Privacy Policy

Last updated: 05.04.2026

1. Data Controller

The personal data controller is Dr. Vlad Postelnicu, Senior ENT Physician, practicing at Medicum Clinic (Bucharest) and SanConfind (Poiana Câmpina).

Data protection contact: gdpr@drvladpostelnicu.ro

2. What Personal Data We Collect

The website drvladpostelnicu.ro collects a minimum of personal data, exclusively through analytical tools:

Automatically Collected Data (via Google Analytics)

• IP address (anonymized)
• Browser type and version
• Device operating system
• Pages visited and time spent on site
• Referral source (originating website)
• Screen resolution and browser language

We do not collect directly identifiable personal data (name, email, phone) through the website, unless you contact us directly.

3. Purpose of Data Processing

Analytical data is collected exclusively for:

• Understanding how visitors use the website
• Improving content and user experience
• Analyzing traffic and website performance

4. Legal Basis for Processing

Personal data processing is based on:

• Your consent (Art. 6(1)(a) GDPR) — for Google Analytics analytical cookies, requested through the cookie banner on your first visit
• Our legitimate interest (Art. 6(1)(f) GDPR) — for cookies strictly necessary for the website to function

5. Data Recipients

Analytical data is processed by:

• Google LLC (Google Analytics) — in accordance with Google Privacy Policy

We do not sell, rent, or transfer your personal data to third parties for marketing purposes.

6. Data Transfer Outside the EU/EEA

Google Analytics may transfer data to Google servers located in the United States of America. Google adheres to the EU-US Data Privacy Framework, ensuring an adequate level of data protection as determined by the European Commission.

7. Data Retention Period

• Cookie preference (localStorage): until browser data is cleared or consent is withdrawn
• Google Analytics data: in accordance with Google data retention policy (default 14 months)

8. Your Rights (under GDPR)

You have the following rights regarding your personal data:

• Right of access — to request information about the personal data we process
• Right to rectification — to request correction of inaccurate data
• Right to erasure ("right to be forgotten") — to request deletion of personal data
• Right to restriction of processing — to request limitation of data processing
• Right to data portability — to receive data in a structured format
• Right to object — to object to data processing
• Right to withdraw consent — at any time, without affecting the lawfulness of processing carried out prior to withdrawal

To exercise these rights, you may contact us using the details provided in the Contact section.

9. Complaints

If you believe that the processing of your personal data violates GDPR, you have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP):

• Website: www.dataprotection.ro

10. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, destruction, or accidental disclosure, including: secure HTTPS connection (SSL/TLS) and IP address anonymization in Google Analytics.

11. Changes to the Privacy Policy

We reserve the right to update this policy. Any changes will be published on this page with the update date.

12. Contact

For questions regarding personal data protection or to exercise your GDPR rights:

• Email: gdpr@drvladpostelnicu.ro