Privacy and Personal Data Processing Policy (GDPR)
I. General information
The confidentiality of your personal data is one of the main concerns of the clinic32, based in Banu Manu Blvd., no. 79 A, sector 1, Bucharest, as a data operator.
This document is intended to inform you about the processing of your personal data in the context of the use of the website www.clinica32.ro ("Site").
II. Categories of personal data processed
II.1. If you are a customer of the Site, clinica32 will process your personal data, such as: name and surname, telephone, e-mail address, IP, date and time of submission of forms (request for offer, contact form, demo form
applications), device, operating system, browser, data about how you use the Site, such as your behavior / preferences / habits within the Site, and any other categories of data that you provide directly in the context of placing an offer request through the site or in any other way resulting from the use of the Site: contact form, offer request form, tawk.to chat system implemented on the site, application demo request.
II.2. If you are a visitor to the Site, clinica32 will process your personal data that you provide directly in the context of using the Site, such as the data that you provide in the contact / questions / complaints section, to the extent in which you contact us in this way.
III. Purposes and grounds for processing
III.1. If you are a customer of the Site, clinica32 processes your personal data as follows:
• for the development of the contractual relationship between you and the clinic32, respectively for taking over, validating and answering the request placed on the Site, informing you about the status of the request, etc.
Rationale: The processing of your data for this purpose is based on the request sent by you to the clinic32. The provision of your personal data is necessary to respond to your request.
Providing your data for this purpose is voluntary. Refusal to provide consent for the processing of your data for this purpose will not have negative consequences for you.
• in order to perform various analyzes, reports on the operation of the Site, the creation of consumer preference profiles, mainly in order to improve the experience offered on the Site.
Rationale: The processing of your data for this purpose is based on the legitimate interest of the clinic32 to permanently improve the customer experience on the Site. Providing your data for this purpose is voluntary. Refusal to provide data for this purpose will not have a negative effect on you.
III.2. If you are a visitor to the Site, clinica32 processes your personal data as follows:
• for marketing activities, respectively for the transmission, through the means of distance communication (e-mail, sms), of commercial communications regarding the products and services offered by the clinic32, through the Site.
Rationale: The processing of your data for this purpose is based on your consent, if you choose to provide it. To unsubscribe from receiving such commercial communications you can use the option at the end of each email / sms containing commercial communications.
Providing your data for this purpose is voluntary. Refusal to provide consent for the processing of your data for this purpose will not have negative consequences for you.
• to resolve complaints, grievances and to monitor traffic and improve your experience with the Site.
Rationale: The processing of your data for this purpose is based on the legitimate interest of the clinic32 to ensure the proper functioning of the Site, as well as to permanently improve the experience of visitors to the Site, including by resolving various comments, questions or complaints.
Providing your data for this purpose is voluntary. Refusal to provide data for this purpose will not have a negative effect on you.
IV. The length of time we process your data
In principle, the clinic32 will process your personal data as long as is necessary to achieve the processing purposes mentioned above.
If you are a customer, we will process your data for the duration of the contractual relationship and subsequently in accordance with the legal obligations under the
clinical burden32 (eg in the case of financial-accounting supporting documents for which the retention period provided by law is 10 years from the date of the end of the financial year during which they were drawn up).
If you withdraw your consent to the processing of data for marketing purposes, clinica32 will cease the processing of your personal data for this purpose, without affecting the processing carried out by the clinic32 on the basis of your consent before its withdrawal.
V. Disclosure of personal data
In order to fulfill the processing purposes, clinica32 may disclose your data to partners, third parties or entities that support the clinic32 in carrying out the activity through the Site, or to the central / local public authorities, in the following exemplary cases listed:
• for the administration of the Site;
• in cases where this communication would be necessary for the award of prizes
or other facilities to the persons concerned, obtained as a result of their participation in various
promotional campaigns organized by the clinic32 through the Site;
• to maintain, personalize and improve the Site and the services provided
through him;
• for performing data analysis, testing and research, monitoring trends
of use and activity, development of security features and authentication
users;
• for the transmission of commercial marketing communications, under the conditions and limits
provided by law;
• when the disclosure of personal data is provided by law, etc.
VI. Transfer of personal data
The personal data provided to the clinic32 can be transferred outside Romania, but only to European Union countries.
ARE YOU COMING. Your rights
Under the conditions provided for by the legislation on the processing of personal data, as data subjects, you enjoy the following rights:
• the right to information, respectively the right to receive details regarding the processing activities performed by the clinic32, as described in this document;
• the right to access data, respectively the right to obtain confirmation from
the clinical part32 regarding the processing of personal data, as well as details on the processing activities such as the way in which the data are processed, the purpose for which the processing is carried out, the recipients or categories of recipients of the data, etc .;
• the right to rectification, respectively the right to obtain the correction, without justified delays, by the clinic32 of inaccurate / unjustified personal data, as well as the completion of incomplete data; The rectification / completion will be communicated to each recipient to whom the data were transmitted, unless this proves impossible or involves disproportionate effort.
• the right to delete data, without undue delay, ("right to be forgotten"), if one of the following reasons applies:
- they are no longer necessary for the purposes for which they were collected or processed;
- if the consent is withdrawn and there is no other legal basis for the processing;
- if the data subject opposes the processing and there are no legitimate reasons prevailing;
- if the personal data have been processed illegally; o if personal data must be deleted in order to comply with a legal obligation;
- personal data have been collected in connection with the provision of information society services in accordance with Union or national law under which the controller is located.
• It is possible that, following the request for deletion of the data, the Personal Data Processing Policy (GDPR) clinic32 will anonymize this data (thus lacking personal data) and continue in these conditions the processing for statistical purposes;
• the right to restrict processing to the extent that:
- the person disputes the accuracy of the data, for a period that allows us to verify the correctness of the data;
- the processing is illegal and the data subject objects to the deletion of personal data, requesting in return the restriction of their use;
- the controller no longer needs the personal data for the purpose of processing, but the data subject requests them for the establishment, exercise or defense of a right in court; or
- the data subject has objected to the processing (other than direct marketing), for the period during which it is verified whether the legitimate rights of the controller prevail over those of the data subject.
• the right to data portability, respectively (i) the right to receive personal data in a structured, commonly used and easy-to-read format, and (ii) the right to have such data transmitted by clinic32 to another data controller, insofar as the conditions provided by law are met;
• the right to object - with regard to processing activities may be exercised by submitting a request as indicated below;
- at any time, for reasons related to the particular situation of the data subject, that the data concerning the data subject be processed in the legitimate interest of the clinic32 or in the public interest, unless the clinic32 can demonstrate that it has legitimate reasons, and which justify the processing and prevail over the interests, rights and freedoms of data subjects or that the purpose is to establish, exercise or defend a right in court;
- at any time, free of charge and without any justification, that the data concerning it be processed for the purpose of direct marketing.
• the right not to be subject to an automatic individual decision, ie the right not to be subject to a decision taken solely on the basis of automatic processing activities, including profiling, which produces legal effects concerning the data subject or similarly affects -a significant measure;
• the right to apply to the National Authority for the Supervision of Personal Data Processing or to the competent courts, to the extent deemed necessary.
For any additional questions regarding the way in which personal data are processed and to exercise your rights mentioned above, please contact the email address: office@clinica32.ro