1. What data is collected?

The data collected and processed, depending on the services used on the Site and depending on the options and settings of the User’s terminal (in particular with regard to cookies and other trackers), are:

– The User’s technical browsing data

This is only anonymous User browsing data collected by the Editor for statistical purposes within the meaning of the GDPR: number of visits, number of pages viewed, time spent on the Site, User geolocation, and actions on the Site. The Editor does not have access to the User’s personal data and, therefore, does not retain any personal information of the User, which is only accessible and stored by the Professional.

– The User’s personal data

These include:

– the User’s personal identification data: this data is collected only by the Professional; name, surname, age, email address, postal address, telephone contact details, etc.

– the User’s personal health data: this data is only collected by the Professional as part of the pre-appointment questionnaire on the Site: medical history, heart, lung, kidney, liver problems, diabetes, treatments. This data is stored in a secure hosting (HDS) that can only be viewed by the professional. Clinical dental data is not collected on the professional’s website.

2. When is the data collected?

The information you provide is collected in particular when you access or browse the Site, or when you complete the pre-appointment questionnaire.

The mandatory nature of certain data is indicated during its collection by an asterisk to allow the Professional to respond to your requests and/or provide you with the requested services.

This information is also collected during communication:

– Service emails and SMS

After requesting an appointment, you will receive a confirmation email. These service messages are necessary for the correct monitoring of the Practitioner’s schedule.

– Newsletters for professionals

If you have accepted, you may receive information from the Professional by email or SMS (electronic communications). These newsletters allow you to stay updated with the Practitioner’s news.

3. Use of the data collected

The User’s personal data is mainly used for the following purposes:

– allow you to use the services offered by the Site;

– contact you to respond to your requests;

– ensure the correct functioning of certain features of the Site;

– establish anonymous counts and audience statistics strictly necessary for the provision of services;

– allow you to make appointments with the professional, inform you of your state of health in advance of upcoming appointments;

– inform you about the services in which you have expressed interest and that are offered to you on the Site;

– subscribe to a newsletter with educational and preventive information on dental health and send you information regarding the services and news of the Professional;

– allow the processing of your requests to exercise your rights;

– respond to official requests from public or judicial authorities authorized for this purpose.

The data collected may not be transferred or made accessible to any third party, except (i) any subcontractor or service provider of the Professional for exclusively technical and logistical reasons (site hosting and maintenance providers, fraud management providers, etc.) and (ii) any restructuring of the Professional’s office, including the total or partial transfer of assets, merger, absorption, acquisition, spin-off and, more generally, any reorganization operation.

The User is informed that the data concerning him/her is not transmitted for the aforementioned purposes to companies located in countries outside the European Union.

Finally, the Professional may be obliged to communicate your personal data to third parties when such communication is required by a law, a regulatory provision or a judicial decision, or if this communication is necessary to guarantee the protection and defense of your rights.

4. Information regarding the exchange of data by users of the Site

The Site may allow you to share information related to the Professional’s services on the Site (in its fixed or mobile version) on social networks (Facebook, Linkedin, Twitter, etc.), in particular through sharing buttons.

Access to these social networks requires acceptance of the contractual conditions including the stipulations relating to the regulations on personal data for the processing carried out by these networks, regardless of the pages of the Site that allow sharing on these social networks.

To learn more about the protection of your personal data when browsing these social networks, we invite you to consult their respective confidentiality policies to have full knowledge of the information collected by these third parties, remembering that you can also configure the access and confidentiality of your data directly on social networks.

The Professional is not responsible for the subsequent use that social networks make of your data for their own accounts. s.

5. Legal bases and duration of the processing of the User’s personal data

The processing of personal data is justified by different legal bases.

The User’s personal data (i) will be archived for accounting and evidentiary purposes during the legal limitation periods or (ii) will be destroyed once these periods have elapsed.

Legal bases for processing

– consent: the User accepts the processing of his/her personal data by express consent (check box, click, etc.) that may be withdrawn at any time;

– legitimate interest: the professional has a professional interest in processing your data that is justified, balanced and does not infringe your privacy. Except in exceptional circumstances, the User may object at any time to the processing based on legitimate interest by notifying the Professional;

– the law: the processing of your personal data is made mandatory by a legal text.

Duration of processing

Personal data: processing and storage for a limited period depending on the purpose of the processing and the legislation applicable to the services of the Site.

The retention periods are determined on the basis of current regulations (from 3 to 5 years) depending on the purpose of the following processing: contacting the User to respond to his/her requests; allowing appointments to be made with the Professional, informing him/her of the User’s state of health in anticipation of upcoming appointments, managing the Professional’s office, sending the User information on medical prevention or general matters related to the Professional’s office, allowing the Professional to process requests to exercise rights related to personal health data, allowing the Professional to respond to official requests from public or judicial authorities authorized for this purpose.

Technical browsing data: the Editor applies the personal data retention periods in its capacity as a subcontractor within the meaning of the GDPR, on the basis of the laws and regulations in force (variable duration not exceeding 3 to 5 years) depending on the purpose of the following processing: allowing the User to use the services offered by the Site, allowing the registration and monitoring of his/her consent for the deposit of cookies and knowing that the User has read the pop-up window, allowing the processing of the User’s requests to exercise rights (excluding health data), allowing the correct functioning of certain functions of the Site and guaranteeing its security, allowing the establishment of anonymous counts and audience statistics strictly necessary for the functioning of the Site

Within the framework of the processing carried out as a subcontractor, the Editor acts only following the instructions of the Professional in his capacity as data controller within the meaning of the GDPR and does not determine by himself the duration of the data retention.

At the end of the retention periods, the personal data of the users of the Site is permanently deleted or anonymized.

Given the legal archiving obligations imposed on healthcare service providers, they may retain, in their own tools, the User’s personal health data for periods longer than those indicated above in order to guarantee optimal medical monitoring and care for patients.

6. What are the User’s rights regarding the use of his/her personal data?

Conditions for exercising rights

In accordance with the regulations on the protection of personal data, the User may (i) exercise his/her rights (access, rectification, deletion, opposition, limitation and portability where applicable) and (ii) define the destination of his/her personal data “post mortem”.

In order for the Professional to respond quickly to any request from the User in this regard, the User must indicate in support of his/her request his/her surname, first name, email, address and specify the address to which the response to his/her request should be sent.

The Professional may carry out identity checks in order to guarantee the confidentiality and security of the User’s data. In certain cases, a copy of a valid identity document containing your signature may be requested. A response will be sent to you within one (1) month from receipt of the User’s request.

The User also has the right to file a complaint with the National Commission for Information Technology and Liberties (CNIL), in particular on its website www.cnil.fr.

Definitions – Data Controller and Delegate

The data controller of the User’s personal data is the Professional whose contact details are as follows: Centro de Implantología La Jonquera / dental.lajonquera@gmail.com

The User’s personal data (including health data) is hosted and managed by a physical infrastructure subcontractor that has received HDS (Health Data Host) certification.

The Professional has designated within the firm a Personal Data Protection Delegate (OPD) responsible for guaranteeing the protection of personal data. You can contact the Professional’s Personal Data Protection Delegate at: dental.lajonquera@gmail.com and dpo@webdentiste.eu.