PRIVACY AND COOKIE POLICY
Last updated: 4 April 2026
1. GENERAL INFORMATION
This policy explains how the personal data controller processes personal data and uses cookies when you visit our website or use our services. The personal data controller is Global Solutions for Freedom S.R.L., operating under the trade names Longevia Advanced Medicine / Longevia Clinic, with its registered office in Oradea, 71 Tudor Vladimirescu Street, Apartment 6, Bihor County, Romania, VAT number RO29199603.
Contact details:
* Email: [office@longeviaclinic.com](mailto:office@longeviaclinic.com)
* Telephone: 0730 303010
For any questions regarding the processing of personal data, you may contact us using the contact details above. We are committed to protecting the confidentiality and security of your data in accordance with Regulation (EU) 2016/679 (“GDPR”).
2. DATA WE COLLECT
We may collect the following categories of data:
2.1 Identification and contact details
* first name and surname;
* telephone number;
* email address.
2.2 Appointment-related data
* requested service;
* appointment date and time;
* information submitted through contact forms.
When you submit requests through the contact forms available on the website, we process the information provided exclusively for the purpose of managing your request and communicating the appropriate response.
2.3 Medical data
Health data constitutes a special category of personal data within the meaning of Article 9 of Regulation (EU) 2016/679 (GDPR). This data is processed exclusively for the provision of medical services, the monitoring of health status, and compliance with the legal obligations applicable to healthcare providers.
As part of our medical and aesthetic services, we may process:
* medical history;
* consultations and assessments;
* treatments performed;
* other information necessary for the provision of medical care.
2.4 Technical data and cookies
* IP address;
* device and browser type;
* browsing behaviour;
* cookies and similar technologies.
3. PURPOSES OF PROCESSING
The data is used for:
* scheduling and managing consultations;
* providing medical and aesthetic services;
* communicating with patients;
* complying with legal obligations;
* ensuring website security;
* analysing and improving our services.
4. LEGAL BASES UNDER THE GDPR
The processing of personal data is based on:
* Article 6(1)(b) GDPR – performance of a contract / appointment management;
* Article 6(1)(c) GDPR – compliance with legal obligations;
* Article 6(1)(f) GDPR – legitimate interests;
* Article 9(2)(h) GDPR – provision of healthcare services and processing of sensitive data.
5. ONLINE APPOINTMENT SYSTEMS
Where an online appointment service is enabled, the data entered by users will be processed for the purpose of managing and confirming appointments, communicating with patients, and providing the requested medical services.
When you use online appointment forms, your data may be processed through specialised third-party platforms. Providers of online appointment platforms act as processors on behalf of the controller and process data exclusively in accordance with the controller’s instructions and the data processing agreements concluded pursuant to Article 28 GDPR.
6. DATA RETENTION
Data is retained:
* for the period necessary to provide the services;
* in accordance with applicable medical and tax-related legal obligations;
* in accordance with the applicable limitation periods.
Personal data is retained only for the period necessary to fulfil the purposes for which it was collected and in accordance with applicable legal obligations. Medical data is retained for the periods established by the legislation applicable to healthcare providers, while data submitted through contact forms is retained for the period necessary to resolve the request and to establish, exercise, or defend potential legal claims.
7. RECIPIENTS OF THE DATA
Data may be shared with:
* medical and administrative staff;
* IT and hosting providers;
* accounting and legal service providers;
* public authorities, where legally required.
We do not sell or commercially trade your personal data.
8. INTERNATIONAL DATA TRANSFERS
As a general rule, data is stored within the European Union. Where a transfer outside the European Union is necessary, it will be carried out subject to appropriate safeguards, such as the European Commission’s Standard Contractual Clauses.
9. YOUR RIGHTS
You have the following rights:
* the right of access;
* the right to rectification;
* the right to erasure;
* the right to restriction of processing;
* the right to object;
* the right to data portability;
* the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP);
* the right to withdraw your consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before its withdrawal.
Data subjects have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) if they believe that the processing of their personal data infringes applicable data protection legislation.
10. DATA SECURITY
We implement technical and organisational measures to protect personal data, including:
* access controls;
* secure servers;
* encryption, where necessary;
* role-based access restrictions.
11. COOKIES
11.1 What are cookies?
Cookies are text files stored on your device when you visit our website.
11.2 Types of cookies used
Strictly necessary cookies – These ensure the proper operation of the website, including forms, security, and navigation.
Analytics cookies – These help us understand how the website is used, for example through Google Analytics.
Functional cookies – These remember preferences such as language settings or information entered into forms.
Marketing cookies (optional) – These are used for advertising campaigns and remarketing purposes.
11.3 Legal basis
* Strictly necessary cookies are used to ensure the proper and secure operation of the website and do not require the user’s consent.
* Analytics, functional, and marketing cookies are used only on the basis of the consent provided by the user through the cookie preference management mechanism.
11.4 Cookie consent
When you first access the website, you may:
* accept all cookies;
* reject non-essential cookies;
* customise your preferences.
You may withdraw your consent at any time.
11.5 Third-party cookies
We may use services such as:
* web analytics services;
* appointment platforms;
* video content or other external integrations.
The list of third-party providers and technologies used on the website may be updated periodically depending on the services implemented and the website’s operational requirements.
12. CHANGES TO THIS POLICY
We reserve the right to update this Privacy and Cookie Policy periodically to reflect legislative, technical, or operational changes. Any updated version will be published on the website together with the date of the latest update.
Continued use of the website following the publication of any changes constitutes acknowledgement of the updated version of this policy.
13. CONTACT
For any questions:
* Email: [office@longeviaclinic.com](mailto:office@longeviaclinic.com)
* Telephone: 0730 303010