GDPR
Privacy Policy
Last updated: 2 October 2026
This page explains what personal data we collect through drdobrescu.ro, why we collect it, how long we keep it and what your rights are under Regulation (EU) 2016/679 (GDPR).
1. Who is responsible for your data
The data controller is Metropolitan Dental SRL, tax ID (CUI) 46881537, registered office at Bd. Iancu de Hunedoara 42A, Sector 1, Bucharest, through which Dr. Paul Nicu Dobrescu practises at ARTeeth Dental Clinic.
For any question about your personal data, write to office@drdobrescu.ro or call the clinic reception on 0737 111 144.
2. What data we collect
We only collect the data you send us through the appointment form:
- first and last name
- phone number and/or email address
- the treatment you are interested in and your preferred date
- the optional message you write
Please do not include detailed medical information in your message. We will discuss it in confidence during your consultation. If you nevertheless choose to share information about your health, we process it only on the basis of your explicit consent, given by ticking the box in the form.
3. Why we use the data and on what legal basis
- to answer your request and arrange an appointment, at your request, before entering into a contract (Art. 6(1)(b) GDPR)
- on the basis of the consent you give by ticking the box in the form (Art. 6(1)(a) and, for any health data, Art. 9(2)(a) GDPR)
We do not use your data for marketing, we do not send newsletters and we do not make automated decisions based on it.
4. How long we keep the data
Requests received through the form are kept for no longer than 12 months from the last contact and are then deleted. If you become a patient, your data will become part of the clinic's medical records and will be kept for the period required by medical legislation.
5. Who has access to the data
Your data is seen only by Dr. Paul Nicu Dobrescu and, where needed to arrange your appointment, by the staff of ARTeeth Dental Clinic. The website and email are hosted by Host-Age on servers in Romania. We do not sell your data and do not transfer it outside the European Union.
6. Cookies and external services
This website does not use its own cookies, analytics or advertising tools. To display fonts, your browser connects to the Google Fonts service, which receives your device's IP address, as happens when loading any resource on the internet.
On the contact page you can choose to display an interactive Google Maps map. The map loads only after you press the "Show the map" button. From that point, Google may process your IP address and use cookies under its own privacy policy. If you do not display the map, no information is sent to Google Maps.
On the About page you can play a podcast episode hosted on YouTube. The video loads in privacy-enhanced mode (youtube-nocookie.com) only after you press play. From that point, Google may process your IP address and use cookies under its own privacy policy. If you do not play the video, no information is sent to YouTube.
7. Your rights
You have the right to:
- access the data we hold about you
- have inaccurate data corrected
- have your data deleted
- restrict processing or object to it
- receive your data in a format that allows it to be transferred to another controller (portability)
- withdraw your consent at any time, without affecting processing carried out before withdrawal
To exercise any of these rights, write to office@drdobrescu.ro. We will reply within one month. If you believe your rights have been breached, you may lodge a complaint with the Romanian data protection authority (ANSPDCP), www.dataprotection.ro.
8. Security
The website uses an encrypted connection (HTTPS), so the data sent through the form cannot be intercepted in transit. Access to the mailbox is password-protected.
9. Changes
We may update this policy when the way we handle data changes. The version in force is always the one published on this page, with the last-updated date shown above.