For the purposes of this information note, Clinica Cosmedica, through the legal entity SC CHE COSMEDICA SRL, is a personal data operator. You can find information about our identity and contact details below. You can also find the contact details of the data protection officer of the Cosmedica Clinic below.

Our contact details
Full name: SC Che Cosmedica SRL
Registered office address: Str. George Coșbuc, no. 52, Baia Mare, Maramureș County.
Phone number: 0262 219 521 or 0753 042 234
Email address: office@ginecomastie.ro
Contact details of our Data Protection Officer (this is the person you should contact with any issues relating to the protection of your personal data)
First and last name: Emanuel Bonat
Correspondence address: George Coșbuc Street, no. 52, Baia Mare, Maramureș County.
Email address: office@ginecomastie.ro

Basis for processing your data personal is a legal one, the processing being necessary to provide the investigations that you you want to do them within the Cosmedica Clinic or for the development/conclusion and execution of a contract to which you are a party. By your request to carry out investigations and procedures within the Cosmedica Clinic, you express your consent for your data to be retrieved/processed and stored according to the specific legal provisions in the field of health.

Which data of yours do we process?
The personal data relating to you that we will process are the data obtained directly from you or results after the provision of services within the Cosmedica Clinic and include the following categories of data:
Medical data (sensitive personal data), such as: symptoms; previous illnesses; tests and drugs administered in the past; blood group; investigations and other services you access at Clinica Cosmedica; the results of the investigations we carry out on you; the treatment we prescribe for you; the doctor you accessed; medical recommendations; data from the hospital medical record, including data about your family’s medical history; biometric data; other information you give us about your family members and your relationships.
Personal details, such as: name; first name; sex; date of birth/age; citizenship; video recordings (in our premises where we have CCTV video surveillance cameras installed – where they exist, they are indicated by visible signs); personal numerical code (CNP); the rest of the information from your identity document (including date of issue, date of expiry of the document, place of birth).
Contact details, such as: home address / residence; mobile/landline number; fax number; email address.
Payment Details, such as: billing address; bank account number or bank card/IBAN code; the name and surname of the holder of the bank account or bank card (it may be different from you if someone else paid an invoice on your behalf); date from which the bank card is valid; bank card expiry date.
Professional details, such as: employer; position; employee brand; ID number.
Insurance details, such as: insured/uninsured status, insurer (in the case of private insurance).
Opinions and views (may include sensitive data), such as: any opinions and views you transmit to us or any opinions and views you post publicly about us on social networks (social media) or that you make known on other public channels.
Data relating to purchases and interaction with us, such as: records of your interactions with us; details about the history of your purchases from us.
Location data, such as: the place or area where you are or have been for a certain period of time (if you use our applications with location options and have these options enabled).

As you can see from the list above, you may provide us with information about other people – for example, the medical history of your relatives who have the same medical condition as you. When it relates to identified persons or whom we can identify, we will treat this information as personal data of those persons and give them the necessary protection. However, we will strictly respect the professional secrecy (including medical secrecy) obligation we have towards you and we will not inform these people about this processing in order to respect our professional (including medical) secrecy obligation towards you.

Purposes for which we process your personal data?
The purposes for which we process your personal data are the following:
Provision of medical services to you. Provision of medical services; registration of medical services provided, including the provision of promotional services or information about our promotions; communication with you regarding the services of the Cosmedica Clinic; your identification and the services provided; your information
Marketing Communications. Communicating with you by any means (for example, email, mobile or landline phone, phone messages (SMS), mail, messages sent on social media platforms or in person) news regarding the medical services available in Clinica Cosmedica, subscription to the newsletter or otherwise providing information that may interest you.
Managing our communications and IT (information technology) systems. Managing our communications systems; managing our IT security; carrying out security audits on our IT networks, issuing reports to authorized institutions or repairing system errors.
Meeting our legal obligations. Fulfilling our legal obligations regarding archiving, health, security, record keeping and other obligations that the law imposes on us.
Financial management. Issue vouchers, invoices and receipts to you; receiving payments from you including recording payments made by another person on your behalf; the return of sums of money to you; sending notifications; referral to court; preparing financial/operational reports, activity reports and issuing financial/contract statements.
Resolution of disputes. Formulation of requests and defenses before public authorities and other entities that resolve disputes.
Surveys: Conducting surveys and asking you questions in order to obtain your opinion about our services.
Improving products and services. Identifying potential problems with our existing services in order to improve them (including by conducting audits); testing improvements to our services or our new services; solving your complaints.

We will store your data for a period between 6 months and 100 years in the case of medical documents. To store your data (in electronic format), we use our own servers or those of other companies specialized in electronic archiving.

Apart from the purpose for which they were collected, your data they can also be processed out of the need to comply with a legal obligation to which we are subject, for example in the case of reports with the competent authorities in the field of health, in the course of possible controls carried out by the legal authorities, in the case of accounting requirements, etc. The retrieved data is to be stored for the period imposed by the specific laws in the field of health. Clinica Cosmedica does not process data excessively, does not outsource access to them to unauthorized third parties. In accordance with specific regulations in the field of health, the medical history cannot be deleted.

