Privacy policy

• • the right to restriction of processing to the extent that:
    • the person contests the accuracy of the data, for a period that allows us to verify the accuracy of the data;
    • the processing is unlawful and the data subject opposes the erasure of the personal data, requesting instead the restriction of their use;
    • the operator no longer needs the personal data for the purposes of the processing, but the data subject requests them for the establishment, exercise or defense of a right in court; or
    • • the data subject has objected to the processing (other than direct marketing), for the period of time in which it is verified whether the legitimate rights of the operator prevail over those of the data subject. the right to data portability, namely (i)

• • the right to receive personal data in a structured, commonly used and easily readable format, as well as (ii) the right to have these data transmitted by DENTAL ARCHITECT CLINIC S.R.L. to another data controller, to the extent that the conditions provided by law are met;

• • the right to object – with regard to processing activities, can be exercised by submitting a request as indicated below;
    • at any time, for reasons related to the particular situation of the data subject, that the data concerning him/her be processed on the basis of the legitimate interest of DENTAL ARCHITECT CLINIC S.R.L. or on the basis of the public interest, except in cases where DENTAL ARCHITECT CLINIC S.R.L. can demonstrate that he has legitimate and compelling reasons which justify the processing and which prevail over the interests, rights and freedoms of the data subjects or that the purpose is the establishment, exercise or defence of a right in court;
    • • at any time, free of charge and without any justification, that the data concerning him are processed for direct marketing purposes.

• • the right not to be subject to an automated individual decision, namely the right not to be subject to a decision taken solely on the basis of automated processing activities, including profiling, which produces legal effects concerning the data subject or similarly affects him to a certain extent significant;

• • the right to address the National Supervisory Authority for Personal Data Processing or the competent courts, to the extent you consider necessary.

For any additional questions regarding the way personal data is processed and to exercise your rights mentioned above, please contact the email address: contact@drdianagheorghe.ro.

I. General information The confidentiality of your personal data is one of the main concerns of DENTAL ARCHITECT CLINIC S.R.L., headquartered in Sat Scurtesti Com. Vadu Pasii, Str. Principala, No. 240, Scurtesti, as data controller. This document aims to inform you about the processing of your personal data, in the context of using the website www.drdianagheorghe.ro. (the “Site”)

II. Categories of personal data processed II.1. If you are a client of the Site, DENTAL ARCHITECT CLINIC S.R.L. will process your personal data, such as name and surname, telephone number, e-mail address, billing address, delivery address, data relating to the way you use the Site, for example your behavior/preferences/habits within DENTAL ARCHITECT CLINIC S.R.L., as well as any other categories of data that you provide directly in the context of creating a user account, in the context of placing an order through the site or in any other way resulting from the use of the Site. If you use your Facebook or Google account to create a user account on the Site, DENTAL ARCHITECT CLINIC S.R.L. will process the following public profile data displayed by the respective applications: username, email address. If you choose to create a user account only before completing the order of a product available on the Site, your email address will be requested, based on which an account will be automatically created. If you do not complete the order, the email address and other data provided will not be stored by DENTAL ARCHITECT CLINIC S.R.L. , and the created account will be automatically deleted. your personal data, in the context of using the website www.drdianagheorghe.ro. (“the Site”) II.2. If you are a visitor to the Site, DENTAL ARCHITECT CLINIC S.R.L. will process your personal data that you provide directly in the context of using the Site, such as the data you provide in the contact / questions / complaints section, to the extent that you contact us in this way. III. Purposes and grounds for processing III.1. If you are a client of the Site, DENTAL ARCHITECT CLINIC S.R.L. processes your personal data as follows:

• • for the development of the contractual relationship between you and DENTAL ARCHITECT CLINIC S.R.L. , respectively for taking over, validating, shipping and invoicing the order placed on the Site, informing you about the status of the order, organizing the return of ordered products, etc.

Subject: The processing of your data for this purpose is based on the contract concluded between you and DENTAL ARCHITECT CLINIC S.R.L., defined in the Terms and Conditions. The provision of your personal data is necessary for the execution of this contract. Refusal to provide data may result in the impossibility of carrying out the contractual relations between you and DENTAL ARCHITECT CLINIC S.R.L..

