Privacy Policy

Data Protection and Professional Access Notice (EU)

Scope and Professional Limitation
 

This website is operated exclusively within a professional B2B medical context.

Access is intended solely for licensed medical professionals, healthcare providers, clinics, hospitals and authorised professional partners acting in the course of their professional activity.

The platform is not directed at consumers, private individuals or retail users.

THEDERMALFILLER® operates exclusively as an independent EU commercial intermediary and procurement facilitator. No direct retail sales are performed through this website.

Data Controller
 

THEDERMALFILLER S.R.L.
Registered office: Timisoara, Timis County, Romania
EU Member State: Romania
Contact: contact@thedermalfiller.eu

The company acts as independent data controller for processing activities described herein.

Categories of Data Processed
 

Access to this website may result in limited processing of professional and technical data strictly necessary for secure platform operation and professional communication.

Processed data may include:

– IP address and technical connection metadata
– Browser type, device information and system logs
– Access timestamps and referring URLs
– Professional identification data voluntarily submitted (name, clinic, professional email, VAT number, licence confirmation where applicable)
– Communication content submitted via professional contact forms or email

No special categories of personal data within the meaning of Article 9 GDPR are intentionally processed.

No patient data is collected or processed.

Purpose of Processing
 

Data is processed strictly for:

– Ensuring website security, integrity and technical stability
– Verifying professional status where required
– Managing professional access requests
– Responding to legitimate B2B enquiries
– Fulfilling pre-contractual steps requested by a professional user
– Complying with EU and national legal and regulatory obligations, including MDR 2017/745 where applicable

No data is used for consumer profiling, behavioural advertising or automated commercial targeting.

Legal Basis
 

Processing is based on:

– Article 6(1)(f) GDPR – legitimate interest in operating a secure and compliant professional B2B platform
– Article 6(1)(b) GDPR – pre-contractual or contractual measures requested by a professional user
– Article 6(1)(c) GDPR – compliance with legal obligations where applicable

Data Sharing and Transfers
 

Personal data is not sold, rented, traded or commercialised.

Data may be disclosed only where strictly necessary to:

– EU-based hosting and IT infrastructure providers
– Professional legal, tax or regulatory advisors bound by confidentiality
– Competent public authorities where legally required

No intentional transfers outside the European Economic Area are performed.

Data Retention
 

Data is retained only for the period strictly necessary to fulfil the purposes described above or to comply with applicable EU or Romanian legal obligations.

Technical logs are retained proportionally and securely.

Data Security
 

Appropriate technical and organisational measures are implemented in accordance with Article 32 GDPR to ensure confidentiality, integrity and availability of data.

Access to professional data is restricted and secured.

Rights of Data Subjects
 

Where applicable under GDPR, data subjects may exercise the right to:

– Access their data
– Rectification of inaccurate data
– Restriction of processing
– Objection to processing based on legitimate interest
– Erasure, where legally applicable

Requests must be submitted exclusively via email to:

contact@thedermalfiller.eu

Identity verification may be required before responding to any request.

Cookies and Technical Identifiers
 

This website uses only strictly necessary technical cookies required for:

– Core functionality
– Security
– System stability

No marketing cookies, profiling cookies, third-party advertising trackers or consumer analytics systems are deployed.

Where aggregated analytics are used, data is anonymised at source and cannot identify individual users.

No consent banner for non-essential cookies is required as no such cookies are used.

No Consumer Relationship
 

This platform does not create a consumer relationship within the meaning of EU consumer protection legislation.

Any interaction occurs exclusively within a professional B2B framework and does not generate consumer withdrawal rights or distance-selling protections.

Supervisory Authority
 

Data subjects retain the right to lodge a complaint with:

– The competent supervisory authority in their EU Member State of residence; or
– The Romanian National Supervisory Authority for Personal Data Processing.

No Automated Decision-Making
 

No automated decision-making, including profiling under Article 22 GDPR, is carried out via this website.

Jurisdiction and Applicable Law
 

This notice is governed by EU law and the laws of Romania.

Any disputes relating to data protection matters fall under the jurisdiction of the competent courts of Romania, subject to mandatory EU provisions.

Updates
 

This notice may be updated periodically to reflect legal, regulatory or operational changes.

The current version is always available on this website.