Privacy Policy
Protection of your personal data in accordance with GDPR (EU Regulation 2016/679)
Last updated: 05.04.2026
1. Data Controller
The personal data controller is Dr. Vlad Postelnicu, Senior ENT Physician, practicing at Medicum Clinic (Bucharest) and SanConfind (Poiana Câmpina).
Data protection contact: gdpr@drvladpostelnicu.ro
2. What Personal Data We Collect
The website drvladpostelnicu.ro collects a minimum of personal data, exclusively through analytical tools:
Automatically Collected Data (via Google Analytics)
- IP address (anonymized)
- Browser type and version
- Device operating system
- Pages visited and time spent on site
- Referral source (originating website)
- Screen resolution and browser language
We do not collect directly identifiable personal data (name, email, phone) through the website, unless you contact us directly.
3. Purpose of Data Processing
Analytical data is collected exclusively for:
- Understanding how visitors use the website
- Improving content and user experience
- Analyzing traffic and website performance
4. Legal Basis for Processing
Personal data processing is based on:
- Your consent (Art. 6(1)(a) GDPR) — for Google Analytics analytical cookies, requested through the cookie banner on your first visit
- Our legitimate interest (Art. 6(1)(f) GDPR) — for cookies strictly necessary for the website to function
5. Data Recipients
Analytical data is processed by:
- Google LLC (Google Analytics) — in accordance with Google Privacy Policy
We do not sell, rent, or transfer your personal data to third parties for marketing purposes.
6. Data Transfer Outside the EU/EEA
Google Analytics may transfer data to Google servers located in the United States of America. Google adheres to the EU-US Data Privacy Framework, ensuring an adequate level of data protection as determined by the European Commission.
7. Data Retention Period
- Cookie preference (localStorage): until browser data is cleared or consent is withdrawn
- Google Analytics data: in accordance with Google data retention policy (default 14 months)
8. Your Rights (under GDPR)
You have the following rights regarding your personal data:
- Right of access — to request information about the personal data we process
- Right to rectification — to request correction of inaccurate data
- Right to erasure ("right to be forgotten") — to request deletion of personal data
- Right to restriction of processing — to request limitation of data processing
- Right to data portability — to receive data in a structured format
- Right to object — to object to data processing
- Right to withdraw consent — at any time, without affecting the lawfulness of processing carried out prior to withdrawal
To exercise these rights, you may contact us using the details provided in the Contact section.
9. Complaints
If you believe that the processing of your personal data violates GDPR, you have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP):
- Website: www.dataprotection.ro
10. Data Security
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, destruction, or accidental disclosure, including: secure HTTPS connection (SSL/TLS) and IP address anonymization in Google Analytics.
11. Changes to the Privacy Policy
We reserve the right to update this policy. Any changes will be published on this page with the update date.
12. Contact
For questions regarding personal data protection or to exercise your GDPR rights:
- Email: gdpr@drvladpostelnicu.ro