Armina Privacy policy
Last updated: 12 October 2026 · This is a translation for your convenience; the Romanian version is the legally binding one.
In short
- Through the website we only receive what you send us in the appointment request: your name, your phone number and the time slot in which we may call you.
- We do not ask for health information through the website. Symptoms and treatment are discussed by phone and at the practice.
- We do not use cookies, we do not advertise and we do not sell data.
- We delete the request once the appointment has been arranged, at the latest after 30 days.
1. Who is responsible for your data
The data controller is , registered office: , Trade Register no. , tax ID (CUI) (“Armina Dental”, “we”), which runs the dental practice at Strada Abrud 76, Sector 1, Bucharest.
For any question or request concerning personal data: , phone +40 723 972 322. We have not appointed a data protection officer; please send requests to the contact details above.
2. What data we process through the website
a) The appointment request: your name, your phone number and your preferred time for a call, plus the time the request was sent. Nothing more. You also tell us the day and time slot that would suit you. The request is stored on the website's server; a copy reaches us by e-mail and appears as a proposed appointment in the practice's calendar, so that we can call you and confirm the time. Please do not write symptoms, diagnoses or other health information in the request — we do not need them to call you.
b) Server logs. As with any website, the hosting server automatically records incoming requests: IP address, date and time, the page requested and the browser type.
c) The contact channel you choose. If you call us or write to us on WhatsApp from the website, the conversation takes place outside the website; for users in Europe, WhatsApp is provided by WhatsApp Ireland Limited (Meta group), which processes data under its own policy.
d) An anonymous counter. We count how many times per day the contact buttons (“Call”, WhatsApp, “Appointment”) are pressed and how many requests are sent, to know whether the website helps us. Only the daily number is kept: no IP address, no cookie, nothing about the person who pressed the button.
The medical data you give us at the practice (patient record, investigations, treatment) do not pass through the website; we inform you about them separately, at the practice.
3. Why we process data and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Calling you to arrange the appointment you requested | Steps taken at your request before entering into a contract for medical services — Art. 6(1)(b) |
| Website security and abuse prevention (server logs) | Our legitimate interest in protecting the website against attacks — Art. 6(1)(f) |
4. Who else has access to the data
- The web hosting provider, which stores the data on servers in Romania (Cluj-Napoca) and processes it only on our instructions (processor).
- Google (Gmail and Google Calendar), the practice's e-mail and calendar provider, through which we receive the copy of the request and keep our diary (processor).
- The company that technically manages the website (4NET), only as far as needed for maintenance and only on our instructions (processor). In the first weeks after the website's launch (the running-in period), 4NET also receives a copy of the requests, to check that the form works; at the end of the running-in period, the copy stops.
- Public authorities, only where the law requires it.
We do not sell or rent the data and we do not use it for advertising.
5. Transfers outside the European Economic Area
Some services belong to US companies or US groups: Google (the practice's e-mail and the interactive map, the latter only if you open it) and Meta (WhatsApp, only if you use it). The website itself does not load resources from third parties: fonts and images are served from arminadental.ro. Transfers are based on the European Commission's adequacy decision on the EU–US Data Privacy Framework (Art. 45 GDPR), under which these companies are certified, and, where applicable, on the standard contractual clauses approved by the Commission (Art. 46 GDPR).
6. How long we keep the data
- Appointment requests: unconfirmed requests are deleted automatically after at most 30 days — from the server, from the website's mailbox, from the calendar and from the practice's e-mail. If the appointment is confirmed, it stays in the practice's diary, like any appointment made by phone.
- Server logs: archived monthly and deleted automatically, as a rule after at most two months.
- The hosting provider's backups are overwritten periodically; a deleted record also disappears from them at the next rotation.
7. Your rights
You have the right of access to your data (Art. 15 GDPR), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20) and to object to processing based on legitimate interest (Art. 21).
For any of them, write to us or call us using the details in section 1. We reply within one month; for complex requests this may be extended by two further months, in which case we will let you know (Art. 12(3)). Exercising your rights is free of charge. We may ask you to confirm your identity, so that we do not give your data to someone else.
8. Complaints to the supervisory authority
If you believe your data are not being processed correctly, you may contact the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP): B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, postal code 010336, Bucharest · phone +40 318 059 211 / +40 318 059 212 · anspdcp@dataprotection.ro · www.dataprotection.ro. Please write to us first; in most cases we can resolve the matter directly.
9. Do you have to give us your data?
No. Without a name and phone number, however, we cannot call you back — you can always call us directly. We do not take automated decisions and do not create profiles. Requests for children are sent by a parent or guardian.
10. How we protect the data
The website uses encrypted connections only (HTTPS). Requests are stored on the server outside the website's public area, with restricted access.
11. Changes
The date of the last update is shown at the top of the page. If we change the way we process data in an essential way, we will announce it on the website before it applies.