Privacy Policy

Last updated: 6 September 2026

Protecting your personal data is important to us. This Privacy Policy explains how personal data is collected, used, stored, and protected when you use the website www.clinicadesomnologie.ro, contact us through it, or request information or an appointment.

Personal data is processed in accordance with Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (“GDPR”), applicable national legislation, including Law No. 190/2018, and other relevant legislation concerning data protection and privacy.

1. Who Is the Personal Data Controller

The controller of personal data collected through the website is:

S.C. CLINICA DE SOMNOLOGIE ȘI PNEUMOLOGIE S.R.L.

Trading name: Clinica de Somnologie și Pneumologie Dr. Iulia Ungureanu

Address: Calea Unirii nr. 30–32, Craiova, județul Dolj, România

Website: www.clinicadesomnologie.ro

Email: hello@clinicadesomnologie.ro

For any questions about how we process your personal data or to exercise your rights under data protection legislation, you may contact us using the email address above.

2. Who This Privacy Policy Applies To

This Policy applies to persons who:

  • access or browse the website www.clinicadesomnologie.ro;

  • complete the contact or appointment form;

  • request information about the clinic’s services;

  • contact the clinic using the contact details available on the website;

  • interact with the features available on the website.

This Policy primarily concerns data processing carried out through the website.

Medical data processed during consultations, investigations, treatments, or other medical services may be subject to additional data protection notices provided to patients in connection with the delivery of medical services.

3. Personal Data We May Collect

Depending on how you interact with the website, we may process the following categories of data:

3.1. Data Provided Directly by You

When you complete a form or contact us, we may collect:

  • first and last name;

  • telephone number;

  • email address;

  • information included in your message;

  • information concerning an appointment request;

  • any other information you choose to provide.

We recommend that you do not submit through the website’s general forms more medical information than is necessary for your request.

3.2. Technical Data

When you use the website, certain technical information may be collected automatically, such as:

  • IP address;

  • device type;

  • browser type and version;

  • operating system;

  • date and time of access;

  • pages visited;

  • technical information about interaction with the website;

  • data generated through the use of cookies or similar technologies, to the extent that they are used.

This information may be necessary for the operation, security, and technical administration of the website.

4. Health Data

Health data is a special category of personal data and is afforded enhanced protection under the GDPR.

The website is not designed for submitting complete medical records or large volumes of medical information through the general contact form.

However, a person may voluntarily provide certain information about their health when requesting an appointment or information about medical services.

Where health data is necessary to provide medical services, it will be processed in accordance with applicable healthcare legislation and the GDPR provisions concerning special categories of data.

5. Purposes for Which We Use Data

We may use personal data for the following purposes:

5.1. Managing Contact Requests

To respond to questions, requests, and messages submitted through the website, by email, or by telephone.

5.2. Managing Appointment Requests

To contact you in order to schedule, confirm, change, or clarify an appointment.

5.3. Providing Medical Services

Where your request results in the establishment of a patient–clinic relationship, certain data may be processed to provide the requested medical services and to comply with legal obligations applicable to healthcare providers.

5.4. Website Administration and Security

For:

  • ensuring the website operates correctly;

  • preventing unauthorized access;

  • identifying attempted fraud or attacks;

  • diagnosing technical problems;

  • performing maintenance and security operations.

5.5. Compliance with Legal Obligations

We may process certain data where necessary to comply with obligations under applicable law.

5.6. Establishing, Exercising, or Defending Rights and Legitimate Interests

Where necessary, data may be used to establish, exercise, or defend a legal right in administrative, judicial, or extrajudicial proceedings.

6. Legal Bases for Processing

Depending on the circumstances and purpose, data processing may be based on one or more of the following legal bases:

  • consent of the data subject, where requested;

  • steps taken at the request of the data subject before entering into a contract or performance of a contractual relationship;

  • compliance with a legal obligation to which the clinic is subject;

  • the legitimate interests of the clinic, for example to secure and administer the website, prevent fraud, or protect its rights;

  • for health data, the special legal grounds permitted by data protection law for the provision and management of healthcare services or, where applicable, the explicit consent of the data subject.

7. Contact Form and Appointment Requests

Data entered in the form available on the website is used to review your request and contact you.

Submitting the form does not automatically guarantee confirmation of an appointment. The appointment may require subsequent confirmation by the clinic.

Please provide only the information necessary to handle your request.

8. Disclosure of Data to Third Parties

The clinic does not sell, rent, or trade the personal data of website users.

In certain circumstances, data may be accessible to service providers that assist the clinic in its operations, such as:

  • hosting service providers;

  • email service providers;

  • IT maintenance and administration providers;

  • information security service providers;

  • providers of technical services necessary for the website to function;

  • legal advisers, accountants, or other professionals, where necessary;

  • public authorities and institutions, where disclosure is required by law.

