Privacy Policy

Terra Media Medical S.R.L.(hereinafter "SYNERVA", "we" or "the Clinic"), with its registered office in Jud. Ilfov (Ilfov County), comuna Tunari (Tunari commune), Str. Fagului nr. 12 (12 Fagului Street), registered with the Trade Register (Registrul Comertului) under no. J23/6662/2022, tax identification number (CUI) 43906742, is the controller of your personal data within the meaning of the General Data Protection Regulation (GDPR — Regulation (EU) 2016/679).

DPO contact: dpo@synerva.ro

• Identification data: surname, first name, telephone number, email address
• Medical data: information provided during the consultation (allergies, medical conditions, current treatments) — necessary for the safe administration of IV protocols
• Appointment data: date, time, chosen protocol, preferences
• Browsing data: IP address, browser type, cookies (details in the Cookie Policy)
• Billing data: name, address, CUI (tax identification number, for legal entities)

• Performance of the contract: managing appointments, administering protocols, invoicing
• Legal obligation: keeping the medical record in accordance with Romanian legislation, reporting to the authorities
• Legitimate interest: improving our services, communications regarding appointments
• Consent: sending newsletters and promotional offers (withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal)

• Medical data: at least 30 years, in accordance with healthcare legislation
• Billing data: 10 years, in accordance with tax legislation
• Marketing data: until consent is withdrawn
• Browsing data: a maximum of 13 months

Under the GDPR, you have the following rights:

• Right of access — to request confirmation that your data are being processed and a copy of the data
• Right to rectification — to have inaccurate data corrected
• Right to erasure — to request the erasure of your data, except for data retained under a legal obligation
• Right to restriction — to restrict processing in certain situations
• Right to data portability — to receive your data in a structured format
• Right to object — to object to processing based on legitimate interest
• Right to lodge a complaint with ANSPDCP (Autoritatea Nationala de Supraveghere a Prelucrarii Datelor cu Caracter Personal — the Romanian National Supervisory Authority for Personal Data Processing, i.e. the Romanian data protection authority)

To exercise your rights, contact us at dpo@synerva.ro. We respond within a maximum of 30 days.

We implement appropriate technical and organisational measures to protect your data: encryption in transit (HTTPS/TLS), role-based restricted access, regular backups and periodic security audits.

We do not transfer your data outside the European Economic Area (EEA). Should this become necessary, we will ensure appropriate safeguards in accordance with Art. 46 GDPR.

We reserve the right to update this policy. Any significant change will be communicated via the website or by email. The date of the last update is shown at the top of the page.