• • for the fulfillment of the legal obligations incumbent on DENTAL ARCHITECT CLINIC S.R.L. in the context of the services provided through the Site, including fiscal obligations, as well as archiving obligations.

Subject: The processing of your data for this purpose is necessary based on legal obligations. The provision of your data for this purpose is necessary. Refusal to provide data may result in the impossibility of DENTAL ARCHITECT CLINIC S.R.L. to comply with its legal obligations and therefore unable to provide you with services through the Site.

• • for marketing activities, respectively for the transmission, via remote communication means (e-mail, sms) of commercial communications regarding the products and services offered by DENTAL ARCHITECT CLINIC S.R.L., through the Site.

Subject: The processing of your data for this purpose is based on your consent, if you choose to provide it You can express your consent to the processing of data for this purpose by checking the appropriate box at the time of account creation, or subsequently, in the My account information section. To unsubscribe from receiving such commercial communications, you can use the option at the end of each email/sms containing commercial communications. In addition, you can unsubscribe by accessing the My Account Information section. Providing your data for this purpose is voluntary. Refusal to provide consent for the processing of your data for this purpose will not have negative consequences for you.

• • for the purpose of carrying out various analyses, reports on the functioning of the Site, creating profiles of consumer preferences, mainly in order to improve the experience offered on the Site.

Subject: The processing of your data for this purpose is based on the legitimate interest of DENTAL ARCHITECT CLINIC S.R.L. to permanently improve the customer experience on the Site. Providing your data for this purpose is voluntary. Refusal to provide data for this purpose will not have negative consequences for you. III.2. If you are a visitor to the Site, DENTAL ARCHITECT CLINIC S.R.L. processes your personal data as follows:

• • for marketing activities, respectively for the transmission, via means of distance communication (e-mail, sms), of commercial communications regarding the products and services offered by DENTAL ARCHITECT CLINIC S.R.L. , through the Site.

Grounds: The processing of your data for this purpose is based on your consent, if you choose to provide it. You can express your consent to the processing of your data for this purpose by completing and checking the appropriate box in the newsletter subscription form available on the Site. To unsubscribe from receiving such commercial communications, you can use the option at the end of each e-mail/sms containing commercial communications. Providing your data for this purpose is voluntary. Refusal to provide consent for the processing of your data for this purpose will not have negative consequences for you.

• • to resolve complaints, claims and to monitor traffic and improve your experience offered on the Site.

Subject: The processing of your data for this purpose is based on the legitimate interest of DENTAL ARCHITECT CLINIC S.R.L. to ensure the proper functioning of the Site, as well as to permanently improve the experience of Site visitors, including by resolving various comments, questions or complaints. Providing your data for this purpose is voluntary. Refusal to provide data for this purpose will not have negative consequences for you. IV. Duration for which we process your data As a principle, DENTAL ARCHITECT CLINIC S.R.L. will process your personal data as long as necessary to achieve the processing purposes mentioned above. If you are a client, we will process your data for the entire duration of the contractual relationship and subsequently in accordance with the legal obligations incumbent on DENTAL ARCHITECT CLINIC S.R.L. (e.g., in the case of financial-accounting supporting documents for which the retention period provided by law is 10 years from the date of the end of the financial year during which they were drawn up). If you are a client and you exercise your option to delete your user account, by email to contact@drdianagheorghe.ro, DENTAL ARCHITECT CLINIC S.R.L. will interpret this action as your option to unsubscribe from receiving commercial communications through which we keep you informed about the products and services offered through the site. In this regard, if you choose to delete your user account, we will no longer send you emails and/or SMS of this kind. However, we would like to inform you that deleting your account will not automatically result in the deletion of your personal data. If you wish to no longer have your personal data processed or if you wish to have your data deleted, you can exercise your rights detailed in point VII below. If you request the deletion of your account, but there is at least one active order on that account, the request to delete the account can only be registered after the delivery of the products and the completion of the last active order. If you withdraw your consent for the processing of data for marketing purposes, DENTAL ARCHITECT CLINIC S.R.L. will cease processing your personal data for this purpose, without affecting the processing carried out by DENTAL ARCHITECT CLINIC S.R.L. based on the consent expressed by you before its withdrawal. V. Disclosure of personal data To fulfill the processing purposes, DENTAL ARCHITECT CLINIC S.R.L. may disclose your data to partners, third parties or entities that support DENTAL ARCHITECT CLINIC S.R.L. in carrying out the activity through the Site (for example, courier companies, IT service providers), or to central/local public authorities, in the following exemplary cases listed:

