Information notice regarding the processing of personal data

1. Identity of the Data Controller

The controller of personal data is:

CMI Dr Pintilie Ingrid-Ioana
Address: Str Paharnicului Nr 13, Sector 1, Bucharest
CUI: 20179130
RUCM No.: 914062/04.11.2002
Email: ingrid.pintilie@ymail.com
Phone: 021.318.82.99

2. Purpose of Data Processing

Personal data is collected and processed exclusively for the following purposes:

• responding to requests submitted through the contact form
• scheduling consultations
• communicating with individuals interested in our medical services
• ensuring the technical operation and security of the website

3. Categories of Data Processed

We may collect the following data:

• first and last name
• phone number
• email address
• any other information voluntarily provided in a message

Technical data (e.g. IP address) may also be collected automatically through the operation of the website.

4. Legal Basis for Processing

Data processing is carried out on the basis of:

• the consent of the data subject (Art. 6(1)(a) GDPR)
• the legitimate interest of the controller in responding to requests (Art. 6(1)(f) GDPR)
• the necessity of taking steps prior to entering into a contract (appointment scheduling)

5. Recipients of the Data

Data is not sold and is not used for marketing purposes.

Data may only be accessed by:

• authorised staff of the controller
• web hosting provider Zooku, strictly for the purpose of operating the website

6. Retention Period

Data is retained only for as long as necessary to fulfil the purposes for which it was collected, or in accordance with applicable legal obligations.

7. Rights of Data Subjects

Under the GDPR, you have the following rights:

• the right of access to your data
• the right to rectification
• the right to erasure ("the right to be forgotten")
• the right to restriction of processing
• the right to object
• the right to data portability
• the right to lodge a complaint with the supervisory authority

8. Data Transfers

We do not transfer personal data outside the European Union.

9. Data Security

We implement appropriate technical and organisational measures to protect data against unauthorised access, loss, alteration, or destruction.

10. Absence of Automated Processing and Profiling

We do not use automated decision-making processes and do not carry out profiling of users.

11. Updates to This Notice

We reserve the right to update this information notice whenever necessary. The updated version will be published on the website.

12. Contact

For any requests regarding data protection:

• Email: ingrid.pintilie@ymail.com
• Phone: 021.318.82.99
• Address: Str Paharnicului Nr 13, Sector 1, Bucharest