Privacy & Cookie Policy

Last updated: 2026-02-24

1. Data Controller

The data controller is Prodia Labor Clinic (hereinafter "the Controller"). For data protection inquiries, contact the Data Protection Officer at the institution's email address.

2. Cookies Used

This portal uses only essential cookies:

• Session cookie (session) — required for authentication and session management; expires on logout or session expiry.
• GDPR consent cookie (gdpr_consent) — stores your cookie preference; expires after 365 days.

We do not use marketing, advertising, or tracking cookies. We do not share data with third parties for advertising purposes.

3. Legal Basis for Data Processing

Personal data is processed on the basis of:

• Art. 6(1)(c) GDPR — legal obligation of the controller (health legislation)
• Art. 6(1)(f) GDPR — legitimate interest of the controller (portal operation)
• Art. 9(2)(h) GDPR — processing health data for medical purposes
• Law No. 190/2018 on GDPR implementation measures in Romania

4. Categories of Data Processed

• Identification data: first name, last name, personal identification number (CNP)
• Health data: laboratory test results, diagnosis, treatment
• Authentication data: username, password (hash), session
• Technical data: IP address (at the time of consent)

5. Data Subject Rights

Under GDPR, you have the right to:

• Access — request information about processed data
• Rectification — correct inaccurate data
• Erasure — request deletion of data (subject to legal limitations)
• Restriction — restrict data processing
• Portability — receive data in a structured format
• Objection — object to data processing
• Complaint — file a complaint with ANSPDCP (National Supervisory Authority for Personal Data Processing)

6. Retention Period

Health data is retained in accordance with applicable legislation regarding medical documentation. Session data is automatically deleted upon session expiry. GDPR consent is retained for the duration of the account's existence.