Privacy and data protection policy

Privacy and data protection policy


  1. General information on the collection of personal data

This policy aims to inform you about the collection and processing of personal data when using our,, the software applications and products developed by us, managed by us or third parties.

Personal data is all data that relates to you personally, such as name, address, telephone, email address, user behavior.

  1. Personal data administrator

Administrator, according to art. 4, paragraph 7 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95 / 46 / EC is:

„Individual practice for primary outpatient dental care D-r Byalev“ EOOD, UIC 206006866 / The Company /, with address for correspondence: Sofia, Lozenets district, 13 Henrik Ibsen Str.

Person responsible for personal data protection: Vasilena Ivanova, with contacts: address: Sofia, Lozenets district, 13 Henrik Ibsen Str .; email:[email protected].

  • What personal data do we collect?

For individuals, patients of the Company, personal data are collected, which are necessary to be registered in the register “Patients”, with a view to: their treatment, including counseling, diagnosis, assessment of the type and volume of treatment activities, prevention, prevention and all other activities that constitute good dental practice, as follows:

a) Name, PIN, permanent and / or current address, telephone, e-mail,, passport data, place of birth, telephone, e-mail address

b) education, employment, qualification

c) data on the patient’s state of health

d) technical data in the course of using the, eg: IP address / when inquiring through the site /, activity data / when inquiring through the site / – time and date of submitting the inquiry, acceptance of Security Policy, etc.

In some cases, the personal data we process may not be sufficient to determine to whom it relates – for example, e-mail data, records from our video surveillance system, data on visits to our website. We apply the same security standards to this data as we do to all others, but in order to exercise your rights under Section V of this policy with respect to such data, you will need to assist us so that we can identify you.

The information for contacts with legal entities – trade company, contact address, office telephones and e-mail addresses, etc. are not personal data. – the rules in Section V of this policy do not apply to these data.

We need your personal data in order to provide our services, including specific information about your health condition. Without this information we cannot guarantee the quality of our medical diagnostics and the health services we provide.

As part of our work, no automated decisions are made regarding you as our patients and when processing your personal data.

  1. For what purposes and for how long do we process personal data?

We process your personal data for the following purposes:

  1. In connection with our health services

We need your personal information to identify you as a patient so that we can make an appointment and remind you of it.

In order to make a medical diagnosis with a view to a treatment proposal and treatment, if you accept it, we also process data about your health condition – including to assess your condition, how your treatment will be tolerated and whether additional treatment is needed. Your health data enjoys special protection under the General Data Protection Regulation, and we guarantee that it will only be used for the purposes of your treatment.

Only in cases where we have your consent will we be able to use this data in view of proposals for future health services.

For this purpose, we will process your personal data for the period of provision of health services, as well as we will store them for a period of 5 years in order to guarantee the quality of the provided health services. If we provide you with additional health services within this period, then the period of 5 years for deleting your personal data will run from the completion of the last health services that we have provided to you.

  1. To fulfill legal obligations

In fulfillment of their official duties – by order of the law – to be provided to state institutions / NHIF, NSSI, EA “Medical Audit”, Labor Inspectorate, NRA, judiciary, police, etc./.

Fulfillment of obligations provided in the law for keeping or providing information in view of our tax obligations of the company to the state (for example on the basis of the Accounting Act and other tax laws – VAT, VAT Act, CITA, TSPC, etc.).

  1. For the purposes of the organization of the work and the order in the clinic and for the protection of the Company.

The personal data collected may also be used in connection with the organization of our work, the protection of our staff and our rights and legitimate interests. In this regard, the data, including the recordings from the CCTV cameras, will be used only when necessary, including for the cases of clarifying incidents on the territory of the clinic or those with the participation of our staff.

As a rule, the data collected in this regard will not be stored for more than 2 months from the moment of their creation, but in some cases this period may be longer, including if the information should be submitted to the Ministry of Interior or the judiciary.

  1. For the purposes of presenting our services and for marketing purposes

In order to determine the deadline for a new preventive examination, we may use data on your health – specifically whether you suffer from periodontitis, to determine how the deadline for the next preventive examination should be determined or to send you a reminder that it is time for a new preventive review.

