Privacy
policy.

01 / Data controller

Who processes the data.

The data controller is MEDIC LEGIST CHIRIAC I. SERGHEI, Romanian tax identification number 52505758, represented by Dr Serghei Chiriac.

Questions about data protection may be sent to sergheichiriac@yandex.com or addressed by telephone at +40 762 402 072.

02 / Data and sources

Data that may be processed.

• contact and identification data provided voluntarily, such as name, email address and telephone number;
• the content of the enquiry and the information needed to assess whether the requested service can be provided;
• after the scope and appropriate channel are confirmed, medical documents and health data strictly relevant to the requested service;
• data required for appointments, performance of the service, invoicing and compliance with legal obligations;
• limited technical data, such as the IP address and access information, processed by the hosting provider to deliver and secure the website.

Important: do not send medical documents, a Romanian personal identification number or other sensitive data in your first message. Such data should be sent only after their necessity and the appropriate channel have been confirmed.

03 / Purposes and legal bases

Why the data are used.

• to respond to an enquiry and take steps before entering into a contract, under Article 6(1)(b) GDPR;
• to arrange and provide the requested professional service, on the basis of the contract and applicable professional obligations;
• for invoicing, record-keeping and compliance with legal obligations, under Article 6(1)(c) GDPR;
• to secure communications, prevent abuse and protect legitimate rights, under Article 6(1)(f) GDPR.

Health data are processed only where necessary for the requested professional activity, subject to professional secrecy and, where applicable, Article 9(2)(f) and (h) GDPR.

04 / Recipients

Who may receive the data.

Data are not sold or used for advertising. To the extent necessary, they may be accessed by providers of website hosting, communications, IT, accounting or other support services. If the visitor accepts statistical cookies, usage data are also processed through Google Analytics. Data may also be disclosed to authorities or other recipients where required by law or by a legitimate request connected with the service.

Providers are selected so that processing benefits from appropriate safeguards. If an operation involves transfers outside the European Economic Area, the protection mechanisms required by the GDPR are used.

05 / Retention

How long data are retained.

Initial messages and enquiries that do not become a case or contract are retained for no more than 12 months from the last communication and are then deleted, unless retention is necessary to establish or defend a legal claim or comply with a legal obligation.

For accepted services, data and documents are retained for the duration required to perform the service and thereafter for the applicable legal, tax, accounting and professional periods. Technical security data are retained for limited periods according to the needs of website protection and operation. Statistical data are retained according to the Google Analytics property settings and applicable Google policies.

06 / Your rights

Control over your data.

Subject to the GDPR, you may request access, rectification, erasure, restriction, portability, or object to processing based on legitimate interests. Where processing is based on consent, consent may be withdrawn without affecting processing carried out before withdrawal.

Requests may be sent to sergheichiriac@yandex.com. You may also lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing ↗.

07 / Cookies and analytics

Google Analytics only
with the visitor's consent.

The website uses Google Analytics 4 to obtain general statistics about page use. The Analytics tag is loaded only after “Accept statistics” is selected, based on consent under Article 6(1)(a) GDPR. If statistical cookies are declined, the tag is not loaded and statistical data are not sent to Google Analytics.

After consent, data may include pages viewed, approximate time and duration of the visit, scrolling, outbound clicks, device and browser type, general traffic source and approximate location. Analytics is not configured to transmit names, contact details, medical documents or other sensitive data; Google Signals and advertising personalisation are disabled.

Google Analytics uses first-party cookies, including _ga and _ga_<ID>, to distinguish users and retain session state. Further information is available in Google's GA4 cookie documentation ↗ and Google's privacy policy ↗.

The choice is stored locally in the browser and may be changed at any time through the “Cookie settings” control displayed on the website. Withdrawal stops subsequent collection and removes Analytics cookies accessible to the website.

08 / Website and automated decisions

A purely informational website.

The website does not contain a contact form, create user accounts or use personal data for profiling, personalised advertising or solely automated decision-making.

This policy may be updated if website functions, service providers or legal requirements change. The current version is always published at this address.