This privacy policy determines how OHANA VET SRL (“we”) collect, store, and use information about you when you use or interact with the website www.ohanavet.ro, applications, and/or services offered.
By accessing or using this site and/or any information, tools, and documents contained or described herein, you acknowledge and confirm that you understand and agree to the privacy policy in its current version at all times. If you do not agree with this, you cannot access and use our site.
You can contact us by sending an email to clinic.ohanavet@gmail.com. If you have any questions regarding this privacy policy, please contact us via the mentioned email address.
We collect and use information from site visitors in accordance with this section and section 9 below.
2.1 Server log information. We use a third-party server to host our website www.ohanavet.ro. The server automatically logs the IP address you use to access our site, as well as other information about your visit, such as the pages accessed, information requested, the date and time of the request, the source of your access to our site (e.g., the website or URL (link) that referred you to our site), and your browser version and operating system. Our server is located in Romania.
2.2 Use of server log information for IT security purposes. We and our third-party hosting providers collect and store server logs to ensure network and information security so that the server and site are not compromised. This includes analyzing log files to help identify and prevent unauthorized access to our network, distribution of malicious code, prevention of attacks on the server, and other cyber-attacks, by detecting unusual or suspicious activities.
(i) Legal basis for processing: compliance with a legal obligation to which we are subject (Article 6(1)(c) of the General Data Protection Regulation).
Legal obligation: we have a legal obligation to implement necessary technical and organizational measures to ensure an adequate level of security to the risk of processing information about individuals. Logging access to our site using server log files is such a measure.
(ii) Legal basis for processing: our legitimate interests and those of third parties (Article 6(1)(f) of the General Data Protection Regulation).
Legitimate interests: we and our third-party hosting provider have a legitimate interest in using your information for the purpose of ensuring network and information security.
2.3 Use of server log information to analyze site usage and improve the site. We use the information collected through the logs on our site to analyze how users interact with the site and its functionalities. For example, we analyze the number of visits and unique visitors we receive, the time and date of the visit, the location of the visit, the operating system, and the browser used. We use the information collected from analyzing these logs to improve our site. For example, we use the information collected to modify the information, content, and structure of the site and individual pages based on how users interact and the time spent on certain pages of our site.
Legal basis for processing: our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation).
Legitimate interests: improving our site for users and understanding their preferences so that our site can better meet their needs and desires.
2.4 Use of cookies and similar technologies. Cookies are data files that are sent from a website to a browser to record information about users for various purposes. We use cookies and similar technologies on our website, including essential, functional, analytical, and targeting cookies, and web beacons. For more information on how we use cookies, please refer to our cookie policy.
You can reject some or all of the cookies we use on our site or through our site by changing your browser settings, but this may affect your ability to use our site or some or all of its functionalities. For more information about cookies, including how to change your browser settings, visit www.allaboutcookies.org or refer to our cookie policy.
We collect and use information from individuals who interact with certain functionalities of our site in accordance with this section and section 9 below.
We collect and use information from individuals who contact us in accordance with this section and section 9 below.
4.1 Contact by email. When you send an email to the email address displayed on our site, we collect your email address and any other information you provide in that email (such as your name, phone number, and information contained in the email signature).
(i) Legal basis for processing: our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation).
Legitimate interests: responding to the inquiries and messages we receive and keeping records of electronic correspondence.
(ii) Legal basis for processing: necessary to enter into a contract or take steps at your request prior to entering into a contract (Article 6(1)(b) of the General Data Protection Regulation).
Reason why it is necessary to enter into a contract: if your message relates to the provision of goods or services or taking steps at your request prior to providing our goods and services (e.g., providing information about such goods and services), we will process your information to do so.
Transfer and storage of your information. We use a third-party email provider to store the emails you send us. For further information, see the section of this privacy policy entitled Transferring your information outside the European Economic Area.
4.2 Contact by post. If you contact us by post, we will collect any information you provide in any written communications you send us.
(i) Legal basis for processing: our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation).
Legitimate interests: responding to the inquiries and messages we receive and keeping records of correspondence.
