Data protection declaration

Effective date: 26 July 2025
Applies for: 2025–2026

We, TheDermalFiller® (hereinafter "We", "Our", or "TheDermalFiller"), appreciate your visit to our website and your interest in our company and products. Your privacy is of utmost importance to us. Therefore, we handle your personal data with the highest degree of care and confidentiality, strictly in line with the General Data Protection Regulation (GDPR) and other applicable data protection laws of the European Union.

This updated Privacy Policy explains how we process your personal data, what your rights are, and how we ensure the protection of your information throughout the period 2025–2026.

Data Controller:

THEDERMALFILLER S.R.L.
Basel 4, 300127 Timișoara, Romania
Founder & Legal Representative: Dr. Cătălin-Cristian Călinoiu
Phone: +40 747 170 723
Email: contact@thedermalfiller.eu
Website: www.thedermalfiller.eu

Please contact us for any privacy-related concerns or to exercise your legal rights.

Personal data refers to any information relating to an identified or identifiable natural person, including but not limited to: name, email address, IP address, postal address, telephone number, and usage data.

We automatically collect the following information when you visit our website:

• IP address, browser type and version
   
• Operating system and device type
   
• Referrer URL, access date and time
   
• Pages viewed, session duration, country of origin
   
• Events and functionalities used
   

Legal basis: Art. 6(1)(f) GDPR – legitimate interest in secure, stable, and optimized website operation.

We use cookies and similar technologies to enhance functionality and analytics. Users may decline or manage cookies in browser settings. For full information, see our [Cookie Policy].

When submitting a professional contact form, we process:

• Email address (required)
   
• Name, phone number, and attachments (optional)
   

Legal basis: Art. 6(1)(b) and (f) GDPR – fulfillment of inquiry and legitimate business interests.

Required: email address.
Legal basis: Art. 6(1)(a) GDPR – consent.

We only transfer data to countries outside the EU/EEA when:

• An EU Commission adequacy decision exists
   
• Standard contractual clauses are in place
   
• You have provided explicit consent
   

We ensure GDPR-compliant protection through such mechanisms.

We store your data only as long as necessary for legal, contractual, or operational purposes.

Data is deleted when:

• The legal basis expires
   
• You withdraw consent
   
• You object and no overriding interest exists
   
• Legal retention obligations end
   

As a data subject under the GDPR, you have the right to:

• Access: Receive a copy of your stored data
   
• Rectification: Request corrections of inaccurate data
   
• Erasure: Have data deleted when no longer necessary
   
• Restriction: Limit processing in specific cases
   
• Data Portability: Receive your data in machine-readable format
   
• Objection: Object to processing based on legitimate interest
   
• Withdraw Consent: At any time, with future effect
   
• Lodge a Complaint: With your national data protection authority
   

To exercise any of these rights, contact us using the information in Section 1.

We may include links to third-party websites. We are not responsible for the content, privacy, or security practices of these external sites. Please review their respective privacy policies.

This privacy policy is valid from 26 July 2025 and remains in force until further notice. We reserve the right to make changes in line with legal requirements or business practices.