Privacy policy

The data controller is TODO SRL, tax ID (CUI) TODO (CUI), trade registry TODO (J__/____/____), registered office at TODO strada, nr., Sibiu, județul Sibiu. For any data question contact date@urgentadentara.ro.

When you send an SOS request, we collect:

• identity and contact data: name, age, phone number, email address, the address where the medic is needed;
• health data: the tooth you pointed at and your own description of the problem. Under art. 9 GDPR this is a special category, processed only with your explicit consent;
• approximate location, only if you choose to attach it;
• preferred language and the time of the request;
• for abuse prevention: a cryptographic identifier derived from your IP address and phone number (the anti-abuse counters never store the raw IP);
• aggregate statistics about progression through the SOS form (daily counts of opens and completed steps), with no personal identifier.

The site uses no marketing or tracking cookies and loads no third-party traffic-analytics services. Our own visit measurement, which only starts if you accept it, is described in clause 09.

• to forward your request to dentists and schedule the intervention: performance of the contract between you and us (art. 6(1)(b) GDPR);
• for health data: your explicit consent, given via the checkbox at submission (art. 9(2)(a) GDPR). You can withdraw it at any time, without affecting processing already performed;
• to limit abuse and protect the medics from fake requests: our legitimate interest (art. 6(1)(f) GDPR);
• legal obligations, where applicable.

The request data (name, age, phone, email, address, the description of the problem, location if present) goes exclusively to the dentist who accepts your case, so they can contact and treat you. The dentists are independent professionals bound by professional secrecy.

The technical infrastructure is provided by Google Cloud (Firebase) as a processor, with data stored in the europe-west1 region (Belgium, European Union).

We do not sell your data and do not use it for marketing.

• case data: 12 months after the case closes, then deleted or anonymized;
• anti-abuse counters: at most a few days, then they expire automatically;
• technical server logs: at most 30 days.

You have the right of access, rectification, erasure, restriction, portability, objection, and the right to withdraw consent. Write to date@urgentadentara.ro from or referencing the phone number used in the request; we reply within 30 days.

If you believe the processing breaks the law, you can complain to the Romanian supervisory authority (ANSPDCP): dataprotection.ro.

Email date@urgentadentara.ro with the phone number used in the request. We delete or anonymize your case data, except what the law requires us to keep.

Case data is not publicly readable; access is restricted by server-side rules, and until direct contact the patient sees only the medic's first name and a partially masked number.

Requests are routed to medics automatically, but no decision with legal or similarly significant effect is made solely by automation: accepting a case is always a medic's decision.

PENDING LEGAL REVIEW. A new clause, added together with our own traffic measurement, not yet checked by a lawyer. To verify: the field list below against the code that collects it, the 90 day period, and the legal references.

We measure how much the site is used with our own system, hosted on the same infrastructure as the rest of the application. We do not use Google Analytics or any other third-party analytics service, and we send nothing to advertising networks.

If you accept, we record for each visit: the page opened, the page you came from, the language and device type, the time of the visit, and a randomly generated session identifier. The identifier lasts only for the visit, is not linked to your name or phone number, and is not used to recognize you later. We build no profiles.

The legal basis is your consent (art. 6(1)(a) GDPR), and storing information in your browser also rests on the consent required by electronic communications law (Legea nr. 506/2004). Until you tap Accept, nothing is collected or stored for statistics. In the banner shown on your first visit, Accept and Refuse are the same size and equally visible, nothing is preselected, and closing the banner without choosing counts as a refusal.

Raw events are kept for 90 days from the time they are recorded, then deleted automatically. What remains after that is aggregate totals only, from which no person can be identified.

You can withdraw consent at any time, as easily as you gave it: press the button below and choose Refuse. From that moment we collect nothing. Your choice is held locally in your browser under the key ud_consent: if you clear the site data, you return to the state of not having chosen, and statistics stay off until you choose again.

Change your choice

The current version of this policy is identified by the date above. Changes are published on this page, and your consent is recorded together with the version in force at the time of your request.