Providers that process data on behalf of the clinic are required to ensure its confidentiality and security and to use it only for the purposes for which it was made available.

9. International Data Transfers

As a rule, we seek to have data processed within the European Economic Area.

However, certain technical services used by the website may involve providers that also process data outside the European Economic Area.

In such cases, transfers will take place only under the conditions permitted by the GDPR and, where applicable, using appropriate safeguards such as adequacy decisions, standard contractual clauses, or other safeguards provided for by applicable law.

10. Data Retention Period

Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected.

The specific retention period may vary depending on:

  • the nature of the information;

  • the purpose of processing;

  • the existence of a patient–clinic relationship;

  • applicable legal obligations;

  • the need to establish, exercise, or defend legal rights;

Data forming part of medical records is retained in accordance with the periods and obligations laid down by the legislation applicable to healthcare providers.

At the end of the applicable periods, data will be deleted, anonymized, or archived, as appropriate, in accordance with legal obligations.

11. Data Security

The clinic applies reasonable technical and organizational measures to protect personal data against:

  • unauthorized access;

  • loss;

  • destruction;

  • alteration;

  • unauthorized disclosure;

  • improper use.

Nevertheless, the transmission of information over the internet cannot be guaranteed to be entirely risk-free. For this reason, we recommend that users avoid submitting excessive or unnecessary medical information through the website’s general forms.

12. Cookies and Similar Technologies

The website may use cookies and similar technologies necessary for its operation.

Depending on the website’s configuration, optional cookies may also be used, for example for statistics, audience measurement, external features, or other services.

Cookies that are not strictly necessary will be used only under the conditions permitted by applicable law and, where required, after obtaining the user’s consent.

Users can change their cookie preferences through the mechanisms provided on the website and/or through their browser settings.

13. Links to External Websites

The website may contain links to services or websites operated by third parties, such as mapping services or other external platforms.

The clinic does not control how these third-party websites process personal data.

We recommend reviewing the privacy policies of these providers before using their services.

14. Your Rights

Under the conditions set out in the GDPR, you have the following rights:

Right to Information

You have the right to receive clear information about how your data is processed.

Right of Access

You have the right to request confirmation of whether or not we process data concerning you and, where applicable, access to that data.

Right to Rectification

You have the right to request the correction of inaccurate personal data or the completion of incomplete data.

Right to Erasure

In the circumstances provided by law, you may request the erasure of personal data.

This right is not absolute, and certain data may need to be retained to comply with legal obligations, including those applicable to medical records.

Right to Restriction of Processing

In certain circumstances, you may request that the use of your data be restricted.

Right to Data Portability

In the circumstances provided for by the GDPR, you may request to receive your data in a structured, commonly used, machine-readable format and to have it transmitted to another controller.

Right to Object

You have the right to object to certain processing based on legitimate interests, under the conditions provided by law.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw it at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

Right Not to Be Subject to a Decision Based Solely on Automated Processing

Under the conditions set out in the GDPR, you have the right not to be subject to a decision based solely on automated processing that produces legal effects concerning you or similarly significantly affects you.

15. How to Exercise Your Rights

To exercise your data protection rights, you may send a request to:

hello@clinicadesomnologie.ro

To protect your data, we may request additional information strictly necessary to verify the applicant’s identity before responding to a request.

Requests will be handled within the time limits provided by applicable law.

16. Right to Lodge a Complaint

If you believe that the processing of your personal data violates applicable law, you have the right to lodge a complaint with:

National Supervisory Authority for Personal Data Processing (ANSPDCP)

You also have the right to seek recourse before the competent courts, in accordance with the law.

We encourage you to contact us first if you have a concern about how we process your data so that we can review and resolve your request.

17. Data Relating to Minors

The website is not specifically intended to collect data directly from minors without the involvement of their legal representatives.

Where medical services are requested for a minor, data will be processed in accordance with applicable law and the rules governing legal representation and the provision of medical services to minors.

18. Changes to the Privacy Policy

This Policy may be updated periodically to reflect:

  • changes in legislation;

  • changes to the services offered;

  • changes to the website’s features;

  • changes in how data is processed.

The updated version will be published on this page, and the date of the most recent change will be displayed at the beginning of the document.

We recommend checking this page periodically.

19. Contact

For questions, requests, or further information about personal data protection:

S.C. CLINICA DE SOMNOLOGIE ȘI PNEUMOLOGIE S.R.L.

Calea Unirii nr. 30–32, Craiova, județul Dolj, România

Email: hello@clinicadesomnologie.ro

Website: www.clinicadesomnologie.ro

Last updated: 6 September 2026