Privacy Policy - Impression Dent

PRIVACY POLICY AND PERSONAL DATA PROTECTION

“INDIVIDUAL PRACTICE FOR PRIMARY OUTPATIENT DENTAL CARE DR BYALEV” EOOD

General information about the collection of personal data

This policy aims to inform you about the collection and processing of personal data when using our impressiondent.com website, software applications developed by us and products operated by us or by third parties. Personal data are any data relating to you personally such as name, address, telephone, email address, user behavior.

Controller of personal data

Controller, according to article 4, paragraph 7 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, is: “Individual Practice for Primary Outpatient Dental Care Dr Byalev” EOOD (the Company), with address for correspondence: Sofia-city, Lozenets District, 13 “Henrik Ibsen” str., email: info@impressiondent.com

What personal data we collect?

For the natural persons, patients of the Company, personal data shall be collected, which is necessary for their registration in the “Patients” register, with a view to their treatment, including counseling, diagnosis, type and volume of treatment activities’ assessment, prophylaxis, prevention, and all other activities constituting good dental practice as follows:

Name, personal identification number, permanent and/or current address, telephone, e-mail, passport data, place of residence, telephone, e-mail address;
education, work activity, qualification;
data concerning health;
technical data, in the course of using the impressiondent.com site, for example: IP address /in case of inquiry through the site/, activity data /in case of inquiry through the site/ – time and date of submission of the inquiry, acceptance of the Security Policy, etc.

In some cases, the personal data we process may not be sufficient to determine which individual it relates to – for example, email data, recordings from our video surveillance system, data about visits to our website. We apply the same standards of protection to this data as we do to all others, but in order to exercise our rights under section V of this policy with respect to such data, you will need to cooperate with us so that we can identify you. The contact information of legal entities – trading company, contact address, office telephone numbers, e-mail addresses, etc. are not personal data – as the rules of section V of this policy shall not apply to these data. We shall need your personal data to be able to provide our services, including specific information about your health condition. Without this information, we cannot guarantee the quality of the medical diagnostics we shall perform, and the health services provided. Within our work, no automated decisions shall be made regarding you as our patients, as well as during the processing of your data.

For what purposes and for what period do we process personal data?

In connection with our health services

To fulfill legal obligations

For the purposes of Clinic’s work and order organization and for the Company’s protection.

For the purposes of presentation of our services and marketing purposes

What are your rights, as natural persons, in relation to your personal data processed by us?

We process your data for the following purposes: We need your data to identify you as a patient and to make you an appointment and remind you of it. To carry out medical diagnostics to offer treatment and carry out the treatment, if you accept it, we also process data about your state of health – including assessing your condition, how you will tolerate the treatment, and whether additional treatment will be needed.

Your health data is protected by the General Data Protection Regulation, and we guarantee that it will only be used for your treatment. Only in cases where we have your consent, we will be able to use these data with a view to proposals for future healthcare services. For this purpose, we will process your personal data for the duration of the health services provision, as well as store them for a period of five years to guarantee the quality of the health services provided. If we provide you with additional health services during this period, the fifth-year period for the erasure of your personal data will run from the end of the last health services we have provided to you.

In the performance of their official duties – by order of the law – to be provided to state institutions/ National Health Insurance Fund, National Social Security Institute, Executive Agency “Medical Audit”, Labor Inspectorate, National Revenue Agency, judicial authorities, police, etc./. Fulfillment of obligations stipulated by law to preserve or provide information in view of our company’s tax obligations to the state (for example, based on the Accounting Act and other tax laws – Value Added Tax Act, Income Taxes on Natural Persons Act (ITNPA), Corporate Income Tax Act, Tax and Social Insurance Procedure Code, etc.).

The collected personal data may also be used in connection with the organization of our work, protection of our personnel, and our rights and legitimate interests. In this regard, the data, including the recordings from the video surveillance cameras, will be used only when necessary, including for the clarification of incidents on the territory of the clinic or those involving our staff. The data collected in this connection will, as a rule, not be stored for more than two months from the moment of their creation. Sometimes, this period may be extended, including if the information should be presented to the Ministry of Internal Affairs authorities or the judiciary. With a view to determining the period for a new preventive examination, we may use data about your health status – specifically whether you suffer from periodontal disease – to consider how the period for the next preventive examination should be determined or to send you a reminder that it is time for a new preventive examination review. To determine the period for a new preventive screening, we may use data about your health status – specifically whether you suffer from periodontal disease – to consider how the period for the next preventive screening should be determined or to send you a reminder that it is time for a new preventive checkup review.

