Privacy Policy and Protection of Personal Data
1. Introduction
Samaritanus Ambulance respects your data privacy and is committed to protecting personal information in accordance with the General Data Protection Regulation (GDPR) No. 2016/679, as well as other applicable European regulations, including Directive (EU) 2018/1725 on data protection within EU institutions and bodies. This policy explains how we collect, use, and protect your personal data and the rights you have in this regard.
This policy is periodically updated to reflect legislative changes or alterations in our data processing practices. By using our services, you agree to this policy.
2. Data Collected and Purpose of Processing
We collect and process the following categories of personal data strictly necessary for providing our services:
- Full Name
- Contact Information (phone, email, address)
- Medical data relevant to providing emergency medical services
- Billing data (if applicable)
- Medical history data necessary for medical interventions
Information about medical insurance, when applicable.
3. Data Collection Procedure
Personal data is collected directly from the individuals concerned through:
- Online and physical forms
- Phone calls and medical requests
- Service contracts and agreements
- Medical monitoring systems and equipment used during interventions
4. Legal Basis for Processing
We process your data based on the following legal grounds:
- Execution of a contract or medical service request
- Legal obligations as a medical service provider
- Legitimate interest in providing and improving medical services
- Explicit consent from the data subject, where required
Compliance with European data protection regulations, including Directive (EU) 2016/680 related to data protection in law enforcement contexts.
5. Data Storage and Protection
Data is stored in secure environments and protected through strict technical and organizational measures to prevent unauthorized access, loss, destruction, or compromise. Access to data is limited only to authorized personnel and is continuously monitored.
6. Rights of the Data Subject
Under GDPR and other applicable European regulations, users have the following rights:
- Right to access personal data
- Right to rectification and update
- Right to erasure of data (“right to be forgotten”), except where the law requires its retention
- Right to restrict data processing
- Right to data portability
- Right to object to processing under certain conditions
- Right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP) or the European Data Protection Supervisor
To exercise these rights, you can contact us using the contact details below.
7. Data Disclosure and Transfer
We will not sell, rent, or transfer your personal data to third parties, except as required by law or in the case of contractual partners strictly necessary for providing medical services. All data transfers are conducted in compliance with the provisions of the GDPR and only for the stated purposes.
If data is transferred to countries outside the European Union, we ensure that adequate protection measures are applied, such as standard contractual clauses approved by the European Commission.
8. Security Measures
We implement rigorous security measures, including encryption, multi-factor authentication, and restricted access to sensitive information, to prevent any misuse of data. Our systems are continuously monitored to detect and prevent security breaches.
9. Data Retention Duration
Data will be retained strictly for the duration necessary to fulfill the purposes for which it was collected or according to applicable legal retention periods. After these periods expire, the data will be deleted or anonymized.
10. Data Sharing with Third Parties
In certain cases, we may share your data with:
- Governmental and regulatory authorities
- Contractual partners involved in providing medical services
- Medical insurers, when necessary for service reimbursement
- IT and cybersecurity service providers ensuring our infrastructure
11. Contact
For any questions related to data protection, you can contact us at:
- Email: info@samaritanus.ro
- Phone: +40 365 400800; +40 727 092886
- Address: 540236 Târgu Mureș, Str. Gheorghe Doja 231 Corp C 14
This policy is periodically updated. Last updated: 05.02.2025.