Privacy Policy

Last updated: February 21, 2026

1. Data Controller

Dr. Roxana Pricope, dermatologist, is the controller of personal data collected through the website https://drroxanapricope.ro, in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Romanian legislation.

Contact details:

2. Data We Collect

2.1 Automatically collected data

When you visit the website, we automatically collect via Google Tag Manager:

IP address (anonymized)
Browser type and version
Pages visited and session duration
Traffic source (search engine, social network, direct)
Device type

2.2 Data you provide voluntarily

When you contact us via WhatsApp or phone for an appointment, you may provide:

Full name
Phone number
Your request or question

Important: We do not collect sensitive medical data through this website. Medical information is handled exclusively during consultations, in accordance with applicable medical protocols and professional ethics.

3. Purpose and Legal Basis for Processing

Purpose	Legal basis (GDPR)
Responding to appointment requests	Art. 6(1)(b) – performance of a contract
Website traffic analytics	Art. 6(1)(a) – consent (cookies)
Improving website services	Art. 6(1)(f) – legitimate interest
Compliance with legal obligations	Art. 6(1)(c) – legal obligation

4. Recipients of Data

Your data may be shared with the following recipients:

Google LLC – web analytics services (Google Analytics 4 / Google Tag Manager), based in the USA, under Standard Contractual Clauses approved by the European Commission.
Meta Platforms / WhatsApp – only when you initiate a conversation via the WhatsApp button on the website.
Public authorities – in cases expressly provided for by law.

We do not sell, rent, or transfer your personal data to third parties for their own commercial purposes.

5. International Data Transfers

Some recipients (Google, Meta) are located outside the European Economic Area. Transfers are carried out with appropriate safeguards — Standard Contractual Clauses (SCCs) approved by the European Commission — or under a GDPR-recognized transfer mechanism.

6. Data Retention

Web analytics data: maximum 14 months (per Google Analytics settings)
WhatsApp / email communications: for the duration of handling the request + 12 months
Marketing data: until consent is withdrawn

7. Your Rights

Under GDPR, you have the following rights:

Right of access (Art. 15) – you may request a copy of the personal data we process.
Right to rectification (Art. 16) – you may request correction of inaccurate or incomplete data.
Right to erasure (Art. 17) – the "right to be forgotten", under the conditions set by GDPR.
Right to restriction of processing (Art. 18) – you may request limited processing in certain situations.
Right to data portability (Art. 20) – you may receive your data in a structured, machine-readable format.
Right to object (Art. 21) – you may object to processing based on the controller's legitimate interest.
Right to withdraw consent – at any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at: contact@drroxanapricope.ro. We will respond within a maximum of 30 calendar days.

8. Cookies and Tracking Technologies

The website uses cookies and similar technologies. Via Google Tag Manager, analytics tools (Google Analytics 4) may be activated that place cookies on your device.

Full details on the types of cookies used, their duration, and how to manage them can be found in our Cookie Policy.

You may refuse non-essential cookies through the banner displayed on your first visit or through your browser settings.

9. Data Security

We implement technical and organizational measures appropriate to the level of risk, including:

Secure HTTPS (TLS) transmission
Restricted access to personal data
Use of services with verified security policies

10. Supervisory Authority

If you believe your rights have been violated, you have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP):

Website: www.dataprotection.ro
Address: B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, 010336 Bucharest, Romania
Phone: +40.318.059.211
Email: anspdcp@dataprotection.ro

11. Changes to This Policy

We reserve the right to update this privacy policy whenever necessary. The date of the last update is indicated at the top of this document. We recommend checking this page periodically.