Regulation (EU) 2016/679 (GDPR) gives you a number of rights over the personal data we process. Below we explain each right, what it means in practice at a dental clinic and how you can exercise it with us. The data controller is Dental Protect SRL (trading as Light Dental Clinic), CUI (tax identification number) 12721957, Trade Register (Reg. Com.) number J2000001730401, with its registered office at Str. Luncșoara nr. 5, bl. 75, sc. A, et. P, ap. 1, Sector 2, București, and its place of business at Strada Roma nr. 28, Sector 1, București, 011774.
1. Right of access (Art. 15)
You can find out whether we process your data and, if so, what data, for what purpose, who we have shared it with and how long we keep it. You can ask for a copy of your data, including a copy of the documents in your medical record. The first copy is free of charge.
2. Right to rectification (Art. 16)
If your data is wrong or incomplete (for example, you have changed your phone number or your name), we correct or complete it without delay.
3. Right to erasure (Art. 17)
You can ask us to erase your data when it is no longer needed, when you have withdrawn your consent or when it has been processed unlawfully. Please note: medical documents and financial and accounting documents must be kept for the period required by law, so we cannot erase them before that period ends. Appointment requests and contact details used only for booking can be erased at any time.
4. Right to restriction of processing (Art. 18)
You can ask us to stop using your data temporarily, for example while we check a correction you have asked for or while we consider an objection.
5. Right to data portability (Art. 20)
You can receive the data you have provided to us in a structured, commonly used format (for example PDF or CSV), or ask us to send it directly to another doctor or clinic, where this is technically feasible.
6. Right to object (Art. 21)
You can object to processing based on our legitimate interest, for example, to reminder messages about your regular check-up. We will then stop processing your data for that purpose, unless we have compelling legitimate grounds or the data is needed to defend a legal claim in court.
7. Automated decisions (Art. 22)
We do not make decisions that affect you based solely on automated processing. All medical decisions are made by the doctor.
8. Withdrawing consent (Art. 7)
Where processing is based on consent (for example, statistics cookies or the health details you write in the booking form), you can withdraw it at any time, as easily as you gave it. Withdrawal does not affect processing carried out before then.
9. How to send us a request
- by email, to contactlightdentalclinic.ro, with the subject “GDPR request”;
- by post, to Light Dental Clinic, Strada Roma nr. 28, Sector 1, București, 011774;
- in person, at the clinic's reception, during opening hours.
Please give us your full name, a phone number or email address where we can reply to you, and the right you wish to exercise. To protect your data, especially medical data, we may ask you to confirm your identity before we send you any information.
10. How quickly we reply
We reply without undue delay, and in any case within one month of receiving your request. If the request is complex or we receive a large number of requests, this period may be extended by two further months; in that case we will let you know within the first month and explain why. Our reply is free of charge. If a request is manifestly unfounded or excessive, in particular because of its repetitive character, we may charge a reasonable fee or refuse it, explaining our reasons.
11. Right to lodge a complaint
If you believe we have infringed your rights, you can contact the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP): B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, București, postcode 010336, email anspdcpdataprotection.ro, website www.dataprotection.ro. You can also go to court. We would, however, ask you to write to us first: in most cases we can resolve the matter quickly.