{"id":244,"date":"2026-02-17T22:28:45","date_gmt":"2026-02-17T20:28:45","guid":{"rendered":"https:\/\/schita3.staging\/?post_type=legal&#038;p=244"},"modified":"2026-03-23T11:15:04","modified_gmt":"2026-03-23T09:15:04","slug":"confidentiality","status":"publish","type":"legal","link":"https:\/\/holistic-med-international.com\/en\/legal\/confidentialitate\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"<p class=\"wp-block-paragraph\">Last update: 09.03.2026<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This Privacy Policy describes how personal data of website users is collected, used, stored and protected <a href=\"https:\/\/holistic-med-international.com\">https:\/\/holistic-med-international.com<\/a> (\u201eSite\u201d), in accordance with:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Regulation (EU) 2016\/679 (GDPR)<\/strong><\/li>\n\n\n\n<li><strong>Law No 190\/2018 on GDPR implementing measures<\/strong><\/li>\n\n\n\n<li>applicable data protection and e-commerce legislation.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Use of the Site implies acceptance of this policy.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">1. Data operator<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The controller of personal data is:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>HOLISTIC MED PLANT S.R.L.<\/strong><br>Head Office: 22A Muzelor nr. 22A, Sector 4, Bucharest, Romania<br>Unique registration code: RO37130417<br>Trade Register No: J2021005359405<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Email data protection contact:<br><a>contact@holistic-med-international.com<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The Controller determines the purposes and means of processing personal data collected through the Website.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">2. Categories of personal data processed<\/h2>\n\n\n\n<h4 class=\"wp-block-heading\">2.1 Data collected automatically (Technical data)<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">When accessing the Site, certain technical information is automatically collected, including:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>IP address<\/li>\n\n\n\n<li>browser type and version<\/li>\n\n\n\n<li>operating system<\/li>\n\n\n\n<li>time zone<\/li>\n\n\n\n<li>pages accessed<\/li>\n\n\n\n<li>duration of visit<\/li>\n\n\n\n<li>Reference URL<\/li>\n\n\n\n<li>cookie identifiers<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">This data is collected by:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>server log files<\/li>\n\n\n\n<li>tracking technologies<\/li>\n\n\n\n<li>cookies<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Purpose of processing: technical functioning of the website, IT security and statistical analysis.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Cool theme: <strong>Art. 6(1)(f) GDPR - legitimate interest of the controller<\/strong>.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">2.2 Data provided directly by the user<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">When purchasing a course or webinar, the user provides:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>full name<\/li>\n\n\n\n<li>billing address<\/li>\n\n\n\n<li>e-mail address<\/li>\n\n\n\n<li>telephone number<\/li>\n\n\n\n<li>billing information<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Payment details (card number etc.) <strong>not stored by the operator<\/strong>, processed exclusively by authorized payment processors.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Cool theme: <strong>Art. 6(1)(b) GDPR - contract performance<\/strong>.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">2.3 Data for marketing communications<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">If the user consents, they may be collected:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>e-mail address<\/li>\n\n\n\n<li>course preferences<\/li>\n\n\n\n<li>newsletter interactions<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">This data is used for the transmission of:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>newsletter<\/li>\n\n\n\n<li>commercial offers<\/li>\n\n\n\n<li>information about upcoming webinars or courses.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Cool theme: <strong>Art. 6(1)(a) GDPR - consent<\/strong>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Consent can be withdrawn at any time via the unsubscribe link in the email.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">2.4 Data on participation in courses or webinars<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">For access to live online courses can be processed:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>User name<\/li>\n\n\n\n<li>e-mail address<\/li>\n\n\n\n<li>webinar participation information<\/li>\n\n\n\n<li>Course platform interactions (chat, questions, etc.)<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Cool theme: <strong>contract performance<\/strong>.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">2.5 Sensitive data<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Operator <strong>does not routinely collect special categories of data<\/strong> (Art. 9 GDPR) as well:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>medical data<\/li>\n\n\n\n<li>ethnic origin<\/li>\n\n\n\n<li>political opinions<\/li>\n\n\n\n<li>religious beliefs<\/li>\n\n\n\n<li>biometric data.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">If such data are processed in the context of separate healthcare services offered offline, they are collected <strong>solely on the basis of explicit consent and dedicated documents<\/strong>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">3. Purposes of data processing<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Personal data is processed for the following purposes:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>processing orders and providing access to courses<\/li>\n\n\n\n<li>issuing invoices and managing tax liabilities<\/li>\n\n\n\n<li>communicating with users about orders<\/li>\n\n\n\n<li>user account management<\/li>\n\n\n\n<li>Improving website functionality and security<\/li>\n\n\n\n<li>statistical traffic analysis<\/li>\n\n\n\n<li>fraud prevention<\/li>\n\n\n\n<li>sending commercial communications (with consent)<\/li>\n<\/ol>\n\n\n\n<h2 class=\"wp-block-heading\">4. Duration of data storage<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Personal data is kept only as long as necessary for the purposes for which it was collected.