Privacy Policy

Professional Data Protection Notice (EU)

Professional Access Environment 

This website operates within a regulated European Union professional business-to-business (B2B) medical environment.

Access is intended for licensed healthcare professionals and regulated commercial operators acting within the scope of their professional activity.

The platform is not directed toward consumers or private individuals.

THEDERMALFILLER S.R.L. operates as an independent European professional procurement coordination and commercial intermediary structure.

No public retail sales are conducted through this website.

Data Controller 

THEDERMALFILLER S.R.L.
Timisoara, Romania
European Union

Official communication:
contact@maxmedsystems.eu

THEDERMALFILLER S.R.L. acts as data controller for the limited professional processing activities described in this notice.

Data Processing Principles 

Limited professional, technical and operational data may be processed where necessary for:

– secure platform functionality;
– professional communication;
– operational access management;
– procurement coordination;
– regulatory and legal compliance.

Processed information may include:

– professional identification information voluntarily submitted by users;
– communication data transmitted through contact forms or email correspondence;
– limited technical connection and operational system data required for platform security and stability.

No patient medical records or special categories of personal data under Article 9 GDPR are intentionally collected or processed through this platform.

Legal Basis and Data Use 

Where applicable under GDPR, processing activities may rely on:

– Article 6(1)(f) GDPR — legitimate interest in operating a secure professional B2B platform;
– Article 6(1)(b) GDPR — pre-contractual or contractual professional communication;
– Article 6(1)(c) GDPR — compliance with applicable legal and regulatory obligations.

Personal data is not sold, rented or commercially exploited.

No advertising trackers, marketing cookies or third-party behavioural profiling systems are intentionally deployed.

No automated decision-making or profiling within the meaning of Article 22 GDPR is carried out through this platform.

Professional Communication and Data Sharing 

Professional communication and procurement coordination are conducted individually following verification and authorised supply-chain assessment where applicable.

Data may be disclosed only where operationally or legally necessary to:

– authorised European Union hosting or IT infrastructure providers;
– professional legal, fiscal or regulatory advisors bound by confidentiality obligations;
– competent public authorities where legally required.

No intentional transfer of personal data outside the European Economic Area is performed.

Data Retention and Security 

Data is retained only for the period reasonably necessary to fulfil operational, contractual or legal obligations.

Appropriate technical and organisational security measures are implemented to protect the confidentiality, integrity and availability of processed data.

Access to professional data remains restricted and controlled.

Rights of Data Subjects 

Where applicable under GDPR, data subjects may exercise rights relating to:

– access to personal data;
– rectification of inaccurate data;
– restriction of processing;
– objection to processing based on legitimate interest;
– erasure, where legally applicable.

Requests must be submitted in writing to:

contact@maxmedsystems.eu

Identity verification may be required prior to responding to any request.

Jurisdiction and Supervisory Authority 

This notice is governed by European Union law and the laws of Romania.

Data subjects retain the right to lodge a complaint with the competent supervisory authority within their European Union Member State.

In Romania, the competent supervisory authority is the National Supervisory Authority for Personal Data Processing.

Updates 

This Privacy Policy may be updated periodically to reflect legal, regulatory or operational developments.

The current version remains continuously available on this website.

Last updated: May 2026