We can use your personal data and the specifically recorded telephone and e-mail address to provide you with information about our services, and organized events, to present you with our newsletter. It is a condition that we have your express consent for such use. You can withdraw your consent at any time, and we will immediately stop using your personal data for the stated purposes. Health information is a special category of personal data within the meaning of the General Data Protection Regulation. According to Art. 28c of the Health Act, medical specialists and employees in medical facilities are not allowed to disclose information about the patient obtained within the implementation of their official duties. The General Data Protection Regulation shall provide for the following rights of natural persons regarding the processing of their data:

right of access to the personal data related to the person being processed by the controller
right of rectification of inaccurate or incomplete personal data;
right to erasure (“right to be forgotten”) of personal data, which are processed illegally or with a lost legal basis /expired storage period, withdrawn consent, fulfilled original purpose for which they were collected, etc./;
right to restriction of processing upon a legal dispute between the administrator and a data subject until its resolution and/or for the establishment, exercise, or defense of legal claims;
right to data portability where the processing is carried out by automated means, based on a consent or on a contract. To this end, the data are transmitted in a structured, commonly used and machine-readable format;
right to object at any time and on grounds relating the particular situation of the person, provided that there are no compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims.
right not to be subject to a solely automated individual decision-making, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her.

Pursuant to Art. 28(b) of the Health Act, the patient shall have the right to receive from the medical institution the health information relating to his state of health, including copies of his medical documents. The same shall have the right to authorize another person in writing to get acquainted with his medical documents, as well as to make copies of them. In the event of the patient’s death, his heirs, and relatives by law and by the silver line up to the fourth degree inclusive shall have the right to get acquainted with the health information about the deceased, as well as to make copies of his medical documents. To exercise any of these rights, please send us on paper or by e-mail the corresponding form completed by you. The form itself can be found at the following address: info@impressiondent.com . Even if your request is not on the specified form, we will consider it if we can identify you and understand which of the rights specified you exercise. Please indicate your contact details – e-mail and/or telephone number, if it is necessary to clarify something related to your request. Your request will be considered within 1 /one/ month. If we have difficulties in fulfilling your request, this period can be extended by up to 2 /two/ months, and we undertake to notify you of this extension within 1 /one/ month of receiving your request. Your request may be rejected in the following cases: – If we cannot identify you; – If we do not process your personal data; – If there is a legal obstacle to be fulfilled; – If we have a legitimate interest that is significant enough to reject your request; – If a large number of requests have been received from your side in a short period of time. Notwithstanding the foregoing, you may at any time request information about how we store your personal data.

Who is the authority to whom you can lodge a complaint?

If you believe that we are violating your rights, you can lodge a complaint with the Commission for Personal Data Protection, which oversees our processing of personal data.

Commission for the Protection of Personal Data

Address: Sofia, 1592, 2 “Prof. Tsvetan Lazarov” Blvd , Center for information and contacts – tel.: 02/915 35 18; Reception desk – Business hours 9:00 – 17:30 h., e-mail: kzld@cpdp.bg; Internet site: www.cpdp.bg .

What represent cookies, and how and what types of “cookies” are used on the impressiondent.com website of “Individual practice for primary outpatient dental care Dr. Byalev” EOOD, UIC 206006866, as well as how you can manage the use of these “cookies” how to turn them off/block them, you can familiarize yourself with the link Our Cookies Policy, where you will find our Cookies Policy. Personal information which shall be accumulated through cookies can only be used to perform certain operations for the user. Such information is encrypted in a way that makes access to her by unauthorized persons impossible.

This Privacy Policy may be updated in the future. The new policy will be posted on this website and will indicate the date we updated it. It will be effective from the date of publication on the website. Therefore, we recommend that you periodically check our website to be aware of our current Privacy Policy, as well as any amendments that may have been made to it. By using this website after the updated Privacy Policy is posted, you will be deemed to agree to the changes. This document constitutes a privacy notice within the meaning of art. 13 and art. 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).