Privacy Policy

1. Introduction

Smile Studio, located in Moinești, Ion Creangă Street, bl. D5, sc. A, ground floor, ap. 1, respects the confidentiality of your personal data and is committed to protecting the information you provide to us.

This privacy policy explains how we collect, use, and protect your personal data in accordance with the General Data Protection Regulation (GDPR) - Regulation (EU) 2016/679.

2. Data Controller

The personal data controller is Smile Studio:

• Address: Ion Creangă Street, bl. D5, sc. A, ground floor, ap. 1, Moinești, Romania
• Phone: 0754 880 388 / 0751 522 355
• Email: studiodezambete@gmail.com

3. Personal Data Collected

We collect the following categories of personal data:

• Identification data: first name, last name
• Contact data: phone number, email address
• Medical data: dental medical history, previous treatments, allergies (only during consultations)

4. Purpose of Data Processing

Your data is processed for the following purposes:

• Scheduling and managing dental appointments
• Providing dental medical services
• Communication with patients (appointment confirmations, reminders)
• Responding to your requests and questions
• Improving our services
• Compliance with legal obligations

5. Legal Basis for Processing

We process your data based on the following legal grounds:

• Consent: for submitting the contact form, marketing communications and analytics cookies (Google Analytics)
• Contract performance: for providing the requested medical services
• Legal obligation: for maintaining medical documentation according to current legislation
• Legitimate interest: for improving services and website security

6. Data Storage Duration

Personal data is stored for different periods, depending on its nature:

• Medical data: according to current legislation regarding medical documentation (minimum 10 years)
• Contact form data: 2 years from the last interaction

7. Your Rights

In accordance with GDPR, you have the following rights:

• Right of access: you can request information about processed data
• Right to rectification: you can request correction of inaccurate data
• Right to erasure: you can request deletion of data (with legal exceptions)
• Right to restriction: you can limit how data is used
• Right to data portability: you can receive data in a structured format
• Right to object: you can refuse processing in certain circumstances
• Right to lodge a complaint: with the National Supervisory Authority for Personal Data Processing (ANSPDCP)

To exercise these rights, you can contact us at: studiodezambete@gmail.com

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or disclosure. Our website uses a secure connection (HTTPS).

9. Cookies and Tracking

We use Google Analytics 4, a service provided by Google Ireland Limited, to understand how the website is used (for example, pages visited, visit duration, device type, approximate location, contact form submissions and clicks on phone numbers) and to improve it. We also use Google Tag Manager, also provided by Google, to manage these tools. The data is statistical; we do not use it to identify you personally or for advertising.

Analytics cookies are used only if you give your consent through the cookie banner. We use Google Consent Mode: without consent, no analytics or advertising cookie is set, and Google receives only limited, cookieless signals without identifiers (for example, that a page was visited, the browser type and the consent state), which it uses only in aggregate for statistical estimates. Your choice is stored only in your browser (local storage), and you can change or withdraw it at any time via the button below or the “Cookie settings” link in the site footer; on withdrawal, the analytics cookies are deleted.

Data collected by Google may be transferred outside the European Economic Area, including to the US, under the EU-US Data Privacy Framework. For details, see Google's Privacy Policy: https://policies.google.com/privacy.

Apart from the above, we only use elements strictly necessary for the technical operation of the website, which do not require consent under current legislation.

• _ga: Google Analytics cookie that distinguishes unique visitors; duration: 2 years
• _ga_<ID>: Google Analytics cookie that maintains session state; duration: 2 years

10. Policy Changes

We reserve the right to update this privacy policy. Any changes will be published on this page with the update date.