The processing of personal data by Clinica Cosmedica is intended to be done only for the purpose in which your data. have been retrieved, without being processed and for a secondary purpose that is incompatible with the main purpose for which your data personal data are initially collected. If this does happen, we understand to notify you directly, and if this is not possible, the announcement will be made through the company’s website.

The data collected are adequate, relevant and limited to what is strictly necessary for the performance of the medical act/the provision of the medical service by Clinica Cosmedica.

We try to limit our processing of your data. personal data to a size, extent and frequency that are necessary for the purposes of the processing and to fulfill the purpose for which they were provided.

Your data personal data are transferred from and to third parties that process personal data on our behalf and within the Cosmedica Clinic. Depending on the purpose for which you provided us with your data. they can be accessed by various departments: accounting, sales, human resources, call center, laboratory, County or National Health Insurance Companies, being stored only on Romanian territory.

Disclosure of your data personal data to our proxies is based on written contracts or a legal basis.

If in the future we will disclose your personal data to another recipient, then we will inform you about the time of disclosure and the name of the recipients directly, and if this is not possible, we will publish the necessary information on the company’s website.

Your data are located on the territory of Romania, we do not transfer your data. personal data in countries outside the EU and EEA, or to an international organization.

We protect the processing of personal data against threats to the processing. The security measures we have put in place are likely to ensure the protection of your data. personal.

We ensure that our staff are responsible for the secure processing of personal data. We control access to the personal data we hold and we control that only people who have the right to access the personal data we hold can access that data.

We ensure that unauthorized physical access to our personal data is prevented and that we prevent the loss, destruction, damage and alteration of the personal data storage medium.

What are your rights?
Right of access to data. You have the right to obtain access to your data that we process or control or to copies thereof; you also have the right to obtain from us information about the nature, processing and disclosure of this data.
The right to data rectification. You have the right to obtain the rectification of inaccuracies in your data that we process or control.
The right to delete data (“the right to be forgotten”). You have the right to obtain from us the deletion of your data that we process or control.
The right to restrict data processing. You have the right to restrict the processing of your data that we process or control.
The right to object. You have the right to object to the processing of your data by us or on our behalf.
The right to data portability. You have the right to obtain the transfer to another operator of your data that we process or control.
The right to withdraw consent. In situations where we process your data based on your consent, you have the right to withdraw your consent; you can do this at any time, at least as easily as you originally gave us consent; the withdrawal of consent will not affect the legality of the processing of your data that we carried out before the withdrawal.
The right to lodge a complaint with the supervisory authority. You have the right to lodge a complaint with the supervisory authority for the processing of personal data regarding the processing of your data by us or on our behalf.
If we confirm to you that we are processing your personal data, you will be given access to it if you request such access. You will also receive a copy of this data if you request such a copy.

You have the right to object to the processing of your data. personal. If you exercise this right we will stop processing your data, but if the processing takes place on the basis of a legal obligation (for example reporting to/to CAS, CNAS, psychiatry, accounting, etc.), this processing will continue. If you exercise this right before accessing medical services within your own system, such an objection will lead to the impossibility of providing you with our services, because without identifying yourself in real terms you cannot access the services within the Cosmedica Clinic. In this case, you will be notified by the employees/collaborators of the Cosmedica Clinic that your data they are not processed and you will not be able to access the medical services within the Cosmedica Clinic. No refund of any costs paid will be applicable.

You have the right to rectify your data. personal. We will correct your data. personal data that we process if they are inaccurate or incomplete and you request their recovery or completion.

You have the right to have your data deleted. personal. Upon your request, we will delete your data without undue delay. personal data that we process, if the data are no longer necessary to fulfill the purposes for which they were collected or we process your data based on a legitimate interest over which your objection prevails. and there is no other basis for processing.

You can submit your request regarding the protection of your data personal to the e-mail address office@ginecomastie.ro.

You will receive our response to your request. to the e-mail address you indicate or, in the absence of an express indication, to the address used to submit the request. Your request will be processed within 30 days of receipt, unless a longer time is required to respond, in which case we will notify you of any delay.

For more information, you can contact the National Authority for the Supervision of the Processing of Personal Data.

If there is a change to this notice, a new version will be published at the same web address. Changes are not communicated by email.

We are a Romanian entity that offers services in Romania to Romanian residents, therefore the applicable law is Romanian law.

This information note is drawn up pursuant to Law no. 677/2001 (which implements Directive 95/46/EC) and will be dynamically adapted to the provisions of the General Data Protection Regulation, applicable from May 25, 2018.

The content of this information note is purely informative and does not affect the rights that the legislation gives you. We will do our best to facilitate your exercise of them. We thank you for your understanding and assure you of our full support and availability to correctly implement the legal provisions in the field of health.