Privacy notice · Clinesto

Working draft pending legal review. The text may change before final publication. For questions about your data, write to privacy@clinesto.ro.

1. Who we are

The controller of the data described here is [Company name], company number [Company number], trade register number [Trade register number], registered address [Registered address] (“Clinesto”, “we”).

Data protection contact: privacy@clinesto.ro. General contact: contact@clinesto.ro.

2. What this notice covers

This notice applies to:

visitors to the clinesto.ro and clinesto.com websites;
people who fill in the contact form, request a demo or start a free trial.

Patient data in the app. For patient and staff data processed in the app at app.clinesto.ro, the clinic is the controller. Clinesto acts as a processor, only on the clinic’s instructions, under the Data processing agreement (DPA). Patients who wish to exercise their rights should contact their clinic.

3. What data we collect

Through the contact, demo or trial form:

name, email, phone;
organization, country, specialty and number of practitioners;
your message;
the language you chose;
the page you sent the form from and the campaign’s UTM tags;
the date and time you gave consent, where relevant.

Automatically, when you visit the site:

server logs: IP address, date and time, page requested, browser;
aggregated traffic statistics, if analytics is enabled (section 7).

4. Why we use the data and on what legal basis

Purpose	Legal basis (GDPR)
Answering your request, the demo, starting the free trial	Art. 6(1)(b): steps prior to entering into a contract
B2B follow-up (messages about the service to your clinic)	Art. 6(1)(f): legitimate interest; you can object at any time
Newsletter	Art. 6(1)(a): consent, which you can withdraw at any time
Website security (server logs)	Art. 6(1)(f): legitimate interest

Every marketing message contains an unsubscribe link. You can also write to privacy@clinesto.ro.

5. How long we keep data

Form data (leads): 24 months after the last contact, unless a contract follows. If you become a customer, the data falls under the contract.
Server logs: 30 days, for security.
Proof of consent: while consent is active and afterwards for as long as needed to prove it.

our hosting provider, with servers in the European Union;
our email provider, to send messages;
public authorities, only when the law requires it.

Our customer relationship management (CRM) is internal to the Clinesto app. We do not sell your data.

The list of providers is available on request at privacy@clinesto.ro.

7. Website analytics

If enabled, we use Plausible Analytics. Plausible does not use cookies and does not collect personal data. We only see aggregated statistics, such as visits per page and country of origin. Details are in the Cookie notice.

8. Transfers outside the EEA

By default, we do not transfer data outside the European Economic Area. If such a transfer becomes necessary, we will make it only with the safeguards required by the GDPR (for example, standard contractual clauses) and will update this notice.

9. Your rights

You have the right:

to access your data;
to rectify inaccurate data;
to erasure of your data;
to restriction of processing;
to object to processing based on legitimate interest, including direct marketing;
to data portability;
to withdraw consent at any time, without affecting earlier processing.

Write to privacy@clinesto.ro. We reply within one month. We may ask for additional information to verify your identity.

10. Complaints

You can lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), www.dataprotection.ro.

Users in Belgium may also contact the Belgian Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit).

11. Security

We use encrypted connections (HTTPS), role-based access and EU hosting. No system is completely secure, but we review our measures regularly.

12. Changes

We may update this notice. The date of the last update appears at the top of the page. We will inform you directly of significant changes if we have your contact details.