Privacy Policy
Version of 23 August 2026.
This Policy explains what personal data we collect, why we use it and what rights you have. It is drafted in line with Law of the Republic of Moldova no. 195/2024 on the protection of personal data.
1. Who processes your data
- Controller: DIPLOMAT MED CENTER SRL
- IDNO: 1021600023421
- Address: Republic of Moldova, Chișinău, str. Alexandrescu 19/2, of. 1, MD-2008
- Phone: +373 22 715 500, +373 61 085 500
- Email: info@diplomat-med.md
- Person responsible for personal data protection: Vladimir Zațercleanii, clinic administrator
- Data protection enquiries: info@diplomat-med.md, marked “Personal data”
We are a dental clinic, so part of the data we process falls into the special category — health data. It is protected by medical confidentiality and by enhanced security measures.
2. What data we process
When you book an appointment and receive treatment:
- name and surname, date of birth, contact details;
- health data: medical history, diagnoses, treatment plan and progress, images (X-rays, CT, intraoral photos), prescriptions, allergies;
- appointment and visit records;
- payment details for services.
When you use the website:
- data you enter in contact forms and in the chat;
- technical data: IP address, device and browser type, pages viewed, referral source;
- cookie identifiers and similar technologies (see section 5).
We do not ask for health data through the website. Please do not enter diagnoses or symptoms in open web form fields — discuss them by phone or at the clinic instead.
3. Purposes and legal grounds
- Appointments, dental care and medical records — performance of our contract with you; health data is processed for preventive and curative medicine purposes by professionals bound by medical confidentiality.
- Responding to enquiries via forms, phone and chat — at your request and for pre-contractual steps.
- Accounting, tax obligations, keeping the medical archive — compliance with a legal obligation.
- Website analytics and traffic statistics — your consent, given through the cookie banner.
- Marketing, advertising and remarketing — your consent.
- Defending the clinic’s rights in disputes — legitimate interest.
You can withdraw consent at any time; this does not affect the lawfulness of processing carried out before the withdrawal.
4. Who we share data with
- clinic staff — only as needed to perform their duties;
- the Bitrix24 CRM, where enquiries and communication history are stored;
- the dental laboratory and diagnostic partners — only to the extent required for treatment;
- accounting and IT providers — under contracts that oblige them to protect the data;
- analytics and advertising providers (Google, Meta) — only after your cookie consent;
- public authorities — where required by law.
We do not sell your data and do not share it with third parties for their own marketing.
5. Cookies and analytics
The website uses four categories of cookies: necessary, preferences, statistics, marketing. Necessary cookies always run; the rest are loaded only after your consent in the banner.
Google Tag Manager may load Google analytics and advertising services as well as the Meta Pixel. Until consent is given these scripts are blocked, and Google Consent Mode v2 passes the status “denied”.
You can change or withdraw your consent at any time via the “Cookie settings” button at the bottom of the page.
6. Transfers outside the Republic of Moldova
Some of the services we use are hosted abroad: Google and Meta (analytics, advertising, chat) — EU and USA; Bitrix24 (CRM, forms, widget) — provider servers outside the Republic of Moldova. Transfers take place on the basis of your consent or under contracts with the providers that include appropriate data protection safeguards.
7. Retention periods
- medical records — for the periods set by the legislation on keeping medical documents;
- accounting and tax documents — for the periods set by law;
- website enquiries and CRM records — no longer than necessary to communicate with you and to defend our rights;
- data processed for marketing — until you withdraw consent;
- cookies — for the lifetime of each cookie (from session to 24 months).
8. Your rights
You have the right:
- to access your data and receive a copy of it;
- to have inaccurate or incomplete data corrected;
- to have your data erased — except where the law requires us to keep it (for example, the medical archive);
- to restrict processing;
- to data portability in a machine-readable format;
- to object to processing based on legitimate interest;
- to withdraw consent you previously gave;
- not to be subject to a decision based solely on automated processing.
Send your request to info@diplomat-med.md or to the clinic’s address. We reply within one month of receiving the request; in complex cases the period may be extended and we will inform you. To protect your data we may ask you to confirm your identity.
9. Complaint to the supervisory authority
If you believe we have breached your rights, you may contact the National Center for Personal Data Protection of the Republic of Moldova: Chișinău, str. Serghei Lazo 48, MD-2004; website: datepersonale.md
10. Security
We apply technical and organisational safeguards: restricted access to medical data, encrypted connections (HTTPS), backups, confidentiality commitments for staff and contractors, and staff training.
11. Children
Services for children are provided with the consent and in the presence of a parent or legal guardian. For online services, parental consent is required for children under 14.
12. Changes to this Policy
We may update this Policy. The current version is always available on this page and its date is shown above. We will announce significant changes on the website.