privacy policy

Last updated: 16/02/2025

Welcome to https://drsrouraesthetics.ro/.

Srour Aesthetics Clinic – Dr. Hussein Srour respects your privacy and is committed to protecting your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Romanian legislation regarding the protection of personal data.

1. Data Controller

The data controller responsible for the processing of personal data on this website is:

Srour Aesthetics Clinic – Dr. Hussein Srour

Strada Calcarului nr. 2

București, România

Email: contact@drsrouraesthetics.ro

Phone: +40 730 253 513

For any questions regarding this Privacy Policy or the processing of your personal data, you may contact us using the details above.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

Identification and Contact Data

Name
Email address
Phone number

Health-related Data (Special Category Data)

Information voluntarily provided by patients through consultation forms or communications related to medical or aesthetic services.

Technical Data

IP address
Browser type
Device information
Website usage data
Cookies and similar technologies

3. Purpose of Data Processing

Your personal data may be processed for the following purposes:

Responding to inquiries submitted through the contact form
Managing appointment requests and consultations
Providing medical and aesthetic services
Improving the functionality and security of the website
Complying with legal obligations applicable to medical service providers

4. Legal Basis for Processing

The processing of personal data is carried out on the following legal bases:

Consent – when you voluntarily provide information through forms or communications
Performance of a contract – when data is necessary to provide requested medical or aesthetic services
Legal obligations – compliance with medical, accounting, and regulatory requirements
Legitimate interest – ensuring the security and proper functioning of the website

For health-related data, processing is carried out only with the explicit consent of the individual and solely for the purpose of providing medical or aesthetic services.

5. Data Retention

Personal data is retained only for as long as necessary to fulfill the purposes described in this Privacy Policy or as required by applicable Romanian medical and legal regulations.

When the retention period expires, personal data will be securely deleted or anonymized.

6. Data Sharing

We do not sell, rent, or trade personal data to third parties.

Personal data may be shared only in the following situations:

When required by law or by competent public authorities
With trusted service providers involved in website hosting, maintenance, or technical services, under strict confidentiality obligations
When necessary to comply with legal or regulatory requirements

7. International Data Transfers

Some services used on this website may involve the processing of data outside the European Economic Area (EEA). In such cases, appropriate safeguards are implemented to ensure that personal data remains protected, such as the use of Standard Contractual Clauses approved by the European Commission.

8. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures include secure servers, access controls, and data protection procedures designed to safeguard personal information.

9. Third-Party Services

This website may use third-party services to improve functionality and security. These services may process certain technical data such as IP addresses.

Examples include:

Google Maps – used to display the clinic’s location
Google reCAPTCHA – used to protect forms from spam and automated abuse

These services are provided by third parties and are subject to their own privacy policies.

10. Cookies

This website uses cookies and similar technologies to improve user experience, analyze website traffic, and ensure proper functionality.

For detailed information regarding the use of cookies, please consult our Cookie Policy.

11. Your Rights Under GDPR

Under the General Data Protection Regulation, you have the following rights regarding your personal data:

The right to access your personal data
The right to request correction of inaccurate data
The right to request deletion of personal data
The right to restrict processing
The right to object to processing
The right to withdraw consent at any time
The right to data portability

To exercise these rights, please contact us using the contact details provided above.

12. Right to Lodge a Complaint

If you believe that your personal data is not being processed in accordance with applicable laws, you have the right to lodge a complaint with the Romanian supervisory authority:

Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)

Website: https://www.dataprotection.ro/

13. Source of Personal Data

Personal data processed through this website is collected directly from users when they submit information through contact forms, appointment requests, or other communications.

14. Automated Decision-Making

This website does not use automated decision-making or profiling that produces legal effects or significantly affects individuals.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, technical, or operational changes. Any updates will be published on this page together with the updated date.

If you have any questions regarding this Privacy Policy or how your personal data is processed, please contact us at: