SCUSPB - Spitalul Clinic de Urgență „Sfântul Pantelimon” București ANMCS accredited - Patient safety and quality of care, accredited with recommendations
secretariat@urgentapantelimon.ro · 340-342 Pantelimon Road, District 2, Bucharest
ContactCareers RO EN

Data Protection

This policy describes how „Sfântul Pantelimon” Emergency Clinical Hospital Bucharest (the „Hospital”) processes the personal data collected through this website, in accordance with Regulation (EU) 2016/679 (GDPR) and Romanian Law no. 190/2018.

It concerns only the data collected through the website. The processing of medical data as part of medical care is covered by a separate notice, available on site.

Data controller

  • Name: „Sfântul Pantelimon” Emergency Clinical Hospital Bucharest
  • Address: 340-342 Pantelimon Road, District 2, Bucharest
  • Phone: 021 255 49 49

Data Protection Officer (DPO)

For any question about the processing of your data you may contact the Data Protection Officer:

  • Name: [DE COMPLETAT: numele responsabilului cu protecția datelor]
  • E-mail: [DE COMPLETAT: adresa de e-mail a responsabilului cu protecția datelor]

What data we collect and why

Contact form

When you send a message through the contact form we process the data you enter: name, e-mail address, phone (optional), subject (optional) and the message, together with the page language, the date and time of submission and the IP address it was sent from.

  • Purpose: registering and resolving your request.
  • Legal basis: your consent - art. 6(1)(a) GDPR, given by ticking the consent box before sending.

Feedback form

The feedback form may be submitted anonymously. If you choose to identify yourself, we process the data you enter (name and/or e-mail, optional), the subject and the message, together with the same technical data as above.

  • Purpose: improving our services and published information.
  • Legal basis: consent - art. 6(1)(a) GDPR.

Server logs

The hosting provider may keep server-level technical logs (IP address, date and time of access, requested page) needed for the operation and security of the website.

  • Legal basis: the legitimate interest in the security and proper operation of the website - art. 6(1)(f) GDPR.

Online appointments

When you request an appointment through the online booking form we process the following data:

  • first and last name and phone number;
  • e-mail address (optional) and age (optional);
  • the remarks you enter (optional) - please do not include sensitive medical details;
  • the requested specialty, doctor, date and time;
  • the date and time of your consent;
  • the IP address, used only for protection against abuse and deleted after 30 days.
  • Purpose: managing the appointment request and contacting you - by phone, and by e-mail only if you provided an address - to confirm, change or cancel the appointment; preventing abuse of the form.
  • Legal basis: your consent - art. 6(1)(a) GDPR, given by ticking the consent box in the form before sending.
  • Who has access: only the Hospital staff who manage appointments (a dedicated role, possibly limited to certain specialties). The data is not passed on to third parties, and the internal notification e-mails do not contain your data.
  • Retention: 24 months after the appointment date, after which the data is deleted automatically.
  • Your rights: access, rectification, erasure and withdrawal of consent (see the "Your rights" section). You can cancel the appointment through the cancellation link made available when the request is submitted or by phone at 021 255 40 99. Contact for data protection questions: the Data Protection Officer, see above.
  • The booking form sets no cookies.

What we do NOT do

The website uses no tracking, external analytics or advertising and sets no cookies for unauthenticated visitors. We do not profile you and take no automated decisions affecting you. See the Cookie Policy for details.

How long we keep the data

Messages sent through the contact and feedback forms are kept for 12 months after receipt and are then deleted. This period is configurable in the administration panel and may be adjusted according to what is needed to resolve requests. On request, data may be deleted sooner, except where the law requires it to be kept.

Who we share the data with

Data is not sold and is not transferred outside the European Economic Area. It may be accessed only by the Hospital's authorised staff and by the providers that supply hosting and e-mail delivery, acting as processors, or disclosed to public authorities where the law requires it.

Your rights

As a data subject you have, under the GDPR, the right to:

  • access the data processed;
  • rectify inaccurate data;
  • erase data („the right to be forgotten”);
  • restrict processing;
  • object to processing;
  • data portability for data provided on the basis of consent;
  • withdraw consent at any time, without affecting the lawfulness of prior processing.

To exercise these rights you may contact us through the contact form or at the Data Protection Officer's details above. We reply within one month of receiving the request at the latest.

Right to lodge a complaint

If you consider that the processing of your data breaches the law, you may address the National Supervisory Authority for Personal Data Processing (ANSPDCP):

  • Address: 28-30 General Gheorghe Magheru Blvd., District 1, postcode 010336, Bucharest
  • Web: www.anspdcp.ro

Changes to this policy

This policy may be updated from time to time. The version published on this page is the one in force.