Privacy policy

The controller of your data is Safe Life Med S.R.L.. For any question about personal data, write to contact@safe-life-med.ro or call 0735 347 600.

Through the contact form on this site we collect:

• your full name;
• your phone number;
• your email address, if you choose to fill it in (an optional field);
• the service you selected, if you pick one from the list;
• the message you write, usually the pick-up address, the destination, the date and the patient’s condition;
• the tick box confirming that you agree we may use these details to reply to you;
• technical data stored with the message: the IP address, the browser (user-agent) and the page you sent the form from, used to prevent abuse of the form.

When you call the dispatch, we process the data needed to organise the trip: name, phone number, pick-up and destination addresses, and the information you give us about the patient’s condition.

Health information is a special category of data. We process it strictly to the extent needed to provide the transport and medical assistance and to send the right crew.

• to answer your request and provide the service, on the basis of performance of a contract or pre-contractual steps, Art. 6(1)(b) GDPR;
• for health data, on the basis of medical assistance and management of health services, Art. 9(2)(h) GDPR, and protection of vital interests, Art. 9(2)(c) GDPR;
• on the basis of the consent you give with the form’s tick box, so that we can contact you back, Art. 6(1)(a) GDPR;
• for invoicing, accounting records and reporting obligations, on the basis of a legal obligation, Art. 6(1)(c) GDPR;
• for the security of the site and to prevent automated messages, on the basis of legitimate interest, Art. 6(1)(f) GDPR.

We do not use your data for profiling or automated decisions, and we never sell it.

• messages received through the form: up to 12 months from the last exchange, unless they become part of a transport file;
• documents relating to a completed trip (transport record, invoice): for the period required by the applicable medical, tax and accounting legislation;
• technical data stored with the form: up to 12 months, then deleted along with the message.

You can withdraw your consent at any time and the message will be deleted, except where the law requires us to keep certain documents.

Your data only reaches the people and suppliers who actually help us deliver the service:

• the crew taking the trip and, where relevant, the destination hospital;
• Vercel Inc., a United States company, which hosts the site and processes the requests sent to it, acting as a processor;
• Supabase, the database provider where messages sent through the form are stored, acting as a processor;
• Resend, the service that delivers the notification email to the dispatch when a new message arrives, acting as a processor;
• our accountants, for tax documents;
• public authorities, where we have a legal obligation to disclose.

Each of these suppliers processes the data only on our instructions and under a data processing agreement.

The site is hosted by Vercel Inc., established in the United States. Some of the technical suppliers listed above operate infrastructure or provide support from outside the European Economic Area, which means data may also be processed outside the European Union.

These transfers are made on the basis of the standard contractual clauses adopted by the European Commission or, where applicable, an adequacy decision, together with additional technical measures (encryption in transit and at rest, restricted access).

The site uses no marketing cookies and loads no third-party tracking tools. Our own statistics rely on a hash generated from the IP address and browser, which changes daily and cannot be used to recognise you later.

The full detail, including the only cookie the site can write, is in the Cookie and tracking policy.

Under the GDPR you have the right:

• to access the data we hold about you;
• to have inaccurate or incomplete data corrected;
• to erasure (the “right to be forgotten”);
• to restriction of processing;
• to object to processing based on legitimate interest;
• to data portability, in a structured format;
• to withdraw your consent at any time, without affecting processing carried out beforehand;
• to lodge a complaint with the Romanian Data Protection Supervisory Authority (dataprotection.ro).

Write to contact@safe-life-med.ro and we will reply within 30 days at the latest. We may ask you to confirm your identity, so that we never send data to the wrong person.

Communication with the site is encrypted. Access to the database is granted through separate administrator accounts, limited to the people who need this data to provide the service.

The contact form is protected against automated submissions by a limit on the number of requests per IP address.

We may update this policy. The version in force is the one published here, and the date of the last update is shown at the top of the page.

The commercial conditions are described separately, in the Terms and conditions.