Dentelo Clinic SRL, headquartered in Cluj-Napoca, Str. Nicolae Steinhardt 12, Office D, postal code 400485 registered in the Single Register of Medical Practices under no. 3375.01 with Single Registration Code 42006882 ("Medical Practice"), as author, owner and administrator of the website dentelo.ro ("the website") and as Operator within the meaning of the General Data Protection Regulation no. 679/2016 ("RGPD") processes personal data, committing to this end to respect the right to privacy of persons accessing the website and to ensure adequate protection of the processing of personal data for all persons using the website.
With regard to certain data processing operations (e.g. when the categories of data processed and the means and purposes of the processing are decided together with other entities), the Medical Office acts as a joint controller in accordance with the GDPR. We indicate to you in this Policy the relevant information regarding these operations/situations.
2. How to contact us:
You can contact us at any time for additional information and clarifications regarding the processing of your personal data using the following contact details:
Postal address: Cluj-Napoca Municipality, 12 Nicolae Steinhardt Street, Office D, postal code 400485
Email address: contact@dentelo.ro
Phone: +40773321560
The purpose of this Personal Data Processing Policy ("Policy") is to explain to you what personal data we process through the website, why we process it and how we do it.
Thus, within this Policy you will find detailed information regarding:
· the categories of persons whose personal data are processed through the website;
· the personal data processed;
· the purposes and manner in which we process your personal data;
· the legal basis on which we rely when processing your personal data;
· the retention periods of your personal data;
· the people with whom we share your data, as well as the purpose for which we disclose it;
· your rights as a data subject, and how you can exercise these rights.
In cases where the provision of data by you and, implicitly, their processing, is expressly indicated in the Policy as necessary (for example: for the execution of contractual obligations, the fulfillment of our obligations - including legal ones, or the realization of a legitimate interest), your failure to provide the respective personal data will lead to the impossibility of providing the website service/functionalities. In these cases, we will not be liable if you are unable to benefit from the website services/functionalities.
If any aspects of this document are unclear, please report these situations to us using the contact details provided in the "HOW TO CONTACT US" section. We will try to resolve any situation reported, our goal being for you to have all the necessary information and to understand the conditions under which the Medical Office processes your personal data.
The provisions of this Policy apply with priority over other provisions in any other documents, available and/or communicated by the Medical Office regarding the website and which concern aspects associated with the processing of personal data through the website.
This Policy applies to the following categories of persons:
· Visitors – respectively the people who access the website;
· Users – respectively the people who access the website (as a visitor or user) and make an appointment through it or by telephone;
Although you can access the content of the website without providing personal data, except for cookies (in this regard, please consult the Cookie Policy on the website), if you enter personal data online on the website, the Medical Office may subsequently use it for the purposes stated in this Policy.
! We expressly warn visitors and users that the use of the website by persons under the age of 18 is prohibited.
We process data of persons under the age of 18, only with the consent of the legal representative, for the optimal performance of the services contracted by the legal representatives of minors. In the event that an event occurs that results in the processing of personal data of children under the age of 18 in situations other than those presented in this paragraph, we will cease processing such data as soon as we become aware of such a fact.
We may receive information about individuals under the age of 18 through fraud or deception by a third party. If we are notified of this, we will verify the information and, where required by law, we will promptly obtain the consent of the legal representative to use this information or, if we cannot obtain such consent, we will delete the information from our servers.
If you would like to notify us of the receipt of information about persons under the age of 18, please do so by sending an email to contact@dentelo.ro.
5.1 Accessing the website
Processed personal data:
When the visitor/user interacts with the website, certain information is automatically transferred between the device from which the website is accessed and the third-party server hosting our website, which automatically records the information thus transferred.
Depending on how you access the website, these may include: the IP address of the internet-connected device you use to access the website, the pages accessed during your visit to the website, the information requested, the date and time of the request, the source of access to our website (for example, the website or the URL (link) that referred you to our website), the browser version and the device's operating system.
5.2. Communication with the Medical Office (sending questions, requests, complaints)
Depending on the communication channel through which you contact us, we process certain personal data in order to receive and manage your questions, requests and complaints, as detailed below.
5.2.1. By e-mail
Processed personal data:
When you send a message to the email address associated with Customer Service correspondence, as displayed on the website, we collect your email address and any other information you provide in that email, such as: your name, phone number, and information contained in any signature block in the email.
5.2.2. Through the contact form available on the website
Processed personal data:
When you contact us using the contact form, we collect: name, surname, email, phone number. We also collect any other information you provide us when you fill out the contact form in the field containing your message.
If you do not provide the information requested by the contact form, you will not be able to submit it and we will not receive your request, therefore we will not be able to respond.
5.2.3. By phone call
Processed personal data:
When you contact us by phone, we collect your phone number and any information you provide to us during your conversation with us.
The medical office records the phone calls you make, so we can also process your voice (recording telephone conversations), only with your prior consent.
If you do not consent to the processing of your voice, we will not be able to continue the phone call and consequently, we will not be able to answer your questions.
