GDPR
For the purposes of this information note, Clinica Cosmedica, through the legal entity SC CHE COSMEDICA SRL is a personal data operator. Below you will find information about our identity and contact details. Also below you can find the contact details of the data protection officer at the Cosmedica Clinic.
Our contact details
Full name: SC Che Cosmedica SRL
Headquarters address: 52 George Cosbuc Street, Baia Mare, Maramures County.
Phone number: 0262 219 521 or 0753 042 234
Email address: office@faloplastie.ro
Contact details of our data protection officer (this is the person you need to contact in connection with any issues regarding the protection of your personal data)
First and last name: Emanuel Bonat
Correspondence address: 52 George Cosbuc Street, Baia Mare, Maramures County.
Email address: office@faloplastie.ro
The basis for the processing of your personal data is a legal one, the processing being necessary for the provision of the investigations that you want to do in the Cosmedica Clinic or for the development / conclusion and execution of a contract to which you are a party. By your request to carry out investigations and procedures within the Cosmedica Clinic, you express your consent for your data to be taken over / processed and stored according to the specific legal provisions in the field of health.
What data do we process?
The personal data about you that we will process are data obtained directly from you or resulting from the provision of services at the Cosmedica Clinic and include the following categories of data:
Medical data (sensitive personal data), such as: symptoms; previous illnesses; past tests and medications; blood group; investigations and other services you access at the Cosmedic Clinic; the results of our investigations; the treatment we prescribe you; the doctor you went to; medical recommendations; data from the hospital medical record, including data about your family’s medical history; biometric data; other information you provide to us about your family members and your family relationships.
Personal details , such as: name; first name; sex; date of birth / age; citizenship; video recordings (in our premises where we have CCTV video surveillance cameras installed – where they exist, they are indicated by visible signs); personal numerical code (CNP); the rest of the information in your identity card (including date of issue, date of expiry of the document, place of birth).
Contact details , such as: home address / residence; mobile / landline phone number; fax number; email address.
Payment details , such as: billing address. bank account or bank card number / IBAN code; name and surname of the holder of the bank account or bank card (may be different from you if someone else paid an invoice in your name and for you); the date from which the bank card is valid; bank card expiration date.
Professional details , such as: employer; position; employee brand; ID number.
Insurance details , such as: insured / uninsured, insurer (in the case of private insurance).
Opinions and views (may include sensitive data), such as: any opinions and views you send us or any opinions and views you publicly post about us on social media or which you make known on other public channels.
Purchasing and interaction data with us , such as: records of your interactions with us. details regarding the history of your purchases from us.
Location data , such as where you are or where you are within a certain time frame (if you use our location-enabled apps and have these options enabled).
As shown in the list above, you may provide us with information about other people – for example, the medical history of your relatives who are suffering from the same medical condition as you. When it relates to identified or identifiable persons, we will treat this information as personal data of those persons and provide them with the necessary protection. However, we will strictly abide by our obligation of professional secrecy (including medical secrecy) with you, and we will not inform such persons of such processing in order to comply with our obligation of professional secrecy (including medical) with you.
For the purposes of which we process your personal data?
The purposes for which we process personal data about you are as follows:
Providing medical services to you . Provision of medical services; registration of medical services provided, including the provision of promotional services or information about our promotions; communication with you about the services of the Cosmedica Clinic; identification of you and the services provided; your information
Marketing communications . Communicating with you by any means (for example, email, mobile or landline phone, text messages (SMS), mail, messages sent on social platforms or in person) news about the medical services available in the Cosmedica Clinic, subscription to the newsletter or providing other information that may interest you.
Managing our communications and IT systems (information technology). Management of our communication systems; managing our IT security; performing security audits on our IT networks, issuing reports to competent institutions or repairing system errors.
Fulfilling our legal obligations . Fulfilling our legal obligations regarding archiving, health, security, record keeping and other obligations imposed on us by law.
Financial management . Issuance of vouchers, invoices and receipts to you; receiving payments from you, including recording payments made by another person on your behalf; refunding money to you; sending notifications; sending to court; preparation of financial / operational reports, activity reports and issuance of financial statements / contracts.
Dispute resolution . Formulation of claims and defenses before public authorities and other entities that resolve disputes.
Surveys : Conduct surveys and ask questions in order to get your opinion on our services.
Improving your products and services . Identify potential problems with our existing services in order to improve them (including by conducting audits); testing the improvements made to our services or our new services; resolving your complaints.
We will store your data for a period of 6 months to 100 years in the case of medical documents. To store your data (in electronic format), we use our own servers or those of other companies specialized in electronic archiving.
