Privacy and cookie policy
Last updated: 8 September 2026
This page explains what data we collect about you when you browse dentalchic.ro or send us a request through a form, what we do with it, and what rights you have. It does not describe the treatments the clinic offers, only how we handle personal information.
Who is responsible for your data
The data controller is Dental Chic, based at str. Take Ionescu nr. 113, Gheorgheni district, Cluj-Napoca, Romania. For any question about privacy you can write to us at receptie@dentalchic.ro or contact us by phone, at the number shown in the site footer.
What we collect, and why
When you fill in a form on the site we ask for a few details, strictly what we need to reply to your request:
| Data | Purpose | Legal basis |
|---|---|---|
| Name | So we know who we are replying to and how to address you | Consent |
| Phone | So we can contact you to arrange an appointment | Consent, legitimate interest |
| So we can send you the appointment confirmation or the reply to your request | Consent, legitimate interest | |
| The message you write in the form | So we understand your request and prepare a relevant reply | Consent |
Visit source: the page you landed on, the site you came from (referrer), the campaign parameters in the address (utm_source, utm_medium, utm_campaign, utm_content, utm_term), the gclid and fbclid click identifiers and the Google Analytics client identifier. This is collected only after you accept from the cookie banner. | So we know which campaign or page brought the request, and can report the clinic's marketing results every month | Legitimate interest |
We do not ask for health information through the forms on the site. If you choose to write medical details in the message field, they stay in the conversation with the clinic team and are not passed on to any measurement or advertising tool.
Who else sees it
- The CRM used by the clinic to manage appointment requests, so we can follow up on the conversation and make sure we reply on time.
- Google, through Google Analytics 4 implemented with Google Tag Manager, only if you choose to accept the statistics cookies. It helps us understand how the site is used.
- Meta, through the pixel installed on the site, only if you choose to accept the campaign measurement cookies. It helps us evaluate how our advertising performs.
- The reporting platform of the agency that handles the clinic's marketing, Peak Med Reports (rapoarte.peakmed.ro). After you submit a form, the platform receives your name, phone, email and the visit source described above. The message you wrote never reaches it. The purpose is the monthly reporting of marketing results for the clinic, the legal basis is legitimate interest, and identity data is kept for 24 months, after which it is anonymised.
We do not sell your data and we do not share it with other clinics or intermediaries.
How long we keep it
Requests received through the form are kept for as long as needed to handle them, plus an additional period required by the clinic's legal obligations, for example those regarding financial or medical records, when a request turns into an appointment. You can ask us to delete a request sooner at any time.
Your rights
Under the General Data Protection Regulation (GDPR), you have the right to:
- find out what data we hold about you (right of access);
- ask us to correct incorrect data (right to rectification);
- ask us to delete your data (right to erasure);
- ask us to restrict processing;
- receive your data in a portable format;
- object to a particular use of your data;
- withdraw your consent at any time, without affecting anything done before the withdrawal.
If you are unhappy with how we handle your data, you can write to us directly or file a complaint with the Romanian supervisory authority, the National Supervisory Authority for Personal Data Processing (www.dataprotection.ro).
Cookies
The site uses a few categories of cookies. You can manage them from the banner shown on your first visit, or at any later time, from the "Cookie settings" link in the site footer.
Strictly necessary
These do not need your consent, because they keep the site working: they only remember the decision you made about cookies. Technically they are not cookies but entries in your browser's local storage (localStorage): they are never sent to any server and they do not expire on their own, but you can delete them at any time from your browser settings, together with the site data.
| Entry | Purpose | Duration |
|---|---|---|
cookie_consent | Remembers your cookie decision (accepted or declined) | Until you delete it from your browser settings |
cookie_consent_at | Remembers when you made that decision | Until you delete it from your browser settings |
Statistics and campaign measurement, only with your consent
These are set only if you click "Accept" in the banner or from "Cookie settings".
At that same moment, and only then, the site writes the pm_attribution entry in your browser's local storage, holding the visit source described above. The first contact is kept for 90 days, so that a request sent later can be linked to the campaign that first brought you here. Nothing is written here either if you choose Decline.
| Cookie | Provider | Purpose |
|---|---|---|
_ga, _ga_* | Google Analytics 4, through Google Tag Manager | Traffic statistics: how many visitors the site has and how they use it |
_gcl_* | Google Ads campaign measurement | |
_fbp | Meta | Facebook and Instagram campaign measurement |
You can change your decision at any time, from the "Cookie settings" link in the site footer. Declining these cookies does not limit your access to the site's content.