🦷 PRIVACY POLICY – DENTIST ABROAD
Version 2026
Data Controller
DENTIST ABROAD
(SETO I. RAZVAN-VASILE – MEDICAL DENTAL PRACTICE – INDIVIDUAL PRACTICE)
CUI: 25495177
Address: Calea Dorobanți 43, Sector 1, Bucharest, Romania
Phone: +40 744 439 515
Email: info@dentistabroad.uk
Website: www.dentistabroad.uk
The clinic has not appointed a Data Protection Officer (DPO), as it is not required to do so under applicable legislation.
1. INTRODUCTION
Protecting your personal data is a priority for us.
This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website, contact us, or become a patient of our clinic.
This document is compliant with:
- Regulation (EU) 2016/679 (GDPR)
- Romanian Law no. 190/2018
- Law no. 95/2006 regarding healthcare reform
- Applicable healthcare advertising regulations
- Applicable tax, accounting, and medical record retention laws
By continuing to use our website, you agree to this Privacy Policy.
2. DATA PROCESSING PRINCIPLES
We process personal data in accordance with the GDPR principles:
- lawfulness, fairness, and transparency
- purpose limitation
- data minimisation
- accuracy
- storage limitation
- integrity and confidentiality
- accountability
3. CATEGORIES OF DATA SUBJECTS
We process personal data relating to:
- website visitors
- patients and prospective patients
- legal guardians of minors
- newsletter and marketing subscribers
- individuals contacting us via WhatsApp, phone, SMS, or email
- job applicants
- business partners (suppliers, dental laboratories)
- users interacting with us on social media
4. TYPES OF DATA COLLECTED
4.1 Identification and Contact Data
- full name
- phone number
- email address
- postal address
- data included in contractual documents (where applicable)
4.2 Health Data – Article 9 GDPR (Special Categories)
Processed strictly for providing dental services:
- medical records
- health status, allergies, associated conditions
- treatment history
- X-rays and intra/extraoral images
- “before & after” images
- medication information
- data from collaborating doctors or laboratories
- medical reports and diagnostic results
4.3 Technical Data (Cookies & Logs)
- IP address
- browser type
- pages visited
- cookie identifiers
- on-site actions (clicks, scrolls, forms)
4.4 Marketing Data
- phone number
- communication preferences
- newsletter interactions (opens, clicks)
4.5 Recruitment Data
- CV
- cover letter
- interview information
- portfolio (if applicable)
4.6 Partner & Supplier Data
- name and role
- contact details
- signature
- contractual data
5. PURPOSES AND LEGAL BASIS
5.1 Appointments, Consultations & Treatments
Purpose:
- appointment management
- treatment communication
- medical records
- provision of dental services
- communication with dental laboratories
Legal basis:
- Art. 6(1)(b) – contract performance
- Art. 9(2)(h) – medical diagnosis and treatment
- Art. 6(1)(c) – legal obligation
5.2 Communication (Forms, Email, Phone, WhatsApp)
Legal basis:
- Art. 6(1)(b) – pre-contractual measures
- Art. 6(1)(f) – legitimate interest
5.3 Marketing (Email, SMS, WhatsApp)
Purpose:
- promotional communications
- service updates
- dental health education
Legal basis:
- Art. 6(1)(a) – consent
- Art. 6(1)(f) – legitimate interest (existing clients)
You may withdraw consent at any time.
5.4 Before & After Images / Testimonials
Legal basis:
- Art. 6(1)(a) and Art. 9(2)(a) – explicit consent
No images are published without written consent.
5.5 Recruitment
Legal basis:
- Art. 6(1)(b) and Art. 6(1)(f)
5.6 Business Relationships
Legal basis:
- Art. 6(1)(b) and Art. 6(1)(c)
5.7 Website Security & Functionality
Legal basis:
- Art. 6(1)(f)
6. SOURCE OF DATA
Data may be obtained:
- directly from you
- from dental laboratories
- from recruitment platforms
- from referring doctors (with consent)
7. DATA RECIPIENTS
Data is shared only with GDPR-compliant partners:
- hosting providers
- CRM / medical software providers
- dental laboratories
- IT, marketing, and newsletter providers
- accounting and legal services
- public authorities (where legally required)
All processors operate under GDPR Article 28 agreements.
8. INTERNATIONAL TRANSFERS
Some providers (e.g. Google, Meta) may involve transfers outside the EU (e.g. USA).
We ensure safeguards via:
- EU–US Data Privacy Framework
- Standard Contractual Clauses (SCCs)
- additional security measures
9. DATA RETENTION
- medical records: 5–30 years (legal requirements)
- appointment data: 3 years
- accounting data: 10 years
- marketing data: until consent withdrawal
- recruitment data: up to 3 years
10. SECURITY MEASURES
We implement appropriate safeguards:
- SSL/TLS encryption
- firewalls and antivirus systems
- role-based access control
- regular backups
- internal confidentiality policies
- staff training
11. CHILDREN’S DATA
Children’s data is processed only:
- with parental/legal guardian consent
- strictly for medical purposes
We do not knowingly collect children’s data via the website.
12. EXTERNAL LINKS
We are not responsible for third-party websites linked from our platform.
13. AUTOMATED DECISION-MAKING
We do not use automated decision-making or profiling with legal effects.
14. YOUR RIGHTS
You have the right to:
- access
- rectification
- erasure
- restriction
- objection
- data portability
- withdraw consent
- lodge a complaint
15. EXERCISING YOUR RIGHTS
Requests can be sent to:
📧 info@dentistabroad.uk
Response time: up to 30 days
Supervisory Authority:
ANSPDCP – www.dataprotection.ro
16. UPDATES
This Privacy Policy may be updated periodically.
The latest version will always be available on the website.