01Who we are
The controller of personal data collected through this site is DELCMED S.R.L., a medical practice at 70/A Nicolae Testemițanu St., Soroca, Republic of Moldova.
We process data in accordance with Law no. 133/2011 on the protection of personal data of the Republic of Moldova and, where applicable to us, with Regulation (EU) 2016/679 (GDPR).
For any question about your data, write to us at delcmedsoroca@gmail.com or call +373 79 797 803.
02What data we collect
The site runs its own booking system. We no longer use external booking platforms, so the data goes straight to the practice.
When booking online
- Full name — so we know who to expect and can find your file.
- Phone number — to contact you if the time changes.
- Email address — optional; only if you want written confirmation.
- The service, day and time chosen, together with the duration booked.
- The booking code and the time it was made.
We do not ask online for data about your health, diagnosis or treatment. That is discussed only at the practice and recorded in the medical file, outside this site.
Automatically, when you visit
- IP address, browser and device type, pages visited — collected by the hosting provider in technical logs, for operation and security.
- A technical value saved locally in your browser (sessionStorage), used only so the opening animation does not repeat on every page. It contains no personal data and disappears when you close the tab.
03Why we use it
| Purpose | Legal basis |
|---|---|
| Recording and managing the appointment, contacting you about it | Steps taken at the data subject's request before entering into a contract |
| Organising the practice diary and avoiding overlaps | The practice's legitimate interest in running in an orderly way |
| Sending an email confirmation, if you left an address | Your consent |
| Site security, preventing abuse | Legitimate interest |
| Meeting legal medical and accounting record-keeping obligations | Legal obligation |
We do not use the data for advertising, do not build profiles, and take no automated decisions with legal effects for you.
04Who else has access
We do not sell or rent personal data. We share it only with the technical providers who keep the site running, each acting as a processor and strictly within the purpose:
| Provider | Role | Data |
|---|---|---|
| Supabase | The bookings database | Name, phone, email, booking details |
| Google (Gmail) | Sending booking and cancellation notifications | Name, phone, email, booking details |
| Google (Sheets) | The practice's internal register of bookings | Name, phone, email, booking details |
| Google Maps | The map embedded in the page, loaded only with your consent | IP address, technical browser data |
| The hosting provider | Delivering the pages | Technical access logs |
Some of these providers may store data outside the Republic of Moldova, including in the European Union or the United States. In those cases the transfer relies on standard contractual clauses or an adequacy decision.
Bookings are copied automatically into an internal register kept in Google Sheets, which we use as the practice's working diary. The register is not public, is never shared by link, and is accessible only to the named accounts of the practice's staff.
Data may be disclosed to public authorities where the law requires it.
05How long we keep it
- Bookings — up to 2 years from the visit date, for the diary history and any clarifications.
- Cancelled bookings — up to 6 months, both in the database and in the internal register.
- Server technical logs — per the hosting provider's policy, usually up to 12 months.
- Medical records created at the practice — for the periods required by health legislation. These are not kept on the site.
Once these periods expire, the data is deleted or anonymised. Deletion applies both to the database and to the copy in the internal register.
06How we protect it
- The site is served only over an encrypted HTTPS connection.
- The database uses row-level security: the public form can only add an appointment, not read other patients' appointments.
- Booked slots are shown in the calendar through a separate view containing only the day, time and duration — no names, phone numbers or emails.
- Only the doctor has access to the full list of appointments, through a password-protected account.
- A database-level rule makes it impossible to book the same slot twice.
- The internal Google Sheets register is shared exclusively with named accounts protected by a password and two-step verification; no public link to it exists.
07Your rights
In relation to the data we hold about you, you have the right:
- of access — to find out what data we hold and where it came from;
- to rectification — to correct data that is wrong or incomplete;
- to erasure — to ask for it to be removed, when we no longer have a basis to keep it;
- to restriction of processing — to ask us to “freeze” it while a dispute is being resolved;
- to object — to object to processing based on our legitimate interest;
- to portability — to receive the data in a machine-readable format;
- to withdraw consent, at any time, without affecting processing carried out earlier.
Write to us at delcmedsoroca@gmail.com and we reply within 30 days at most. If you are not satisfied with the answer, you may contact the National Centre for Personal Data Protection of the Republic of Moldova (datepersonale.md).
09Minors
Online booking is done by an adult. For a minor patient, the booking is made by a parent or legal guardian, who is responsible for the accuracy of the details entered and accompanies the child to the consultation.
10Changes to this policy
We may update this policy when the way the site works or the legal requirements change. The version in force is always the one published here, with the update date shown at the top. If a change is significant, we will flag it visibly on the booking page.
11Contact
DELCMED S.R.L.
70/A Nicolae Testemițanu St., Soroca, Republic of Moldova
Phone: +373 79 797 803
Email: delcmedsoroca@gmail.com