Privacy policy
How we look after your data
Last updated: 26 July 2026
This page sets out what personal data we process through this site, why, who we share it with, and what you can ask of us.
Contents
Who is responsible for your data
The data controller is Strumfi's Ark-Dent SRL, a dental practice registered at Bulevardul Metalurgiei 29C, Bloc C4, Commercial space 4, Sector 4, Bucharest.
For any question about your data, write to us at office@strumfii-dent.ro or call +40 31 419 0695.
What data we collect
Data you give us directly, through our forms: your full name, phone number, email address, the message you write, and, for bookings, the patient type (child or adult) and your preferred date.
Data collected automatically when you visit the site: your IP address, device and browser type, operating system, pages viewed, time spent on the site, and the source you arrived from.
We don't ask for health information through the site. If you choose to include health details in your message, we treat that as sensitive data and use it only to reply to you.
Why we use it, and our legal basis
To respond to your enquiries and confirm bookings, under Article 6(1)(b) GDPR, as steps taken at your request before entering into a service.
To maintain patient records and meet the obligations placed on a dental practice, under Article 6(1)(c) and Article 9(2)(h) GDPR.
To understand how the site is used and to improve it, based on your consent under Article 6(1)(a) GDPR. You can withdraw that consent at any time.
We do not make automated decisions about you and we do not carry out profiling.
Cookies
Strictly necessary cookies keep the site working: they remember your chosen language (the "lang" cookie) and secure form submissions. These don't require consent.
Analytics cookies show us, in aggregate, which pages get read and where visitors come from. They only load once you've given your consent.
Session cookies are deleted when you close your browser. Persistent cookies remain until they expire or until you delete them yourself in your browser settings. You can block or delete cookies at any time from your browser, though some site features may stop working properly.
Analytics and statistics
The site is hosted on Vercel and uses Vercel Web Analytics and Vercel Speed Insights. These measure traffic and speed without tracking cookies and without building an individual profile; the data is aggregated.
If we enable Google Analytics, it only runs once you've given consent, with IP address anonymisation switched on.
The map to our practice is an embedded Google Maps module. When the map loads, Google may receive your IP address and set its own cookies, in line with Google's own policy.
Our Facebook page is nothing more than an external link. We don't run a Facebook pixel on this site.
Who we share your data with
We work with providers who process data on our behalf, under contract:
- Vercel Inc. for hosting and traffic statistics;
- Resend for sending confirmation emails and form notifications;
- Google for the map module and, if activated, for statistics.
We may also share data with our accountant and our IT services provider, strictly to the extent needed, and with public authorities where the law requires it.
We don't sell your data and we don't share it with anyone for marketing purposes.
Where it's stored
Your data is stored within the European Union or the European Economic Area. Some of our providers are based in the United States; in those cases, transfers rely on the standard contractual clauses approved by the European Commission or on the applicable adequacy framework.
How long we keep it
- Contact form messages: 12 months from the last exchange.
- Booking requests that never turned into a visit: 12 months.
- A patient's medical record: for as long as medical legislation requires.
- Accounting records: 10 years, as required by accounting law.
- Traffic statistics: kept in aggregate form only, in a way that can't identify you.
Your rights
You have the right to request access to your data, its correction, its erasure (the "right to be forgotten"), restriction of processing, data portability, and to object to processing based on legitimate interest. You can withdraw your consent for analytics at any time, without affecting any processing already carried out.
Write to us at office@strumfii-dent.ro and we'll reply within 30 days at the latest. If your request is complex, we'll let you know and tell you how much more time we need.
If you're not happy with our answer
You can lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP):
- B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, 010336 Bucharest
- Phone: +40 318 059 211
- Email: anspdcp@dataprotection.ro
- www.dataprotection.ro
You also have the right to bring a claim before the courts.
Security
The site runs on HTTPS. Access to the data submitted through our forms is limited to staff who need it, and accounts are protected with passwords and two-factor authentication wherever the provider supports it. If a breach ever puts your data at risk, we notify the authority within 72 hours and we let you know too.
Children's data
Bookings for children are made by parents or legal guardians. The forms on this site are meant for adults: if you're under 16, please ask a parent to fill them in for you.
Changes
If we change anything about how we process data, we update this page and the date at the top of it. For significant changes, we'll also let you know through a visible notice on the site.
How to reach us
- office@strumfii-dent.ro
- +40 31 419 0695
- +40 770 726 721
- +40 728 922 622
- Bulevardul Metalurgiei 29C, Bloc C4, Spațiul comercial 4, Sector 4, București
Made by Cherie Software
