Legal

Privacy Policy

How we collect, use and protect the personal data you send us through this website.

Last updated:

01Who we are

The controller of the personal data processed through this website is [Denumire societate S.R.L.], trading as Stoma Robotics (“Stoma Robotics”, “we” or “us”).

  • Registered office: Avram Iancu 203, 1st Floor, Cluj-Napoca 407280, Romania
  • Tax ID (CUI): [CUI]
  • Trade Register number: [J12/…/…]
  • Email: office@stomarobotics.com
  • Phone: +40 264 234 234

Stoma Robotics distributes the YakeBot robotic dental implant surgery system, together with the DentalNavi planning software, to dental clinics in Europe. This website is informational and is intended for dental professionals.

We process personal data in accordance with Regulation (EU) 2016/679 (the “GDPR”) and Romanian Law no. 190/2018 implementing the GDPR.

02What data we collect and where it comes from

We only collect personal data when you send it to us through the contact form. The form contains the following fields:

  • the topic of your request (purchase, documentation, quote, demo or other information);
  • name;
  • clinic (optional);
  • email address;
  • phone number;
  • approximate number of implants per month (optional);
  • message (optional).

Please do not include patient health data or other special categories of data in your message. The form is not intended for that purpose.

On every visit, our hosting provider automatically records technical data in its server logs: IP address, date and time of the request, the page requested, browser type and operating system. This data is needed to run and secure the website.

We do not use web analytics, marketing or tracking cookies, and we do not load third-party content (such as embedded videos or maps). The website’s fonts are served from our own server.

03Purposes and legal bases

  • Answering your request, arranging a call or demo and preparing a quote: taking steps at your request before entering into a contract (Art. 6(1)(b) GDPR).
  • Communicating with professionals and clinics that contact us about our business, including following up on an earlier request: our legitimate interest in developing business-to-business relationships (Art. 6(1)(f) GDPR).
  • Operating and securing the website and preventing abuse (server logs): our legitimate interest in providing a secure and available website (Art. 6(1)(f) GDPR).
  • Meeting legal obligations, for example accounting or tax rules, if your request leads to a contract: legal obligation (Art. 6(1)(c) GDPR).

We do not send you marketing communications. If we wish to do so in the future, we will first ask for your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time without affecting the lawfulness of processing carried out before the withdrawal.

We do not make decisions based solely on automated processing and we do not create profiles.

04Who we share data with

We do not sell or rent your data. We only share it with:

  • Resend: the service that delivers the messages sent through the contact form to us (processor for email delivery);
  • Vercel: the website’s hosting provider, which processes server logs (processor);
  • the manufacturer of the YakeBot system or authorised partners, only if you explicitly ask us to (for example, for a technical question only they can answer) and only to the extent necessary;
  • public authorities, where the law requires us to.

Processors handle the data only on our instructions, under a contract that complies with Art. 28 GDPR.

05Transfers outside the European Economic Area

Resend and Vercel are based in the United States, so data may be transferred outside the European Economic Area. These transfers rely on the EU-US Data Privacy Framework, for certified providers, or on the standard contractual clauses adopted by the European Commission, with supplementary safeguards where needed.

You can ask us for a copy of the applicable safeguards using the contact details below.

06How long we keep data

  • Data sent through the contact form: [24 months] after our last communication with you, after which we delete it, unless your request led to a contract.
  • If a contract is concluded: for the duration of the contract and afterwards for the period required by law (for example, for accounting records).
  • Server logs: for the limited period set by the hosting provider [Vercel log retention period, to be confirmed].

07Your rights

Under the conditions set out in the GDPR, you have the right to:

  • access your data (Art. 15);
  • have inaccurate data rectified (Art. 16);
  • have your data erased (Art. 17);
  • restrict processing (Art. 18);
  • data portability (Art. 20);
  • object to processing based on legitimate interest (Art. 21);
  • withdraw your consent at any time, where processing is based on consent (Art. 7(3)).

To exercise your rights, email us at office@stomarobotics.com. We will reply within one month of receiving your request; this may be extended by two further months where necessary, in which case we will let you know. We may ask for additional information to confirm your identity.

08Right to lodge a complaint

If you believe that the processing of your data breaches the law, you have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), www.dataprotection.ro, or with the supervisory authority of the EU member state where you live or work. We would appreciate the chance to resolve your concern first, so please contact us beforehand.

09Cookies and local storage

This website sets no cookies and does not store data in localStorage or sessionStorage. We use no analytics, marketing or tracking tools, and fonts are self-hosted, with no requests to third parties.

The website's language is determined solely by the page address (for example /en for English) and is not remembered in your browser.

If we introduce analytics or other cookies that are not strictly necessary in the future, we will update this policy and ask for your consent before enabling them.

10Security

We apply appropriate technical and organisational measures to protect data against unauthorised access, loss or disclosure: an encrypted connection (HTTPS), access limited to the people who need the data, and providers that offer adequate security guarantees. However, no transmission over the internet is completely secure.

11Children

This website is intended for dental professionals and clinics and is not directed at children. We do not knowingly collect data from anyone under 16.

12Changes to this policy

We may update this policy when the way we process data or the applicable law changes. The current version is always published on this page, together with the date of the last update. If the changes are significant, we will highlight them on the website.

13Contact

For any question about this policy or your data, you can contact us:

  • Email: office@stomarobotics.com
  • Phone: +40 264 234 234
  • Address: [Denumire societate S.R.L.], Avram Iancu 203, 1st Floor, Cluj-Napoca 407280, Romania