GDPR information notice

DIDENTA IMPLANTOLOGY ART SRL (the “Controller” / the “Clinic”), with registered office at Str. Padeșu nr. 8, bl. 5, sc. 2, et. 8, ap. 52, Sector 4, Bucharest, CUI 27295086, J40/7904/2010, operates the website www.didenta.ro and processes personal data in accordance with Regulation (EU) 2016/679 (“GDPR”).

Didenta Implantology Art clinics operate in Bucharest (Dorobanți and Drumul Taberei). For certain processing operations there may be joint controllers, where applicable.

As controller, we inform you how and why we process personal data in the context of medical services. Please read this notice carefully; it supplements the Website Privacy policy.

Who it is for

Clinic patients, accompanying persons or their representatives.

Where to write to us

• Postal address / registered office: Str. Padeșu nr. 8, bl. 5, sc. 2, et. 8, ap. 52, Sector 4, Bucharest
• E-mail: office@didenta.ro
• Telephone: 021 231 1603 / 0762 008 512
• Contact page

What data we process

Patient

• Identification: first name, last name, CNP (personal identification number), ID series/number, date of birth; video images from the surveillance system, if any.
• Contact: telephone, e-mail, address.
• Medical: history, diagnosis, treatments, investigations, allergies, prescriptions.
• Financial: invoicing, payments, insurance.
• Images / recordings for promotional purposes — only with express consent.

Legal representative

Identification and contact data, to establish the capacity of representative.

Accompanying person / visitor

Video images from the surveillance system, if any, for the protection of property.

Purposes and legal bases

• Managing appointments and medical records — Art. 6(1)(b); health data: Art. 9(2)(h).
• Communicating with patients — Art. 6(1)(b); Art. 9(2)(h).
• Invoicing — Art. 6(1)(c).
• Promotion / advertising — Art. 6(1)(a) (consent).
• Video surveillance — Art. 6(1)(f) (legitimate interest).
• Legal reporting, IT maintenance, dispute resolution — Art. 6(1)(c) / (f).

Storage period

For the duration of the medical care relationship and thereafter in accordance with legal obligations (e.g. archiving of medical records; financial-accounting documents — generally 5 years from 1 July of the year following the financial year). Upon withdrawal of consent, if no other legal basis exists, processing on that basis ceases.

Recipients

Competent authorities; IT processors; laboratories / medical providers; advisers; third parties indicated by you; potential acquirers in the event of a transfer of activity.

Transfers outside the EEA

As a rule we do not transfer data outside the EEA. Exceptions are made only with appropriate safeguards and information.

Your rights

Access, rectification, erasure, restriction, portability, objection, withdrawal of consent, complaint to ANSPDCP and legal action. Exercise: office@didenta.ro or the postal address above. We generally respond within one month.

Refusal of processing

Certain data are necessary for legal/contractual obligations or medical care. Failure to provide them may prevent the provision of services.

Security and updates

We apply appropriate technical and organisational measures. We do not use profiling / automated decisions on the data covered by this notice. This notice may be updated; the current version is published on the website.

Last updated: 26 August 2026