Privacy Policy

Data Protection Notice (EU)

This website is a business-to-business (B2B) platform for licensed healthcare and aesthetic professionals in the European Union. It is not directed at consumers.
THEDERMALFILLER S.R.L. acts as data controller for the processing described below.

Data Controller 

THEDERMALFILLER S.R.L.
Timisoara, Romania
European Union
Contact: contact@maxmedsystems.eu

Data Processing Principles 

We process limited data where necessary for:
– secure platform functionality
– professional communication
– operational access management
– procurement coordination
– regulatory and legal compliance

This may include: professional identification information you submit voluntarily, communication data from contact forms or email, and limited technical data needed for platform security.

We do not intentionally collect patient medical records or special category data under Article 9 GDPR.

Legal Basis

Where applicable, we rely on:
– Article 6(1)(f) GDPR – legitimate interest in operating a secure B2B platform
– Article 6(1)(b) GDPR – pre-contractual or contractual communication
– Article 6(1)(c) GDPR – legal compliance

Your data is never sold or rented. We do not use advertising trackers or behavioural profiling, and we do not carry out automated decision-making under Article 22 GDPR.

Data Sharing 

Data may be shared only where necessary with:
– EU-based hosting and IT infrastructure providers
– legal, fiscal or regulatory advisors bound by confidentiality
– competent public authorities where legally required

Our enquiry form uses Google reCAPTCHA to prevent spam, which may involve limited data processing by Google outside the European Economic Area under Google's own privacy terms. Other than this, we do not intentionally transfer personal data outside the EEA.

Data Retention

Data is kept only as long as necessary for operational, contractual or legal purposes, with appropriate technical and organisational security measures in place.

Rights of Data Subjects 

You may request access, correction, restriction, objection or erasure of your data by writing to contact@maxmedsystems.eu. We may need to verify your identity before responding.

Jurisdiction

This notice is governed by EU and Romanian law. You may lodge a complaint with your local supervisory authority. In Romania, this is the National Supervisory Authority for Personal Data Processing (ANSPDCP).

Updates 

This policy is reviewed periodically. Last updated: July 2026.