The processing of personal data and their free movement is governed by Regulation No 679 of 27 April 2016 of the European Parliament and of the Council of the European Union on the protection of individuals with regard to the processing of personal data and on the free movement of such data.
S.C. ULTRAWELLNESS MED S.R.L. and its employees, partners and collaborators, are committed to respecting your personal data and applicable legal provisions regarding privacy and protection of personal data.
S.C. ULTRAWELLNESS MED S.R.L. collects the following categories of personal data: last name, first name, address, personal ID, health data, telephone, email, county/city.
The reason why we process your data
The processing of your personal data is necessary for the purpose of providing medical services, for the purpose of ensuring high standards of quality and safety of services, products, and for the purpose of producing non-proprietary statistical reports. Health data subject to professional secrecy shall also be collected for the same purpose. In the absence of such data, the services requested cannot be provided.
The legal basis for the data processing
The processing of personal data for the purposes above is based on: (A) the performance of the pre-contract in order to provide you the services; (b) the performance of the contract, precisely the providing you the services under conditions of quality and safety; (c) your consent where it is necessary.
Who has access to your data?
The personal data collected are processed and transmitted to S.C. ULTRAWELLNESS MED S.R.L., located in Bucharest, 2 district, 4 Cenuseresei Alley, registered under no. J40/9265/2019, VAT no RO41398648, and its employees, partners or their collaborators, external providers that provide marketing and IT services only during and for the purpose of providing you the services. These data will be stored for the duration of the provision of the services and the performance of the contract between the parties until the termination of the contract. For the purposes set out above, it is possible to communicate your data to our collaborators (employees, lawyers, collaborators, etc.) or to the authorities and public institutions with legal responsibilities for the conclusion and performance of the contract with you (e.g. tax bodies, consumer protection authority).
The data is collected, processed and stored in Romania. Some of the data is stored in digital format, i.e. name, email address, phone number.
If we intend to process your data for another purpose, we will not do so until you are informed about the need for doing so. You will not be subject to a decision based solely on automated processing, including profiling.
The duration of processing
Personal data is stored for processing during the providing you the services. We will actively review your information and, when it is no longer necessary for the purpose for which it was processed, we will delete it, destroy it or archive it.
Data security measures
Keeping the confidentiality of personal information is mandatory for the company and all employees of S.C. ULTRAWELLNESS MED S.R.L. who have access to it directly or indirectly in their activity.
We take all appropriate technical and organizational measures to protect the personal data collected against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access, as follows:
- We ensure that the personal database is only accessed for the fulfillment of contractual obligations;
- We perform a database backup at regular intervals;
- Terminals accessing the personal information database have implemented anti-virus, anti-spam and firewall protection solutions that are regularly updated;
- We implement and/or update contractual provisions on privacy and processing of personal data regarding the obligation to comply with applicable national and international rules and legislation, and by requiring that personal data requests from the entitled persons be met – in relation to any of our partners.
- Specifically, and lawfully, we apply an internal framework of policies and minimum standards at all levels of our society (policies and procedures, it security, etc.) to ensure the confidentiality, security and integrity of your personal data and the way they are processed. These policies and standards are regularly updated to meet current regulations. We never make automatic decisions about you. We regularly review new technologies in the field and, if necessary, apply them to improve our security systems.
The parties shall be obliged to respect the personal data of which they are aware and to process it only for the purpose for which they were provided.
What are your rights?
You have the right of access, intervention, rectification and portability with regard to the data you have provided us, you can limit our processing and even request the deletion of the data. Please note that interference with the data you have provided to us may be such as to prevent the performance of your contract with you. If you also choose to give your consent to certain processing, you have the right to withdraw it at any time.
For the exercise of the rights mentioned in this chapter, you can write a request, dated and signed (1) by post at: S.C. ULTREWELLNESS MED S.R.L., Bucharest, 2 district, 4 Cenuseresei Alley, Contact person: Ana Maria Stoica, MD.
Also, you have the right to complain to the national Supervisory Authority for the processing of personal data if you believe that the processing of your data infringes Regulation No 679 of 27 April 2016 of the European Parliament and of the Council of the European Union on the protection of individuals with regard to what it concerns the processing of personal data and on the free movement of such data.