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The main periods are:<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><th>Tip date<\/th><th>Duration<\/th><\/tr><\/thead><tbody><tr><td>invoice date<\/td><td>10 years (according to tax law)<\/td><\/tr><tr><td>user account data<\/td><td>until deletion or 3 years of inactivity<\/td><\/tr><tr><td>date marketing<\/td><td>until withdrawal of consent<\/td><\/tr><tr><td>technical data<\/td><td>according to cookie duration<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">After these periods, the data is deleted or anonymized.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">5. Data recipients (processors)<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">For the operation of the services, the operator may transmit the data to contractual providers acting as <strong>data processors<\/strong>, including:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>online payment processors<\/li>\n\n\n\n<li>hosting and IT infrastructure providers<\/li>\n\n\n\n<li>platform providers for webinars or online courses<\/li>\n\n\n\n<li>email marketing service providers<\/li>\n\n\n\n<li>traffic analysis providers<\/li>\n\n\n\n<li>accounting service providers<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Data is transmitted only to the extent necessary to provide the services.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">All processors are contractually obliged to comply with GDPR requirements.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">6. Analytical services and tracking technologies<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The website uses analytics tools to evaluate traffic and improve services, including:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Google Analytics<\/strong><\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">These services can collect:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>cookie identifiers<\/li>\n\n\n\n<li>IP address (anonymized)<\/li>\n\n\n\n<li>browsing behavior.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">The use of these technologies <strong>based on user consent only<\/strong>, in compliance with ePrivacy legislation.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Further details are available in the Cookies Policy.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">7. Transfer of data outside the European Economic Area<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Some technology providers may process data outside the European Economic Area.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In such cases, the transfer shall be made exclusively on the basis of legal guarantees, including:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Standard Contractual Clauses (SCC) approved by the European Commission<\/strong><\/li>\n\n\n\n<li>adequacy decisions<\/li>\n\n\n\n<li>additional security measures.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">8. Data security<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The controller shall implement appropriate technical and organizational measures to protect personal data, including:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>SSL\/TLS encryption<\/li>\n\n\n\n<li>restricted access control<\/li>\n\n\n\n<li>secure authentication<\/li>\n\n\n\n<li>Database access monitoring<\/li>\n\n\n\n<li>IT infrastructure security updates.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">However, no online system can guarantee absolute security.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">9. Rights of data subjects<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Under the GDPR, users have the following rights:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>right of access to data<\/li>\n\n\n\n<li>right to rectification<\/li>\n\n\n\n<li>the right to data erasure<\/li>\n\n\n\n<li>the right to restrict processing<\/li>\n\n\n\n<li>right to opposition<\/li>\n\n\n\n<li>right to data portability<\/li>\n\n\n\n<li>the right to withdraw consent<\/li>\n\n\n\n<li>the right not to be subject to an automatic decision.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Applications can be sent to:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a>contact@holistic-med-international.com<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The operator shall respond within <strong>maximum 30 days<\/strong>, according to GDPR.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">10. Right to complain<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Data subjects have the right to complain to the competent authority:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>National Supervisory Authority for Personal Data Processing (ANSPDCP)<\/strong><br>Website: <a href=\"https:\/\/www.dataprotection.ro\">https:\/\/www.dataprotection.ro<\/a><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">11. Protection of minors<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The website is not intended for persons under <strong>18 years<\/strong>. The operator does not knowingly collect personal data of minors.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If such data is found to be accidentally collected, it will be deleted without delay.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">12. Links to third-party websites<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The website may contain links to external platforms (social networks, video services, educational platforms).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The operator does not control the privacy policies of these platforms.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">13. Policy change<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The Operator reserves the right to update this Privacy Policy to reflect legislative or operational changes.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The updated version will be published on this page.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">14. Contact date<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">For any questions on data protection:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Email: <a>contact@holistic-med-international.com<\/a><br>Address: Muzelor nr. 22A, Sector 4, Bucharest, Romania<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>","protected":false},"featured_media":854,"template":"","class_list":["post-244","legal","type-legal","status-publish","has-post-thumbnail","hentry"],"_links":{"self":[{"href":"https:\/\/holistic-med-international.com\/en\/wp-json\/wp\/v2\/legal\/244","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/holistic-med-international.com\/en\/wp-json\/wp\/v2\/legal"}],"about":[{"href":"https:\/\/holistic-med-international.com\/en\/wp-json\/wp\/v2\/types\/legal"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/holistic-med-international.com\/en\/wp-json\/wp\/v2\/media\/854"}],"wp:attachment":[{"href":"https:\/\/holistic-med-international.com\/en\/wp-json\/wp\/v2\/media?parent=244"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}