We may use your personal data and specifically recorded phone and e-mail address to provide you with information about our services, organized events, to present our newsletter. It is a condition that we have your explicit consent for such use. You can withdraw your consent at any time, and we will immediately stop using your personal data for the stated purposes.

Health information is a special category of personal data within the meaning of the General Data Protection Regulation. According to Art. 28c of the Health Act, the medical specialists and employees in the medical establishments shall not have the right to disclose information about the patient, which has been received during the performance of their official duties.

  1. What are your rights, as individuals, in relation to your personal data processed by us?

The General Data Protection Regulation provides for the following rights of individuals with regard to the processing of their personal data:

  • right of access to personal data related to the person, which are processed by the administrator;
  • right to correct inaccurate or incomplete personal data;
  • right to erasure / “the right to be forgotten” / of personal data that are processed illegally or with a revoked legal basis / expired storage period, withdrawn consent, fulfilled initial purpose for which they were collected, etc./;
  • the right to limit the processing in the presence of a legal dispute between the administrator and a natural person until its resolution and / or for the establishment, exercise or protection of legal claims;
  • right to data portability when personal data are processed in an automated manner on the basis of consent or contract. For this purpose, the data is transmitted in a structured, widely used and machine-readable format;
  • the right to object at any time and on grounds relating to the individual’s specific situation, provided that there are no compelling legal grounds for the processing which take precedence over the data subject’s interests, rights and freedoms or litigation;
  • the right of the data subject not to be the subject of a fully automated decision, including profiling, which has legal consequences for him or affects him to a significant degree.

By virtue of Art. 28b of the Health Act, the patient has the right to receive from the medical institution the health information related to his health condition, including copies of his medical documents. He has the right to authorize in writing another person to get acquainted with his medical documents, as well as to make copies of them. Upon the death of the patient, his heirs and relatives in the direct and collateral line up to and including the fourth degree have the right to get acquainted with the health information about the deceased, as well as to make copies of his medical documents.

To exercise any of these rights, please send us on paper or by e-mail a form completed by you. The form itself can be found at the following address: [email protected]

Even if your request is not on the specified form, we will review it if we can identify you and find out which of these rights you exercise. Please provide contact details – e-mail and / or telephone number, if necessary to clarify something at your request.

Your request will be considered within 1 / one / month. If we have difficulties in fulfilling your request, this period may be extended by up to 2 / two / months, and we undertake to notify you of this extension within 1 / one / month of receiving your request.

Your request may be denied in the following cases:

– If we cannot identify you;

– If we do not process your personal data;

– If there is a legal obstacle to its implementation;

– If we have a legitimate interest that is significant enough to deny your claim;

– If you have received a large number of requests for a short period of time.

Notwithstanding all the above, you can at any time request information about how we store your personal data.

  1. Who is the body to whom you can file a complaint?

If you believe that we are violating your rights, you can file a complaint with the Commission for Personal Data Protection, which supervises our processing of personal data.

Commission for Personal Data Protection

address: Sofia, p.k. 1592, bul. „Prof. Tsvetan Lazarov ”№ 2

Information and Contact Center – tel. 02/915 35 18

Reception – working hours 9:00 – 17:30

E-mail: [email protected]; Website:

  • Cookies

What are cookies, how and what types of cookies are used on the of “Individual practice for primary outpatient dental care D-r Byalev“ Eood, UIC 206006866, as well as how you can manage the use of these cookies, how to turn them off / block, you can get acquainted at the link Our cookie policy., where you will find Our cooikie policy

The personal information that is accumulated through cookies can only be used to perform certain operations for the user. Such information is encrypted in a way that makes access to it by unauthorized persons impossible

  • Update the privacy policy

This Privacy Policy may be updated in the future. The new policy will be published on this website and will indicate the date on which we updated it. It will be effective from the date of publication on the website. Therefore, we encourage you to periodically review our website to be aware of our current Privacy Policy, as well as any changes that may have been made to it. By using this website after the publication of the updated Privacy Policy, you will be deemed to agree to the changes made.

This document is a confidentiality notice within the meaning of Art. 13 and Art. 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC (General data protection regulation).