Personal Data Protection

In accordance with the European Union General Data Protection Regulation (EU Regulation 2016/679, “GDPR”), which has been applicable since May 25, 2018, Dr. Victor Gomoiu Children’s Clinical Hospital is a personal data controller and informs you as follows:

Processing of Personal Data

To provide healthcare services, Dr. Victor Gomoiu Children’s Clinical Hospital processes your personal data, including:

Personal Identification Number (CNP),
Series and number of identity documents,
Health-related data, including medical history,
Other relevant data from copies of identity documents, birth certificates, or other identification documents,
Data concerning sexual life (if applicable).

Without access to the necessary personal data, Dr. Victor Gomoiu Children’s Clinical Hospital cannot comply with legal requirements for medical service provision. However, this does not affect the quality of medical care.

Your personal data may be transferred to:

State authorities,
Professional associations,
Service providers (clinics, consultants, experts, IT service developers, archiving companies).

Your Rights Under GDPR (Effective from May 25, 2018)

1. Right of Access

You may request access to your personal data.

2. Right to Rectification or Update

You may request the correction of inaccurate or incomplete personal data.

3. Right to Erasure (“Right to Be Forgotten”)

You may request the deletion of your personal data if:

The data is no longer necessary for the purposes for which it was collected or processed,
There is no other legal basis for processing,
You object to automated decision-making, and no legitimate grounds exist,
The data was processed unlawfully,
The data must be deleted to comply with legal obligations under EU or national law.

4. Right to Restriction of Processing

You may request restriction of processing in the following cases:

You contest the accuracy of your data, allowing time for verification,
Processing is unlawful, and you object to deletion, requesting restricted use instead,
Dr. Victor Gomoiu Children’s Clinical Hospital no longer needs the data for processing, but you require it for legal claims,
You have objected to processing, pending verification of whether the hospital’s legitimate grounds override your own.

5. Right to Data Portability

You may request to receive your personal data in a structured, commonly used, machine-readable format or, if technically feasible, transfer it to another organization.

6. Right to Confirmation and Notification

You have the right to receive confirmation on whether your personal data is being processed and to receive this information in an understandable format.

7. Right to Withdraw Consent

If your personal data was collected based on consent, you may withdraw it at any time without affecting the legality of processing before withdrawal.

8. Right to Object

You may object to the processing of your personal data unless Dr. Victor Gomoiu Children’s Clinical Hospital demonstrates legitimate reasons justifying the processing.

9. Right to Notification of Rectification, Deletion, or Processing Restriction

You have the right to be informed about any rectification, deletion, or restriction of processing of your personal data.

10. Right to Be Notified in Case of a Data Breach

You will be notified in case of a security breach affecting your personal data.

11. Right to File a Complaint

You may submit a complaint to the National Authority for Personal Data Processing Supervision if you believe your rights have been violated.

Important Information for Third-Party Data Sharing

If you provide personal data of another person for medical services, you must inform them about this privacy notice. If the data belongs to a minor, the parent or legal guardian must be notified.

For any requests regarding the exercise of the above rights, consent withdrawal, or further inquiries, please contact Dr. Victor Gomoiu Children’s Clinical Hospital at protectiadatelor@spitalgomoiu.ro, addressed to the Data Protection Officer.