(ii) Legal basis for processing: necessary to enter into a contract or take steps at your request prior to entering into a contract (Article 6(1)(b) of the General Data Protection Regulation).
Reason why it is necessary to enter into a contract: if your message relates to the provision of goods or services or taking steps at your request prior to providing our goods and services (e.g., providing information about such goods and services), we will process your information to do so.
5.1 Information received from third parties. In general, we do not receive information about you from third parties. The third parties from whom we receive information about you will generally include group companies or partners. It is also possible that third parties with whom we have had no prior contact may provide us with information about you. The information we obtain from third parties will generally be your name and contact details but will include any additional information about you that they provide to us.
(i) Legal basis for processing: necessary to enter into a contract or take steps at your request prior to entering into a contract (Article 6(1)(b) of the General Data Protection Regulation).
Reason why it is necessary to enter into a contract: if a third party has passed on information about you (such as your name and email address) in order to provide you with services, we will process your information to take steps at your request to enter into a contract with you and to perform a contract with you (as applicable).
(ii) Legal basis for processing: your consent (Article 6(1)(a) of the General Data Protection Regulation).
Your consent: if you have asked a third party to share information about you with us and the purpose of sharing this information is not related to the performance of a contract or services by us to you, we will process your information based on your consent, which you grant by requesting the third party in question to share your information.
(iii) Legal basis for processing: our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation).
Legitimate interests: if a third party has shared information about you with us and you have not given your consent for the information exchange, we will have a legitimate interest in processing this information in certain circumstances. For example, we would have a legitimate interest in processing your information to fulfill our obligations arising from a subcontract with the third party if the third party holds the primary contract with you. Our legitimate interest is to fulfill our obligations under our subcontract. Similarly, third parties may pass on information about you to us if you have breached or may breach any of our legal rights. In this case, we will have a legitimate interest in processing such information to investigate and pursue any such potential breach.
5.2 Information received in error. If we receive information about you from a third party by mistake and/or we do not have a legal basis for processing this information, we will delete your information.
Profiling. Please note that we use profiling of visitors to our website. We do not believe this has any legal effects on you or similarly affects you. You have the right to object to the use of your information for automated profiling described in this section. You can do this by opting out of cookies and similar technologies, according to the method described in the relevant section below. Your IP address is not associated with any other information of yours, as it is used only for traffic/connection statistics – therefore, we cannot identify you based on your IP address. You can learn more about our use of cookies and similar technologies (including the legal basis we rely on) and how to opt-out of them in our cookie policy, available here: […].
Profiling represents any form of automated processing of your information to evaluate personal aspects about you, particularly to analyze or predict things like your work performance, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.
6.1 Use of profiling for web analytics. Our web analytics service, Google Analytics, uses and collects information such as your location (based on your IP address) and behavior (based on cookies) when you access the site (such as the pages you access and where you click). We will process information from cookies only if you have consented to the installation of cookies on your device in accordance with our cookie policy.
Logical approach: by automatically analyzing and classifying information such as location (based on IP address), as well as the behavior and devices of visitors to our site (using cookies), we can better understand what site visitors want (regarding our site content and products), how to improve the site, and how to promote and market the services we offer.
Significance and expected consequences: cookies will be used to track and store information about your behavior and device on our site (unless you have opted out of receiving such cookies via the pop-up window or email request), and your location will be analyzed based on your IP address.
Legal basis for processing: legitimate interests (Article 6(1)(f) of the General Data Protection Regulation).
Legitimate interest: providing the best experience to our visitors based on region, language, and interests.
This section sets out how long we keep your information. Where possible, we specify retention periods. If this is not possible, we have set out the criteria we use to determine the retention period.
7.1 Retention periods
Server log information: we retain information about server logs in accordance with legal requirements in our country. For logs not subject to special status, we keep the information for a maximum period of three years.
Correspondence and inquiries: if you make an inquiry or correspond with us for any reason, whether by email, post, or phone, we will retain your information for as long as it takes to respond to and resolve your inquiry, and for an additional 12 months, after which we will delete your information.
