Privacy policy
What data we process when you book or manage your calendar on BookOra, why, who receives it and how to delete it.
Who processes the data
The operator is PRIMA SAFE DEVELOPMENT S.R.L., Drumul Crețeștilor, No. 19, Sector 4, București, VAT ID RO33109102, J2014005130404. For any questions about your data, write to [email protected].
This policy covers bookora.ro, partner websites hosted on bookora.ro subdomains and the partner dashboard.
Note one thing: for the medical or care service itself, the partner you book with is a separate controller, under its own policy. We only send it the appointment details.
What data we process
If you book an appointment: your name, phone number, e-mail address (if you provide it), the chosen service, the date and time, any notes you write, and your appointment history.
If you create an account: in addition, your password (stored encrypted, irreversibly) or your Google or Facebook account identifier.
If you are a partner: business details (name, tax ID (CUI), address, contact), details of the person managing the account, published content and, for the subscription, billing details and the last four digits of the card.
Technical, automatic: IP address, device type and pages visited, for security and statistics.
Why we process it
For the appointment to work — we send the booking details to the partner and send you the confirmation. Legal basis: performance of the contract.
To confirm your phone number, via an SMS code. Legal basis: legitimate interest in preventing fake bookings.
Aduceri-aminte before the appointment, via WhatsApp or SMS, if the partner has enabled them. Legal basis: performance of the contract.
Billing and accounting for partner subscriptions. Legal basis: legal obligation.
Contract withdrawal requests and complaints: name, e-mail, phone number and the contract it refers to. Legal basis: legal obligation.
Security and abuse prevention. Temei: interes legitim.
Asistentul telefonic AI, if the partner has enabled it: the booking conversation is processed automatically so we understand which service and time you want. Legal basis: performance of the contract.
Who receives the data
The partner you book with — your name, phone number and booking details. Without these, there is no appointment.
To the providers who help us deliver the service: găzduirea serverelor, serviciul de e-mail, furnizorul de SMS și WhatsApp, procesatorul de plăți (NETOPIA Payments, pentru abonamente; datele cardului ajung doar la el), furnizorul de inteligență artificială pentru asistentul telefonic. Fiecare primește strict ce îi trebuie și are obligația de confidențialitate.
Google, only if you accept statistics cookies: visit data (pages viewed, device type, approximate city), without your name, phone number or e-mail. It shows us what works on the website.
To the authorities, when the law requires us to.
We do not sell your data and we do not give it to anyone for advertising purposes.
How long we keep it
Account data, for as long as you have the account, plus a short period after it is closed, for any complaints.
Booking history, for as long as you have the account.
Invoices and accounting documents, 10 ani, for as long as tax legislation requires. We cannot delete these on request.
Jurnalele tehnice, cel mult 12 luni.
Your rights
You have the right to know what data we hold about you and to receive a copy, to correct it, to request its deletion, to request restriction of processing, to object to processing based on legitimate interest, and to receive your data in a format you can take elsewhere.
You can exercise any of them by writing to [email protected], from the account's e-mail address. We respond within 30 de zile.
If you are not satisfied with the answer, you can contact the National Supervisory Authority for Personal Data Processing (ANSPDCP).
Deleting your account and data
You can request deletion of your account and associated data at any time, whether you created it with e-mail, Google or Facebook.
Cum ceri: send an e-mail to [email protected], from the address you registered with, cu subiectul “Delete data". Nu ai nevoie de niciun formular.
What we delete: your account, name, e-mail address, phone number, Google or Facebook connection, your booking history and the reviews you have written.
What we keep and why: invoices and accounting documents, if you had a partner subscription — the law requires us to keep them for 10 years. They are no longer linked to your account.
Within: cel mult 30 de zile from the request. We will confirm by e-mail when it is done.
Separately, you can revoke the app's access from your Google or Facebook account at any time.
Cookie-uri
We use strictly necessary cookies (login, form protection) and, with your consent, preference cookies, statistics cookies (Google Analytics) and Google Maps. We do not use advertising cookies.
The full list, with durations and purposes, is in Cookie policy. You can change your choice at any time from “Cookie settings" at the bottom of the page.
Contact
For any question about your data: [email protected], or by mail to Drumul Crețeștilor, No. 19, Sector 4, București.
Sign in with Google or Facebook
If you choose to sign in with Google or Facebook, we receive from them doar trei lucruri: your name, e-mail address and an account identifier, used to recognize you the next time you sign in.
Nu primim parola ta and we have no access to your friends list, posts or anything else in that account. We never post anything on your behalf.
You can revoke access at any time, from your Google account settings (“Security → Third-party apps") or Facebook settings (“Settings → Apps and websites"). Revoking stops sign-in with that button, but does not by itself delete your BookOra account — for that, see the section below.