The data controller is DIANAMEDICALCENTER S.R.L., headquartered in Bucharest, Sector 1, Boulevard General Gheorghe Magheru, no. 9, Building 4, Floor 7, Apt. 132, identified by VAT no. CUI 39485026, registered in the Trade Register of Bucharest under number J40/8433/2018, represented by Mrs. MIHAI DIANA (hereinafter "the Operator", "the Clinic" or "us").
For any matters regarding the protection of your personal data, you can contact us at:
The Operator has appointed a Data Protection Officer (DPO); all requests regarding the exercise of rights under GDPR should be addressed to the contact details indicated below.
By completing the online medical evaluation form, you provide the Operator with identification and contact data, namely: name, surname, mobile phone number and email address, as well as optional data, sale of supplements and other contact information you choose to share with us.
Additionally, by answering the questionnaire questions, you provide the Operator with your gynecological health data, certain categories of special personal data pursuant to Art. 9 GDPR. This data includes information about symptoms related to menopause (including but not limited to: vaginal dryness, urinary incontinence, hot flashes, persistent discomfort, repeated infections during sexual contact, vaginal problems, perimenopause-related issues and other aspects of gynecological health), information about relevant gynecological medications, treatments you are currently taking, medications you are allergic to, and information about your current dispositions or browser used to access the form.
Data provision is voluntary, but necessary for the Operator to be able to preliminarily assess whether it can meet your medical needs and schedule an evaluation consultation. Providing incomplete or inaccurate medical information increases risk and may affect the preliminary evaluation performed before calling you.
The personal data you provide will be processed for the purpose of understanding your gynecological health issues, the preliminary assessment of your needs and determining the relevance of the services offered by Le Clinic in relation to your situation. We also process your data to contact you by phone or email to schedule the evaluation consultation, and for transmitting additional information after the consultation, including preparation details or other relevant information.
The processing of identification and contact data is carried out based on your legitimate consent pursuant to Art. 6(1)(a) and (b) GDPR, and on the Operator's legitimate interest in providing the requested medical services, pursuant to Art. 6(1)(f) GDPR. For health data processing, processing is carried out exclusively based on your explicit consent given by clicking the accept button and submitting the form, pursuant to Art. 9(2)(a) GDPR.
The data you provide through the form contains information about your gynecological health, which are special categories of personal data pursuant to Art. 9 GDPR and benefit from enhanced protection. Sensitive information and medical data are voluntarily provided.
By clicking the accept and submit button online, you expressly, freely, informedly and unambiguously consent to DIANAMEDICALCENTER S.R.L. processing your health data for the purposes described in Section III of this agreement. Consent to health data processing is voluntary, but its absence will make it impossible to evaluate the consultation and contact the medical doctor for scheduling.
You have the right to withdraw your consent at any time, without affecting the legality of the processing based on consent before its withdrawal. Consent may be withdrawn by:
Withdrawal of consent will determine the cessation of processing and the deletion of your data from the Operator's systems within a maximum of 5 working days, except in cases where there are legal obligations to retain. Withdrawal of consent will make it impossible to continue the process of scheduling the free evaluation consultation.
You declare that you are solely responsible for all the data you provide, which must be correct, complete and accurate. Providing incomplete, inaccurate or false data may affect the preliminary evaluation and expose you to the risk of incorrectly identifying your medical needs. The Operator assumes no responsibility for the consequences of incomplete or inaccurate data you provide.
The data will be accessed by authorized personnel of the Operator, namely: members of the medical team involved in the preliminary evaluation of your medical situation, administrative personnel for contact and scheduling, and reception personnel for confirming and organizing programs.
For the functioning of the online form and its management, the Operator uses the GoHighLevel platform. GoHighLevel acts as a data processor on behalf of the GDPR Operator and processes your data exclusively in accordance with Operator instructions, based on a processing agreement that guarantees adequate security measures and compliance with GDPR.