5.2.4. By mail
Processed personal data:
When you contact us by mail, we will collect your first and last name, mailing address, and/or any other information found in the mailed communication.
If you do not provide your mailing address and identification data, although we will process your request, we will not be able to get back to you with a response to your request.
5.3. Making an appointment
Visitors/Users of the website have two ways available on the website to make an appointment for one of the services offered by the Medical Office: by phone, at the contact number or via the online appointment form. In order to make an appointment for the provision of medical services, we need personal data (your data or the data of the person for whom you are making the appointment, for example – a minor).
5.3.1. Through the website – online appointment form
5.3.1.1. Processed personal data:
When you make an appointment on the website, as a User, we collect: name, surname, telephone number, e-mail and any additional information you provide regarding the appointment. If you do not provide this information, you will not be able to submit the appointment form and consequently, you will not be able to make an appointment through the website.
If you are making the appointment for another person, for example – a minor, we will collect your contact details and the minor's identification details, as well as any other information regarding the appointment, as provided by you, directly and voluntarily.
5.3.1.2. Special categories of personal data
Special categories of personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning the sex life or sexual orientation of a natural person.
In this regard, we will collect and process sensitive information, part of the special categories of personal data, which will be provided to us directly by you, voluntarily, when making an appointment, such as:
· Personal health data (for example: conditions, investigations, interventions, previous treatments);
5.3.2. By phone
5.3.2.1. Processed personal data:
When you contact us by phone to make an appointment, we collect: name, surname, age, telephone number and any other information you provide in addition to the appointment.
The medical office records the phone calls you make, so we can also process your voice (recording telephone conversations), only with your prior consent.
If you do not consent to the processing of your voice, we will not be able to continue the phone call and consequently, we will not be able to answer your questions.
If you are making the appointment for another person, for example – a minor, we will collect your contact details and the minor's identification details, as well as any other information regarding the appointment, as provided by you, directly and voluntarily.
5.3.2.2. Special categories of personal data
Special categories of personal data personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning the sex life or sexual orientation of a natural person.
In this regard, we will collect and process sensitive information, part of the special categories of personal data, which will be provided to us directly by you, voluntarily, when making an appointment, such as:
· Personal data regarding health status (for example: conditions, investigations, interventions, previous treatments);
5.4. Defense of the rights of the Medical Office
Processed personal data:
In order to defend the rights of the Medical Office, we may process the following personal data: data related to the client file, invoices, orders placed and the execution of purchases/orders, as well as other personal data that we hold based on this Policy and whose processing is necessary to achieve the intended purpose.
When you visit the website, we may use cookies and/or similar technologies, files that allow us to recognize the user's equipment and display the website appropriately, which can be adapted to the visitor's individual preferences.
The main purpose of using cookies is to help you have an improved browsing experience and also for advertising purposes, in order to be able to offer you personalized content tailored to your interests and preferences. Therefore, to the extent that you have consented to the use of different categories of cookies or other similar technologies, we will use them to provide you with a personalized and relevant browsing experience on the website and to understand how you interact with our advertising content.
For more information about the use of cookies on the website and the purposes for which they are used, as well as the possibilities to control and/or disable cookies, please see the Cookie Policy on the website.
The processing of data through some of the cookies is based on your consent. If you do not consent to the placement of these cookies, you can use the website without any negative consequences for you.
Your personal data may be disclosed, strictly to the extent necessary for the purposes detailed above or in cases where this is required by law, to the following categories of recipients:
· competent authorities (e.g.: tax authorities, health authorities, courts);
· companies empowered to perform processing on our behalf and for us, such as our service providers (IT systems maintenance services, web hosting service providers, etc.);
· service providers related to the provision of medical services (e.g. analysis laboratories);
· external consultants (e.g. lawyers, specialists in the fields of audit, legal, tax consulting, accounting);
· third parties - involved in providing services related to cookies and similar technologies, as detailed in the Website Cookie Policy, available on the website;
· third parties expressly indicated by you;
· third-party acquirers, to the extent that our business would be transferred (in whole or in part) and the data of the data subjects would be part of the assets subject to such a transaction;
· other service providers (for example, marketing service providers);
The medical office will process personal data for the duration of the purposes specified in this Policy, as well as subsequently in order to comply with applicable legal obligations.
As a principle, the Medical Office will process personal data for the entire duration of the contractual relationships, and subsequently the personal data will be stored for the periods applicable to the various types of personal data, established in accordance with the applicable legal provisions, respectively for the period necessary to fulfill the legal obligations incumbent on the Medical Office (for example, for medical data, according to the legislation on archiving medical files; in the case of financial-accounting supporting documents for which the retention period provided by law is 5 years calculated from July 1 of the year following the end of the financial year in which they were drawn up).
If the processing takes place on the basis of your consent, if you withdraw your consent for the processing of the data and there are no other legal grounds for the processing (e.g. the existence of a legal obligation, the existence of a contractual relationship, the legitimate interest of the Medical Office) or you object to the processing and there are no overriding legitimate and compelling reasons for the processing, the Medical Office will cease processing your personal data.
