Privacy Policy

[Last updated: 23.08.2026]

1. Who we are

DR.UNGUREANU S.R.L., IDNO 1003600122418, with its registered office at 91 Decebal Blvd., Chișinău, Republic of Moldova (hereinafter “the Clinic”, “we”), is the controller of your personal data.

Contact:

We process personal data in accordance with Law No. 195 of 25.07.2024 on personal data protection, Law No. 411/1995 on health care and other regulations applicable to medical activity in the Republic of Moldova.

2. What data we collect

2.1. Data you provide directly

CategoryExamples
Identification and contact detailssurname, first name, phone, e-mail
Appointmentrequested service, preferred doctor, desired date and time
Health data (special category)reason for contacting us, relevant medical history, anamnesis, information shared via WhatsApp, Viber or Messenger
Medical imagingX-rays, computed tomography (CBCT) scans, intraoral and extraoral photographs
Content of communicationsmessages sent via the form or through messaging channels

2.2. Data collected automatically

CategoryExamples
Technical dataIP address, device and browser type, operating system, language
Usage datapages visited, visit duration, traffic source, interactions with the website
Online identifierscookies and similar technologies — see the Cookie Policy

2.3. Health data and medical imaging

Health data is a special category of data, which may be processed only on a legal basis expressly provided for by law.

Through the website, we collect such data only to the extent that you provide it to us voluntarily, so that we can assess your request and refer you correctly. We recommend that you do not send more medical information via the form or messaging apps than is necessary to book an appointment. Clinical details are discussed during the consultation.

Imaging examinations — including computed tomography — generate health data subject to the same regime, as well as to radiation protection rules. These images are kept in the clinical records, under medical confidentiality, and are released to the patient upon request.

The medical record and clinical documentation are created and kept at the clinic, not through the website.

3. Purposes and legal bases

PurposeData processedLegal basis (Law No. 195/2024)
Processing your appointment request and contacting youidentification, contact details, requested serviceArt. 6(1)(b) — pre-contractual measures taken at the request of the data subject
Consultation, diagnosis, treatment plan and provision of dental servicesall categories, including health data and imagingArt. 6(1)(b) in conjunction with Art. 9(2)(h) — healthcare, subject to the obligation of professional secrecy
Assessing a request sent via the form or messaging, when it contains medical informationhealth data provided voluntarilyArt. 9(2)(a) — explicit consent, expressed by sending this information
Compliance with legal obligations (medical records, reporting, accounting, taxation, radiation protection)identification, data on the services providedArt. 6(1)(c) — legal obligation
Marketing communications (offers, news, campaigns)contact detailsArt. 6(1)(a) — consent, given via a separate checkbox
Publication of clinical cases, “before and after” photos and testimonialsimages, health dataArt. 9(2)(a) — explicit, separate consent given in writing
Traffic analysis and website improvementtechnical and usage data, analytics cookiesArt. 6(1)(a) — consent given via the cookie banner
Advertising and remarketingonline identifiersArt. 6(1)(a) — consent given via the cookie banner
Website security and abuse prevention (reCAPTCHA, access logs)technical dataArt. 6(1)(f) — legitimate interest
Establishment, exercise or defence of legal claimsas applicableArt. 6(1)(f) / Art. 9(2)(f)

About consent: where processing is based on consent, it is requested separately for each purpose, through unticked checkboxes, and may be withdrawn at any time, as easily as it was given. Withdrawal does not affect the lawfulness of prior processing. Refusing to consent to marketing or analytics cookies does not in any way affect your access to the clinic’s services.

Mandatory nature of providing data: your surname, first name and one contact detail are required to book an appointment. Without them, we cannot process your request. All other information is optional.

4. Who has access to your data

Your data is not sold and is not transferred to third parties for commercial purposes. We may disclose it to the following categories of recipients:

Recipient categoryRolePurpose
Medical and administrative staff of the clinicinternal access, on a need-to-know basisprovision of services
Google Ireland Ltd. (Tag Manager, Analytics, reCAPTCHA, Maps, YouTube, Ads)processor / joint controlleranalytics, security, functionality, advertising
Meta Platforms Ireland Ltd. (Facebook, Instagram, Messenger, WhatsApp)independent controller for its own processingcommunication and advertising
TikTok Technology Ltd.independent controller for its own processingadvertising
Dental laboratories and partner doctorsprocessorsproduction of prosthetic work and implementation of treatment plans
Accounting, audit, legal adviceprocessorslegal obligations, defence of rights
Public authoritiesrecipients by lawupon a reasoned request, within the limits of the law

With each processor, we have concluded a contract imposing confidentiality and security obligations at least equivalent to our own, in accordance with Art. 28 of the Law.

