Privacy Policy

The controller is DENTCOF SRL, a company registered in Romania, unique registration code (CUI) 1834691, registered office at Calea Aradului nr. 8, Timișoara, Timiș county. The clinic is in Iulius Town, Piața Consiliul Europei nr. 2, UBC 0 Building, Floor 1, Timișoara.

Data about Dentcof Education courses (bookings, questions about a course) is handled by Dentcof Research SRL, under the course privacy policy.

We have appointed a data protection officer. For any question about your data or to exercise your rights, write to dpo@dentcof.ro or to our registered office.

When you send us a message. Through the contact form, by email or by phone you give us your name, your email address or phone number, and your message. We use them to answer you and, if you ask, to schedule a consultation. Legal basis: steps you ask us to take before a treatment (Art. 6(1)(b) GDPR) and our legitimate interest in answering enquiries (Art. 6(1)(f)).

Enquiries in our clinic system. When you send a form, besides the e-mail to our team, your enquiry is stored in our internal clinic system (dentcof.app): your name, e-mail address and phone number, your message, the consent you ticked, and for course forms the course, the date you chose and the invoice details you entered. This lets the right person reply and follow up, without depending on a single inbox. Legal basis: answering your request and the steps before a contract you ask for (Art. 6(1)(b)). Course forms are handled by Dentcof Research SRL, as described in the course Privacy Policy. The system also records which form it was, the page it was sent from and where the visit came from (for example a Google search, an ad or a campaign link), so that if you later become our patient we can tell which page or channel brought you. We also count, without cookies and without anything that identifies you, each visit that arrives on the site, when a form is started, and each click on our phone number, e-mail address or WhatsApp link, together with the page and where the visit came from. Legal basis for this counting: our legitimate interest in understanding how people find us (Art. 6(1)(f)).

Health information. Please don't include health details in the form; we ask about them at your consultation. If you send them anyway, we use them only to answer your request, based on your explicit consent given by sending them (Art. 9(2)(a)). You can withdraw it at any time.

When you become a patient. Your medical record, treatment plan and payments are not collected through this website. They are covered by the information notice you receive at the clinic and by Romanian rules on medical records.

Statistics and advertising, only with your consent. If you accept these cookies, Google Analytics measures how the site is used (pages visited, device, approximate location from your IP address), and Google Ads measures whether an ad led to a contact (a form sent, a click on our phone number or email). Legal basis: your consent (Art. 6(1)(a)), which you can change at any time under "Cookie settings" at the bottom of every page. Details are in the cookie policy.

Technical data. When you visit the site, our hosting provider processes your IP address, browser and the pages requested, to deliver the site and protect it against abuse. Legal basis: our legitimate interest in a secure, working website (Art. 6(1)(f)).

We do not sell your data and we don't use it for automated decisions about you.

Only with providers that help us run the site, under contracts that require them to protect your data:

• Vercel Inc. (hosting of the website)
• Sendinblue SAS (Brevo), France (delivery of the contact form to our inbox)
• Supabase Inc. (the database of our internal system, where messages from the forms are kept so the team can answer them; servers in Frankfurt, Germany)
• Meta Platforms Ireland Limited (WhatsApp, when you choose to write to us there)
• Google Ireland Limited (Google Analytics and Google Ads, only with your consent)
• Usercentrics A/S / Cookiebot (recording your cookie choices)
• our email provider, where your messages are stored

Some of these providers process data outside the European Economic Area, mainly in the United States. In that case the transfer relies on the EU–US Data Privacy Framework, where the provider is certified, or on the European Commission's standard contractual clauses.

We may also disclose data when the law requires it, for example to a public authority.

• Messages and enquiries: up to 2 years after our last contact, unless you become a patient (then the medical record rules apply).
• Statistics: for the period set in our Google Analytics account, at most 14 months.
• Cookie choices: 12 months, then we ask again.
• Technical logs: for the short period the hosting provider needs for security.

You have the right to access your data, to have it corrected or deleted, to restrict or object to its processing, to receive it in a portable format, and to withdraw your consent at any time, without affecting what was done before. Write to dpo@dentcof.ro; we answer within one month.

You can also complain to the Romanian data protection authority, the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), B-dul G-ral Gheorghe Magheru 28–30, Sector 1, București, www.dataprotection.ro ↗.

The site is served only over an encrypted connection (HTTPS), and access to messages is limited to the team members who need them to answer you.

This website is not intended for children under 16.

When we change this policy, we update this page and the date at the top.