1. Introduction

This Privacy Policy describes how the personal data of visitors accessing this website is collected, used, stored, and protected, in accordance with Regulation (EU) 2016/679 on the protection of personal data (GDPR), Law no. 190/2018, and applicable national legislation.

The website serves an informational, contact, and professional medical promotion purpose. It may also be used for newsletter subscription and for conducting online marketing and advertising activities. The website does not provide online medical consultations and does not replace medical services performed within authorized healthcare facilities.

2. Data Controller and Contact Details

The data controller responsible for processing personal data is:

  • Crivăţ Sergiu Victor
  • Specialist Urologist – Sole Practitioner (PFI)
  • Seal Code: G40512
  • Tax Identification Number (CIF/CUI): 49703402
  • Contact email address: contact@drcrivatsergiu.ro

For any requests regarding personal data protection, users may use the email address above or the contact form available on the website.

3. What Personal Data We Collect

The website collects personal data only to the extent necessary for the stated purposes and only when such data is provided voluntarily by users.

3.1. Data Collected Through the Contact Form

By completing the contact form, the following data may be collected:

  • full name;

  • email address;

  • phone number;

  • message submitted by the user.

Users are requested not to submit medical information, health data, diagnoses, investigations, or treatment details through the contact form. Such data is not requested and is not subject to intentional processing.

3.2. Data Collected for the Newsletter

When subscribing to the newsletter, the following data may be collected:

  • email address;
  • name, if provided voluntarily.

The newsletter is used exclusively to send professional information, updates, medical articles, general information, and promotional materials.

3.3. Technical and Browsing Data

When accessing the website, certain technical data may be collected automatically, such as:

  • IP address;
  • browser type and operating system;
  • visited pages, session duration, and traffic source.

This data is collected through cookies and similar technologies, including analytics and online advertising tools.

4. Purposes and Legal Bases of Processing

Personal data is processed for the following purposes:

  • To respond to requests submitted through the contact form, processing is based on the controller’s legitimate interest in communicating with users.
  • For newsletter subscription and delivery, processing is carried out based on the user’s explicit consent.
  • For marketing and online advertising activities (e.g., displaying relevant ads, measuring campaign performance), data is processed based on consent, through cookies and similar technologies.
  • To ensure website security and prevent abusive use, processing is based on the controller’s legitimate interest.
  • To comply with applicable legal obligations, processing is carried out based on legal requirements.

5. Data Recipients

Personal data may be disclosed, on a limited basis, to the following recipients:

  • email marketing service providers (e.g., newsletter platforms);
  • web hosting and IT maintenance providers;
  • analytics and online advertising service providers (e.g., Google, Meta);
  • public authorities, only where disclosure is required by law.

Personal data is not sold or rented to third parties.

6. International Data Transfers

The use of certain services (e.g., email marketing platforms or analytics and advertising tools) may involve the transfer of data outside the European Economic Area. In such cases, the controller ensures that appropriate safeguards are applied, such as standard contractual clauses or other mechanisms approved under the GDPR.

7. Data Retention Period

Personal data is stored for limited periods, proportional to the purposes of processing:

  • messages sent through the contact form are stored for up to 12 months after the communication has ended;

  • data used for the newsletter is stored until consent is withdrawn (unsubscribe);

  • technical and marketing data is stored according to the policies of the platforms used, but no longer than 12 months;

  • backup copies are stored in accordance with IT security policies, typically between 30 and 90 days.

8. Your Rights

In accordance with the GDPR, users have the right to access their personal data, the right to rectification, erasure, restriction of processing, objection, data portability, and the right to withdraw consent at any time. Users also have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP) – www.dataprotection.ro.

9. Data Security

The website uses appropriate technical and organizational measures to protect personal data, including secure SSL connections, restricted access to IT systems, and maintenance and backup procedures.

10. Data Related to Minors

The website is not intended for individuals under the age of 16 and does not knowingly collect personal data from minors. If such data is identified, it will be deleted immediately.

11. Cookies and Similar Technologies

The website uses strictly necessary cookies, analytics cookies, and marketing/advertising cookies. Full details regarding the types of cookies used and how they can be managed are available in the Cookie Policy, published separately.

12. External Links

The website may contain links to other websites or external platforms (e.g., social media). The controller is not responsible for the content or privacy policies of those sites.

13. Changes to the Policy

This Privacy Policy may be updated periodically. Any changes will be published on this page and will take effect from the date of publication.