5. Transfer of data outside the Republic of Moldova

The servers hosting the website and the appointment database are located in the REPUBLIC OF MOLDOVA.

Certain providers (Google, Meta, TikTok) may process data on servers located outside the Republic of Moldova and the European Economic Area, including in the United States of America. These transfers take place on the basis of standard contractual clauses concluded with these providers and, where applicable, the relevant adequacy frameworks.

You can request a copy of the applicable safeguards by writing to smile@ungureanu.md.

6. How long we keep your data

CategoryRetention period
Appointment requests that did not result in an appointment3 months from the last interaction
Medical records and imaging (including CBCT)in accordance with the periods set out in the List of Standard Documents and Their Retention Periods, approved by Order of the State Archive Service No. 57 of 27.07.2016, and in the acts of the Ministry of Health on mandatory medical documentation
Accounting and tax documentsin accordance with Art. 21 of Law No. 287/2017 on accounting and financial reporting and the aforementioned List
Data processed for marketing purposesuntil consent is withdrawn or 3 years from the last interaction
Consents for publishing clinical casesfor the duration of publication and 3 years after withdrawal, as proof of lawful processing
Documents relevant to the defence of legal claims3 years from the end of treatment, corresponding to the general limitation period
Cookiesaccording to the periods set out in the Cookie Policy
Server access logs6 months

Once these periods expire, the data is deleted or irreversibly anonymised.

7. Data security

We apply technical and organisational measures appropriate to the risk, in accordance with Art. 32 of the Law: encrypted connection (HTTPS), role-based access control and restriction, authentication with strong passwords, backups, regular updates of software components, staff training and contractual confidentiality obligations.

If a data security breach occurs that poses a risk to your rights, we notify the National Center for Personal Data Protection within 72 hours and inform you directly where the risk is high.

8. Your rights

Under Chapter III of Law No. 195/2024, you have the following rights:

How to exercise your rights

Send a request to smile@ungureanu.md or in writing to the clinic’s registered office. We will reply within one month of receiving your request; this period may be extended by two months for complex requests, in which case we will inform you of the extension and the reasons for it. Exercising your rights is free of charge.

To protect confidentiality, we may ask you for additional information to confirm your identity.

Supervisory authority

National Center for Personal Data Protection

9. Minor patients

Pediatric dentistry services and any treatment of a patient under 18 are provided at the request and with the consent of the parent or legal representative, who also exercises the rights regarding the child’s data.

The appointment form on the website is intended for adults. If a parent finds that a child has sent us data without their consent, they can write to us at smile@ungureanu.md and we will delete that data.

10. Clinical cases, photos and testimonials

We publish “before and after” photos, clinical cases and testimonials — on the website, on social networks or on our video channel — only on the basis of explicit, separate and written consent, obtained from the patient or their legal representative.

Consent is always optional, does not in any way condition access to treatment and may be withdrawn at any time by writing to smile@ungureanu.md. Upon withdrawal, we remove the material from the website and our channels within a reasonable time. Materials already distributed or saved by third parties may, technically, remain beyond our control.

11. Cookies

The website uses strictly necessary cookies, as well as analytics and marketing cookies, the latter only on the basis of the consent given via the banner displayed on your first visit. You can change your choices at any time in the .

Full details can be found in the Cookie Policy.

12. Changes to this policy

We may update this document as a result of changes to our processes or to the law. The version in force is published on this page, indicating the date of the last update. If the changes affect processing based on your consent, we will ask for your consent again.

Request a consultation quickly

Fill in the form and one of our specialists will contact you to offer the right solutions. We are here for you!

    By clicking on the button, you agree to the terms and conditions for the processing of personal data.

    Dr. Ungureanu Dental Clinic

    91 Decebal Boulevard, Chisinau