Last updated: July 16, 2026

Introduction

LaMed Clinic (“LaMed”, “we”, “us” or “our”) is committed to protecting the privacy of our patients and website visitors. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you interact with our website (clinicalamed.com) or services. We comply with the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) and applicable Romanian laws on personal data protection. This Policy applies to all users in Romania and across the European Union who use our services or visit our website.

By using our website or services, you acknowledge that you have read and understood this Privacy Policy. We encourage you to read it carefully to understand our practices regarding your personal data.

Data Controller and Contact Information

The Data Controller for your personal data is LaMed Clinic, a medical clinic operating in Bucharest, Romania and serving clients across the EU. We have not appointed a dedicated Data Protection Officer (DPO), as we are not legally required to do so; instead, our internal team handles all privacy-related matters. If you have any questions about this Policy or wish to exercise your data protection rights, please contact us:

  • Email: office@clinicalamed.com
  • Phone: +40 723 577 452
  • Address: Str. Nicolae G. Caramfil 87, Bucharest 014142, Sector 1, Romania

You may contact us at the above details to request any information regarding your personal data or this Policy. We will respond to your inquiries and requests as promptly as possible and, in any event, within the timeframe required by law.

Personal Data We Collect

We only collect personal data that is necessary for the purposes described in this Policy. The types of personal data we may collect include:

  • Identity and Contact Data: Full name, email address, and telephone number.
  • Appointment Request Information: Details you provide when requesting an appointment (e.g. preferred date and time, medical service requested, and any additional information you choose to include in your message).
  • Website Usage Data: Technical information collected when you visit our site, such as your IP address, browser type, operating system, referring website, pages viewed, and the dates/times of access. This may be collected through server logs and, where you consent, analytics cookies.
  • Cookies and Analytics Data: Data collected through cookies and similar technologies (including Google Analytics cookies) about your interactions with our website, such as which pages you visited. These are only set with your consent. See the Cookies and Tracking Technologies section below for more details.

We do not actively collect any special categories of personal data (such as health information) through our website, unless you voluntarily provide it (for example, by describing your condition when requesting an appointment). Any health-related information that you choose to share with us will be treated with strict confidentiality and processed only in accordance with applicable laws and for the purpose of providing you with medical services.

How We Collect Your Data

We collect personal data through the following methods:

  • Directly from You: You may provide personal data to us when filling out the appointment/contact form on our website, or when contacting us via email or phone.
  • Automatically: When you visit our website, certain technical data (such as IP address and device information) is collected via server logs and, where you consent, cookies and similar technologies. (Please refer to the Cookies and Tracking Technologies section for more information.)
  • Through Third-Party Tools: With your consent, we use Google Analytics to understand how our website is used. Our website is also served through Cloudflare (a content-delivery and security network), which processes technical data such as your IP address to keep the site secure and fast.

If you choose not to provide certain personal data (e.g. not providing contact information for an appointment), we may not be able to fulfil the corresponding request (for example, we cannot schedule an appointment without a name and contact method). You can, however, browse the informational parts of our website without providing personal data.

Purposes and Legal Bases for Processing

We process your personal data for the specific purposes outlined below, and only where we have a valid legal basis under GDPR to do so:

  • Appointment Scheduling and Medical Services: We use your identity and contact data, along with any appointment details you provide, to schedule and confirm appointments and provide medical services. Legal Basis: steps taken at your request prior to entering into a contract, and performance of that contract (GDPR Article 6(1)(b)). If you provide health-related information, we process such special category data on the basis of your explicit consent or the GDPR Article 9(2)(h) exception (medical diagnosis and healthcare provision under confidentiality obligations), as appropriate.
  • Communication and Support: If you contact us with an inquiry or request, we process your data to respond. Legal Basis: our legitimate interest in responding to people who contact us (GDPR Article 6(1)(f)), or pre-contractual steps at your request (GDPR Article 6(1)(b)).
  • Analytics and Service Improvement: We analyse how visitors use our website to improve it, using Google Analytics. Legal Basis: your consent (GDPR Article 6(1)(a)), obtained through our cookie consent banner. Analytics cookies are only set if you accept them, and you can withdraw consent at any time.
  • Security and Fraud Prevention: We process technical data (such as IP addresses) to protect our website and systems against unauthorised access, malware, and abuse. Legal Basis: our legitimate interests (GDPR Article 6(1)(f)) in the security and integrity of our services.
  • Compliance with Legal Obligations: We process personal data to comply with legal and regulatory obligations (for example, medical record-keeping and tax/accounting requirements). Legal Basis: compliance with a legal obligation (GDPR Article 6(1)(c)).

We do not engage in automated decision-making or profiling that produces legal or similarly significant effects on you. We do not use your data for advertising or marketing tracking. If we ever decide to process your data for a new purpose, we will update this Privacy Policy and inform you as required.

Cookies and Tracking Technologies

Our website uses cookies and similar technologies. Cookies are small text files placed on your device when you visit a website. We manage cookie consent through a consent banner (CookieYes) together with Google Consent Mode, so that optional cookies are only set after you accept them. We use:

  • Essential Cookies: Necessary for the website to function (for example, to remember your cookie preferences). These do not require consent.
  • Analytics Cookies: We use Google Analytics 4 (loaded via Google Site Kit) to understand how visitors use our site. These cookies are only set if you accept analytics in the consent banner. Until you consent, no analytics data is sent to Google.
  • Third-Party Map Embed (Google Maps): Our contact page includes a Google Maps location. The map does not load automatically — it only loads when you click to open it, at which point your IP address is shared with Google (Google Ireland Ltd.) to display the map. If you do not click, no request is made to Google Maps.

