Privacy Policy

1. Data controller

The controller is NUCLEUS MED SRL, registered office at Str. Gării 495/A, room 1, Hărman 507085, Brașov County, Romania, Trade Register no. J2015001915086, unique registration code 35251188.

For any data protection request, contact us at contact@nucleusmed.ro or by phone at +40 758 409 100.

2. What data we collect

Identification and contact data you provide through forms: name, phone number, email address.

Transport request data: pickup and destination addresses, preferred date, transport type (assisted/non-assisted, one-way or round-trip) and your message/notes.

Patient data, when you provide it: age, mobility level and information about health status or conditions relevant to performing the transport safely. This is a special category of data (health data).

Technical data collected automatically, only with your consent for analytics cookies: aggregated and anonymous statistics about site usage (pages visited, device type, approximate region). Our analytics tool does not collect IP addresses for identification.

3. Purposes and legal bases

To answer requests and prepare transport quotes — basis: pre-contractual steps at your request (Art. 6(1)(b) GDPR) and our legitimate interest in replying (Art. 6(1)(f)).

To organize and provide the medical transport service — basis: performance of a contract (Art. 6(1)(b)).

To process health data — basis: your explicit consent (Art. 9(2)(a) GDPR), given by ticking the consent box and submitting the form.

To improve the site through anonymous statistics — basis: your consent for analytics cookies (Art. 6(1)(a)).

To comply with legal obligations (e.g. accounting and tax) — basis: legal obligation (Art. 6(1)(c)).

4. Whether providing data is required

Providing contact and transport data is necessary for us to give you a price and provide the service; without it we cannot act on your request. Providing health data is voluntary, but it helps us prepare the transport with safety appropriate to the patient's condition.

5. Recipients and processors

Messages sent through forms are delivered to us via the transactional email service Resend (Resend, Inc.), acting as a processor.

The website is hosted on Vercel Inc. infrastructure, which may process technical data as a processor.

We may disclose data to public authorities when required by law. We do not sell your data or share it with third parties for marketing purposes.

6. International transfers

Some of our providers (Resend, Vercel) may process data on servers located outside the European Economic Area, including in the United States. In such cases, transfers are made on the basis of appropriate safeguards under the GDPR (the European Commission's Standard Contractual Clauses and/or applicable adequacy mechanisms).

7. Retention

We keep data related to requests and quotes for as long as needed to handle them and, thereafter, for a reasonable period, generally up to 3 years from last contact, to manage any complaints.

Documents with accounting and tax relevance are kept for the period required by law.

On expiry of these periods, data is deleted or anonymized.

8. Your rights

You have the following rights: access; rectification; erasure (the 'right to be forgotten'); restriction of processing; data portability; objection; the right not to be subject to a decision based solely on automated processing; and the right to withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.

You can exercise your rights by a written request to contact@nucleusmed.ro. We will respond within the legal deadline of at most one month, which may be extended as provided by law.

9. Data security

We apply appropriate technical and organizational measures to protect data against unauthorized access, loss, alteration or disclosure, including encrypted transmission of data through the site (HTTPS) and access limited on a need-to-know basis.

10. Automated decisions and profiling

We do not make decisions producing legal effects on you based solely on automated processing, and we do not carry out profiling.

11. Cookies

The website uses strictly necessary cookies and, only with your consent, analytics cookies. Full details are in the Cookie Policy.

12. Changes to this policy

We may update this policy from time to time. The applicable version is the one published on the site, with the last-updated date shown above.

13. Complaints

If you consider that the processing of your data infringes the law, you have the right to lodge a complaint with the Romanian Data Protection Authority (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, sector 1, Bucharest, www.dataprotection.ro.

However, please contact us first at contact@nucleusmed.ro — we will try to resolve any issue directly and promptly.