Privacy Policy

Your privacy is important to us.

This privacy commitment explains what personal data BIOGENESIS IVF S.R.L. (Genesis Athens) collects from you through your interactions with our website and how we use this data.

To meet your needs with specific and innovative services, we must collect, store, and use certain personal information about our patients and clients. Our intention is to handle all the personal data you provide with the utmost care and respect, in accordance with the principles set out below.

What is personal data

“Personal data” refers to unique information relating to an identified or identifiable individual (“data subject”), such as name, address, personal identification number, IP address, or phone number.

Visitors to the website are considered data subjects under the law — meaning individuals who can be identified, directly or indirectly, especially through an identifier such as a name, identification number, location data, online identifier, or through one or more elements specific to their physical, physiological, genetic, mental, economic, cultural, or social identity.

From time to time, we may request personal information through our website to send you requested materials, respond to your inquiries, or provide you with services. Whenever we request personal data, we will explain the purpose for which it is required, where it is stored, who has access to it, and inform you that you may request access to or deletion of your data at any time.

Who owns this website

The website is owned by BIOGENESIS IVF SRL (Genesis Athens), Unique Registration Code 21857207, Company Registration Number J40/10702/2007.

Data Protection Officer (DPO) contact: dpo@genesisathens.ro.

More information is available on the Contact page.

Legal basis for processing personal data

Voluntarily provided data (via forms or email): the legal basis is Article 6(1)(b) of Regulation (EU) 679/2016 — processing necessary to take steps at the request of the data subject before entering into a contract.

Automatically collected data (cookies, analytics tools): the legal basis is your explicit consent.
Data processed for legal obligations (e.g., invoicing, medical archiving): the legal basis is Article 6(1)(c) — compliance with a legal obligation.

The legal bases for sharing data with third parties include:

The Patient Law;
Law no. 95/2006 on healthcare reform;
Transplant legislation and applicable European directives.

Purposes of data processing

We process your personal data to:

Communicate with you and respond to inquiries;
Provide medical and administrative services;
Ensure website security and functionality;
Improve our services;
Send marketing messages (only with your prior consent).

You may withdraw your consent for promotional communications at any time by following the unsubscribe link in our messages or by contacting our DPO directly.ntru comunicări promoționale în orice moment, prin link-ul de dezabonare inclus în mesajele trimise sau printr-o solicitare directă la adresa DPO.

Data retention period

Personal data is stored only for as long as necessary to fulfill the purposes for which it was collected, but no longer than 5 years from your last interaction with us.

If an invoice has been issued, the data will be kept for 10 years, as required by tax law.

For employees, data will be retained for 75 years (according to the Labor Code).

For patients, medical records will be kept for 30 years, in accordance with healthcare regulations.

Who has access to your data

We do not disclose your data to third parties for marketing purposes without your explicit consent.

Data may be shared with:

Service providers (billing, email delivery, etc.), acting as authorized processors;
Competent authorities, based on legal requests, such as:
1. Territorial Labor Inspectorate
2. Employment Agency
3. Judicial authorities
4. Medical specialists
5. National Transplant Agency
6. Bucharest City Hall
7. Ministry of Health

Any other disclosure will only occur with your explicit consent.

Your rights as a data subject

Under Regulation (EU) 679/2016 (GDPR), you have the following rights:

Right to information and access;
Right to rectification;
Right to erasure (“right to be forgotten”);
Right to restrict processing;
Right to data portability;
Right to object;
Right not to be subject to automated decision-making, including profiling;
Right to lodge a complaint with the National Supervisory Authority for Personal Data Processing: www.dataprotection.ro.

Updates to the Privacy Policy

To remain compliant with legislative changes and operational practices, BIOGENESIS IVF S.R.L. reserves the right to update this Privacy Policy at any time.

Any modifications will take effect upon publication on the website.