Information Notice on Data Processing

1. The controller

The controller of the data described in this notice is Perioskoup SRL, with its registered office in Buzău, strada Victoriei nr. 20, CUI 52008589, registered with the Trade Register under no. J2025044486009 (EUID: ROONRC.J2025044486009). You may contact us for any data protection matter at privacy@perioskoup.com.

2. The data we process

• identification and contact data: surname, first name, e-mail address, telephone;
• professional data: status as a dentist, membership of the Colegiul Medicilor Stomatologi din România [the Romanian College of Dentists], specialisation, the name and details of the clinic, the accreditation documents requested under the B2B Terms;
• account and billing data: subscription plan, billing and payment history, tax data;
• usage data and technical data: access logs, IP address, device identifiers, actions within the platform;
• communications: correspondence with the support team.

3. Purposes and legal bases of the processing

• creation and administration of the account, provision of the Services, billing and support, on the basis of performance of the contract, pursuant to Article 6(1)(b) GDPR;
• verification of professional status, on the basis of performance of the contract and of the legitimate interest in ensuring the integrity of the platform, pursuant to Article 6(1)(b) and (f) GDPR;
• compliance with legal obligations, in particular tax and accounting obligations, pursuant to Article 6(1)(c) GDPR;
• ensuring the security of the Services, the prevention of fraud and abuse, the improvement of the Services on the basis of aggregated data, and the establishment, exercise or defence of rights, on the basis of legitimate interest, pursuant to Article 6(1)(f) GDPR;
• marketing communications, exclusively on the basis of your consent, pursuant to Article 6(1)(a) GDPR and Article 12 of Legea nr. 506/2004 [Law No. 506/2004 on the processing of personal data and the protection of privacy in the electronic communications sector], with the possibility of withdrawal at any time.

4. Recipients of the data

The data may be accessed by the sub-processors listed in the List of Sub-processors, within the limits of the role of each, by the payment processor Stripe, in its capacity as an independent controller, as well as by our accounting and legal advisers, who are bound by confidentiality obligations. The data may be disclosed to public authorities where the law so requires.

5. International transfers

The data is stored on servers within the European Union. Certain services involve transfers to the United States, protected by the Standard Contractual Clauses or by the provider's certification under the EU-US data protection framework, in accordance with the List of Sub-processors.

6. Retention period

• account data: for the duration of the Agreement and for 3 years after its termination, being the duration of the general limitation period;
• financial and accounting records: 10 years, in accordance with tax legislation;
• technical logs: no more than 26 months;
• marketing preferences: until consent is withdrawn.

7. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection to processing based on legitimate interest, as well as the right to withdraw your consent, without affecting the lawfulness of processing carried out previously. Requests are to be sent to privacy@perioskoup.com and receive a reply within one month at the latest, with the possibility of extension in complex cases, pursuant to Article 12 GDPR. You have the right to lodge a complaint with the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal [the Romanian National Supervisory Authority for Personal Data Processing] (www.dataprotection.ro).

8. Other information

The provision of identification, professional and billing data is necessary for the conclusion and performance of the Agreement, and a refusal to provide it makes the creation of a professional account impossible. We do not take decisions based solely on automated processing which produce legal effects concerning you. This notice may be updated, and material changes will be notified in accordance with the Agreement.