This policy explains which personal data we process when you contact us, when you become our patient or when you visit this website, and which rights you have.
1. Who we are
The data controller is ANARAKI BARDEH MOHAMMAD – Cabinet Medical Individual, tax ID (CUI) 27218121, operating as A&A Dental Studio in two clinics in Constanța, Romania: Central clinic (Str. General Eremia Grigorescu nr. 4, Corp C1) and KM 4-5 clinic (Str. Liliacului nr. 1A). You can reach us at +40 745 690 001 or +40 799 001 008, by email at infinitydigitaldent@gmail.com, or at reception.
2. Which data we process
- When you contact us (phone, WhatsApp, social media): your name, phone number, your message and any health information you choose to share.
- As a patient: identification and contact details, medical history, investigations (for example X-rays), treatment plans and payment records.
- When you visit the website: our hosting provider automatically logs minimal technical data (IP address, browser type, pages visited) to run and secure the site.
3. Why we process data and on what basis
- Arranging appointments and answering questions at your request (GDPR Art. 6(1)(b)).
- Providing medical care and keeping medical records, as required of medical practices (GDPR Art. 6(1)(c) and Art. 9(2)(h)).
- Accounting and tax records (GDPR Art. 6(1)(c)).
- Website security and abuse prevention (GDPR Art. 6(1)(f), our legitimate interest).
4. WhatsApp and other external services
“WhatsApp” buttons open your own WhatsApp app; no message is sent automatically. If you choose to message us on WhatsApp, the data is also processed by Meta Platforms under its own policies. You can call us instead. Links to Google Maps, Facebook and Instagram lead to external websites with their own privacy policies.
5. Who we share data with
Only the medical and administrative staff who need your data can access it. Where strictly necessary, we may share it with dental or medical laboratories involved in your treatment, our service providers (for example hosting and software), and authorities when the law requires it.
6. How long we keep data
We keep appointment messages for as long as needed to handle your request. Medical and financial records are kept for the periods required by Romanian law.
7. Your rights
You have the right of access, rectification, erasure, restriction, objection and data portability under the GDPR. To exercise them, email infinitydigitaldent@gmail.com, call us or ask at reception. You may also complain to the Romanian data protection authority, ANSPDCP (www.dataprotection.ro).
8. Cookies
This website does not use analytics or marketing cookies and does not load third-party tracking services. Fonts and images are hosted on our own server, so we do not ask for cookie consent. If we add such tools in the future, we will update this policy and ask for your consent first.
9. Security
The website is served only over a secure connection (HTTPS). The appointment request and tooth chart prepare a message only in your browser. These details are not sent to the website server. If you choose to continue in WhatsApp, the draft is transferred to that service; you can review it before sending.