About this policy
This policy explains how data is processed through the Centrul de recuperare Elisaveta website, its contact form and appointment request form. It does not replace the privacy information for medical or rehabilitation services delivered at the centre.
Who to contact
For questions about personal data or to exercise your rights, contact Centrul de recuperare Elisaveta at centrulrecuperare28@gmail.com, on 0757 196 545 / 0758 343 164, or at 19A Mărășești Street, Rădăuți, Suceava County, Romania.
Information submitted
The contact form asks for your name, email address and message; your phone number is optional. The appointment form asks for your name, email, phone number, chosen service and preferred date and time. The form language, consent timestamp and appointment request status are also recorded. Do not submit diagnoses, medical documents, national identification numbers or other sensitive information through these forms.
Purposes and legal grounds
We use the information to answer messages, clarify requests and arrange the appointments you request. We ask for your consent to form submissions through a checkbox. Technical abuse prevention serves the legitimate interest of protecting the website. This module does not use your details for automatic marketing subscriptions or profiling.
Messages and appointment requests
Contact messages are sent to the email address configured by the website administrator. Appointment requests are stored in private WordPress records accessible to authorised administrators, and an email notification is attempted. A request may remain recorded even if the notification does not arrive. Choosing a date and time does not automatically reserve a slot; the team separately confirms availability.
Retention
The necessary retention period is determined by handling the message, arranging the appointment and any legal obligations or need to resolve a dispute. The module does not automatically delete requests: records remain in the database until staff remove them. Messages and notifications may remain in mailboxes and backups depending on their configuration. Contact the centre for information about the retention of a particular request or to ask for its deletion.
Service providers and recipients
Authorised staff and technical providers needed for the website, hosting and email may process the data. Services and processing locations depend on the configured providers and accounts. You may ask the centre for details about the providers involved in your request and any international transfers. Opening Facebook or Google Maps takes you to external services governed by their own privacy policies.
Technical data and cookies
To limit repeated submissions, the module temporarily retains cryptographically derived identifiers for the sender email and IP address: approximately 60 seconds for email and 20 seconds for IP. It does not retain the raw IP address in appointment records. The hosting provider may keep its own technical logs. WordPress may use cookies needed for administrator sign-in. The supplied theme and module do not include advertising or analytics tools; other installed extensions and services may behave differently.
Your rights
Subject to the GDPR, you may request access, correction, erasure, restriction and portability where applicable. You may object to processing based on legitimate interests in the circumstances provided by law. You can withdraw consent by contacting the centre; withdrawal does not affect the lawfulness of earlier processing. If you prefer not to use the forms, you can phone the centre. Requests to exercise rights are handled within the applicable legal time limits.
Complaints and updates
You have the right to complain to Romania’s National Supervisory Authority for Personal Data Processing — ANSPDCP, using the information and procedures at www.dataprotection.ro. This policy may be updated when website features or data handling change. Version prepared on 23 October 2026.
Cloudflare Turnstile
The forms use Cloudflare Turnstile for spam checks. Your browser connects to Cloudflare to perform verification. The server sends the verification token to Cloudflare; your name, email, message and appointment details are not included in this request.