Privacy policy

Last update: 09.03.2026

This Privacy Policy describes how personal data of website users is collected, used, stored and protected https://holistic-med-international.com („Site”), in accordance with:

Regulation (EU) 2016/679 (GDPR)
Law No 190/2018 on GDPR implementing measures
applicable data protection and e-commerce legislation.

Use of the Site implies acceptance of this policy.

1. Data operator

The controller of personal data is:

HOLISTIC MED PLANT S.R.L.
Head Office: 22A Muzelor nr. 22A, Sector 4, Bucharest, Romania
Unique registration code: RO37130417
Trade Register No: J2021005359405

Email data protection contact:
contact@holistic-med-international.com

The Controller determines the purposes and means of processing personal data collected through the Website.

2. Categories of personal data processed

2.1 Data collected automatically (Technical data)

When accessing the Site, certain technical information is automatically collected, including:

IP address
browser type and version
operating system
time zone
pages accessed
duration of visit
Reference URL
cookie identifiers

This data is collected by:

server log files
tracking technologies
cookies

Purpose of processing: technical functioning of the website, IT security and statistical analysis.

Cool theme: Art. 6(1)(f) GDPR - legitimate interest of the controller.

2.2 Data provided directly by the user

When purchasing a course or webinar, the user provides:

full name
billing address
e-mail address
telephone number
billing information

Payment details (card number etc.) not stored by the operator, processed exclusively by authorized payment processors.

Cool theme: Art. 6(1)(b) GDPR - contract performance.

2.3 Data for marketing communications

If the user consents, they may be collected:

e-mail address
course preferences
newsletter interactions

This data is used for the transmission of:

newsletter
commercial offers
information about upcoming webinars or courses.

Cool theme: Art. 6(1)(a) GDPR - consent.

Consent can be withdrawn at any time via the unsubscribe link in the email.

2.4 Data on participation in courses or webinars

For access to live online courses can be processed:

User name
e-mail address
webinar participation information
Course platform interactions (chat, questions, etc.)

Cool theme: contract performance.

2.5 Sensitive data

Operator does not routinely collect special categories of data (Art. 9 GDPR) as well:

medical data
ethnic origin
political opinions
religious beliefs
biometric data.

If such data are processed in the context of separate healthcare services offered offline, they are collected solely on the basis of explicit consent and dedicated documents.

3. Purposes of data processing

Personal data is processed for the following purposes:

processing orders and providing access to courses
issuing invoices and managing tax liabilities
communicating with users about orders
user account management
Improving website functionality and security
statistical traffic analysis
fraud prevention
sending commercial communications (with consent)

4. Duration of data storage

Personal data is kept only as long as necessary for the purposes for which it was collected.

The main periods are:

Tip date	Duration
invoice date	10 years (according to tax law)
user account data	until deletion or 3 years of inactivity
date marketing	until withdrawal of consent
technical data	according to cookie duration

After these periods, the data is deleted or anonymized.

5. Data recipients (processors)

For the operation of the services, the operator may transmit the data to contractual providers acting as data processors, including:

online payment processors
hosting and IT infrastructure providers
platform providers for webinars or online courses
email marketing service providers
traffic analysis providers
accounting service providers

Data is transmitted only to the extent necessary to provide the services.

All processors are contractually obliged to comply with GDPR requirements.

6. Analytical services and tracking technologies

The website uses analytics tools to evaluate traffic and improve services, including:

Google Analytics

These services can collect:

cookie identifiers
IP address (anonymized)
browsing behavior.

The use of these technologies based on user consent only, in compliance with ePrivacy legislation.

Further details are available in the Cookies Policy.

7. Transfer of data outside the European Economic Area

Some technology providers may process data outside the European Economic Area.

In such cases, the transfer shall be made exclusively on the basis of legal guarantees, including:

Standard Contractual Clauses (SCC) approved by the European Commission
adequacy decisions
additional security measures.

8. Data security

The controller shall implement appropriate technical and organizational measures to protect personal data, including:

SSL/TLS encryption
restricted access control
secure authentication
Database access monitoring
IT infrastructure security updates.

However, no online system can guarantee absolute security.

9. Rights of data subjects

Under the GDPR, users have the following rights:

right of access to data
right to rectification
the right to data erasure
the right to restrict processing
right to opposition
right to data portability
the right to withdraw consent
the right not to be subject to an automatic decision.

Applications can be sent to:

contact@holistic-med-international.com

The operator shall respond within maximum 30 days, according to GDPR.

10. Right to complain

Data subjects have the right to complain to the competent authority:

National Supervisory Authority for Personal Data Processing (ANSPDCP)
Website: https://www.dataprotection.ro

11. Protection of minors

The website is not intended for persons under 18 years. The operator does not knowingly collect personal data of minors.

If such data is found to be accidentally collected, it will be deleted without delay.

12. Links to third-party websites

The website may contain links to external platforms (social networks, video services, educational platforms).

The operator does not control the privacy policies of these platforms.

13. Policy change

The Operator reserves the right to update this Privacy Policy to reflect legislative or operational changes.

The updated version will be published on this page.

14. Contact date

For any questions on data protection:

Email: contact@holistic-med-international.com
Address: Muzelor nr. 22A, Sector 4, Bucharest, Romania