Skip to content
Staging environment — content is under review before publishing.
 0734 336 847 • programari@identiq.ro
Identiq
  • Home
  • Privacy policy & GDPR

Privacy policy & GDPR

Privacy Policy and Processing of Personal Data (GDPR)

I. General Information

The confidentiality of your personal data is one of the main concerns of the Identiq clinic, a trade name of S.C. TUD MEDICAL S.R.L. with its registered office at Bd. Dacia nr. 85, ap.9A, sector 2, Bucuresti, in its capacity as data controller, hereinafter referred to as "Clinica Identiq".

The purpose of this document is to inform you about the processing of your personal data, in the context of using the website www.identiq.ro ("the Site").

II. Categories of Personal Data Processed

II.1. If you are a client of the site, Clinica Identiq will process your personal data, such as: first and last name, telephone, e-mail address, IP, the date and time of the submission of forms (contact form, etc.), device, operating system, browser, data regarding the manner in which you use the site, for example your behaviour/preferences/habits within the site, as well as any other categories of data that you provide directly in the context of placing a request for an offer through the site or in any other manner resulting from the use of the site: contact form, etc.

II.2. If you are a visitor to the site, Clinica Identiq will process the personal data that you provide directly in the context of using the site, such as the data you provide in the contact/questions/complaints section, insofar as you contact us in this way.

III. Purposes and Legal Grounds of the Processing

III.1. If you are a client of the site, the Identiq clinic processes your personal data as follows:

  • for carrying out the contractual relationship between you and Clinica Identiq, namely for receiving, validating and responding to the request placed on the site, informing you of the status of the request, etc.

Legal ground: The processing of your data for this purpose is based on the request you have submitted to Clinica Identiq. The provision of your personal data is necessary in order to respond to the request submitted.

The provision of your data for this purpose is voluntary. The refusal to give your consent for the processing of your data for this purpose will not have negative consequences for you.

  • for the purpose of carrying out various analyses, reports on the manner in which the site functions, the creation of consumption preference profiles, mainly with a view to improving the experience offered on the site.

Legal ground: The processing of your data for this purpose is based on the legitimate interest of Clinica Identiq to permanently improve the experience of clients on the site. The provision of your data for this purpose is voluntary. The refusal to provide the data for this purpose will not have negative consequences for you.

III.2. If you are a visitor to the site, Clinica Identiq processes your personal data as follows:

  • for marketing activities, namely for the transmission, through means of distance communication (e-mail, sms), of commercial communications regarding the products and services offered by Clinica Identiq, through the site.

Legal ground: The processing of your data for this purpose is based on your consent, if you choose to provide it. To unsubscribe from receiving such commercial communications, you may use the option at the end of each e-mail/sms containing commercial communications.

The provision of your data for this purpose is voluntary. The refusal to give your consent for the processing of your data for this purpose will not have negative consequences for you.

  • for the resolution of grievances and complaints and to monitor traffic and improve the experience offered to you on the site.

Legal ground: The processing of your data for this purpose is based on the legitimate interest of Clinica Identiq to ensure the correct functioning of the site, as well as to permanently improve the experience of the site's visitors, including by resolving various comments, questions or complaints.

The provision of your data for this purpose is voluntary. The refusal to provide the data for this purpose will not have negative consequences for you.

IV. The Period for Which We Process Your Data

As a matter of principle, Clinica Identiq will process your personal data for as long as is necessary to achieve the processing purposes mentioned above.

If you are a client, we will process your data for the entire duration of the contractual relationship and thereafter in accordance with the legal obligations incumbent upon Clinica Identiq (e.g. in the case of financial-accounting supporting documents for which the retention period provided by law is 10 years from the date of the closing of the financial year during which they were drawn up).

If you withdraw your consent for the processing of data for marketing purposes, Clinica Identiq will cease the processing of your personal data for this purpose, without, however, affecting the processing carried out by Clinica Identiq on the basis of the consent expressed by you before its withdrawal.