We do not use advertising or social-media tracking pixels (such as the Meta/Facebook pixel) on our website. Website fonts are served locally from our own servers, so simply viewing our pages does not transmit your data to font providers.

You can manage or withdraw your cookie consent at any time using the cookie settings link on our website, or by adjusting your browser settings to refuse cookies. Please note that disabling essential cookies might impact some features of our site.

Data Sharing and Third-Party Recipients

We treat your personal data with care and confidentiality. We do not sell or rent your personal information. We may share your data with certain trusted third parties, in the situations described below:

  • Website Hosting and Security: Our hosting provider and Cloudflare (our content-delivery and security network) process technical data (such as your IP address) to operate, secure, and speed up our website.
  • Analytics: Google (Google Analytics), where you have consented, acts as our processor in providing aggregated website analytics.
  • Google Maps: If you choose to load the map on our contact page, Google receives your IP address to serve the map.
  • Other Vendors: We may engage vendors for services such as appointment scheduling or IT support. They process data only as necessary to provide their services to us and are bound by confidentiality and data protection agreements.
  • Legal Requirements and Protection: We may disclose personal data where necessary to comply with a legal obligation or valid legal process, to enforce our terms, or to protect the rights, property, or safety of LaMed Clinic, our patients, or others.

Except for the cases outlined above, we will not share your personal data with third parties without your knowledge and (where legally required) your consent.

International Data Transfers

We prefer to store and process personal data within the European Union; our primary operations are in Romania (EU). However, some service providers — in particular Google — may process data on servers in the United States or other countries outside the European Economic Area (EEA). Whenever we (or our processors) transfer personal data outside the EEA, we rely on appropriate safeguards required by GDPR, such as a European Commission adequacy decision, Standard Contractual Clauses (SCCs), or certification under an approved data-transfer framework. You can contact us for more information about the specific safeguards in place.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with legal obligations. In general:

  • Patient and Appointment Data: Retained for at least five (5) years from your last interaction with us, or longer where required by Romanian healthcare regulations, to maintain medical history and comply with record-keeping obligations.
  • Communications Data: If you contact us but do not become a patient, we typically retain your messages and contact data for up to 5 years, unless you request earlier deletion (where permissible).
  • Analytics Data: Retained in aggregate for a limited period (typically up to 14 months, as configured in Google Analytics).
  • Legal Compliance: Where we must keep data to comply with legal obligations, we retain it for the period mandated by law.

After the applicable retention period expires, we will securely delete or anonymise your personal data. If deletion is not immediately possible (for example, data held in backups), we will securely isolate it from further processing until deletion is possible.

Data Security

We have implemented appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These include:

  • SSL/TLS Encryption (HTTPS): Data submitted through forms on our site is encrypted in transit between your browser and our servers.
  • Access Control: Personal data is accessible only to authorised personnel on a need-to-know basis, bound by confidentiality obligations.
  • Secure Storage: We store data on secure servers with up-to-date protections (firewalls, anti-malware) and apply security updates as needed.
  • Data Minimisation: We collect and retain only the personal information necessary for the stated purposes.

While we strive to protect your personal data, no method of transmission over the Internet or electronic storage is completely secure, so we cannot guarantee absolute security. If we detect a data breach affecting your personal data, we will follow the applicable GDPR breach-notification requirements.

Your Rights Under GDPR

As a data subject under the GDPR, you have the following rights regarding your personal data:

  • Right to Access (Article 15) — to obtain confirmation of whether we process your data and a copy of it.
  • Right to Rectification (Article 16) — to have inaccurate or incomplete data corrected.
  • Right to Erasure (Article 17) — to request deletion of your data in certain circumstances (subject to our legal obligations to retain some records).
  • Right to Restrict Processing (Article 18) — to request that we limit processing in certain situations.
  • Right to Object (Article 21) — to object to processing based on our legitimate interests.
  • Right to Data Portability (Article 20) — to receive data you provided in a structured, machine-readable format.
  • Right to Withdraw Consent — where processing is based on consent (such as analytics cookies), you can withdraw it at any time, without affecting the lawfulness of processing before withdrawal.
  • Right to Lodge a Complaint (Article 77) — with a supervisory authority. In Romania, this is the National Supervisory Authority for Personal Data Processing (ANSPDCP), www.dataprotection.ro, 28–30 General Gheorghe Magheru Blvd., Sector 1, 010336 Bucharest, Romania. We would appreciate the chance to address your concerns directly first.

Exercising Your Rights: You can exercise any of your rights by contacting us via email at office@clinicalamed.com or by phone at +40 723 577 452. We may need to verify your identity before fulfilling certain requests. We will respond within one month, as required by GDPR (extendable by up to two further months for complex requests). Exercising your rights is free of charge.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time in response to legal, technical, or business developments. When we do, we will post the new version on this page and update the “Last updated” date at the top. We encourage you to review this Policy periodically.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

LaMed Clinic
Str. Nicolae G. Caramfil 87, Bucharest 014142, Sector 1, Romania
Email: office@clinicalamed.com
Phone: +40 723 577 452