Last updated: July 22, 2024
Through this Policy, we aim to inform you about how we collect, use, transfer, and protect your personal data, in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as "GDPR").
We reserve the right to periodically update this Privacy Policy to reflect any changes in how we process your personal data. In the event of any such changes, we will display the updated version of the Privacy Policy on our website.
1. Who We Are
This Privacy Policy applies to the website sanconfind.ro, owned by Sanconfind SRL, headquartered in Campina, str. Progresului nr. 2, Prahova County, registration number ONRC J29/779/2011, CUI 28455290.
For any additional information regarding the processing of your personal data, please contact us at: office@sanconfind.ro
2. Personal Data We Process
We collect your personal data when you register on our website, place an appointment, subscribe to our newsletter, fill in a form available on the site, or contact us via email.
In the context of scheduling our services, for the purpose of concluding appointments, we primarily process the following types of data: first name, last name, billing data, email address, phone number, personal identification number (CNP).
Minors under the age of 16 must not provide any personal information without the consent of their parents or guardians. We recommend that all parents inform their children about the responsible and safe use of personal data on the internet. If we discover that personal information from minors under the age of 16 has been collected unknowingly, it will be immediately removed from our records to the extent practically possible.
We do not use your data to send you commercial or marketing communications unless you opt for such communication. Even in such cases, we ensure that you have a simple option to unsubscribe by withdrawing your consent at any time.
For site visitors, we may collect data through cookies or other similar technologies, such as: IP address, internet browser, location, web pages accessed on our site, time spent on the site, internet network, device used. For more details, please consult the Cookie Policy.
3. Purposes and Legal Bases for Processing Your Data
We will process your personal data for the following purposes:
3.1. Commercialization of Our Services
- Creating and managing your account on the site
- Processing appointments, including receiving, validating, dispatching, and invoicing
- Resolving cancellations or issues of any nature regarding an order or purchased services, including returns and refunds in accordance with legal provisions
- Providing support services regarding your appointments
- Providing feedback on purchased services
The legal basis for processing your data for these purposes is the performance of a contract. Additionally, certain processing activities under these purposes are required by applicable legislation, including tax and accounting laws.
3.2. Marketing and Commercial Communications
To inform you about the best offers regarding our services, we would like to send you commercial communications via email.
The legal basis for processing data for this purpose is your prior consent. You have the option to withdraw your consent at any time by clicking the unsubscribe link displayed in each communication received.
In certain situations, we may base our marketing activities on our legitimate interest to promote and develop our commercial activity. We assure you that we take all necessary measures to ensure that your fundamental rights and freedoms are not affected.
3.3. Protection of Our Legitimate Interests
- Measures to protect the site and platform users from cyberattacks
- Measures to prevent and detect fraud attempts
- Measures to manage various other risks, to ensure the security of your data
The legal basis for these types of processing is our legitimate interest to constantly improve our services and protect our commercial activity. In this regard, we ensure that all measures we take guarantee a balance between our interests and your fundamental rights and freedoms.
4. How Long Do We Process Your Data
Your personal data will be stored only as long as necessary to fulfill the purposes for which it was collected, to fulfill our contractual and legal obligations, in each individual case.
If the data is no longer necessary for fulfilling contractual or legal obligations, it will be periodically deleted, except where further temporary processing is required for the following purposes:
- Fulfilling the obligation to retain data in accordance with Romanian tax legislation, which provides for the obligation to retain/document personal data for between two and ten years.
- Retaining data that may serve as evidence in possible disputes or litigation, in accordance with applicable limitation periods. These limitation periods may last up to 10 years, although the standard period is three years.
5. International Transfers
When necessary for the performance of the contract concluded with you, and only in specific situations or based on adequate guarantees, we will transfer personal data abroad, including to states that do not ensure an adequate level of protection. In such situations, the transfer of data to those states is based on the GDPR provisions regarding: transfer necessary for the execution of a contract or for the application of pre-contractual measures adopted at your request, or transfer necessary for the conclusion or execution of a contract concluded in the interest of the data subject.
Should it be necessary to transfer personal data to third countries/international organizations under other circumstances, we will do so only with the legally provided guarantees for such transfers.
6. Who May Have Access to Your Data
In accordance with the legal provisions on personal data protection and confidentiality commitments, to the extent necessary to fulfill our obligations to you, we may provide access to courier, payment/banking, IT, legal, advisory and consulting service providers, as well as sales and marketing providers.
If we have a legal obligation or if it is necessary to defend a legitimate interest, we may also transmit certain personal data to public authorities.
7. Protection Measures and Guarantees
Centru Medical Sanconfind SRL implements appropriate technical and organizational measures to ensure a high level of security and protection of personal data. We use security methods and technologies, together with internal work policies and procedures, including control and audit, to protect the personal data collected in accordance with current legal provisions.
8. Data Subject Rights
Within the limits and conditions provided by GDPR, each data subject may exercise the right to:
- Withdraw consent for data processing, without affecting the legality of processing carried out prior to the withdrawal of consent
- Access data in accordance with Article 15 GDPR
- Rectify data in accordance with Article 16 GDPR
- Erase data in accordance with Article 17 GDPR
- Restrict data processing in accordance with Article 18 GDPR
- Data portability in accordance with Article 20 GDPR
- Object to processing in accordance with Article 21 GDPR
- Not be subject to a decision based exclusively on automated processing, in accordance with Article 22 GDPR
To exercise these rights, you may contact us by email at: office@sanconfind.ro
Each data subject also has the right to file a complaint with the National Supervisory Authority for Personal Data Processing, which can be contacted at: www.dataprotection.ro. Without affecting your right to file a complaint, please contact us first and we promise to make every effort to resolve any dissatisfaction amicably.