7.2 Criteria for Determining Retention Periods. In any other circumstances, we will not retain your information for longer than necessary, taking into account the following:
The purpose(s) and use of your information both currently and in the future (such as whether it is necessary to continue storing this information to continue fulfilling our obligations under a contract with you or to contact you in the future);
Whether we have a legal obligation to continue processing your information (such as any legal obligations to retain information imposed by relevant law or regulations);
Whether we have any legal basis to continue processing your information (such as your consent);
The importance of your information (both now and in the future);
Any industry-agreed practices regarding the duration of information retention;
The levels of risk, cost, and responsibility involved in continuing to hold the information;
How difficult it is to ensure that the information can be updated and accurate; and
Any relevant circumstances (such as the nature and status of our relationship with you).
We take appropriate technical and organizational measures to secure your information and protect it against unauthorized or unlawful use and accidental loss or destruction, including:
Information is stored encrypted, and access to it is restricted to specific internal personnel, using login credentials and in accordance with the defined rules of internal policies regarding the use of personal data as defined in the company’s register.
Use of secure servers for storing information;
Verification of the identity of any person requesting access to information before granting access to information;
Use of Secure Sockets Layer (SSL) software and Transport Layer Security (TLS) security to encrypt any information you submit to us through any forms on our website;
Improper methods of transmitting information over the internet (where encryption is either nonexistent or weak) by the user releases us from any liability pertaining to such user.
Your information will be transferred and stored outside the European Economic Area (EEA) under the conditions set out below. Additionally, we may transfer your information outside the EEA or to an international organization to comply with legal obligations to which we are subject (e.g., compliance with a court order). Where we are required to do so, we will ensure adequate safeguards and protections.
9.1 Email. The information you send us via email is transferred outside the EEA and stored on the servers of our third-party email service provider.
Country where we store data:
9.4 Google Analytics. The information collected by Google Analytics (IP address and actions you take on our website) is transferred outside the EEA and stored on Google servers. You can access Google’s privacy policy here: https://www.google.com/policies/privacy/
Country where we store data: United States of America. This country is not subject to an adequacy decision by the European Commission.
Security measures used: Google has self-certified compliance with EU-U.S. Privacy Shield, available here: https://www.privacyshield.gov/welcome. EU-U.S. Privacy Shield is an approved certification mechanism under Article 42 of the General Data Protection Regulation, which is permitted under Article 46(2)(f) of the General Data Protection Regulation. You can access the European Commission’s decision on the adequacy of the EU-U.S. Privacy Shield here: http://ec.europa.eu/justice/data-protection/international-transfers/adequacy/index_en.htm
10.1 Disclosure to Service Providers. We use third parties to provide services that are necessary to manage our business or to help us conduct our business and that process your information on our behalf. These include:
Hosting provider, located in Romania.
Your information will be shared with these service providers, if necessary, to provide you with the services you requested, whether accessing our website or ordering goods and services from us. We do not publicly disclose the identity of all our service providers in terms of security and competition. If you would like more information about the identity of service providers, please contact us directly via our contact form or email, and we will provide such information if you have a legitimate reason to request it (if we have shared your information with such service providers, for example).
(i) Legal basis for processing: legitimate interests [Article 6(1)(f) of the General Data Protection Regulation].
Legitimate interest: where we share your information with these third parties in a context other than where it is necessary to perform a contract (or take steps at your request to do so), we will share your information with such third parties in order to effectively conduct and manage our business.
(ii) Legal basis for processing: necessary for the performance of a contract and/or to take steps at your request prior to entering into a contract [Article 6(1)(b) of the General Data Protection Regulation].
Reason why it is necessary to perform a contract: we may share information with our service providers to enable us to fulfill our obligations under that contract or to take the actions you requested before entering into a contract with you.
10.2 Disclosure to Other Third Parties. We also disclose your information to other third parties in certain circumstances, as set out below.
10.2.1 Providing information to third parties such as Google Inc. Google collects information through our use of Google Analytics on our website. Google uses this information, including IP addresses and information from cookies, for various purposes, such as improving Google Analytics service. The information is shared with Google on an aggregated and anonymous basis. To learn more about what information Google collects, how it uses this information, and how you can control the information sent to Google, please visit the following page: https://www.google.com/policies/privacy/partners/.
