Skip to content
Strumfi's Ark-DentDental clinic

Privacy policy

How we look after your data

Last updated: 26 July 2026

This page sets out what personal data we process through this site, why, who we share it with, and what you can ask of us.

Who is responsible for your data

The data controller is Strumfi's Ark-Dent SRL, a dental practice registered at Bulevardul Metalurgiei 29C, Bloc C4, Commercial space 4, Sector 4, Bucharest.
For any question about your data, write to us at office@strumfii-dent.ro or call +40 31 419 0695.

What data we collect

Data you give us directly, through our forms: your full name, phone number, email address, the message you write, and, for bookings, the patient type (child or adult) and your preferred date.

Data collected automatically when you visit the site: your IP address, device and browser type, operating system, pages viewed, time spent on the site, and the source you arrived from.

We don't ask for health information through the site. If you choose to include health details in your message, we treat that as sensitive data and use it only to reply to you.

Why we use it, and our legal basis

To respond to your enquiries and confirm bookings, under Article 6(1)(b) GDPR, as steps taken at your request before entering into a service.

To maintain patient records and meet the obligations placed on a dental practice, under Article 6(1)(c) and Article 9(2)(h) GDPR.

To understand how the site is used and to improve it, based on your consent under Article 6(1)(a) GDPR. You can withdraw that consent at any time.

We do not make automated decisions about you and we do not carry out profiling.

Cookies

Strictly necessary cookies keep the site working: they remember your chosen language (the "lang" cookie) and secure form submissions. These don't require consent.

Analytics cookies show us, in aggregate, which pages get read and where visitors come from. They only load once you've given your consent.

Session cookies are deleted when you close your browser. Persistent cookies remain until they expire or until you delete them yourself in your browser settings. You can block or delete cookies at any time from your browser, though some site features may stop working properly.

Analytics and statistics

The site is hosted on Vercel and uses Vercel Web Analytics and Vercel Speed Insights. These measure traffic and speed without tracking cookies and without building an individual profile; the data is aggregated.

If we enable Google Analytics, it only runs once you've given consent, with IP address anonymisation switched on.

The map to our practice is an embedded Google Maps module. When the map loads, Google may receive your IP address and set its own cookies, in line with Google's own policy.

Our Facebook page is nothing more than an external link. We don't run a Facebook pixel on this site.

Who we share your data with

We work with providers who process data on our behalf, under contract:

  • Vercel Inc. for hosting and traffic statistics;
  • Resend for sending confirmation emails and form notifications;
  • Google for the map module and, if activated, for statistics.

We may also share data with our accountant and our IT services provider, strictly to the extent needed, and with public authorities where the law requires it.

We don't sell your data and we don't share it with anyone for marketing purposes.

Where it's stored

Your data is stored within the European Union or the European Economic Area. Some of our providers are based in the United States; in those cases, transfers rely on the standard contractual clauses approved by the European Commission or on the applicable adequacy framework.

How long we keep it

  • Contact form messages: 12 months from the last exchange.
  • Booking requests that never turned into a visit: 12 months.
  • A patient's medical record: for as long as medical legislation requires.
  • Accounting records: 10 years, as required by accounting law.
  • Traffic statistics: kept in aggregate form only, in a way that can't identify you.

Your rights

You have the right to request access to your data, its correction, its erasure (the "right to be forgotten"), restriction of processing, data portability, and to object to processing based on legitimate interest. You can withdraw your consent for analytics at any time, without affecting any processing already carried out.

Write to us at office@strumfii-dent.ro and we'll reply within 30 days at the latest. If your request is complex, we'll let you know and tell you how much more time we need.

If you're not happy with our answer

You can lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP):

  • B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, 010336 Bucharest
  • Phone: +40 318 059 211
  • Email: anspdcp@dataprotection.ro
  • www.dataprotection.ro

You also have the right to bring a claim before the courts.

Security

The site runs on HTTPS. Access to the data submitted through our forms is limited to staff who need it, and accounts are protected with passwords and two-factor authentication wherever the provider supports it. If a breach ever puts your data at risk, we notify the authority within 72 hours and we let you know too.

Children's data

Bookings for children are made by parents or legal guardians. The forms on this site are meant for adults: if you're under 16, please ask a parent to fill them in for you.

Changes

If we change anything about how we process data, we update this page and the date at the top of it. For significant changes, we'll also let you know through a visible notice on the site.

How to reach us

Back home

Made by Cherie Software

Call now +40 31 419 0695