Privacy policy

In short: dermi.ro uses no cookies for visitors, has no ads and does not track you. We process only the minimal technical data needed to run and protect the site, and e-mails you send us.

1. Controller

Dr. Mădălina Iulia Lincu, Romania. Contact: contact@dermi.ro.

2. Hosting and security (Cloudflare)

The site is served by Cloudflare, Inc. Servers receive technical data (IP address, time, requested page, browser) used only to deliver pages and protect against attacks. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

3. Analytics

Cloudflare Web Analytics: cookie-free, aggregated statistics, no profiling. Legal basis: legitimate interest.

4. Contact form and e-mail

If you use the contact form or write to contact@dermi.ro, we process your name, e-mail address, topic and message only to reply. The form is handled by the site's server (Cloudflare) and delivered by e-mail to the doctor's mailbox (Gmail, provided by Google); mail to contact@dermi.ro is forwarded there by Cloudflare Email Routing. Your IP address is checked briefly for spam rate limits and not stored with the message. Please do not send health data or medical photos.

5. Private area (authors only)

The admin area (/vault/) is used only by the site's authors, signed in via Cloudflare Access (24-hour, strictly necessary cookie). Files are stored in Cloudflare R2 (EU).

6. Local storage

If you pick a light or dark theme, the choice is stored in your browser only (strictly necessary, Art. 4(5) Romanian Law 506/2004). No consent banner is required.

7. Transfers outside the EU

Cloudflare, Inc. and Google LLC (USA) are certified under the EU-U.S. Data Privacy Framework and use Standard Contractual Clauses.

8. Your rights

You have the rights of access, rectification, erasure, restriction, portability and objection. Contact contact@dermi.ro. You may complain to the Romanian supervisory authority ANSPDCP, B-dul G-ral. Gheorghe Magheru 28–30, Bucharest, www.dataprotection.ro.