Legal basis for processing: our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation).
Legitimate interest: compliance with contractual obligations to Google under the Google Analytics Terms of Service (https://www.google.com/analytics/terms/us.html). You can opt out of Google Analytics by installing the browser plugin here: https://tools.google.com/dlpage/gaoptout.
Transfer and storage of your information. Information collected by Google Analytics is stored on Google servers in the United States of America. For further information about the safeguards used when your information is transferred outside the European Economic Area, see section 9 above.
10.2.2 Sharing your information with third parties, which are either related to or associated with our business operations, where necessary. The information is stored encrypted and can only be decrypted using login credentials assigned to specific users with specific interests, in accordance with our GDPR policies.
Legal basis for processing: our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation).
Legitimate interest: operation and efficient management of the website.
Consultants. Occasionally, we seek advice from consultants such as accountants, financial advisors, legal experts, public relations professionals, and security specialists. We will share your information with these third parties only when necessary to provide relevant advice.
Business Partners. Business partners are firms with which we work, providing goods and complementary services to our own business or enabling us to provide goods or services that we cannot offer alone. We share information with our business partners where you have requested services they provide either independently of us or in connection with our services or offerings.
Independent Contractors. We use independent contractors in some cases. Your information will be shared with independent contractors only where necessary for them to perform specific tasks.
Insurers. We will share your information with our insurers where necessary, for example in relation to a complaint or potential complaint we receive or make, or in accordance with our general disclosure obligations under our insurance contract with them.
10.2.3 Sharing information within the institution for internal administrative purposes, including information about customers and employees.
(i) Legal basis for processing: our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation).
Legitimate interest: operation and efficient management of the website.
(ii) Legal basis for processing: necessary for the performance of a contract or to take steps at your request prior to entering into a contract (Article 6(1)(b) of the General Data Protection Regulation).
Reason why it is necessary to perform a contract: we need to share information about you with other companies in order to fulfill our contractual obligations to you or to take actions at your request before entering into a contract, for example due to services or information you have requested.
10.3 Disclosure of information for legal reasons.
10.3.1 Reporting crimes or threats to public security. If we suspect that criminal or potential criminal behavior has occurred, we may need to contact an appropriate authority, such as the police, in certain circumstances. This may be the case, for example, if we suspect fraud or cybercrime has been committed or if we receive threats or malicious communications. Generally, we will need to process your information for this purpose only if you have been involved or affected by such an incident in any way.
Legal basis for processing: our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation).
Legitimate interest: preventing crime or suspected criminal activity (such as fraud).
10.3.2 Enforcement or potential application of legal rights. We will use your information in connection with the enforcement or potential enforcement of our legal rights. Our legal rights may be contractual (where we have entered into a contract with you) or non-contractual (such as legal rights we have under copyright or tort law).
Legal basis for processing: our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation).
Legitimate interest: enforcing our legal rights and taking steps to ensure our legal rights.
10.3.3 In connection with litigation, potential litigation, or legal proceedings. It may be necessary for us to use your information if we are involved in a dispute with you or with a third party, for example either to resolve the dispute or as part of any mediation, arbitration, or court resolution or similar process.
Legal basis for processing: our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation).
Legitimate interest: resolving disputes and potential disputes.
10.3.4 Compliance with laws, regulations, and other legal requirements. We will also use and process your information to comply with legal obligations to which we are subject. For example, we may need to disclose your information based on a court order or subpoena if we receive one.
(i) Legal basis for processing: compliance with a legal obligation (Article 6(1)(c) of the General Data Protection Regulation).
Legal obligation: legal obligations to disclose information that are part of Romanian law or mandatory for Romanian legal entities, for example based on an international agreement signed by Romania.
(ii) Legal basis for processing: our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation).
Legitimate interest: where legal obligations are part of the laws of another country and have not been integrated into the legal framework of Romania, we have a legitimate interest in complying with these obligations.
