Privacy Policy

1. What data we collect

We only collect personal data when you provide it to us directly, through:

• The contact form on the website: name, phone number, email address and the content of your message.
• Direct contact by phone, email or WhatsApp, using the details published on the site.

Additionally, like any website, our server automatically logs standard technical data (IP address, browser type, pages visited) for security and operational purposes. The website does not currently use tracking cookies or traffic analytics tools.

2. Purpose and legal basis

• To respond to your request (appointment, questions, information about treatments) — basis: your consent, expressed by submitting the form or contacting us directly.
• For the operation and security of the website (standard technical server data) — basis: the controller’s legitimate interest.

We do not use your data for marketing or commercial communications unless you explicitly ask us to.

3. How long we keep your data

Data submitted through the contact form is kept for as long as necessary to respond to your request and, if you become a patient, for the duration of the medical relationship, in accordance with legal obligations regarding medical and financial record-keeping. You may request the deletion of data that is not subject to such a legal obligation at any time.

4. Who we share data with

We do not sell or rent your personal data to third parties. Your data may be accessed by service providers that support the operation of the website, acting as data processors, contractually bound to keep it confidential:

• Our website hosting provider
• Our email service provider used to receive messages from the contact form

We may disclose data to public authorities where required by law.

5. Data transfers

Your data is processed and stored within the European Union / European Economic Area. Should a transfer outside the EEA become necessary, we ensure it is carried out with appropriate safeguards, in accordance with GDPR.

6. Your rights

Under the General Data Protection Regulation (GDPR), you have the right to:

• Information — to know how your data is processed;
• Access — to obtain confirmation and a copy of the data we process;
• Rectification — to correct inaccurate or incomplete data;
• Erasure (“right to be forgotten”) — under certain conditions;
• Restriction of processing — under certain conditions;
• Data portability — to receive your data in a structured format;
• Objection — to object to processing, including for direct marketing;
• Complaint — to the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), www.dataprotection.ro.

To exercise any of these rights, you can reach us at office@dentalcreation.ro.

7. Children’s privacy

The website is not directed at individuals under 18, and we do not knowingly collect data from minors without a parent or guardian’s consent. If you become aware that a minor has provided us with data without such consent, please contact us so we can delete it.

8. Changes to this policy

We may update this policy from time to time. Any change will be published on this page, along with an updated date above.