Privacy Policy

1. Introduction

At Fred Dental, we are committed to protecting your privacy and ensuring the security of your personal and medical information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information in compliance with Romanian data protection laws and GDPR.

2. Information We Collect

Personal Information

• Name, date of birth, and contact information
• National identification number (CNP)
• Insurance information

Medical Information

• Medical and dental history
• Treatment records and diagnosis
• X-rays and diagnostic images
• Medications and allergies
• Treatment plans and progress notes

3. How We Use Your Information

We use your information for the following purposes:

• Providing dental care and treatment
• Maintaining accurate medical records
• Appointment scheduling and reminders
• Insurance claim processing
• Communication about your treatment
• Legal and regulatory compliance
• Quality assurance and improvement

4. Information Sharing

We may share your information only in the following circumstances:

• With your explicit written consent
• With insurance companies for claim processing
• With referring physicians or specialists
• When required by law or court order
• For public health reporting as required

5. Data Security

We implement comprehensive security measures to protect your information:

• Encrypted data transmission and storage
• Access controls and user authentication
• Regular security audits and updates
• Staff training on data protection
• Secure physical storage of paper records
• Regular data backups and recovery procedures

6. Your Rights

Under GDPR and Romanian law, you have the following rights:

• Right to Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data (with legal limitations)
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to certain types of processing

7. Data Retention

We retain your medical records for the period required by Romanian law (minimum 10 years for adults, 10 years after reaching majority for minors). Personal data not related to medical care may be retained for shorter periods as legally required.

9. Third-Party Services

We may use third-party services for:

• Appointment scheduling systems
• Email communications
• Insurance processing
• Website analytics

All third-party services are required to maintain appropriate data protection standards.

10. Children's Privacy

For patients under 18, we require parental or guardian consent for treatment and data processing. Parents/guardians have the right to access and control their child's information.

11. Contact & Complaints

For privacy-related questions or to exercise your rights, contact our Data Protection Officer:

You also have the right to file a complaint with the Romanian Data Protection Authority (ANSPDCP).

12. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on our website with an updated effective date. We will notify you of significant changes via email or prominent website notice.