Privacy Policy

1. Introduction

B & S REGENERATION SRL (Tax ID: 45087954, Trade Registry: J40/17995/2021), headquartered at Calea 13 Septembrie 110, Bl. 52-54, Sc. B, Et. 2, Ap. 28, Sector 5, Bucharest, Romania, acting as data controller, processes personal data in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Romanian legislation.

We are committed to protecting the confidentiality and security of your personal data.

2. Data We Collect

We may collect the following categories of personal data:

Identification Data

name

surname
national identification number (when required for medical documentation)

Contact Data

email address
phone number
postal address

Medical Data (Special Category of Data)

medical history
diagnoses
treatments
medical records

Authentication Data

email address
encrypted password (for patient account access)

Payment Data

Payments are processed through Stripe.
We do not store credit or debit card details.

Technical Data

IP address
browser type
device information
cookies (only with your consent)

3. Purpose and Legal Basis of Processing

3.1 Provision of Medical Services

Personal data is processed for:

appointment scheduling
medical consultations
diagnosis and treatment
medical monitoring

Legal basis:

Art. 6(1)(b) GDPR – performance of a contract
Art. 6(1)(c) GDPR – legal obligation
Art. 9(2)(h) GDPR – provision of health care services

3.2 Billing and Payments

Invoices are issued through SmartBill, and payments may be processed through Stripe.

Legal basis:

contract performance
legal obligations under tax legislation

3.3 Communications

We may send communications related to:

appointment confirmations
appointment reminders
notifications regarding requested services

Legal basis: legitimate interest of the data controller.

3.4 Service Improvement

We may analyze website usage through analytics tools (such as Google Analytics) in order to improve our services.

Legal basis:

your consent, which can be withdrawn at any time.

4. Data Recipients

Your personal data may be shared with:

IT service providers (hosting, maintenance, email services)
payment processors (Stripe)
billing services (SmartBill)
analytics providers (Google Analytics)
public authorities when required by law (tax authorities, health insurance institutions)

Some service providers may process data outside the European Economic Area (EEA).
In such cases, transfers are carried out using Standard Contractual Clauses approved by the European Commission or other GDPR-compliant safeguards.

We do not sell or share personal data for marketing purposes.

5. Data Retention

Personal data is stored only for as long as necessary to fulfill the purposes described above or as required by law.

Indicative retention periods:

medical records: according to applicable medical legislation
tax documents (invoices): 10 years
patient account data: until the account is deleted
cookies: maximum 12 months
technical logs: 90 days

6. Your Rights

Under GDPR, you have the following rights:

right of access to personal data
right to rectification of inaccurate data
right to erasure ("right to be forgotten")
right to restriction of processing
right to data portability
right to object to processing
right to withdraw consent at any time
right not to be subject to automated decision-making

You also have the right to lodge a complaint with:

The Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
www.dataprotection.ro

7. Data Security

We implement appropriate technical and organizational security measures, including:

SSL/TLS encryption
bcrypt-hashed passwords
role-based access control
regular backups
system monitoring and security protection

8. Contact

For any questions regarding personal data processing, you may contact us:

Email: contact@balcangiu-stroescu.ro

Phone: 0747 777 107

Address: Calea 13 Septembrie 110 Bl. 52-54, Sc. B, Et. 2, Ap. 28 Sector 5, Bucharest, Romania

Last updated: March 2026