Privacy Policy

1. General Information

Ascendra Med SRL (hereinafter referred to as "Ascendra Med", "we", or "the Company"), with registered office in Romania, Tax ID 33838101, respects the confidentiality of your personal data and is committed to protecting it in accordance with the General Data Protection Regulation (GDPR — EU Regulation 2016/679) and applicable national legislation.

This policy describes how we collect, use, store, and protect the personal data you provide through the website ascendra-med.ro.

2. Data Controller

The personal data controller is:

• Name: Ascendra Med SRL
• Tax ID: 33838101
• Data protection contact email: office@ascendra-med.ro

3. Categories of Personal Data Collected

Through the forms available on this website (contact, quote request, demo request, partnership), we may collect the following categories of personal data:

• Full name
• Professional email address
• Phone number
• Company or medical institution name
• Professional position/role
• Country and coverage area (for distribution inquiries)
• Any other information you choose to provide in the message field

We do not collect sensitive data (patient medical data, biometric data, etc.).

4. Purposes of Data Processing

Personal data is processed exclusively for the following purposes:

• Responding to your information requests
• Providing personalized price quotes
• Scheduling equipment demonstrations
• Evaluating and managing partnership/distribution requests
• Subsequent commercial communications, only with your explicit consent
• Improving our services and website functionality

5. Legal Basis for Processing

Personal data processing is based on:

• Consent (Art. 6(1)(a) GDPR): By completing forms and checking the consent box, you express your agreement to data processing
• Legitimate interest (Art. 6(1)(f) GDPR): Responding to commercial inquiries received, managing business relationships
• Contract performance or pre-contractual measures (Art. 6(1)(b) GDPR): Providing requested quotes and information

6. Web Analytics (Matomo)

We use Matomo Analytics, a self-hosted web analytics solution, to understand how our website is used. Matomo is configured to:

• Anonymize IP addresses
• Not set cookies without your consent
• Store data exclusively on our servers, without transfer to third parties
• Respect the "Do Not Track" browser setting

Data collected by Matomo includes: pages visited, visit duration, browser type, language, screen resolution, and country (estimated from anonymized IP). We do not collect personal data through Matomo.

7. Data Retention Period

Personal data is stored for the duration necessary to fulfill the purposes for which it was collected, but no longer than 3 years from the last interaction, unless legislation requires a longer retention period.

8. Data Recipients

Your personal data is not sold, rented, or transferred to third parties for marketing purposes. Data may be accessed by:

• Authorized Ascendra Med SRL employees, strictly for the purposes described above
• IT service providers (hosting, email) — based on data processing agreements
• Public authorities, where required by law

9. International Transfers

Your data is stored and processed within the European Union. Should a transfer outside the EU/EEA be necessary, it will only be carried out with appropriate safeguards as provided by GDPR.

10. Your Rights

Under GDPR, you have the following rights:

• Right of access: You can request information about the data we hold about you
• Right to rectification: You can request correction of inaccurate data
• Right to erasure ("right to be forgotten"): You can request deletion of data, subject to legal obligations
• Right to restriction of processing: You can request limitation of processing under certain conditions
• Right to data portability: You can request to receive data in a structured format
• Right to object: You can object to data processing in certain situations
• Right to withdraw consent: You can withdraw consent at any time

To exercise these rights, contact us at: office@ascendra-med.ro. We will respond within 30 days.

11. Data Security

We implement appropriate technical and organizational measures for personal data protection, including: secure transmission (HTTPS), role-based access restrictions, regular backups, and security incident management procedures.

12. Complaints

If you believe that the processing of your personal data violates GDPR provisions, you have the right to file a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP):

• Website: www.dataprotection.ro
• Email: anspdcp@dataprotection.ro

13. Policy Changes

We reserve the right to update this policy. Any changes will be published on this page with the date of the last update. We recommend checking this page periodically.