01Who we are
The controller of the personal data processed through this website is [Denumire societate S.R.L.], trading as Stoma Robotics (“Stoma Robotics”, “we” or “us”).
- Registered office: Avram Iancu 203, 1st Floor, Cluj-Napoca 407280, Romania
- Tax ID (CUI): [CUI]
- Trade Register number: [J12/…/…]
- Email: office@stomarobotics.com
- Phone: +40 264 234 234
Stoma Robotics distributes the YakeBot robotic dental implant surgery system, together with the DentalNavi planning software, to dental clinics in Europe. This website is informational and is intended for dental professionals.
We process personal data in accordance with Regulation (EU) 2016/679 (the “GDPR”) and Romanian Law no. 190/2018 implementing the GDPR.
02What data we collect and where it comes from
We only collect personal data when you send it to us through the contact form. The form contains the following fields:
- the topic of your request (purchase, documentation, quote, demo or other information);
- name;
- clinic (optional);
- email address;
- phone number;
- approximate number of implants per month (optional);
- message (optional).
Please do not include patient health data or other special categories of data in your message. The form is not intended for that purpose.
On every visit, our hosting provider automatically records technical data in its server logs: IP address, date and time of the request, the page requested, browser type and operating system. This data is needed to run and secure the website.
We do not use web analytics, marketing or tracking cookies, and we do not load third-party content (such as embedded videos or maps). The website’s fonts are served from our own server.
03Purposes and legal bases
- Answering your request, arranging a call or demo and preparing a quote: taking steps at your request before entering into a contract (Art. 6(1)(b) GDPR).
- Communicating with professionals and clinics that contact us about our business, including following up on an earlier request: our legitimate interest in developing business-to-business relationships (Art. 6(1)(f) GDPR).
- Operating and securing the website and preventing abuse (server logs): our legitimate interest in providing a secure and available website (Art. 6(1)(f) GDPR).
- Meeting legal obligations, for example accounting or tax rules, if your request leads to a contract: legal obligation (Art. 6(1)(c) GDPR).
We do not send you marketing communications. If we wish to do so in the future, we will first ask for your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time without affecting the lawfulness of processing carried out before the withdrawal.
We do not make decisions based solely on automated processing and we do not create profiles.
04Who we share data with
We do not sell or rent your data. We only share it with:
- Resend: the service that delivers the messages sent through the contact form to us (processor for email delivery);
- Vercel: the website’s hosting provider, which processes server logs (processor);
- the manufacturer of the YakeBot system or authorised partners, only if you explicitly ask us to (for example, for a technical question only they can answer) and only to the extent necessary;
- public authorities, where the law requires us to.
Processors handle the data only on our instructions, under a contract that complies with Art. 28 GDPR.
05Transfers outside the European Economic Area
Resend and Vercel are based in the United States, so data may be transferred outside the European Economic Area. These transfers rely on the EU-US Data Privacy Framework, for certified providers, or on the standard contractual clauses adopted by the European Commission, with supplementary safeguards where needed.
You can ask us for a copy of the applicable safeguards using the contact details below.
06How long we keep data
- Data sent through the contact form: [24 months] after our last communication with you, after which we delete it, unless your request led to a contract.
- If a contract is concluded: for the duration of the contract and afterwards for the period required by law (for example, for accounting records).
- Server logs: for the limited period set by the hosting provider [Vercel log retention period, to be confirmed].
07Your rights
Under the conditions set out in the GDPR, you have the right to:
- access your data (Art. 15);
- have inaccurate data rectified (Art. 16);
- have your data erased (Art. 17);
- restrict processing (Art. 18);
- data portability (Art. 20);
- object to processing based on legitimate interest (Art. 21);
- withdraw your consent at any time, where processing is based on consent (Art. 7(3)).
To exercise your rights, email us at office@stomarobotics.com. We will reply within one month of receiving your request; this may be extended by two further months where necessary, in which case we will let you know. We may ask for additional information to confirm your identity.
08Right to lodge a complaint
If you believe that the processing of your data breaches the law, you have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), www.dataprotection.ro, or with the supervisory authority of the EU member state where you live or work. We would appreciate the chance to resolve your concern first, so please contact us beforehand.
10Security
We apply appropriate technical and organisational measures to protect data against unauthorised access, loss or disclosure: an encrypted connection (HTTPS), access limited to the people who need the data, and providers that offer adequate security guarantees. However, no transmission over the internet is completely secure.
11Children
This website is intended for dental professionals and clinics and is not directed at children. We do not knowingly collect data from anyone under 16.
12Changes to this policy
We may update this policy when the way we process data or the applicable law changes. The current version is always published on this page, together with the date of the last update. If the changes are significant, we will highlight them on the website.
13Contact
For any question about this policy or your data, you can contact us:
- Email: office@stomarobotics.com
- Phone: +40 264 234 234
- Address: [Denumire societate S.R.L.], Avram Iancu 203, 1st Floor, Cluj-Napoca 407280, Romania