1. The personal data controller

The controller who determines the purposes and means of processing your data is the Dental Select dental clinic, namely DENTAL SELECT CARE SRL, with its registered office at Str. Palatul Justiției nr. 60, Ap. BIR. 1, Sector 4, cod poștal 040096, București, registered under 39658045.

You may contact us regarding any matter related to data processing at the e-mail address contact@dentalselect.ro or at the telephone number +40 723 344 100.

For specific data protection matters, we have appointed a Data Protection Officer (DPO), who can be contacted at contact@dentalselect.ro.

2. What data we collect

Depending on your relationship with the clinic (patient, accompanying person, website visitor, or person contacting us), we may process the following categories of data:

Identification data: surname, first name, date of birth, personal numeric code (where required for medical and fiscal documents).
Contact data: home/correspondence address, telephone number, e-mail address.
Appointment data: date and time of visits, service requested, appointment history.
Health data (a special category of data): medical and dental history, diagnoses, treatment plans, radiographs and intraoral images, digital impressions taken with an intraoral scanner, treatments performed (for example within our Restorative Dentistry, Endodontics, Fixed and Removable Prosthodontics, Surgery and Implantology, Periodontics, Orthodontics, and TMJ Dysfunction Treatment services), allergies, medication, and other information needed for an accurate diagnosis and personalized treatment.
Financial and billing data: information needed to issue fiscal documents and, where applicable, for reimbursement with health insurance funds or private insurers.
Website browsing data: IP address, device and browser type, information collected through cookies and similar technologies (detailed in the Cookie Policy).

3. Purposes and legal grounds for processing

We process your data only for specified, explicit, and legitimate purposes, based on one of the grounds provided by the GDPR:

Providing dental medical services (consultation, diagnosis, planning and carrying out treatments) — ground: performance of the medical services contract [Art. 6(1)(b) GDPR] and purposes of preventive medicine and the provision of health care [Art. 9(2)(h) GDPR].
Managing appointments, communicating with you, and sending reminders — ground: performance of the contract and/or our legitimate interest in ensuring continuity of care [Art. 6(1)(b) and (f) GDPR].
Fulfilling legal obligations (retention of medical documentation, fiscal and accounting obligations, reporting to authorities) — ground: legal obligation [Art. 6(1)(c) GDPR].
Issuing payment and billing documents — ground: legal obligation and performance of the contract.
Sending marketing communications (for example newsletters, offers, prophylaxis recommendations) — ground: your consent [Art. 6(1)(a) GDPR], which you may withdraw at any time.
Establishing, exercising, or defending a legal claim and handling any requests or complaints — ground: legitimate interest [Art. 6(1)(f) GDPR].

4. Processing of health data

Health data is considered a special category of data and benefits from enhanced protection. We process it primarily for the purpose of providing the medical act, establishing an accurate diagnosis, and planning a personalized treatment, on the basis provided by Art. 9(2)(h) of the GDPR (preventive medicine, medical diagnosis, the provision of health care), under the responsibility of staff bound by the obligation of professional secrecy.

Where we use technologies such as digital prosthodontics with an intraoral scanner, periodontal and surgical laser therapy, or treatments performed under magnification with loupes, the resulting images and data are treated as medical data and processed exclusively for the purpose of your care.

Access to this data is limited to the medical staff directly involved in your treatment and to authorized persons who need access to perform their duties, all bound by confidentiality.

5. Data retention period

We keep your data only for as long as necessary to fulfill the purposes for which it was collected or to comply with legal obligations:

Medical documentation is kept for the period and under the conditions provided by the health legislation applicable in Romania.
Financial-accounting and fiscal documents are kept for the period provided by fiscal and accounting legislation.
Data processed on the basis of consent (for example for marketing) is kept until consent is withdrawn or until it is no longer necessary for the purpose.
Browsing data collected through cookies is kept in accordance with the periods stated in the Cookie Policy.

6. Recipients and processors

We do not sell your data and do not disclose it for purposes other than those described here. We may transmit the data, strictly within the necessary limits, to:

The clinic's medical and administrative staff, within the limits of their duties.
Dental technology laboratories and medical collaborators involved in carrying out your treatment.
Service providers acting as processors (for example IT services, hosting, practice management software, maintenance), on the basis of contracts imposing confidentiality and security guarantees.
Accounting and tax consultancy, for the fulfillment of legal obligations.
Health insurance funds or private insurers, where applicable and with your agreement, for the purpose of reimbursement.
Public authorities and institutions, where there is a legal obligation to provide this information.

7. Rights of the data subject

As a data subject, you benefit from the following rights, which you may exercise free of charge, under the conditions provided by the GDPR:

The right of access — to obtain confirmation of the processing and a copy of your data.
The right to rectification — to correct inaccurate data or complete incomplete data.
The right to erasure (“the right to be forgotten”) — under the conditions of the law and to the extent that there is no legal retention obligation (for example in the case of medical documentation).
The right to restriction of processing — in the situations provided by the regulation.
The right to data portability — to receive the data in a structured, commonly used, and machine-readable format.
The right to object — to object to processing based on legitimate interest or to processing for marketing purposes.
The right to withdraw consent — at any time, without affecting the lawfulness of processing carried out prior to withdrawal.
The right to lodge a complaint — with the National Supervisory Authority for Personal Data Processing (ANSPDCP).

To exercise these rights, you may contact us at contact@dentalselect.ro or at contact@dentalselect.ro. We will respond within the time limits provided by law. You may also contact the ANSPDCP directly (the National Supervisory Authority for Personal Data Processing), based in Bucharest.

8. Data security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, disclosure, or accidental or unlawful alteration. These include controlling access to medical records, confidentiality obligations for staff, IT system security measures, and internal data protection procedures.

Although we apply high security standards, no system can guarantee absolute protection; we are nevertheless committed to continuously assessing and improving our measures and to responsibly managing any security incident, in accordance with legal obligations.

9. Cookies and similar technologies

Our website uses cookies and similar technologies for the proper functioning of the page, for analytics, and, with your agreement, to personalize content. Details about the types of cookies, their purposes, and how you can manage them are described in the Cookie Policy, available on the website.

10. Processing of minors' data

Dental services provided to minors are carried out with the involvement and consent of the parent or legal representative. We process minors' data exclusively for the purpose of providing the medical act and in compliance with the additional safeguards provided by law for this category.

11. Changes to the privacy policy

We may periodically update this policy to reflect legislative, organizational, or service changes. The updated version will be published on this website, indicating the date of the last revision. We recommend that you consult this page periodically.

12. Contact

For any question, request, or concern regarding the processing of personal data, you may contact us:

Controller: DENTAL SELECT CARE SRL, 39658045
Address: Str. Palatul Justiției nr. 60, Ap. BIR. 1, Sector 4, cod poștal 040096, București
E-mail: contact@dentalselect.ro
Telephone: +40 723 344 100
Data Protection Officer (DPO): contact@dentalselect.ro

Privacy Policy