F-01
Cloudflare
Hosts the pages and receives the form. It sees traffic and IP addresses, as any server does. The statistics I use are cookie-free and carry no individual identification.
§ 00 Controller
The registered office is the company's legal address. It is not a practice address and not an invitation to turn up there. Where we meet is settled when the appointment is made.
Who is answerable for this data
The controller is the company I practise through. Its identifying details are the ones filed with the trade register, and I set them out in full here, because this is the only page on the site where they matter.
Registered name
CREATIV DENT CRISTINA S.R.L.
Tax identification code
40500544
Trade register number
J32/216/2019
Registered office
Str. Ioan Albabei nr. 1, Sibiu, 550074, Romania
Contact address
§ 01 What is collected
One form, three fields
When you write to me through the contact form, you send a name, an email address and a message. That is all the form asks for and all that reaches me. There is no account, no profile, and no history of you assembled between visits.
The server that receives the message keeps the originating IP address briefly, so that automated submissions can be stopped. It is a security measure rather than a measurement one, and the trace is short-lived.
The rest of the site collects nothing. There are no scripts from other companies, no social buttons loading foreign code, and no fonts fetched from somebody else's servers. The pages are static: they download, and that is the end of it.
- Name, so I know how to answer you
- Email, so I have somewhere to answer
- Your message, so I know what this is about
§ 02 Health data
Please do not write diagnoses into the form
Information about your health is a special category of data, protected more strictly than the rest. This form is not the right channel for it and was not designed for it.
Tell me what bothers you, in your own words, and when you have time. That is enough for me to answer. Medical history, radiographs and the rest belong in the consultation, where there is a proper setting and a record with your name on it.
If you do send health details in the message, I treat them with the same care as anything else in your record and they go nowhere further. But I would rather they never reached an inbox at all.
§ 03 Basis and retention
Why I am allowed to hold it and how long I do
I process your message in order to answer it, and in order to take the steps leading to an appointment, if that is what you want. In the language of the regulation: steps taken at your request prior to entering into a contract, plus my legitimate interest in defending my inbox against spam.
Correspondence that leads nowhere is deleted after twelve months. Correspondence that leads to an appointment becomes part of the clinician-patient relationship, which has its own retention rules, longer and imposed by law rather than chosen by me.
I do not make automated decisions about you and I do not profile you. Nobody sells this data and I do not pass it to anyone for marketing, because I do not do email marketing.
§ 04 Who else sees it
All three process within the European Union or under standard contractual clauses. None of them is permitted to use the data for purposes of their own.
Three providers, each with one job
A website needs infrastructure, and the infrastructure belongs to somebody else. I name all of them, so you know who to ask if you want to ask.
F-02
Resend
Delivers the message from the form to my inbox. It sees the content of the message while it carries it, as any email service does.
F-03
Gmail
My inbox. Where your message arrives and stays until I delete it.
§ 05 Your rights
Data in a medical record follows its own rules: there, the right to erasure is limited by the retention periods that the law imposes on clinical documentation.
What you can ask for, and how to ask
You write an email to contact@cristinapacurar.ro and say what you want. No form, no justification, no set phrases. I answer within a month at the outside, usually much sooner.
- To find out what data I hold about you, and to receive a copy
- To have it corrected, if it is wrong
- To have it erased, once the law no longer obliges me to keep it
- To object to the processing, or to ask that it be restricted
- To receive it in a format you can take elsewhere
- To complain to the Romanian data protection authority, if my answer does not seem right to you
§ 06 Changes
When this page changes
It changes when something real changes: a new provider, a new form, a new feature. It does not change in order to look recently updated.
The version in force is the one you are reading. If a change matters to somebody who has already written to me, I tell them directly rather than by quietly editing a page.