Privacy policy

01Controller of personal data

The controller is VIKTORIA DENT s.r.o., Company ID (IČO) 54197376, with its registered office at Karpatská 3437/13, 040 01 Košice – Staré Mesto, premises at Moyzesova 32, 040 01 Košice – Staré Mesto. Contact for personal data matters: [email protected], 0948 240 555.

We have not appointed a data protection officer (DPO). For all personal data matters, write to us directly at [email protected].

This document describes what happens to your data on the website stomatologia-moyzesova.sk and in our clinic: during treatment, when booking and in accounting.

02What data and for what purposes

Treatment in the clinic

We process data to provide dental care and keep medical records under Act No. 576/2004 Z. z. (Coll.) on healthcare, to arrange and remind you of an appointment, to answer your question sent by phone or e-mail, and to issue and record payments in the accounts.

Message sent through the form

When you write to us through the form, we process your full name, phone number with country code, e-mail address and the text of the message, so that we can reply to you and arrange an appointment with you. The message is saved in the website database (Cloudflare D1, with storage in the European Union) and the clinic receives it by e-mail.

Delivery and security of the website

Each time a page is opened, the hosting provider processes your IP address and browser data in order to deliver the page to you and to protect the website from attacks and misuse of the form.

Counting visits

The website counts visits anonymously, even without your consent: which page you opened, how long it was on screen, where you came from (for example a search engine or an advert), whether it is a mobile phone or a computer, and clicks on the phone, e-mail, map or social networks. In the same way it counts whether the offer shown on arriving at the website appeared to you, how you closed it and whether you sent a message from it. In doing so it stores no cookies or identifier by which you could be recognised, and it sends nothing to the server that would link two visits to the same person; the server builds only daily totals from this.

So that one visit is not counted more than once, the browser keeps three technical records in the tab's memory (sessionStorage) during it, which are deleted when the tab is closed. They are described on the Cookies page.

Advertising measurement, only with your consent

If you consent to marketing cookies, we measure whether a Facebook or Instagram advert brought you to us, and Meta may later show you our advert. More in section 05.

03Legal basis for processing

For healthcare, the basis is the provision of healthcare under Art. 9(2)(h) GDPR together with the legal obligation to keep medical records. For accounting documents it is a legal obligation (Art. 6(1)(c) GDPR).

For a message from the form, for booking and for replying to your question, the basis is performance of a contract and steps taken before entering into it at your request (Art. 6(1)(b) GDPR). For delivery and security of the website it is our legitimate interest in the safe operation of the website (point (f)), and for anonymous counting of visits our legitimate interest in knowing how the website is used (point (f)). For cookies for measurement and advertising it is solely your consent (point (a)) under Section 109(8) of Act No. 452/2021 Z. z. (Coll.) on electronic communications, which you can withdraw at any time.

04Recipients of personal data

We do not pass data to anyone who does not need it to do something for us. They are:

• the provider of website and database hosting (Cloudflare, Inc.): messages from the form are stored in a Cloudflare D1 database in the European Union,
• the e-mail sending provider (Resend), which delivers your message to the clinic's mailbox,
• the provider of the mailbox your message arrives in (Google Ireland Limited: the address [email protected] is a Gmail mailbox),
• only if you consent to marketing cookies: Meta Platforms Ireland Limited.

We pass data to the National Health Information Centre (Národné centrum zdravotníckych informácií), health insurance companies and supervisory authorities to the extent required by law. Some of these companies also process data in the USA on the basis of a European Commission adequacy decision (EU–US Data Privacy Framework) or standard contractual clauses.

05Advertising on Facebook and Instagram

If you consent to marketing cookies, we measure whether a Facebook or Instagram advert brought you to us. Only then does data also reach Meta Platforms Ireland Limited, which processes it for its own purposes too, part of it also in the USA (see section 04). We never send it your name, phone number or e-mail.

You can withdraw your consent at any time with the “Cookie settings” button in the footer of the page.

06Data retention period

We keep medical records for the period that Act No. 576/2004 Z. z. (Coll.) sets for each type of record; we may not keep them for a shorter time. We keep accounting documents for 10 years.

We keep messages sent by form, phone or e-mail in the website database and in the clinic's mailbox for as long as they are needed to deal with your question and for follow-up care, for a maximum of 24 months from the last communication; then we delete them. Cookie consent is valid for 12 months, after which we ask again.

07Rights of data subjects

You have the right:

• to access your data and to a copy of it,
• to rectification of inaccurate data,
• to erasure,
• to restriction of processing,
• to portability of data processed on the basis of consent or a contract,
• to withdraw consent at any time.

Just write to [email protected]; we will reply within one month. You can lodge a complaint with the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov Slovenskej republiky), Hraničná 12, 820 07 Bratislava.

08Right to object

You can object at any time to processing that we base on legitimate interest: securing the operation of the website and anonymous counting of visits. After an objection we will end such processing unless we demonstrate compelling legitimate grounds that override your interests and rights.

09Is providing data compulsory?

We process part of the data because the law requires it of us: medical records, statutory reports and accounting documents. This processing is not based on consent, cannot be withdrawn, and without this data we cannot provide you with treatment.

Sending us a message through the form is voluntary. However, without your name, phone number, e-mail and message we cannot reply to you through the form; you can also book by phone on 0948 240 555.

10Cookies

A cookie is a small file that a website saves in your browser. We may use necessary cookies without consent; for everything else we need your prior consent under Section 109(8) of Act No. 452/2021 Z. z. (Coll.). No advertising script runs before you give your consent.

You will find the list of cookies, their purpose and validity, and how to change your consent, on the Cookies page. You can change your answer at any time with the “Cookie settings” button in the footer of the page.

11Third-party content

This website has no embedded third-party content that would load before your consent. The links to the Google map, the Google profile, Facebook and Instagram lead to those companies' sites; their rules apply only once you click the link.

12Binding version

The Slovak version of this page is binding; translations are for information only.