Gynera Clinic is a personal data operator, registered with the National Authority for Supervision of Personal Data Processing under no. 19963.
From 25 May 2018, the European Regulation 2016/679 on the processing of personal data and the free movement of such data became applicable. Its main purpose is to increase the level of protection of personal data and create a climate of trust that allows each person to control their own data.
We consider ensuring the right to personal data protection as a fundamental commitment and, therefore, we will dedicate all necessary resources and efforts to process personal data in full compliance with the provisions of Regulation 2016/679 on data protection and any other applicable legislation on Romania’s territory. As one of the essential principles of this legal framework is transparency, we want to inform you about how we collect, use, transfer and protect personal data when you interact with us in connection with our services, including through the website www. .gynera.ro and the other official online communication media of the Gynera Clinic.
Designates any information (any sequence of characters, signs, numbers or letters) regarding an identified or identifiable natural person (hereinafter referred to as the person concerned). An identifiable natural person is considered to be a natural person who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, an online identifier, or to several specific elements of his own. his physical, physiological, genetic, mental, economic, medical identity.
What personal data do we process?
The personal data we process are mainly identification data (name, CNP, identity document, date of birth), medical data, financial data (for electronic payments by card or bank transfer), demographic data (to identify risk factors and scientific analysis), email or postal address, telephone number, other personal data that we collect directly or from other sources when the patient uses our services or when we conclude contracts with collaborators or authorities.
How do we process personal data?
We process personal data only for specified, explicit and legitimate purposes, such as providing personalized healthcare and quality services, identifying people we interact with through the media, for scientific research, statistical analysis, reporting and data archiving. medical according to the legal requirements, the improvement and development of the products and services we offer. The processing of personal data is always based on the execution of medical services requested by the patient, the execution of contracts concluded with collaborators or authorities, the need to comply with a legal obligation, our legitimate interest or a major public interest or, as the case may be, his consent. the option explicitly manifested in this regard.
The situations in which we process personal data are the following:
for the provision of medical services or for the realization of the object of the contract for the provision of medical services;
in connection with the management of contracts for the provision of medical services or the management of medical services provided;
in connection with a legal obligation of the clinic resulting from the law or order of a public authority.
for informing and promoting the actions of the clinic, in accordance with its purpose;
performing statistical analyzes and scientific research;
assessments of certain personal aspects related to the patient’s health
The processing of personal data is done in a confidential, legal, fair and transparent manner.
Access to personal data is strictly limited to staff and partners who have the necessary authorization and clearly defined need for the use of data.
Do we communicate personal data to other recipients?
In order to provide very good quality services, in order to fulfill our legal obligations or for other legitimate purposes, it is possible to transmit personal data to authorities and partner companies, but only for the purposes mentioned and only on the basis of a confidentiality commitment from them. , which guarantees that this data is kept secure and that the provision of this personal information is made
according to the legislation in force, as follows: specialized medical service providers (medical laboratories, medical units or authorized medical staff), partners who provide support and maintenance of the database and digital infrastructure, payment / banking service providers, service providers courier and other suppliers / collaborators with whom we have contractual relations in connection with medical and communication activity.
Personal information may also be provided to public authorities, judicial bodies, notary offices, consultants, police and other competent bodies, based on and within the limits of legal provisions, as a result of expressly formulated requests and ensuring that we establish adequate guarantees for protection of personal data.
How long do we process personal data?
Personal data are processed throughout our professional or contractual relationship and, after its completion, at least for the period imposed by the legal provisions applicable in the field, including, but not limited to, the provisions on archiving. The legal archiving period for critical information in the field of reproductive medicine is currently at least 30 years.
How is processing security ensured?
Personal data is processed securely, maintaining adequate technical measures to protect it against accidental or illegal destruction or loss, alteration, disclosure or unauthorized access, as well as against other forms of illegal processing.
What are your rights and how can they be exercised?
The right to information – you can request information on personal data processing activities;
Right to rectification – you can modify or inaccurate personal data;
The right to delete data – you can obtain the deletion of data, if their processing was not legal or in other cases provided by law;
The right to restrict the processing – you can request the restriction of the processing in case you contest the accuracy of the data, as well as in other cases provided by law;
Right of opposition – you may object to the processing of data based on our legitimate interest;
The right to data portability – you may receive, under certain conditions, the personal data you have provided to us, in a format that can be read automatically or you can request that the data be transmitted to another operator;
The right to file a complaint – you can file a complaint regarding the way of processing personal data at the National Authority for Supervision of Personal Data Processing;
Right of withdrawal of consent – in cases where the processing is based on your consent, you can withdraw it at any time. Withdrawal of consent will have effects only for the future, the processing performed prior to the withdrawal remaining valid;
Additional rights related to automatic decisions: you can request and obtain human intervention regarding the respective processing, you can express your own point of view on it and you can challenge the decision.
To keep personal data up to date, we recommend that patients and staff be informed of any changes or discrepancies.
In order to exercise these rights, it is sufficient to send a written request to our headquarters or to the email address firstname.lastname@example.org
The refusal to provide personal data, as well as the non-observance of the legal obligations for processing and archiving medical data may have as a consequence the impossibility of personalizing the medical services, or even the impossibility of providing these services.
Who are we and how can you contact us?
Bucharest, Str. C. Aricescu nr 8, Sector 1,
Tel: +40 372 401 998,
Fax: +40 311 065 708
The Data Protection Officer may be contacted if there are any questions regarding any aspect related to the protection of personal data, by sending a request to the contact details mentioned above.
You will be able to find the complete and permanently updated information regarding the processing of personal data both on the website and at our headquarters.
You can contact us at any time for more details, using the contact details mentioned above.