Privacy Policy

1. General information

This policy describes how CARDIOMED CLINIC S.R.L., with registered office in Oradea, 22A Jean Jacques Rousseau Street, Bihor County, Romania, VAT ID 43173216, registered with the Trade Register under no. J2020001854051 (the "Controller" or the "clinic"), processes the personal data of visitors to the website cardiodent-oradea.ro.

Data processing is carried out in accordance with Regulation (EU) 2016/679 (GDPR) and the applicable national legislation.

2. What data we process

This is a presentation website and it does not contain data collection forms. We do not collect or store personal data through the website.

If you contact us by phone or WhatsApp, we process the data you provide (name, phone number, reason for your appointment), in order to answer you and schedule an appointment.

During medical consultations, data is processed as a healthcare provider, in compliance with applicable legislation and medical confidentiality. Medical data is not published on the website.

3. Purposes and legal bases

Responding to your requests (phone, WhatsApp), based on legitimate interest and pre-contractual steps.
Providing medical services and managing appointments, based on the performance of the contract and the legal obligations of healthcare providers. For health data, the legal basis is Article 9(2)(h) GDPR (preventive medicine, diagnosis, treatment).
Compliance with legal obligations regarding archiving, accounting and medical records.
Proper functioning and security of the website, based on the legitimate interest of the Controller.

We do not use your data for marketing and we do not share it with third parties for that purpose.

4. How long we keep data

Data is kept for the period necessary to achieve the purposes above and afterwards in accordance with legal deadlines (for example, financial and accounting documents are kept for 10 years, and medical documents according to applicable medical legislation).

5. Who we disclose data to

Within the limits of the law, data may be disclosed to IT and hosting service providers (the website runs on Cloudflare infrastructure), providers of services necessary for medical and administrative activity, as well as public authorities, upon their request.

We do not sell your data. It is not transferred outside the European Economic Area except with the safeguards required by the GDPR.

The website does not use its own cookies and does not run tracking or advertising tools.
Google Maps loads only if you press the "Show map" button. Until then, the page sends no data to Google. After loading, Google may set cookies according to its own privacy policy.
The website is hosted on Cloudflare infrastructure, which may record technical data (such as IP addresses) in security logs, for the operation and protection of the service.

7. Your rights

You have the right to information and access to data, the right to rectification, the right to erasure, the right to restriction of processing, the right to data portability, the right to object, the right to withdraw consent (where processing is based on it) and the right not to be subject to an automated individual decision.

You may lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (www.dataprotection.ro) or with the competent courts.

8. Contact

For questions about data processing or to exercise your rights, you can contact us:

by phone: 0772 226 789
by post: CARDIOMED CLINIC S.R.L., 22A Jean Jacques Rousseau Street, Oradea, Bihor County, 410130, Romania