Legal

Cookie policy

Short version: nothing that tracks you starts until you press “Accept”. Refuse, and the site works exactly the same. Below is what happens in your browser in each case.

Last updated:

This policy explains what cookies and similar technologies the site operated by DOCTOR PAUL MAN SRL uses. It forms part of our terms and conditions, where you will also find how we handle personal data.

1. What cookies are

A cookie is a small text file a website places in your browser and can read again on later visits. Usually it remembers something: that you are logged in, which language you chose, or — in the case of tracking cookies — which pages you visited, so you can be shown adverts.

The same category covers things that are not technically cookies but do the same job: local storage, session storage and tracking pixels. This policy covers all of them.

2. How we ask for your consent

On your first visit a banner appears with three buttons: Accept, Reject and Let me choose. Until you press one of them, your browser is instructed to block any analytics or advertising cookie from being written. That is not a promise on our word — it is Google’s mechanism called Consent Mode v2, and the site starts with every signal set to denied.

Refusing is exactly as easy as accepting — one click, on a button of the same size — and you are not asked again on every page. If you refuse, the whole site still works: the only thing that does not happen is the measurement.

So that we can leave you alone once you have answered, we remember the answer. It is saved in local storage, on your own device, under the name ie_consent: two values (analytics yes/no, marketing yes/no) and the date you answered. It goes nowhere and contains nothing that identifies you.

3. Strictly necessary cookies

These need no consent, because without them the service you asked for does not work. There are two, and the first one is not set for you.

Strictly necessary cookies and storage (first-party)
NamePurposeWho gets itLifetime
ie_adminKeeps the login session in the admin area. Without it the admin area does not work.Clinic staff only, after signing in7 days
ie_consentRemembers your answer to the banner, so you are not asked on every page. It is local storage, not a cookie — it is never sent to a server.Any visitor who has answered the bannerUntil you clear it in your browser

The ie_admin cookie is cryptographically signed and marked HttpOnly (scripts cannot read it), Secure (it travels over HTTPS only) and SameSite=Lax. It contains neither the password nor any patient data.

4. Cookies that only start if you accept

The tags below are managed through Google Tag Manager, a tool that lets us switch such scripts on or off without changing the site. None of them runs, and no cookie in the table is written, before you agree.

Analytics — Google Analytics 4. It tells us how many people come to the site, from which city, which pages they read and which buttons they press. We see it as aggregate numbers, not as people, and we never use it to contact anyone.

Marketing — Google Ads and Meta (Facebook / Instagram). These show us which advert led to an appointment and allow adverts to be shown to people who have already visited the site (remarketing). The cookies are set by Google and Meta, who also use them for their own purposes, described in their own policies.

Analytics and marketing cookies (third party)
NameSet byPurposeLifetime
_gaGoogle AnalyticsTells one visitor from another, so you are not counted twice.2 years
_ga_<ID>Google AnalyticsHolds the current session state for our GA4 property.2 years
_gcl_auGoogle AdsLinks a click on an advert to what happened next on the site (a conversion).90 days
IDEGoogle (doubleclick.net)Remarketing and measurement of advert impressions.Up to 13 months
_fbpMetaIdentifies the browser for Facebook and Instagram adverts.90 days

Lifetimes are the ones stated by each provider and can change without our knowledge. What these companies do with the data is described in Google’s policy for partner sites and in the Meta privacy policy. Transfers of data outside the European Union rely on the EU–US Data Privacy Framework, to which both companies are certified.

5. The Google map — the exception

The Contact and About uspages embed a Google Maps map, to make the clinic easier to find. The map is content loaded from Google’s servers.

Unlike the tags in section 4, the map loads with the page, so it happens before you have had a chance to accept or refuse anything. When it opens, Google may set cookies and read your IP address under its own policies — for instance the NID cookie, which Google uses for preferences and security. Those cookies are set by Google, not by us; we have no access to them and receive nothing from them.

We say so plainly because it is the only place anything from outside the clinic reaches your browser without being asked. If you would rather avoid it entirely, do not open those two pages, block third-party cookies in your browser (section 7), or just use the written address: Strada Suceag 8, 407310 Gilău, jud. Cluj.

What Google does with that data is described in the Google privacy policy and on Google’s page about cookies.

6. Google reviews and hosting

The reviews shown on the site are not loaded by your browser. We fetch them ourselves, server-side, when the site is built, and serve them as ordinary text — so displaying them sets no cookie and sends nothing about you to Google.

The site is hosted by Vercel Inc. The hosting servers process HTTP requests in order to deliver pages to you, but they place no tracking cookies in doing so.

7. How to change your choices

Consent is as easy to withdraw as it was to give. The button below reopens the banner, with your current choices ticked:

Whatever you refuse stops running from that moment. Cookies already set while you had accepted stay in the browser until they expire or until you delete them yourself, from its settings:

You can also opt out of Google Analytics directly, with Google’s official opt-out add-on, which applies to every site you visit. Blocking cookies breaks nothing on this site: the only visible effect is that the embedded Google map may not display.

8. Changes and contact

The tools in section 4 are managed from a dashboard rather than from the site’s code, so the list can change faster than a published page. We undertake to update this page whenever we add a new tag, and to ask for your consent again if the purpose changes. The version in force is the one here, dated at the top of the page.

Questions about this policy or about your data: contact@implantestetclinic.ro or +40 722 653 522. Full detail on how we handle personal data is in the dedicated section of our terms and conditions. If you are not satisfied with our answer, you may complain to the Romanian data protection authority (ANSPDCP).