Glow Dental
RO

Privacy Policy

Last updated: 6 April 2026

1. Who we are

This Privacy Policy describes how SC IMPLANT SURGERY STUDIO SRL, trading as GLOW DENTAL, VAT/CUI 39609298, phone 0750 490 159, email office@glowdental.ro, acting as data controller, processes the personal data of individuals who access the website https://glowdental.ro and/or contact us via the form, by phone or email.

This policy is drafted in accordance with the transparency requirements of the GDPR, which require data subjects to be informed of the controller's identity, the purposes of processing, the legal grounds, recipients, storage period and their rights.

2. What data we process

We may process the following categories of personal data, depending on how you interact with us:

  • first and last name;
  • phone number;
  • email address;
  • any data you transmit through the contact form or in the message sent to us;
  • data relating to a consultation request;
  • data relating to appointments made through the website, including the requested date and time, the type of consultation and the information transmitted via the booking form;
  • medical documents voluntarily uploaded by the patient to prepare the consultation, including X-rays, imaging investigations, photos or other relevant documents;
  • technical data collected through use of the website, such as IP address, browser type, device used, pages accessed, visit duration and other similar data;
  • data collected through cookies and similar technologies, under the conditions described in the Cookie Policy.

We do not intentionally request detailed medical data or other special categories of data through the website, except where you voluntarily transmit such information in your message. If you do so, we will treat it with an appropriate level of confidentiality and security.

3. How we collect data

  • directly from you, when you fill in the contact form;
  • when you call us or send us an email;
  • automatically, through use of the website, via cookies and similar technologies;
  • from subsequent interactions with our team, if the initial request leads to a booking or further exchanges of information.

4. Purposes of processing

  • to respond to requests sent through the form, by phone or email;
  • to contact you in order to arrange, confirm or clarify a consultation;
  • to provide you with the requested information about our services;
  • to administer and secure the website;
  • to analyse how the website is used and to improve its content and functionality;
  • to comply with our legal obligations;
  • to defend our rights and legitimate interests.

5. Legal grounds for processing

Depending on the situation, we process your data on one or more of the following legal grounds provided by the GDPR:

  • your consent, where this is required;
  • steps taken at your request prior to entering into a contract, for example when you ask to be contacted for a consultation;
  • compliance with a legal obligation;
  • our legitimate interest, for example to secure the website, manage requests, defend our rights or improve our services, with due regard to your rights and freedoms.

Where processing is based on consent, the consent must be freely given, specific, informed and unambiguous, and may be withdrawn at any time.

6. How long we keep data

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected or for the period required by applicable legal obligations.

As a guideline:

  • data transmitted via the contact form, by phone or email will be kept for as long as necessary to handle the request and any related follow-up communications;
  • technical data and data collected via cookies are kept for the periods stated in the Cookie Policy;
  • certain data may be kept longer if there is a legal obligation, a justified legitimate interest or the need to defend a right in court;
  • medical documents uploaded through the website may be kept for the period necessary to prepare and manage the consultation;
  • where such documents do not become part of the patient's medical file, they may be automatically deleted after the operational period required to process the request expires.

Upon expiry of the applicable period, the data will be deleted or anonymised, as the case may be.

7. To whom we may disclose data

We may disclose your data only to the extent necessary and only to:

  • providers of IT, hosting, website maintenance and security services;
  • providers of services for managing bookings and online forms;
  • providers of email notification services;
  • providers of secure document storage services;
  • providers of communication, online forms, email or telephony services;
  • providers of analytics and marketing services, if used and where there is an appropriate legal basis;
  • public authorities or competent institutions, where required by law;
  • consultants, lawyers or other contractual partners, where necessary to protect our rights.

All data recipients will have access only to the information strictly necessary to perform their role.

8. Data transfers

In principle, we aim to process data within the European Economic Area.

If certain services we use involve transfers of data outside the European Economic Area, these will take place only in compliance with the conditions laid down by the GDPR and with appropriate safeguards in place. The GDPR allows international transfers only under specific conditions and with adequate safeguards.

9. Your rights

Under the GDPR, you have the following rights:

  • the right of access to your data;
  • the right to rectification of inaccurate or incomplete data;
  • the right to erasure of data;
  • the right to restriction of processing;
  • the right to data portability;
  • the right to object to processing;
  • the right not to be subject to a decision based solely on automated processing, including profiling, where the legal conditions are met;
  • the right to withdraw consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal;
  • the right to lodge a complaint with the competent supervisory authority.

Requests from data subjects are normally handled within one month of receipt, with the possibility of extension in certain situations. To exercise your rights, contact us at office@glowdental.ro. An erasure request form is also available at Delete data.

10. Right to lodge a complaint

If you consider that the processing of your data infringes the law, you have the right to lodge a complaint with the competent supervisory authority in Romania:

The National Supervisory Authority for Personal Data Processing (ANSPDCP), www.dataprotection.ro.

11. Data security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, destruction, alteration or unlawful disclosure. The GDPR requires controllers to implement appropriate technical and organisational measures to ensure data security.

For documents uploaded through the website we may implement additional security measures, including:

  • access control over documents;
  • limiting the access period;
  • technical measures designed to prevent unauthorised access.

That said, no information system and no data transfer over the internet can be guaranteed as fully secure.

12. Cookies and similar technologies

The website may use cookies and similar technologies for operation, analytics and, where applicable, marketing.

Detailed information about the types of cookies used, their purposes, storage period and how you can express your preferences is available in the Cookie Policy.

For non-essential cookies, the use of consent must meet the GDPR conditions regarding the validity of consent.

13. Children's data

The website is not intended for the intentional collection of personal data from minors, directly and independently, outside the conditions allowed by law.

If we learn that we have collected data from a minor in breach of applicable rules, we will take reasonable steps to delete it.

14. Changes to the policy

We reserve the right to amend this Privacy Policy whenever necessary.

The updated version will be published on the website and will take effect from the date of publication.

15. Contact

For any questions about this Privacy Policy or how we process personal data, contact us at:

SC IMPLANT SURGERY STUDIO SRL
GLOW DENTAL
Phone: 0750 490 159
Email: office@glowdental.ro
Website: https://glowdental.ro