Privacy notice — Public directory

What categories of data we process

For each directory profile we may display, to the extent the information is publicly available:

• first and last name
• web address identifier (slug)
• profile photo
• professional grade / title
• years of experience
• professional description (bio)
• city and county (location)
• CMR registration code / number
• specialties and competences
• rating and reviews (aggregated from published verified reviews)

Source of the data

<<ADJUST avocat>> The data comes from public third-party sources — in particular public medical directories (medlist.ro, medic.chat) and the public Register of the Romanian College of Physicians (CMR). We collected and organised it to offer patients a searchable medical directory. Profiles claimed by their subject are afterwards managed directly by that person.

Purpose and legal basis

<<ADJUST avocat>> We process this data to provide the public with an informative, searchable medical directory. The legal basis is our legitimate interest under Article 6(1)(f) of the GDPR — the interest in making already-public professional information accessible, for the benefit of patients looking for a doctor or clinic. We have carried out a legitimate interest assessment (LIA / balancing test), available on request.

How long we keep the data

<<ADJUST avocat>> An unclaimed profile is considered "fresh" and kept active for 180 days from its last confirmation from source; after that it becomes "stale" and is retained for a further 365 days. Once that period expires there is a 90-day grace period, after which the profile is purged. Profiles claimed by their subject are kept for as long as the owner maintains them.

Who we disclose data to

<<ADJUST avocat>> The directory is public, so a profile is visible to any visitor of the site. We do not sell the data and do not use it for commercial profiling. Our infrastructure runs exclusively in the European Union (AWS eu-central-1, Frankfurt).

Your rights (GDPR Art. 15-21)

<<ADJUST avocat>> You have the right to access your data, to rectify inaccurate data, to object to processing, to erasure ("right to be forgotten"), to restriction of processing and to portability. You may object at any time to processing based on legitimate interest, using the objection channel below. You may also contact the Romanian Data Protection Authority (ANSPDCP, dataprotection.ro).