GDPR Policy

Your Rights Under GDPR

1. Your Rights Under GDPR

The General Data Protection Regulation (GDPR – EU Regulation 2016/679) grants individuals extensive rights regarding the protection and processing of their personal data.

2. Right of Access

You have the right to obtain confirmation as to whether your personal data is being processed and to receive a copy of that data.

You may request this information free of charge once per year.

3. Right to Rectification

You have the right to request:

• correction of inaccurate personal data
• completion of incomplete personal data

We will carry out the rectification within a maximum of 30 days from receiving your request.

4. Right to Erasure

You may request deletion of your personal data when:

• the data is no longer necessary for the purpose for which it was collected
• you withdraw your consent for processing
• you object to processing and there are no overriding legitimate grounds
• the data has been processed unlawfully

However, we cannot delete personal data when processing is required to comply with a legal obligation, such as:

• medical record retention
• tax or accounting documentation.
• 5. Right to Restriction of Processing

You may request restriction of the processing of your data in certain situations, including:

• when you contest the accuracy of the data
• when the processing is unlawful but you do not wish the data to be erased
• when the data is required for the establishment, exercise, or defense of legal claims.
• 6. Right to Data Portability

You have the right to receive your personal data in a:

• structured
• commonly used
• machine-readable format

You also have the right to transmit this data to another data controller where technically feasible.

7. Right to Object

You have the right to object at any time to the processing of your personal data based on legitimate interests.

In the case of direct marketing, the processing of your data will cease immediately upon your request.

8. How to Exercise Your Rights

To exercise any of your GDPR rights, you may send a request to:

Email: contact@balcangiu-stroescu.ro

Postal address:
B & S REGENERATION SRL
Calea 13 Septembrie 110
Bl. 52–54, Sc. B, Et. 2, Ap. 28
Sector 5, Bucharest, Romania

We will respond to your request within a maximum of 30 calendar days.

For security purposes, we may request verification of your identity before processing your request.

9. Complaints

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with:

National Supervisory Authority for Personal Data Processing (ANSPDCP)

Address:
B-dul G-ral. Gheorghe Magheru 28–30
Sector 1, Bucharest, Romania

Email: anspdcp@dataprotection.ro

Website: www.dataprotection.ro

10. Data Protection Contact

For any questions regarding personal data protection, you may contact us at:

Email: contact@balcangiu-stroescu.ro

Last updated: March 2026