• • for the administration of the Site;

• • in situations where this communication would be necessary for the award of prizes or other facilities to the persons concerned, obtained as a result of their participation in various promotional campaigns organized by DENTAL ARCHITECT CLINIC S.R.L. through the Site;

• • to maintain, personalize and improve the Site and the services provided through it;

• • to perform data analysis, testing and research, monitor usage and activity trends, develop security features and authenticate users;

• • to send commercial marketing communications, under the conditions and limits provided by law;

• • when the disclosure of personal data is provided by law, etc.

VI. Transfer of personal data Personal data provided to DENTAL ARCHITECT CLINIC S.R.L. will not be transferred outside Romania. VII. Your rights Under the conditions provided by the legislation on the processing of personal data, as data subjects, you have the following rights:

• • the right to information, namely the right to receive details regarding the processing activities carried out by DENTAL ARCHITECT CLINIC S.R.L., as described in this document;

• • the right to access data, namely the right to obtain confirmation from DENTAL ARCHITECT CLINIC S.R.L. regarding the processing of personal data, as well as details regarding the processing activities such as the manner in which the data are processed, the purpose for which the processing is carried out, the recipients or categories of recipients of the data, etc.;

• • the right to rectification, namely the right to obtain the correction, without justified delay, by DENTAL ARCHITECT CLINIC S.R.L. of inaccurate/unjustified personal data, as well as the completion of incomplete data; The rectification/completion will be communicated to each recipient to whom the data have been transmitted, unless this proves impossible or involves disproportionate effort.

• • the right to erasure of data without undue delay (“right to be forgotten”), where one of the following reasons applies:
    • they are no longer necessary for the purposes for which they were collected or processed;
    • where consent is withdrawn and there is no other legal basis for the processing;
    • where the data subject objects to the processing and there are no overriding legitimate grounds;
    • where the personal data have been processed unlawful;
    • where the personal data must be erased for compliance with a legal obligation
    • • the personal data were collected in connection with the provision of information society services in accordance with Union law or national law to which the controller is subject.

It is possible that, following the request for erasure of the data, DENTAL ARCHITECT CLINIC S.R.L. to anonymize these data (thus depersonalizing them) and to continue processing them for statistical purposes under these conditions;

• • the right to restriction of processing to the extent that:
    • the person contests the accuracy of the data, for a period that allows us to verify the accuracy of the data;
    • the processing is unlawful and the data subject opposes the erasure of the personal data, requesting instead the restriction of their use;
    • the operator no longer needs the personal data for the purposes of the processing, but the data subject requests them for the establishment, exercise or defense of a right in court; or
    • • the data subject has objected to the processing (other than direct marketing), for the period of time in which it is verified whether the legitimate rights of the operator prevail over those of the data subject. the right to data portability, namely (i)

• • the right to receive personal data in a structured, commonly used and easily readable format, as well as (ii) the right to have these data transmitted by DENTAL ARCHITECT CLINIC S.R.L. to another data controller, to the extent that the conditions provided by law are met;

• • the right to object – with regard to processing activities, can be exercised by submitting a request as indicated below;
    • at any time, for reasons related to the particular situation of the data subject, that the data concerning him/her be processed on the basis of the legitimate interest of DENTAL ARCHITECT CLINIC S.R.L. or on the basis of the public interest, except in cases where DENTAL ARCHITECT CLINIC S.R.L. can demonstrate that he has legitimate and compelling reasons which justify the processing and which prevail over the interests, rights and freedoms of the data subjects or that the purpose is the establishment, exercise or defence of a right in court;
    • • at any time, free of charge and without any justification, that the data concerning him are processed for direct marketing purposes.

• • the right not to be subject to an automated individual decision, namely the right not to be subject to a decision taken solely on the basis of automated processing activities, including profiling, which produces legal effects concerning the data subject or similarly affects him to a certain extent significant;

• • the right to address the National Supervisory Authority for Personal Data Processing or the competent courts, to the extent you consider necessary.

For any additional questions regarding the way personal data is processed and to exercise your rights mentioned above, please contact the email address: contact@drdianagheorghe.ro.