11.1 Subject to certain restrictions on certain rights, you have the rights listed below regarding your information. You can also exercise these rights by sending an email to clinic.ohanavet@gmail.com.
The right to request access to your information and information related to the use and processing of your information;
The right to request correction or deletion of your information;
The right to request restriction of the use of your information;
The right to receive the information you provided to us in a structured, commonly used, and machine-readable format (e.g., a CSV file) and the right to transfer it to another data controller (including a third-party data controller);
The right to object to the processing of your information for certain purposes (for more information, see section 12 below); and
The right to withdraw your consent for the use of your information at any time, where we rely on your consent to use or process such information. Please note that if you withdraw your consent, this will not affect the lawfulness of our use and processing of your information based on your consent before you withdrew it.
In accordance with Article 77 of the General Data Protection Regulation, you also have the right to lodge a complaint with a supervisory authority, in particular in the Member State where you reside, work, or for an alleged infringement of the General Data Protection Regulation.
11.2 The above rights are provided only in summary form, and certain limitations apply to many of these rights. You can find more information about your rights, as well as information about any limitations that apply to these rights, by reading the underlying legislation contained in Articles 12-22 and 34 of the General Data Protection Regulation, available here:
https://ec.europa.eu/info/law/law-topic/data-protection/reform_ro/
11.3 If you request access to your information, we are required by law to use all reasonable measures to verify your identity before doing so. These measures are designed to protect your information and prevent the risk of identity fraud, identity theft, or unauthorized access to your information.
How we verify your identity. If we have relevant information about you, we will attempt to verify your identity using this information. If it is not possible to identify you with such information or if we do not have sufficient information about you, we may request original documents or certified copies of certain documents to verify your identity before we can provide you with access to your information. We will be able to confirm the exact information we need to confirm your identity in your specific circumstances if and when you make such a request.
Regarding the use or processing of your information, you have the rights of objection listed below. You can also exercise these rights by sending an email to clinic.ohanavet@gmail.com.
The right to object to the use or processing of your information where we use or process it to perform a task of public interest or for our legitimate interests, including “profiling” (analyzing or estimating your behavior based on your information) based on any of these purposes; and
For more information on how to object to the use of information collected from cookies and similar technologies, please refer to the cookie policy.
13.1 “Sensitive personal information” is information about an individual that reveals racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic information, biometric information for unique identification of an individual, health, or information about the sex life or sexual orientation of an individual.
We do not knowingly or intentionally collect sensitive personal information from individuals, and you should not send us sensitive personal information. However, if you accidentally or intentionally transmit sensitive personal information to us, we will consider that you have explicitly consented to us processing sensitive personal information in accordance with Article 9(2)(a) of the General Data Protection Regulation. We will use and process your sensitive personal information for the purpose of deleting it.
13.2 We do not knowingly contact or collect information from individuals under the age of 18. Our website is not intended to solicit any kind of information from individuals under the age of 18. We may receive information about individuals under the age of 18 through fraud or deception by a third party. If we are notified of this, as soon as we verify the information, when required by law, we will immediately obtain proper parental consent to use such information or, if we are unable to obtain parental consent, we will delete the information from our servers. If you want to notify us about receiving information about individuals under the age of 18, please do so by sending an email to clinic.ohanavet@gmail.com.
We may update and modify our privacy policy from time to time.
14.1 Minor Changes. If we make minor changes to our privacy policy, we will update the privacy policy with a new date mentioned at the beginning. Processing of your information will be governed by the practices set forth in the new version of the privacy policy effective from its effective date.
14.2 Major Changes. If we make major changes to our privacy policy or intend to use your information for a new purpose or for a purpose different from the purposes for which we initially collected it, we will notify you by email (if possible) or by posting a notice on our website. We will provide you with information about the change in question and its purpose, and any other relevant information before using your information for the new purpose. Whenever necessary, we will obtain your prior consent before using your information for a purpose different from the purposes for which we initially collected it.
Our website may contain links to third-party websites. The privacy policies or practices of third parties are beyond our control. Therefore, please read the privacy policies of these websites before using them.