Privacy Policy

The personal data controller is phlebologist Alexandru Tatarin. The website is used to inform patients, receive enquiries, and arrange consultations. Current telephone, email, and clinic address are displayed on this page from the website settings. You can use these contacts for questions about personal data processing.

When you submit a form, we receive your name, telephone number, the selected or entered reason for the enquiry, form type, page address, referrer when available, a technical submission identifier, submission time, and server-side evidence of the notice shown to and accepted by you. The reason for the enquiry may contain health-related information. Do not provide more medical information in the form than is necessary for the initial contact. The raw IP address is not stored. The CMS temporarily uses an HMAC fingerprint of the IP address only to protect the form from abuse.

The data is used to receive your enquiry, contact you, answer questions, arrange a consultation or appointment, protect the form from automated abuse, and demonstrate that you provided consent. The legal basis for processing data submitted through the form is your explicit, informed consent, which you provide before submission. You may choose not to submit the form and instead use the published contact details.

Enquiries are accessible to authorised users of the protected Admin panel and technical infrastructure providers. To respond and arrange an appointment, the name, phone number and text of a new enquiry are sent through the dedicated VaricosaNet bot to a private Telegram group for the site owner and authorised manager. Visitors explicitly agree to this transfer before submitting the form. Personal details from older enquiries whose consent does not mention Telegram are not transferred. We do not sell the data or send it to advertising platforms.

An enquiry is retained for no longer than 90 days from submission. After that period, an automated hourly task deletes the record from the CMS and database. The HMAC fingerprint of the IP address is needed only during the ten-minute rate-limit window and is cleared during the next scheduled hourly run. The raw IP address is not stored in the enquiry. Backups are retained separately according to a limited operational cycle and are used only for recovery after a failure. Data from a backup is not returned to active processing except during a controlled system recovery. The automatic deletion period above applies to the CMS and database. Telegram messages are stored separately: deleting a CMS enquiry does not delete its group message. To request deletion of the group copy, use the current contact details on this page.

You have the right to know the sources of collection, storage location, processing purpose, controller, and recipients of your data; access your data; request correction or deletion of inaccurate or unlawfully processed data; object to processing; and withdraw consent. You may also complain to the Ukrainian Parliament Commissioner for Human Rights or apply to a court. To exercise your rights, use the current contact details shown on this page. To locate an enquiry without excessive disclosure, you may be asked to confirm your telephone number and approximate enquiry time.

Data is transmitted over a protected HTTPS connection, stored in a private CMS and database, and accessed according to role-based permissions. Integration secrets are not stored in public Admin fields or frontend code. No processing method eliminates every risk. If an incident is confirmed, we will restrict access, preserve the necessary technical evidence, and take the steps required by law.

Necessary browser storage keeps local interface state, such as an informational quiz result. The website uses first-party Google Analytics cookies to measure visits. The analytics section below explains the data, retention and tools for restricting measurement. The website does not load advertising pixels.

Network, hosting, or service infrastructure providers may technically process network data in other countries under their terms and applicable law. We limit the data provided to each service to what is necessary for its function. Changing a provider or connecting a new integration that receives personal data requires a separate review of this policy and the Admin settings. Telegram is a separate external service. Its cloud messages are processed under Telegram’s privacy policy and may be stored on infrastructure outside Ukraine. Please avoid unnecessary medical details in an initial enquiry.

Each new version is published with a separate version number and effective date. Material changes to the purposes, categories of data, recipients, or retention period require renewed approval before publication. A draft in the Admin panel is not a public policy and is not shown to visitors until approval is complete. This English version is a translation for convenience. If the versions differ, the Ukrainian version governs.

This website automatically uses Google Analytics 4 to measure visits to published pages and the number of successfully accepted enquiries. No separate analytics choice form is shown. Names, phone numbers, email addresses and enquiry text are not sent to Analytics. Google receives published page addresses, the type and language of successfully accepted website forms, cookie/session identifiers and technical browser/device data. URL queries, fragments and referring page addresses are omitted. Google processes the network IP address to derive approximate location; according to Google, GA4 does not log or store individual IP addresses. Advertising features and automatic form measurement are disabled. First-party analytics cookies last up to 60 days. User-level and event data retention is two months without extension on new activity; this setting does not determine the retention of standard aggregate reports. You can restrict cookies using your browser or use the official Google Analytics opt-out add-on in supported browsers: https://tools.google.com/dlpage/gaoptout. These restrictions do not prevent you from using the website or submitting an enquiry. Google is an external provider and may process data on infrastructure outside Ukraine under its privacy policy: https://policies.google.com/privacy.