Apart from the purpose for which they were taken, your data may be processed out of the need to comply with a legal obligation to which we are subject, as for example in the case of reporting to the competent health authorities, to carry out any checks carried out by legal authorities. , in the case of accounting requirements, etc. The retrieved data is to be stored for the period required by specific health laws. Cosmedica Clinic does not process the data excessively, does not outsource access to it to unauthorized third parties. According to specific health regulations, the medical history cannot be deleted.
The processing of personal data by Clinica Cosmedica is intended to be done only for the purpose for which your data was taken, without being processed and for a secondary purpose that is incompatible with the main purpose for which your personal data is initially collected. However, if this happens, we understand to notify you directly, and if this is not possible, the announcement will be made through the company’s website.
The data collected are adequate, relevant and limited to what is strictly necessary for the performance of the medical act / provision of the medical service by the Cosmedic Clinic.
We try to limit the processing of your personal data to the size, size and frequency that are necessary for the purposes of processing and for the purpose for which they were provided.
Your personal data is transferred from and to third parties who process personal data on our behalf at the Cosmedica Clinic. Depending on the purpose for which you provided us with your data, they can be accessed by various departments: accounting, sales, human resources, call center, laboratory, County or National Health Insurance Houses, being stored only in Romania .
Disclosure of your personal data to our proxies is based on written contracts or a legal basis.
If in the future we will disclose personal data to another recipient, then we will inform you about the time of disclosure and the names of the recipients directly, and if this is not possible, we will publish the necessary information on the company’s website.
Your data is located in Romania, we do not transfer your personal data to countries outside the EU and the EEA, or to an international organization.
We protect the processing of personal data against threats to the processing. The security measures we have put in place are likely to ensure the protection of your personal data.
We make sure that our staff is responsible for the secure processing of personal data. We control access to the personal data we hold and control the fact that only those who have the right to access the personal data held may access this data.
We ensure that unauthorized physical access to our personal data is prevented and that we prevent the loss, destruction, damage and alteration of the personal data storage medium.
What are your rights?
Data access right . You have the right to gain access to your data that we process or control or to copies of it; You also have the right to obtain information about the nature, processing and disclosure of this data from us.
Right to rectify data . You have the right to obtain the rectification of the inaccuracies of your data that we process or control.
Right to delete data (“right to be forgotten”). You have the right to obtain from us the deletion of your data that we process or control.
Right to restrict data processing . You have the right to restrict the processing of your data that we process or control.
Right to object . You have the right to object to the processing of your data by us or on our behalf.
Right to data portability . You have the right to obtain the transfer to another operator of your data that we process or control.
Right to Withdraw Consent . In situations where we process your data on the basis of your consent, you have the right to withdraw your consent; you can do this at any time, at least as easily as you initially gave us your consent; Withdrawal of consent will not affect the lawfulness of the processing of your data which we have carried out before the withdrawal.
The right to file a complaint with the supervisory authority . You have the right to lodge a complaint with your personal data processing authority regarding the processing of your data by us or on our behalf.
If we confirm that we process your personal data, you will receive access to it if you request such access. You will also receive a copy of this data if you request such a copy.
You have the right to object to the processing of your personal data. If you exercise this right, we will stop processing your data, but if the processing is based on a legal obligation (eg reporting to / from CAS, CNAS, psychiatry, accounting, etc.), this processing will continue. If you exercise this right before accessing the medical services within your own system, such an objection will lead to the impossibility of providing you with our services, because without actually identifying you you cannot access the services within the Cosmedica Clinic. In this case, you will be notified by the employees / collaborators of the Cosmedica Clinic that your data is not processed and you will not be able to access the medical services within the Cosmedica Clinic. No refund of any costs paid will be applicable.
You have the right to the rectification of your personal data. We will rectify your personal data that we process if it is inaccurate or incomplete and you request its recovery or completion.
You have the right to have your personal data deleted. At your request, we will delete your personal data that we process without undue delay, if the data is no longer necessary for the purposes for which it was collected, or we will process your data on the basis of a legitimate interest over which your objection prevails. basis for processing.
You can send your request regarding the protection of your personal data to the e-mail address office@faloplastie.ro.
You will receive our response to your request at the e-mail address you provide or, in the absence of an express indication, at the address used to submit the application. Your request will be processed within 30 days of receipt, unless it takes longer to respond, in which case we will notify you of any delay.
For more information you can contact the National Authority for the Supervision of Personal Data Processing.
If a change in this information note occurs, the new version will be published to the same web address. Changes are not communicated by email.
We are a Romanian entity that offers services in Romania to Romanian residents, therefore the applicable law is Romanian law.
This information note is elaborated under Law no. 677/2001 (which implements Directive 95/46 / EC) and will be dynamically adapted to the provisions of the General Regulation on Data Protection, applicable from 25 May 2018.
The content of this information note is purely informative and does not affect your rights under the law. We will do our best to facilitate your exercise. Thank you for your understanding and we assure you of all our support and availability to properly implement the legal provisions in the field of health.
