Privacy Policy

1. Data Controller Information

qilurex operates as a consultation service provider for joint health and wellness education. We are committed to protecting your personal data in accordance with Romanian Law 190/2018 on data protection measures and the General Data Protection Regulation (GDPR) of the European Union.

For any questions regarding this Privacy Policy or your personal data, you may contact our Data Protection team through our consultation booking system or via the contact methods provided on our website.

2. Personal Data We Collect

When you request a consultation or interact with our services, we may collect the following types of personal data:

Contact Information: Full name, email address, phone number
Health-Related Information: General wellness concerns, joint health questions (non-medical)
Communication Data: Messages sent through our contact forms, consultation notes
Technical Data: IP address, browser type, device information, website usage patterns
Consultation Data: Appointment scheduling information, service preferences

3. Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR Article 6:

Contractual Necessity

Processing necessary to provide consultation services you've requested

Legitimate Interest

Improving our services, customer support, and business operations

Consent

Marketing communications and optional service enhancements (where applicable)

Legal Obligation

Compliance with Romanian and EU regulatory requirements

4. How We Use Your Personal Data

Your personal data is used exclusively for the following purposes:

• Providing wellness consultation and educational services related to joint health
• Scheduling and conducting consultation appointments
• Communicating with you about your consultation requests and our services
• Improving our consultation services based on feedback and usage patterns
• Ensuring the security and integrity of our services
• Complying with applicable Romanian and EU legal requirements

5. Data Sharing and Disclosure

We do not sell, rent, or trade your personal data to third parties. We may share your information only in the following limited circumstances:

Service Providers: Trusted partners who assist in delivering our consultation services (under strict confidentiality agreements)
Legal Requirements: When required by Romanian law or EU regulations, or in response to legal process
Business Transfers: In the event of a merger, acquisition, or sale of assets (with continued protection of your rights)
Protection of Rights: To protect the rights, property, or safety of qilurex, our users, or others

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with our legal obligations, resolve disputes, and enforce our agreements. Consultation records are typically retained for up to 7 years in accordance with Romanian healthcare consultation guidelines, after which they are securely deleted or anonymized.

7. Your Rights Under GDPR and Romanian Law

As a data subject in Romania and the European Union, you have the following rights:

Right of Access

Request information about your personal data we process

Right to Rectification

Correct inaccurate or incomplete personal data

Right to Erasure

Request deletion of your personal data (subject to legal obligations)

Right to Restrict Processing

Limit how we use your personal data in certain circumstances

Right to Data Portability

Receive your data in a portable format for transfer

Right to Object

Object to processing based on legitimate interests

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes encryption of data in transit and at rest, regular security assessments, access controls, and staff training on data protection principles.

9. International Data Transfers

If we transfer your personal data outside the European Economic Area, we ensure adequate protection through appropriate safeguards such as Standard Contractual Clauses approved by the European Commission or transfers to countries with adequacy decisions.

10. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your experience. For detailed information about our use of cookies, please refer to our Cookie Policy.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. We will notify you of any material changes by posting the updated policy on our website with a new effective date. We encourage you to review this Privacy Policy periodically.

12. Contact Information and Complaints

For questions about this Privacy Policy, to exercise your rights, or to file a complaint regarding our data processing practices, please contact us through our consultation booking system.

Romanian Data Protection Authority

If you are unsatisfied with our response to your data protection concerns, you have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP):

• Website: www.dataprotection.ro
• Address: Bulevardul Magheru nr. 28-30, Sector 1, Bucharest, Romania
• Phone: +40 21 252 5599
• Email: [email protected]

Important Health Disclaimer

Please note that our consultation services are educational in nature and do not constitute medical advice or treatment. OsteoFlexa is not a medicinal product. Always consult with qualified healthcare professionals for medical concerns. We do not process sensitive health data for medical treatment purposes.