← Back to the homepage
Work in progress (draft). The text below is a basic version, to be reviewed and completed by the company/lawyer before publication (the fields marked […]). The page is currently unindexed.

This policy explains what personal data we collect through the website noes.ro, for what purpose, on what legal basis and what rights you have, in accordance with Regulation (EU) 2016/679 (GDPR) and the applicable Romanian legislation.

1. Who is the data controller

The controller of your data is [COMPANY NAME] S.R.L., CUI [CUI], registered with the Trade Register under [Trade Register No. J.../.../....], with registered office at Strada Armenească 10, Bucharest (commercial brand: Noes).

2. What data we collect and how

We collect only the data you send us, through the contact and booking form on the site:

We do not ask for or collect special-category data through the website (detailed health data, etc.). Please do not include sensitive medical information in your message — this is discussed directly, at the clinic.

3. For what purpose and on what legal basis

PurposeLegal basis (GDPR)
To respond to requests and schedule sessionsSteps taken at your request, prior to/with a view to entering into a contract (art. 6(1)(b)) and/or consent (art. 6(1)(a))
To contact you to confirm/reschedule your appointmentLegitimate interest (art. 6(1)(f)) — the proper delivery of the service
To comply with legal obligations (e.g. accounting, if you become a client)Legal obligation (art. 6(1)(c))

4. How long we keep the data

We keep the form data only as long as necessary for the purpose: as a rule, up to [the period — e.g. 12 months] from the last interaction, if you do not become a client. If you use our services, the data relating to the contractual relationship is kept for the period required by law (e.g. financial and accounting documents). Once these periods expire, the data is deleted or anonymized.

5. To whom we disclose the data

We do not sell or rent your data. We may disclose it only:

6. Transfer outside the EU/EEA

By using Google services, some data may be processed on servers outside the EEA. Google ensures an adequate level of protection through legal mechanisms (Standard Contractual Clauses of the European Commission and, where applicable, the EU–US Data Privacy Framework).

7. Your rights

Under the GDPR, you have the right to: access to your data, rectification, erasure („the right to be forgotten"), restriction of processing, portability of the data, objection to processing and withdrawal of consent at any time (without affecting prior processing).

You can exercise your rights by writing to us at contact@noes.ro. You also have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP, dataprotection.ro).

8. Cookies

The site uses cookies strictly necessary for its operation, which do not require consent. In addition, only with your consent, we use Meta Pixel (Facebook/Meta) to analyze traffic and measure the effectiveness of our advertising campaigns; it may set tracking cookies and transmit data to Meta Platforms Ireland Ltd.

On your first visit we ask for your consent via a banner, and tracking cookies are activated only if you choose “Accept”. You can decline without any impact on how the site works, and you can change your preferences at any time.

Change cookie preferences

9. Security

We apply reasonable technical and organizational measures to protect the data (restricted access, secure HTTPS connection). However, no system is 100% secure; we encourage you not to send us sensitive information through the form.

10. Changes to this policy

We may update this policy. The version in force is the one published here, bearing the last-updated date shown above.

Do you have questions about this document? Write to us at contact@noes.ro.