data.

After the storage period mentioned above expires, the medical office may anonymize this data, thereby removing its personal character, and continue processing the anonymized data for statistical purposes.

9. TRANSFER OF PERSONAL DATA TO A THIRD COUNTRY
   We will not transfer your personal data outside the European Economic Area. In exceptional situations and only if necessary, the transfer of your personal data outside the European Economic Area will be carried out only with appropriate protective measures in accordance with the legal provisions regarding the protection of personal data and with proper notification to you.
10. DATA PROCESSING SECURITY
    We inform you that we have implemented appropriate technical and organizational measures to ensure an adequate level of security for the personal data being processed.

In assessing the level of security, we particularly take into account the risks presented by personal data processing, especially those caused accidentally or unlawfully, such as destruction, loss, alteration, unauthorized disclosure, or unauthorized access to the personal data transmitted, stored, or otherwise processed.

We also ensure that access to personal data is granted to our personnel only to the extent necessary to fulfill their work responsibilities.

11. AUTOMATED DECISION-MAKING PROCESSES
    If any of the processing purposes mentioned above are carried out using automated techniques that do not involve human intervention and lead to legal effects or significantly affect you in a similar manner, processing will be based on your explicit consent for this purpose or another legal basis, in accordance with legal requirements. In this regard, this document will be updated as necessary to ensure proper information.

For details regarding automated decision-making processes, you can contact us at: contact@stomatolog-tm.ro, Timișoara, Aleea Martir Istvan Andrei nr. 10-14, S.A.D, Parter Floor.

12. YOUR RIGHTS
    In the context of the processing of your personal data, you have the following rights:

• Right of Access: The right to obtain confirmation from the medical office whether your personal data is being processed or not and to receive information about the purpose of the processing, categories of personal data concerned, recipients or categories of recipients to whom your personal data has been or will be disclosed, guarantees related to this disclosure, especially in the case of recipients from third countries or international organizations, the period for which the personal data will be stored, information about rectification, deletion, restriction, and objections regarding your personal data, the right to file a complaint with the Supervisory Authority, and information regarding automated decision-making processes, including profiling.
• Right of Rectification: Applicable if the personal data is incorrect or incomplete.
• Right to Deletion: If your personal data is no longer necessary in relation to the purposes set out in this notice, if you withdraw your consent and there are no other legal grounds for processing, if you object to the processing and there are no other legal grounds for processing, if the personal data has been processed unlawfully, or if it must be deleted to comply with a legal obligation incumbent upon the medical office.

Note: Some of your personal data may not be able to be deleted due to legal obligations or legitimate interest in continuing to process it. Further details will be provided upon request.

• Right to Restriction of Processing: Applicable if you contest the accuracy of your personal data, if the processing is unlawful and you oppose the deletion of the data, if the medical office no longer needs the personal data for the purposes set out but it is required by you for the establishment, exercise, or defense of a legal claim, or if you object to processing during the period in which it is verified whether the legitimate interest of the medical office outweighs your interests.
• Right to Data Portability: The right to receive your personal data or the data you have provided to the medical office in a structured, commonly used, and machine-readable format, and the right to transfer this data to another operator.
• Right to Object to Processing: Applicable in cases where processing is based on Article 6 (1)(e) GDPR – processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the operator or (Article 6 (1)(f) GDPR) – processing is necessary for the purposes of legitimate interests pursued by the operator or a third party.

This right is applicable unless the medical office demonstrates compelling legitimate grounds for the processing of your personal data that override your interests, rights, and freedoms or for the establishment, exercise, or defense of a legal claim.

• Right to Withdraw Consent: The right to withdraw your consent at any time when processing is based on your consent, without affecting the lawfulness of processing based on consent before its withdrawal.
• Right Not to Be Subject to a Decision Based Solely on Automated Processing: Including profiling, which produces legal effects concerning you or similarly significantly affects you, except where such processing is necessary for the performance of a contract with you, is permitted by law, or is based on your explicit consent.
• Right to Seek Judicial Remedy / File a Complaint with the Data Protection Authority (ANSPDCP): If you believe that we are processing your data in violation of the GDPR, you also have the following rights:i) the right to file a complaint with the ANSPDCP (National Supervisory Authority for Personal Data Processing, headquarters: Bucharest, Bdul Gen. Gheorghe Magheru nr. 28-30, sector 1, CP 010336; Phone: +40.318.05.92.11, Fax: +40.318.05.96.02 email: anspdcp@dataprotection.ro, website: www.dataprotection.ro);ii) the right to file an action in court.

If you exercise your rights electronically, the medical office will provide the requested information in the same manner in an accessible format, unless you specify another contact method or request the information in another format.

The medical office will make efforts to respond within one month from the submission of the request. If the processing of your request takes longer, we will notify you within the same period regarding the reasons and the expected response time.

If we cannot comply with your request, we will inform you of the reasons, subject to any legal or regulatory restrictions.

The rights mentioned above can be exercised at any time. To exercise these rights, except for the right to file a complaint with the ANSPDCP, you can send a written request, dated and signed, or in electronic format to the following address:

Timișoara, Aleea Martir Istvan Andrei nr. 10-14, S.A.D. Parter Floor Ap.2 or by email to contact@stomatolog-tm.ro or phone 0722336800.

If you wish to withdraw your consent regarding direct marketing purposes, you may use the “unsubscribe” option included in each marketing communication.