Contents11
Data Controller#
Ionut Paramedic, the medical and plastic surgery center, is the controller of your personal data processed via this website. For any questions about this policy or to exercise your rights, please contact us at [email protected].
Information We Collect#
We collect only the following kinds of information:
- Information you provide directly. When you contact us via a form, request a consultation, or make a booking, we receive the details you provide, such as your name, email address, phone number, and the nature of your enquiry.
- Chat assistant messages. If you use a chat feature on this site, the messages you send are processed to enable us to respond to you.
- Analytics data (with your consent). If you accept analytics cookies, we collect aggregated data about page visits, referral sources, country, and device type, linked to a random identifier stored in your browser. This data is not linked to your name or identity.
- Technical server logs. Our hosting provider maintains standard server logs, including IP addresses, for a short period for security and operational purposes.
If you decline analytics cookies, no analytics data is collected or stored.
Purpose and Legal Basis for Processing#
We process your personal data for specific purposes and under defined legal bases:
- To respond to your enquiries, provide consultations, quotes, and manage appointments. This processing is necessary to take steps at your request or to fulfill our agreement.
- To ensure website security, availability, and proper function, and to investigate misuse. We have a legitimate interest in maintaining a secure and operational online presence.
- To analyze website usage for improvement purposes. This occurs only with your consent, which you can withdraw at any time.
- To comply with legal obligations, such as retaining financial records for tax and accounting purposes.
We do not use automated decision-making that produces legal effects, nor do we create advertising profiles.
Cookies and Similar Technologies#
Cookies or similar technologies that are not strictly necessary for the website's basic function are controlled by the consent banner you saw upon your first visit. For detailed information, please refer to our Cookie Policy.
Data Sharing#
Your information may be accessed by:
- Buildhaze, our website builder and host, who processes data solely on our instructions.
- Providers of any chat assistant functionality, to generate replies to your messages.
- Service providers necessary to fulfill your requests, such as email or calendar services.
- Public authorities, where we are legally compelled to disclose information.
We do not sell personal data, nor do we share it with advertising networks or data brokers. All third parties are contractually bound to use data only for the purposes we specify.
International Transfers#
Our service providers may process data outside your country of residence, including outside the European Economic Area. Where such transfers occur, they are governed by appropriate legal safeguards as required by law, such as the European Commission's Standard Contractual Clauses.
Data Retention Periods#
We retain personal data only as long as necessary:
- Enquiries and correspondence: for the duration of our communication and a reasonable period thereafter for follow-up.
- Appointments and financial records: for the period required by accounting and tax regulations.
- Analytics data: in aggregated form only. The random identifier is short-lived and deleted upon withdrawal of consent or clearing of browser data.
- Server logs: for a short period, typically weeks, as determined by our hosting provider.
Data Security#
We implement measures to protect your data, including HTTPS encryption, restricted access to data systems via individual credentials, and segregation of administrative functions. While no system can be completely secure, we are committed to protecting your information. In the event of a data breach affecting your rights, we will notify you and the relevant supervisory authority within legally mandated timeframes.
Your Rights#
You have the right to:
- Request access to the personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Request deletion of your data where there is no compelling reason for its continued processing.
- Object to or restrict processing based on our legitimate interests.
- Receive your data in a structured, machine-readable format (data portability).
- Withdraw your consent for analytics processing at any time via the site's cookie settings.
To exercise these rights, contact us at [email protected]. We will respond within one month, free of charge. If you are in the EU or UK and are unsatisfied with our response, you have the right to lodge a complaint with your national data protection authority.
Children's Data#
Our services are directed to adults. We do not knowingly collect personal information from children. If you believe a child has submitted data to us, please contact us immediately and we will take steps to delete it.
Policy Updates#
We may update this privacy policy to reflect changes in our practices. The updated version will be posted here with a revised date. Significant changes will be communicated to you in a prominent manner.