THEDERMALFILLER S.R.L., trading as MaxMed Systems, Str. Basel nr. 4, ap. 2, 300127 Timisoara, Romania, is the controller of the data described here. I am Catalin Calinoiu, and I handle every request myself. Write to [email protected].
What data I process
- What you send me: your name, professional title, clinic or company, country, email address, telephone number and any documents you attach, such as your practice authorisation.
- Order data: proforma invoices, invoices, payments, delivery addresses and the supply records for your order.
- Business contact details that clinics publish on their own websites, which I use to write to them.
- I do not ask for and do not process patient data or any special category of data under Article 9 of the GDPR.
Why, and on what legal basis
- To answer your enquiry and prepare a quotation: steps taken at your request before a contract (Article 6(1)(b)).
- To supply and invoice your order: performance of the contract (Article 6(1)(b)).
- To verify your professional status, keep the traceability records required by Article 25 of Regulation (EU) 2017/745, and keep accounting records: legal obligations (Article 6(1)(c)).
- To write to clinics at the business address they publish, in countries where the law allows business-to-business email: my legitimate interest in offering my services to professionals (Article 6(1)(f)). Every message says where I found the address. Reply with one word and I stop writing, permanently; I keep only the address on a do-not-contact list, so that it is never written to again.
Who receives the data
- Microsoft, which provides my email service (Microsoft 365).
- Cloudflare, which hosts this website.
- My supply partner and the courier, only the data needed to deliver your order.
- My accountant, and public authorities where the law requires it.
I do not sell or rent data. Some of these providers may process data outside the European Economic Area; they do so under an adequacy decision of the European Commission or under the European Commission's standard contractual clauses.
How long I keep it
- Enquiries that do not lead to an order: up to 24 months after our last contact.
- Supply and traceability records: at least ten years, and fifteen years for implantable devices, as Article 25 of the MDR requires.
- Accounting documents: for the periods set by Romanian accounting and tax law.
- Addresses on the do-not-contact list: for as long as I send business email, so that the objection is respected.
This website
This website uses no advertising, tracking or analytics cookies. It stores one setting in your browser for the current session, to remember that you have confirmed the professional access notice. The enquiry page prepares an email in your own email program; nothing is sent until you send it.
Your rights
You can ask for access to your data, for its correction or erasure, for the restriction of its processing, and for a copy in a portable format. You can object at any time to processing based on legitimate interest, including business email. Write to [email protected]; I answer within one month. You can also complain to the data protection authority of your country, or in Romania to the National Supervisory Authority for Personal Data Processing (ANSPDCP), www.dataprotection.ro.
Last updated: October 2026