Data may be transferred and stored on servers located in the United States of America, which is not a country benefiting from an adequacy decision by the European Commission regarding the level of protection of personal data.
The Operator will not sell or share your data with third parties for commercial, marketing or advertising purposes without your separate consent. Data will be disclosed to competent authorities only to the extent required by law or as necessary for the application of the Operator's rights in court.
Personal data collected through the online form will be retained for different periods depending on the evolution of the relationship with the Operator.
In situations where you have not presented yourself at the scheduled consultation, the data from the forms will be retained from the moment of completion for a maximum of 1 year, after which they will be deleted from all Operator systems, with the exception of cases where there are extended retention periods or legal retention obligations.
If you have presented at the consultation and became a patient of the Operator, the data from the forms will be integrated into your medical file and will be subject to medical storage rules pursuant to Law no. 46/2003 regarding patient rights, as applicable at the time of the consultation, over which are established by normal legal norms applicable to health service providers.
In accordance with Regulation (EU) 2016/679, you benefit from the following rights regarding your personal data processing:
You can obtain from the Operator confirmation that processing is or is not taking place regarding personal data that concerns you, and if so, access to the data and information about the processing, including its purpose, categories of data, recipients and other relevant information.
You can obtain from the Operator, without unjustified delay, the rectification of inaccurate personal data concerning you, and the completion of incomplete data by providing a supplementary statement.
You can obtain the deletion of personal data concerning you without unjustified delay, in situations where the data are no longer necessary for the purposes for which they were collected. This right does not apply to the extent that processing is necessary for compliance with a legal obligation or for the establishment, exercise or defense of legal claims.
You can request restriction of processing in situations where: you contest the accuracy of the data; when the Operator no longer needs the data but you need them for legal claims; or when you have objected to the processing.
You can receive the data you have provided to the Operator in a structured, commonly used and machine-readable format, and transmit those data to another operator, where technically feasible.
You can oppose, for reasons related to your particular situation, the processing of personal data concerning you. The Operator will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, rights and freedoms.
You may withdraw your consent at any time without affecting the legality of processing carried out before the withdrawal. The method of withdrawing consent is described in Section IV of this agreement.
You have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP), headquartered in Bucharest, Bd. G-ral. Gheorghe Magheru no. 28-30, Sector 1, phone: +40.318.059.211 / +40.318.059.212, email: [email protected], website: www.dataprotection.ro.
All these rights may be exercised by contacting our Data Protection Officer at [email protected], by phone at +40 754 040 480, or by sending written requests to our headquarters: Bd. Dacia nr. 19, Sector 1, Bucharest.
The Operator will respond to any requests without unjustified delay and in any case within a maximum of 30 days from receiving the request. In exceptional cases justified by the complexity or number of requests, this term may be extended by an additional 60 days, in which case you will be informed of the reasons for the delay. For data protection purposes, the Operator may request additional information to verify your identity before responding to your request.
If you opt in via the SMS consent checkbox on our registration forms, DIANAMEDICALCENTER S.R.L. will collect your name and mobile phone number for the purpose of sending you text messages related to webinar registration confirmations, reminders, related educational content, and offers for our courses and services.
Message frequency varies depending on your registration and engagement activity. Message and data rates may apply, depending on your mobile carrier and plan.
You may opt out of receiving SMS messages at any time by replying STOP to any message you receive. For assistance, reply HELP or contact us using the details provided in Section I of this document.
No mobile information, including phone numbers and opt-in consent status, will be sold, rented, shared, or disclosed to third parties or affiliates for their own marketing or promotional purposes. Your mobile opt-in data is used solely by DIANAMEDICALCENTER S.R.L. for the purposes described above.
Data collected through SMS opt-in is stored and processed using the same security measures described in this Privacy Policy, and is retained for as long as necessary to fulfill the purposes described above or until you withdraw your consent, whichever comes first.
You have the right to withdraw your SMS consent at any time without affecting the legality of processing carried out before withdrawal, in accordance with your rights described in Section VII of this document.