Last updated: 17 August 2026
This Privacy Policy explains how S.R.L. „SKIN MED” collects, uses, stores and protects the personal data of individuals who visit the skinmed.md website and use the clinic's services. Processing is carried out in accordance with Law No. 195/2024 on the protection of personal data of the Republic of Moldova and with the principles of Regulation (EU) 2016/679 (GDPR).
Please read this document carefully. By using the website and our services, you confirm that you are aware of the conditions described below.
1. DATA CONTROLLER
The controller that determines the purposes and means of processing is:

• Name: S.R.L. „SKIN MED”
• IDNO (fiscal code): 1021600035356
• Registered office: MD-2011, Chișinău, Codru, 2 Gohberg St., of. 66
• Clinic address (place of service): 26 Mihail Berezovschi St., Chișinău
• E-mail: skinmed.md@gmail.com
• Phone: +373 60 020 211

For any questions regarding the processing of your personal data, you may contact us using the details above.
2. WHAT DATA WE COLLECT
Depending on how you interact with us, we may process the following categories of data:
a) Identification and contact data: first name, last name, phone number, e-mail address, and any other information you provide through the appointment form, by phone or via social media.
b) Appointment and service data: the procedure or consultation you are interested in, appointment date and time, history of requests.
c) Health data (special category of data): during dermatological and aesthetic medicine consultations and treatments, we may process information about the condition of your skin, hair and nails, medical history, allergies, previous treatments, clinical photographs and other information necessary to establish a diagnosis and provide medical services. Such data is considered a special category and benefits from a higher level of protection.
d) Technical and browsing data: IP address, device and browser type, pages visited, visit source and other information collected automatically through cookies and similar technologies (see section 6).
We do not request or process sensitive data through the website beyond what is necessary to respond to your request. Detailed health data is collected within the doctor–patient relationship, at the clinic's premises.
3. PURPOSES AND LEGAL BASES OF PROCESSING
We process your data for the following purposes and on the following legal bases:

• Booking and providing medical and aesthetic services — basis: performance of pre-contractual measures and of the service contract, as well as processing for medical and diagnostic purposes carried out by a healthcare professional bound by professional secrecy.
• Processing of health data — basis: the data subject's explicit consent and/or the necessity of providing medical care, in accordance with Law No. 195/2024.
• Communicating with you (responding to requests, appointment confirmations, notices) — basis: the controller's legitimate interest and your consent.
• Improving the website and statistical analysis — basis: consent given through the cookie banner.
• Marketing and promotional communications (where you have given your consent) — basis: consent, which may be withdrawn at any time.
• Compliance with legal obligations (accounting, tax, medical reporting) — basis: the controller's legal obligation.

4. IS PROVIDING DATA MANDATORY?
Providing the necessary contact and health data is a condition for benefiting from the clinic's services. Refusal to provide this data may make it impossible to book or provide the requested services. Data processed for marketing or statistical purposes is provided voluntarily, and refusal does not affect access to core services.
5. WHO WE DISCLOSE DATA TO AND TRANSFERS
We do not sell or rent your data. We may disclose data, strictly within the limits of necessity, to:

• the clinic's medical and administrative staff, bound by confidentiality;
• service providers who support us in operating the website and communication: the website builder Tilda (Tilda Publishing) and Google services (Google Tag Manager, Google Analytics) for usage statistics;
• public authorities, where there is a legal obligation to do so.

Some providers (e.g. Google) may process data on servers located outside the Republic of Moldova, including outside the European Economic Area. In such cases, the transfer is carried out with appropriate safeguards provided by law (standard contractual clauses or equivalent mechanisms).
6. COOKIES AND SIMILAR TECHNOLOGIES
The skinmed.md website uses cookies and similar technologies to function properly, to analyse traffic and, with your consent, for marketing.
What are cookies? Cookies are small text files stored on your device when you visit a website.
Categories of cookies used:

• Strictly necessary cookies — ensure the basic functioning of the website and forms. They cannot be disabled and do not require consent.
• Statistics/analytics cookies — Google Analytics (via Google Tag Manager) and the Tilda platform's statistics system, used to understand how the website is used. Activated only with your consent.
• Marketing cookies — may be used to measure campaign effectiveness and display relevant content. Activated only with your consent.

Managing consent: on your first visit, a banner lets you accept or reject non-essential cookies. Until you make a choice, statistics and marketing scripts (including Google Tag Manager) are blocked and do not load. You can change your mind at any time via the cookie settings button on the website or by deleting cookies in your browser settings.
7. RETENTION PERIOD
We keep data only for as long as necessary for the stated purposes:

• contact and appointment data — for the duration of the relationship with the clinic and thereafter in accordance with applicable legal deadlines;
• health data / medical records — for the period provided by healthcare legislation;
• data processed based on consent (marketing, statistics) — until consent is withdrawn;
• data collected through cookies — for the lifetime of each cookie (usually up to 24 months) or until deleted.

8. YOUR RIGHTS
In accordance with Law No. 195/2024, you have the following rights:

• the right of access to processed data;
• the right to rectification of inaccurate or incomplete data;
• the right to erasure ("right to be forgotten"), under the conditions of the law;
• the right to restriction of processing;
• the right to data portability;
• the right to object to processing, including for marketing purposes;
• the right to withdraw consent at any time, without affecting the lawfulness of prior processing;
• the right to lodge a complaint with the supervisory authority.

To exercise these rights, you may contact us at skinmed.md@gmail.com. We will respond within the timeframes provided by law.
9. DATA SECURITY
We apply appropriate technical and organisational measures to protect data against unauthorised access, loss or disclosure, including restricted access, medical staff confidentiality and secure connections (HTTPS).
10. MINORS
Services for minors are provided with the consent and in the presence of a parent/legal representative. We do not knowingly collect minors' data through the website without the legal representative's consent.
11. CHANGES TO THIS POLICY
We may update this Policy from time to time. The updated version will be published on this page, indicating the date of the last change.
12. CONTACT AND SUPERVISORY AUTHORITY
For questions regarding data protection: S.R.L. „SKIN MED”, e-mail skinmed.md@gmail.com, phone +373 60 020 211.
Supervisory authority: National Center for Personal Data Protection (CNPDCP), 48 Serghei Lazo St., MD-2004, Chișinău; tel. +373 22 820 801; e-mail centru@datepersonale.md; www.datepersonale.md.