GDPR – Processing of personal data

PHYSIODENTAL SRL, headquartered in Romania, is the controller of personal data under data protection legislation, including the GDPR, with respect to Users' personal data collected and processed through the website https://clinika.ro/ and/or in the context of the Services offered through or in connection with the website.

For matters relating to the processing of personal data, the Company can be contacted at: physiodentalsrl@gmail.com

The Company processes the personal data you provide when you use the website, register on our page, purchase a service, sign up for our campaigns (and/or campaigns organised with our partners), wish to receive commercial communications or take part in our surveys and questionnaires, or contact us by any means of communication.

If you contact our company, PHYSIODENTAL SRL, through the contact form on https://clinika.ro/, the data you provide (first name, last name, address, phone, e-mail and any other personal data provided) will only be stored and processed after you tick the express consent box at the bottom of the contact form.

We also use cookies and similar technologies to recognise you and your devices, only to the extent you have given your consent. How we use these technologies is described in the Cookie Policy.

In certain situations, we may use the information collected from you in combination with data obtained from our sales and/or marketing teams about your interaction with the Company, for use in our marketing communications. We aim to make our marketing more effective by offering our clients relevant, personalised products / services. We may produce reports, analyses and statistical studies on our marketing campaigns and their success, and on sales / processing activity.

When you request services, we may process certain personal data necessary for these purposes (e.g. first and last name, delivery / service address, transaction data, etc.).

We have an interest in providing appropriate services through the website to everyone who accesses it. We therefore process certain personal data to manage relations with website Users, for example when they contact us with questions or requests about the website's features or about the Company's services offered through the website. Legal basis: Art. 6(1)(f) GDPR – legitimate interest in ensuring appropriate services.

We may use personal data provided by Users or collected in the context of using the Services to carry out analyses and statistics about our Services, including how the website works or how the Services are delivered. These analyses help us better understand how we could improve our Services or the website's features.

For these analyses and statistics we also use cookies and similar technologies, in accordance with the Cookie Policy, only after you have given your consent through the cookie settings window.

We have implemented various ways of connecting with social media pages such as Facebook, Twitter, YouTube and Instagram, so you can more easily access content we post on the website and/or our associated accounts on those networks. If you access content posted on those networks or comment there, certain public data from your profile on those networks will also be transmitted to us by the operators of those networks.

Sometimes data processing is necessary to meet our legal obligations, such as:

• reporting to the relevant tax authorities and keeping accounting records;
• archiving data in accordance with applicable legislation.

To establish, exercise or defend a legal claim in court proceedings, administrative proceedings or other official proceedings involving the Company.

We may disclose your personal data to (i) entities and/or persons acting on our behalf (in the EEA or third countries) involved in providing the Services, including commercial communications (such as data centre providers, payment service providers, e-mail platform providers such as Google Mail); (ii) where we are required to disclose personal data to comply with any legal obligation or decision of a judicial authority, public authority or government body; or (iii) where we are otherwise required or permitted to do so under applicable law.

Your personal data may also be disclosed to third-party providers of cookies and similar technologies, as described in the Cookie Policy, only if you have given your consent.

We keep your personal data for as long as necessary to fulfil the purposes for which it was collected, in line with internal data retention procedures, including applicable archiving rules. For example, if you are our client, your personal data will be kept for the entire duration of the contractual relationship plus a minimum of 3 years after it ends (the limitation period for legal claims). Some personal data may then be kept longer for archiving purposes, in accordance with applicable archiving rules.

Under the law, you have the following rights as a data subject:

• Right of access: you can obtain confirmation from us that we process your personal data, and information about the nature of the processing.
• Right to rectification: you can ask us to correct inaccurate personal data or complete incomplete data.
• Right to erasure: you can request erasure of personal data where: (i) it is no longer needed for the purposes for which we collected and process it; (ii) you have withdrawn consent and we have no other legal basis to process it; (iii) the data is processed unlawfully; or (iv) the data must be erased under relevant legislation.
• Withdrawal of consent and right to object: you can withdraw consent at any time for processing based on consent. You can also object at any time to processing for marketing purposes, including related profiling, and to processing based on the Company's legitimate interest, on grounds relating to your particular situation.
• Right to restriction: under certain conditions, you can request that processing of your personal data be restricted.
• Right to data portability: to the extent we process data by automated means, you can ask us, as provided by law, to supply your data in a structured, commonly used and machine-readable format. If you ask, we can transmit your data to another entity where technically feasible.
• Right to lodge a complaint with the supervisory authority: you have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing – 28-30 G-ral. Gheorghe Magheru Blvd., Sector 1, postcode 010336, Bucharest, anspdcp@dataprotection.ro – if you believe your rights have been infringed.

To exercise the rights above, you can contact us at: physiodentalsrl@gmail.com. You can also use the standard request form below.