Patient Personal Data Protection and Privacy Policy

Dental Care Center “Medical Dent Consult” Ltd. • In effect: 2018 (updated)

I. Why Should You Review This Policy?

“Medical Dent Consult” Ltd. processes personal data in connection with the dental and healthcare services provided. If you are our patient, this means that we collect, store, and use in the course of our clinical work your name, personal identification number, contact telephone number, e-mail address, and healthcare details.

This policy aims to clarify why this data is required to perform our work and take the best care of your teeth, gums, and oral health according to our professional expertise and clinical specialization.

In accordance with our commitment to ensuring the highest standards of data security, we comply with strict internal procedures and controls aligned with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR).

II. Data Controller Information

“Dental Care Center Medical Dent Consult” Ltd. is a limited liability company registered and operating under the laws of the Republic of Bulgaria.

III. What Information Constitutes Personal Data and Why Do We Process It?

Personal data includes any information relating to an identified or identifiable natural person. The categories we process include:

  • Identification Data: Full name, personal ID/passport number, date of birth;
  • Contact Details: Phone number, postal address, email address;
  • Special Categories (Health Data): Dental charts, dental and medical history, radiographic images (X-rays, 3D CT scans), and treatment plans;
  • Security and Technical Data: CCTV recordings in common clinic areas for visitor and patient security.

Your health data is essential for accurate diagnosis and safe medical treatment. We never use automated decision-making or profiling on our patients.

IV. Who Do We Share Your Data With?

We provide our clinical dental services directly. Specific trusted partners may receive data strictly when necessary:

  • Dental Laboratories: For the fabrication of prosthetic structures, crowns, and veneers (shared pseudonymously with technical medical specifications only);
  • Accounting and Legal Advisors: For compliance with tax and financial reporting legislation;
  • IT Service Providers: For secure software hosting, database maintenance, and technical support under strict data protection agreements;
  • Public Authorities: National health and social security institutions or law enforcement agencies only where required by law.

V. Purposes and Retention Periods

1. Dental and Healthcare Services

Patient identification, appointment scheduling, clinical diagnostics, and execution of dental treatments. Retained for the duration of treatment plus 6 years thereafter for medical warranty and quality assurance.

2. Statutory Accounting Compliance

Under Bulgarian Accountancy Act: Financial statements and accounting registers u2013 10 years; other financial documents u2013 3 years.

3. Security and Protection (CCTV)

Video surveillance in common clinic areas for the protection of patients, staff, and facilities. Retained up to 2 months, unless required for investigation.

4. Check-up Reminders and Updates

Reminders for routine check-ups and preventative care. Sent only with your explicit consent, which you can withdraw at any time.

VI. Your Rights as a Data Subject

Under the GDPR, you have the following rights at any time:

  • Right of Access: To obtain confirmation and copies of your personal data;
  • Right to Rectification: To correct inaccurate or incomplete data;
  • Right to Erasure (“Right to be Forgotten”): Subject to legal data retention obligations;
  • Right to Restriction of Processing: Under conditions defined in Art. 18 GDPR;
  • Right to Data Portability: To receive your data in a structured, commonly used format;
  • Right to Object: Against processing based on legitimate interests or direct marketing;
  • Right to Withdraw Consent: At any time, without affecting previous processing legality.

To exercise any of these rights, please submit a written request to: office@medicaldent.bg. We will respond within 1 month.

VII. Supervisory Authority

If you believe your data protection rights have been infringed, you have the right to lodge a complaint with:

Commission for Personal Data Protection (CPDP)

Address: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria

Telephone: +359 2 915 3518 • Email: kzld@cpdp.bg

Website: www.cpdp.bg

Book Now
Call Now Button