V. Disclosure of Personal Data

In order to fulfil the processing purposes, Clinica Identiq may disclose your data to partners, to third parties or entities that support Clinica Identiq in carrying out its activity through the site, or to central/local public authorities, in the following listed cases:

  • for the administration of the site;
  • in situations where this communication would be necessary for awarding prizes or other benefits to the data subjects, obtained as a result of their participation in various promotional campaigns organised by Clinica Identiq through the site;
  • for the maintenance, personalisation and improvement of the site and of the services carried out through it;
  • for carrying out data analysis, testing and research, monitoring usage and activity trends, developing safety features and authenticating users;
  • for the transmission of commercial marketing communications, under the conditions and within the limits provided by law;
  • when the disclosure of personal data is provided by law, etc.

VI. Transfer of Personal Data

The personal data provided to Clinica Identiq may be transferred outside Romania, but only to states within the European Union.

VII. The Rights You Benefit From

Under the conditions provided by the legislation on the processing of personal data, in your capacity as data subjects, you benefit from the following rights:

  • the right to be informed, namely the right to receive details regarding the processing activities carried out by the Identiq clinic, as described in this document;
  • the right of access to data, namely the right to obtain confirmation from Clinica Identiq regarding the processing of personal data, as well as details concerning the processing activities such as the manner in which the data are processed, the purpose for which the processing is carried out, the recipients or categories of recipients of the data, etc.;
  • the right to rectification, namely the right to obtain from Clinica Identiq, without undue delay, the correction of inaccurate/unjustified personal data, as well as the completion of incomplete data; the rectification/completion will be communicated to each recipient to whom the data have been transmitted, unless this proves impossible or involves disproportionate effort.
  • the right to erasure of data, without undue delay ("the right to be forgotten"), where one of the following grounds applies:

– they are no longer necessary for fulfilling the purposes for which they were collected or processed;

– where the consent is withdrawn and there is no other legal ground for the processing;

– where the data subject objects to the processing and there are no overriding legitimate grounds;

– where the personal data have been processed unlawfully; where the personal data must be erased for compliance with a legal obligation;

– the personal data have been collected in relation to the offer of information society services in accordance with Union law or the national law to which the controller is subject.

  • It is possible that, following the request for erasure of data, Personal Data Processing Policy (GDPR), Clinica Identiq may anonymise these data (thus depriving them of their personal character) and continue, under these conditions, the processing for statistical purposes;
  • the right to restriction of processing insofar as:

– the person contests the accuracy of the data, for a period enabling us to verify the accuracy of the data;

– the processing is unlawful and the data subject opposes the erasure of the personal data, requesting instead the restriction of their use;

– the controller no longer needs the personal data for the purpose of the processing, but the data subject requires them for the establishment, exercise or defence of a right in court; or

– the data subject has objected to processing (other than direct marketing), for the period of time during which it is verified whether the controller's legitimate rights override those of the data subject.

  • the right to data portability, namely (i) the right to receive the personal data in a structured, commonly used and easily readable format, as well as (ii) the right to have these data transmitted by Clinica Identiq to another data controller, insofar as the conditions provided by law are met;
  • the right to object

– with regard to the processing activities, it may be exercised by submitting a request as indicated below;

– at any time, for reasons related to the particular situation in which the data subject finds themselves, to the data concerning them being processed on the basis of the legitimate interest of Clinica Identiq or on the basis of the public interest, except in cases where Clinica Identiq can demonstrate that it has compelling legitimate grounds justifying the processing which override the interests, rights and freedoms of the data subjects or that the purpose is the establishment, exercise or defence of a right in court;

– at any time, free of charge and without any justification, to the data concerning them being processed for direct marketing purposes.

  • the right not to be subject to an automated individual decision, namely the right not to be the subject of a decision based solely on automated processing activities, including profiling, which produces legal effects concerning the data subject or similarly significantly affects them;
  • the right to address the National Supervisory Authority for Personal Data Processing (ANSPDCP) or the competent courts, insofar as you consider it necessary. For any additional questions regarding the manner in which personal data are processed and in order to exercise the rights mentioned above, please contact the email address: office@identiq.ro