Dr. Yazan Aq. · Information and privacy

Privacy policy

Updated on 20 October 2026.

This notice covers use of the website and enquiries submitted through the online form. For data processing during medical consultations and treatment, ask the clinic for the privacy information specific to those services.

1. Who is responsible for your data

The data controller is DR.YAZAN AQ AESTHETIC CENTER SRL, Romanian tax identification number 48197200, at Str. Barbu Văcărescu 313–315, 3rd floor, Sector 2, Bucharest, Romania.

For questions about personal data or to exercise your rights, contact the clinic at yazan.aq1@icloud.com or call 0746 700 500.

2. What data you can send us

The form requires your name and telephone number. Your email address, message and files are optional. Messages, dental photographs and X-rays may contain health data, which receives special protection.

Send only the information needed for your enquiry. Do not upload identity documents or documents about other people unless you are entitled to share them. You can also call the clinic to arrange an appointment without sending photographs through the website.

3. Purpose and consent for the form

We use the submitted data to contact you, review your enquiry and respond. For this voluntary communication through the form, the legal basis is your consent (Article 6(1)(a) GDPR). For health data you choose to submit, we rely on your explicit consent (Article 9(2)(a) GDPR).

Consent is requested separately through a checkbox that is initially unticked. It does not authorise publication of your photographs or advertising messages. The form forwards your enquiry to the clinic and does not make automated medical decisions.

You can withdraw your consent at any time by writing to the email address above. Withdrawal does not affect processing lawfully carried out beforehand, but it may prevent us from continuing to respond using the information covered by the withdrawal.

4. Who receives the data

Your enquiry and files are sent by email to Dr. Yazan Aq. Clinic at yazan.aq1@icloud.com.

Access is intended for clinic staff involved in responding. Romarg website hosting and the email services used to send and receive messages, including Apple iCloud, are involved in this communication.

Google and Meta may receive website usage data as described in the cookie policy. The page containing the attachment form is excluded from the local Google Analytics and Meta Pixel integrations; these integrations do not receive your name, telephone number, message or files from the form.

Services provided by international suppliers may involve processing data outside the European Economic Area. For information about recipients, processing locations and safeguards applicable to communication with the clinic, please contact us at the address above.

5. How long we retain enquiries

Data submitted through the form is retained only for the period of communication with the patient needed to handle the enquiry. The end of this contact is the criterion used to delete the enquiry and attachments from the records used for this purpose.

If you start receiving medical care from the clinic, ask for information about medical records and their retention requirements. The period above applies to the online enquiry and does not replace the rules applicable to medical records.

6. Website operation and cookies

Technical connection and session information is used to operate and protect the website. Protecting the form against abuse serves the legitimate interest of keeping the service secure (Article 6(1)(f) GDPR).

Google Analytics and Meta Pixel start only after you select their respective categories. YouTube and Google Maps remain active on pages that include them and may communicate directly with their providers. Details and choices are available in the cookie policy.

7. Your rights

Subject to the conditions in the GDPR, you may request access, correction, erasure, restriction of processing or data portability. You may object to processing based on legitimate interests and withdraw consent for processing based on consent.

Send your request to yazan.aq1@icloud.com and explain what you are requesting. To protect your data, the clinic may request information needed to confirm your identity. A response is generally due within one month; any extension must be justified and communicated in accordance with the GDPR.

You may lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP).

8. Changes to this notice

This page will be updated when the way personal data is processed changes. The version date appears at the top of the page.