Data Processing

INFORMATION NOTICE REGARDING DATA PROCESSING

QUANTICA720 LIFETECH SRL

1. About this information notice
   • Pursuant to Art. 13 and the following of the GDPR, in the relationship between applicants and beneficiaries of medical services, on one hand, and the medical clinic QUANTICA720 LIFETECH SRL – Bucharest, on the other hand, it is mandatory to inform patients about the following aspects for the correct and efficient provision of medical services.
2. The role of this information notice
   • The information notice regarding data processing is addressed to all patients, individuals who have contacted the clinic, and all natural or legal persons who have interacted with QUANTICA720 LIFETECH SRL or have provided it with personal data.
   • This information notice will also be displayed on the clinic’s website, where you can find it at any time.
   • The notice informs you about the purposes of data processing, the duration of data processing, the rights of the data subjects, as well as information about the Data Protection Officer and how you can contact them.
3. About us
   • QUANTICA 720 LIFETECH SRL (hereinafter referred to as the “Company” or “We”), through the Integrative Medicine Clinic QUANTICA 720, offers patients access to a wide range of treatments and therapies that combine best practices from conventional and complementary medicine. We provide personalized care based on the latest scientific evidence and place special emphasis on prevention, patient education, and multidisciplinary collaboration.
   • Integrative medicine is a holistic approach to healthcare that combines conventional practices with complementary therapies, focusing on treating the whole person and not just the symptoms or disease.
   • The benefits of integrative medicine include improved quality of life, pain reduction, more effective management of chronic conditions, and greater patient satisfaction.
   • QUANTICA720 LIFETECH SRL is a personal data controller and a provider of medical and complementary therapy services. We are committed to complying with national and European data protection legislation, and the confidentiality of our patients is a top priority.
4. What is the purpose and legal basis of data processing?
   • For the purpose of providing medical care and complementary services, QUANTICA720 LIFETECH SRL collects and processes personal data of patients, their relatives, and other data subjects. Personal data are used to ensure proper assessment of health conditions, conduct consultations and therapies, manage appointments, communicate with patients, issue medical documents and invoices, report to authorities, and fulfill any legal or professional obligations.
     • 4.1. Management of appointments and medical records
       • Purpose: Efficient organization of appointments and maintaining accurate medical records.
       • Legal basis: Performance of a contract (Art. 6(1)(b) GDPR).
     • 4.2. Communication with patients
       • Purpose: Informing patients about appointments, treatments, and other relevant information.
       • Legal basis: Performance of a contract (Art. 6(1)(b) GDPR) and legitimate interest (Art. 6(1)(f) GDPR).
     • 4.3. Issuing invoices and receipts
       • Purpose: Managing payments and invoicing for the services provided.
       • Legal basis: Compliance with a legal obligation (Art. 6(1)(c) GDPR).
     • 4.4. Marketing and advertising
       • Purpose: Promoting the clinic’s services and informing the public about offers and updates.
       • Legal basis: Patients’ consent (Art. 6(1)(a) GDPR).
5. What data do we process?
   • The personal data processed include: name, national ID number, date of birth, address, phone number, email address, contact details of family members or friends, medical data, and medical history.
   • The clinic may also process financial data, such as information related to payments made or received or data concerning health insurance.
   • Our clinic may process a wide range of personal medical data, such as the patient’s medical history, diagnostic and treatment information, previous treatment details and investigation results, allergies, prescriptions, prescribed medicines and their side effects, health condition, and any other relevant medical information.
   • Our clinic may process technical data (IP address, type of device used to access online services). The clinic may also process images and recordings (photos or videos made for scientific or marketing purposes, with your consent).
6. Who can access the data?
   • Access to patients’ data is granted to the clinic’s medical and administrative staff, collaborating healthcare providers, insurance companies, and competent public authorities, according to legal obligations. Additionally, certain service providers, such as insurance companies and debt collection agencies, may have access to some patient data. Authorized individuals, such as family members, may also have access to the patient’s contact and medical information.
7. Are these data disclosed?
   • Patient data may be disclosed only to authorized persons, such as medical or administrative staff, healthcare providers, and competent public authorities. Data may also be disclosed to service providers such as insurance companies and debt collection agencies, as well as authorized individuals like family members. Patient data cannot be disclosed to other parties without the patient’s consent or a legal obligation requiring disclosure (e.g., a court order).
8. Data retention period
   • Personal data are stored for the period necessary to achieve the purposes of processing, as follows:
   • Identification and contact data: For the duration of the contractual relationship and thereafter according to legal archiving obligations.
   • Medical data: In accordance with legislation on the archiving of medical records.
   • Financial data: In accordance with accounting and fiscal legal obligations.
   • Technical data: For a limited period, to ensure the security and functionality of online services.
   • Images and recordings: Until withdrawal of consent for marketing and advertising purposes.
9. Data transfer
   • QUANTICA720 LIFETECH SRL will not transfer patient data to third parties except in cases involving healthcare providers, educational institutions, or other medical institutions. Such transfers occur only based on existing legal obligations, protocols, contracts, or collaboration agreements. When the patient provides consent, data may be transferred in accordance with the applicable data protection legislation.
10. Technical and organizational data protection measures
    • QUANTICA720 LIFETECH SRL takes appropriate measures to protect patient data, such as implementing security policies and procedures, limiting access to specific data, and applying encryption and authentication measures. The clinic also ensures the confidentiality of patient data by restricting shared information to the minimum necessary and limiting access only to authorized persons.
11. What are your rights?
    • The right to be informed about the processing of personal data;
    • The right to access personal data;
    • The right to rectify or delete personal data;
    • The right to request restriction of personal data processing;
    • The right to object to personal data processing;
    • The right to withdraw consent;
    • The right to lodge a complaint with the data protection supervisory authority.
12. How can I exercise my rights?
    • An individual may exercise these rights by directly contacting the Data Protection Officer of QUANTICA720 LIFETECH SRL at dpo@quantica720.com. They may also submit a request by email or mail to the correspondence address. The individual may also contact the national data protection authority to lodge a complaint (https://www.dataprotection.ro).
    • We will strive to respond as quickly and thoroughly as possible to all your questions and concerns and to facilitate the exercise of your rights.

All the best!

Respectfully,

Management of QUANTICA720 LIFETECH SRL