After the completion of the storage period according to the above provisions, the Medical Office may order the anonymization of this data, thus depersonalizing it and continuing to process the anonymous data for statistical purposes.
We will not transfer your personal data outside the European Economic Area. In exceptional circumstances and only if necessary, the transfer of your personal data outside the European Economic Area will only be made with the application of appropriate protection measures in accordance with the specific legal provisions on the protection of personal data and with your appropriate information.
We inform you that we have implemented appropriate technical and organizational measures to ensure an appropriate level of security for the personal data processed. When assessing the appropriate level of security, we take into account in particular the risks posed by the processing of personal data, generated in particular by accidental or unlawful destruction, loss, alteration, unauthorized disclosure of or access to personal data transmitted, stored or otherwise processed.
We also ensure that access to personal data is granted to our staff only to the extent necessary to perform their job duties.
To the extent that the fulfillment of some of the above processing purposes will be achieved through the use of IT techniques that do not involve the presence of a human factor, which will lead to the production of legal effects on you or which may significantly affect you, the processing will be based on your express consent for this purpose or another legal basis, in accordance with legal requirements. In this regard, this document will be updated whenever necessary to ensure your appropriate information.
For details regarding automated decision-making processes, you can contact the following address: contact@dentelo.ro
In the context of the processing of your personal data, you have the following rights:
(a) Right to access
Your right to obtain from the Medical Office confirmation as to whether or not your personal data are being processed and information on the purpose of the processing, the categories of personal data concerned, the recipients and categories of recipients to whom the personal data have been or will be disclosed and the guarantees related to this disclosure, in particular in the case of recipients in third countries or international organizations, the period provided for the storage of personal data, information on the rectification, erasure, restriction and objections regarding your personal data, the right to lodge a complaint with the Supervisory Authority and on the existence of an automated decision-making mechanism, including profiling.
(b) Right to rectification
Applicable if personal data is incorrect or incomplete.
(c) Right to erase
If the personal data is no longer necessary in relation to the purposes set out in this information notice, if you withdraw your consent and there are no other legal grounds for the processing, if you object to the processing and there are no other legal grounds for the processing, if the personal data have been processed unlawfully or must be deleted for compliance with a legal obligation to which the Medical Office is subject.
Note: Some of your personal data may not be able to be deleted due to legal obligations or legitimate interests to continue processing it. Further details on this subject can be provided upon request.
(d) Right to restriction of processing
f you dispute the accuracy of your personal data, the processing of your personal data is unlawful and you oppose the deletion of your personal data, the Medical Office no longer needs your personal data for the purposes presented, but they are requested by you for the establishment, exercise or defense of a right in court, you oppose the processing within the time frame in which it is verified whether the legitimate interest of the Medical Office is superior to your interest.
(e) Right to portability
The right to receive your personal data or the data you have provided to the Medical Office in a structured, commonly used and machine-readable manner, as well as the right to send this data to another operator.
(f) Right to object to processing
Applicable in the case of processing having as legal basis art. 6 para. (1) letter (e) GDPR – processing is necessary for the performance of a task which serves a public interest or which results from the exercise of official authority vested in the controller or (art. 6 para. (1) letter (f) GDPR – processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party.
Applicable unless the Medical Office demonstrates compelling legitimate grounds for processing your personal data that override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.
(g) The right to withdraw your consent
The right to withdraw your consent at any time, where the processing is based on your consent, without affecting the lawfulness of the processing based on consent before its withdrawal.
(h) The right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly affects you, unless such processing is necessary for the performance of a healthcare contract concluded with you, is permitted by law or is based on your explicit consent;
(i) The right to address the courts / to file a complaint with the Data Protection Authority (ANSPDCP) and the right to address the competent courts
If you believe that we are processing your data in violation of the GDPR, you also have the following rights:
i) the right to file a complaint with the ANSPDCP (National Supervisory Authority for Personal Data Processing, headquarters: Bucharest, Bdul Gen. Gheorghe Magheru no. 28-30, sector 1, CP 010336; Phone: +40.318.05.92.11, Fax: +40.318.05.96.02 email: anspdcp@dataprotection.ro, website: www.dataprotection.ro);
ii) the right to take legal action.
If you exercise your rights by electronic means, the Medical Office will transmit the requested information to you through the same means of communication in an accessible format, unless you indicate another means of contact or request us to provide you with the information in another format.
The medical office will make every effort to respond within one month of submitting your request. If processing your request takes longer, we will notify you within the same period of time of the reasons and when we can respond to you.
If we are unable to comply with your request, we will inform you of the reasons, subject to any legal or regulatory restrictions.
The above rights can be exercised at any time. To exercise these rights, except for the right to file a complaint with the ANSPDCP, you can send a written request, dated and signed, to the address Mun. Cluj-Napoca, Str. Nicolae Steinhardt 12, Birou D, postal code 400485 or in electronic format by e-mail to the address contact@dentelo.ro.
Also, if you wish to withdraw your consent for direct marketing purposes, you can use the "unsubscribe" option that is included in each marketing communication.
Latest update: February 2026