OncoplasticaBreast surgery - Dr. Răzvan Andrei

Home›Privacy policy

Privacy and cookie policy

This page explains what personal data we collect through this website, why we use it, how long we keep it and what rights you have. We have tried to write it in plain language.

Who is responsible for your data

The data controller is DR. IOAN-RAZVAN ANDREI - CHIRURGIE GENERALA (tax ID 54312370), which runs this website under the name Dr. Răzvan Andrei, with its registered office at B-dul Bucureștii Noi no. 136, ground floor, apt. 5, Sector 1, Bucharest.

You can contact us at drrazvanandrei@gmail.com or by phone on 0750 430 650.

What data we collect and when

The booking form
Your first and last name, phone number, email address (optional), short message (optional) and your consent. The request reaches the practice by email; the website does not store it on its server.
WhatsApp messages
If you message us on WhatsApp, we see your phone number, your profile name and the content of your messages. WhatsApp is a separate service with its own privacy policy.
Phone and email
If you call or write to us directly, we use the details you give us in order to reply.
Technical data
The server hosting the website may automatically record your IP address and technical information about your visit (access logs), for security and operation.
Please: Do not send test results or medical details through the form or on WhatsApp before the consultation. We discuss them at the practice.

Why we use your data and on what basis

To contact you
We use your name, phone number and, if you left it, your email, to respond to your request and arrange an appointment. The basis is your consent (Article 6(1)(a) GDPR), which you can withdraw at any time.
If you write to us about your health
If, although we ask you not to, you send us information about your health, we use it only to respond to your request, on the basis of your explicit consent (Article 9(2)(a) GDPR).
Website security
Technical logs help us protect the website and the form against abuse. The basis is our legitimate interest (Article 6(1)(f) GDPR).
Good to know: This page covers data collected through the website. If you become a patient, your medical data is processed separately, under health legislation and the information you receive at the practice.

Who receives your data

Your data can be seen only by:

  • Dr. Răzvan Andrei and, where applicable, members of the practice team who handle appointments and are bound by confidentiality
  • the providers that help us run the website and communications: Romarg (website hosting and the domain mailbox) and Google (the Gmail email service, where requests from the form arrive)
  • WhatsApp (Meta), if you choose to write to us there
  • public authorities, only where the law requires us to

We do not sell your data and we do not use it for advertising.

Transfers outside the European Economic Area

Some of the providers above (for example Google or Meta) may also process data outside the European Economic Area. In that case, the transfer is made on the basis of the safeguards provided by the GDPR, such as standard contractual clauses or an adequacy decision of the European Commission.

How long we keep your data

We keep the data from the form and from messages only as long as is necessary to respond to your request and arrange the appointment. If you do not become a patient, we delete it within 12 months at most. The server's technical logs are kept for the period set by the hosting provider (Romarg).

Your rights

You have the right:

  • to find out what data we hold about you and to receive a copy (right of access)
  • to ask for incorrect data to be corrected (rectification)
  • to ask for your data to be deleted (right to erasure)
  • to ask for processing to be restricted
  • to receive your data in a common format or ask for it to be transferred (portability)
  • to object to processing based on legitimate interest
  • to withdraw your consent at any time, without affecting processing carried out before the withdrawal

To exercise your rights, write to us at drrazvanandrei@gmail.com or call 0750 430 650. We reply within one month at most.

If you are not satisfied with our reply

Authority
You can lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP).
Address
B-dul G-ral. Gheorghe Magheru no. 28-30, Sector 1, postal code 010336, Bucharest
Phone
+40 318 059 211

Data security

The website uses a secure connection (HTTPS). The request from the form is sent directly by email to the practice and is not stored on the server. Access to the mailbox is limited to authorised persons.

Cookies and browser storage

The website does not use tracking, advertising or visit-analytics cookies.

It uses only the browser's session storage (sessionStorage), for one simple function: to remember, for the duration of your visit, that you closed the WhatsApp message. This information stays in your browser, contains no personal data, is not sent to us and disappears when you close the tab or the browser. You choose the language through the page address (Romanian, or English at /en/); we do not remember it.

Fonts and images are served from the same site, without sending your IP address to other companies.

Links to WhatsApp, to our Instagram and Facebook accounts and to our partners' websites (clinics, professional societies) take you to sites we do not control; they have their own policies and may use cookies.

If we add statistics or other tools that use cookies, we will tell you and ask for your consent first, where the law requires it.

Minors

The form on the website is for people over 18. For a child, the appointment is arranged by a parent or legal representative.

Changes to this page

We may update this page. The date of the last update appears below.

Last updated: 1 October 2026.

Have a question or want to book?