Information Regarding Personal Data Protection

Within VIP Consult Medical Clinic SRL

Information Regarding the Personal Data Operator

VIP CONSULT MEDICAL CLINIC SRL is a Romanian legal entity with headquarters in Bucharest, Sector 1, Str. Clucerului no. 55, Room 1, Floor 2, Apartment 6, Unique Registration Code 16047115, order number in the Trade Register: J40/479/13.01.2004, legally represented by Mrs. Viviana Bogdan, as administrator, hereinafter referred to as CLINIC.

Within its activity and in accordance with the object of activity and current legislation, VIP CONSULT MEDICAL CLINIC SRL processes personal data, in strict accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC - General Data Protection Regulation (hereinafter, GDPR or Regulation), applicable from May 25, 2018.

Legality of Processing

The collection and processing of personal data can only be carried out in compliance with the applicable general regulatory framework, especially the provisions regarding fundamental rights and the interests of the data subject, found in the republished Constitution of Romania (art. 22 and art. 26), the Universal Declaration of Human Rights, the Charter of Fundamental Rights of the European Union, and Regulation (EU) 2016/679.

Processing is lawful only if at least one of the following conditions applies:

  • The data subject has given consent for the processing of their personal data for one or more specific purposes;
  • Processing is necessary for the performance of a contract to which the data subject is party;
  • Processing is necessary for compliance with a legal obligation to which the Clinic is subject;
  • Processing is necessary to protect the vital interests of the data subject or another natural person;
  • Processing is necessary for the performance of a task carried out in the public interest;
  • Processing is necessary for the purposes of legitimate interests pursued by the Clinic or a third party.

Principles Regarding Personal Data Processing

Personal data are:

  • Processed lawfully, fairly and transparently in relation to the data subject;
  • Collected for specified, explicit and legitimate purposes;
  • Adequate, relevant and limited to what is necessary;
  • Accurate and, where necessary, kept up to date;
  • Kept in a form which permits identification of data subjects for no longer than is necessary;
  • Processed in a manner that ensures appropriate security of personal data;
  • Communicated to third parties only with the consent of the data subject and only for fulfilling a legal obligation.

Rights of the Data Subject

The data subject benefits from the following rights according to Regulation (EU) 2016/679:

  • Right to information: The operator takes appropriate measures to provide the data subject with information and communications regarding the processing of personal data.
  • Right of access: The data subject has the right to obtain confirmation from the operator that personal data concerning them are being processed.
  • Right to rectification: The data subject has the right to obtain from the operator without undue delay the rectification of inaccurate personal data.
  • Right to erasure: The data subject has the right to obtain from the operator the erasure of personal data concerning them.
  • Right to restriction of processing: The data subject has the right to obtain from the operator restriction of processing.
  • Right to data portability: The data subject has the right to receive the personal data concerning them in a structured format.
  • Right to object: The data subject has the right to object to the processing of personal data concerning them.
  • Right to withdraw consent: The data subject has the right to withdraw consent at any time.
  • Right to lodge a complaint: The data subject has the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing.

Contact Information

The data subject can exercise their rights provided by applicable legislation through a written, dated, and signed request submitted to the data protection officer within VIP CONSULT MEDICAL CLINIC SRL, or by sending this request to the Operator's email address:contact@vip-consult-clinic.com