PRIVACY POLICY

These principles provide information on how Dently Babčan sro and Dently Alexejenko sro (hereinafter referred to as the “Operators” or “we”) process the personal data of patients and visitors to the website www.dently.sk and the clinic premises, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Act No. 18/2018 Coll. on the Protection of Personal Data.

1. Who is the controller of your personal data?

Your personal data is processed by the following companies as joint controllers , depending on which doctor/company the patient is registered with or treated by:

  • DENTLY Babčan sro
    Registered office: Tóvárenská 14, 811 09 Bratislava
    Company ID: 35 886 536
    Entry: Commercial Register of the Municipal Court Bratislava III, section: Ltd., file No. 31790/B
  • DENTLY Alexejenko sro
    Registered office: Tóvárenská 14, 811 09 Bratislava
    Company ID: 36 711 136
    Entry: Commercial Register of the Municipal Court Bratislava III, section: Ltd., file No. 43594/B

Common contact email: dently@dently.sk

2. What personal data do we process, for what purpose and on what legal basis?

A. Providing healthcare (Main purpose)

  • Scope of data: Name, surname, title, personal identification number, date of birth, permanent/temporary residence address, health data (medical history, dental records, X-ray images from Cliniview and Ondemand programs, 3D scans from 3shape and Cerec devices), health insurance company.
  • Legal basis: Fulfillment of the legal obligation of the controller (in particular under Act No. 576/2004 Coll. on healthcare, Act No. 153/2013 Coll. on the national health information system and Act No. 581/2004 Coll. on health insurance companies ) in conjunction with Art. 9 (2) (h) GDPR. The patient’s consent is not required for this purpose.
  • Retention period: According to Act No. 576/2004 Coll., medical documentation is kept for 20 years from the last provision of health care to the patient.

B. Appointment management and patient contact (Phone calls and SMS)

  • Data scope: Name, surname, phone number.
  • Purpose: Telephone reminders of treatment appointments, checking availability and sending replacement SMS messages in case the patient is unreachable.
  • Legal basis: Legitimate interest of the controller (Article 6(1)(f) GDPR) in the efficient planning of medical appointments and ensuring the smooth running of the clinic.
  • Retention period: For the duration of the provision of healthcare (active patient card).

C. Monitoring of premises by camera system (CCTV)

  • Data scope: Visual image recording of individuals moving in the monitored area.
  • Purpose and location: Protection of clinic property, safety of staff and patients. Cameras are located at the reception (2 cameras) and in two corridors leading to the outpatient departments (2 cameras). The areas are visibly marked with pictograms.
  • Legal basis: Legitimate interest of the controller (Article 6(1)(f) GDPR) in the protection of property and health.
  • Retention period: 7 days from the date of creation of the record (after this period, the record is automatically overwritten with a new record if there has been no security incident).

D. Website visit and online advertising (Google Ads)

  • Scope of data: Network identifiers (IP address, cookies, browser data). We do not operate a contact form, newsletter or booking system on our website.
  • Purpose: Proper functioning of the website www.dently.sk and evaluating the success of paid advertising in the Google search engine.
  • Legal basis: Legitimate interest (for essential cookies) and Consent of the data subject (granted via the cookies bar on the website).

3. Who has access to your personal data? (Recipients and Processors)

Patients’ personal data is strictly protected by medical confidentiality, however, to ensure the operation of the clinic, we make it available to verified partners to the extent necessary:

  • Healthcare Software Supplier: Provider of the SOS Healthcare Software system (support, maintenance and data storage).
  • X-ray and scanning technology suppliers: Service partners for Cliniview, Ondemand, 3shape and Cerec systems (in the case of technical service and IT management with PC access).
  • External dental lab technicians: Access to photo documentation and dental scans via a secure shared drive solely for the purpose of manufacturing dental restorations and prostheses.
  • External IT and security company: Manages the technical connection of the camera system and remote technical support for the management PC (access is strictly limited to technical maintenance based on the instructions of the executives).
  • External accounting firm: Processing accounting documents and invoicing.
  • Institutions: Health insurance companies: Provision of personal data and reporting of medical services (benefits) for the purpose of reimbursement of provided health care in accordance with the law.
  • National Center for Health Information (NCZI): Mandatory sending of health records and examination data to the national eHealth system (patient’s electronic health record) in accordance with the current legislation of the Slovak Republic.

4. Rights of data subjects (patients)

As a data subject, you have the following rights under the GDPR, which you can exercise by sending a request to dently@dently.sk:

  1. Right to access data: You have the right to know what data we process about you and to request an extract from your health records (under the terms of the Health Care Act).
  2. Right to rectification: The right to request the correction of incorrect or incomplete data.
  3. Right to erasure (Right to be forgotten): You can request the deletion of data (e.g. camera footage or marketing cookies). Note: The right to erasure does not apply to medical records, which we are required to keep for 20 years by law.
  4. Right to restriction of processing: If you object to the accuracy of the data, we may restrict its processing until the situation is verified.
  5. Right to object: You have the right to object to the processing of your data based on legitimate interest (e.g. the length of storage of camera footage or SMS reminders).
  6. Right to file a complaint: If you believe that we are processing your data unlawfully, you can file a complaint with the supervisory authority: Office for Personal Data Protection of the Slovak Republic , Hraničná 12, 820 07 Bratislava 27 (statny.dozor@pdp.gov.sk).