Privacy policy

1. Who we are

The The Well Destinations website is run by ADMED Health Tour SRL, tax ID (CUI) 43640500, Trade Register No. J08/245/2021, registered office at Bld. Gării nr. 3, bl. 3, sc. F, parter, ap. 3, Brașov, Brașov County, 500148, Romania (“we”), the controller of your personal data. For any question about your data, write to contact@thewelldestinations.com.

2. What we collect through the website

• Medical Concierge and second opinion requests: your name, email address, phone number, country of residence, destination of interest (optional) and how you prefer to be contacted. These forms do not ask for, and do not accept, medical information.
• Wellness Concierge requests: your name, email address, phone number (optional), approximate travel dates, number of guests, the programme you chose and your message.
• The contact form: your name, email address, phone number (optional) and message.
• The partner form: company, name, role, email address, phone number, country, type of partner and message.
• The Well Circle newsletter: your email address and the date of your consent.
• Technical data: IP address and browser information, processed by Cloudflare to deliver pages, for security and for spam protection (Cloudflare Turnstile).

3. Medical documents

The website does not receive medical documents or information. If, after we contact you, you choose to send us medical documents for a second opinion, we explain the secure channel for sending them at that point. We process them only with your explicit consent (Art. 9(2)(a) GDPR) and pass them only to the partner doctor or medical institution giving the opinion.

4. Why we use your data and on what legal basis

• To answer your request and coordinate the services you ask for — Art. 6(1)(b) GDPR (steps taken at your request before a contract) and Art. 6(1)(a) (the consent you give in the form).
• For the newsletter — Art. 6(1)(a) GDPR (consent, confirmed by email). You can unsubscribe at any time from any email you receive.
• To protect the website against spam and abuse — Art. 6(1)(f) GDPR (legitimate interest).

5. Who receives your data

We never sell or rent your data. We share it only as far as needed:

• partner hospitals, clinics, hotels and wellness providers, only for the service you asked us for;
• Brevo (Sendinblue SAS, France) — confirmation emails and the newsletter;
• Google (Gmail) — the mailbox in which we receive and manage requests;
• Cloudflare, Inc. — hosting, security, spam protection and cookie-free traffic statistics;
• Heyzine — only if you open an edition of the magazine on the website;
• Spherium Creative — technical administration of the website.

6. Transfers outside the European Economic Area

Some providers (Cloudflare, Google) may process data outside the EEA, including in the United States, under the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses. Partners in Turkey process data under the safeguards of Art. 46–49 GDPR, including your explicit consent.

7. How long we keep your data

We keep requests for at most 12 months after our last exchange if no service follows. If we coordinate a service for you, we keep the data for its duration and then for the periods the law requires. We keep your newsletter address until you unsubscribe.

8. Your rights

Under Regulation (EU) 2016/679 (GDPR) you have the right:

• to access your data;
• to have inaccurate data corrected;
• to have your data erased;
• to restrict processing;
• to data portability;
• to object to processing based on legitimate interest;
• to withdraw your consent at any time, without affecting earlier processing.

9. How to exercise your rights

Write to contact@thewelldestinations.com. We reply within one month. You may also complain to the Romanian data protection authority (ANSPDCP), B-dul G-ral Gheorghe Magheru 28–30, Sector 1, Bucharest, www.dataprotection.ro.

10. Cookies

The website sets no cookies when it loads. The details are in the Cookie policy.