Privacy policy

Data controller

The data controller for the personal data we collect is:

• Dental & Dermal AS
• Registered in the Brønnøysund Register Centre
• Fridtjof Nansens Plass 9, 2nd floor, 0160 Oslo, Norway
• Phone: +47 939 66 888
• Email: kontakt@dentaldermal.no
• Managing Director: Chenxiao Li

What data do we collect?

We collect the following personal data:

• Contact information: Name, email address, and phone number provided through our contact form or appointment booking
• Booking details: Desired treatment, preferred date and time, and any messages you send in connection with your appointment
• Health information: Relevant medical history required for safe treatment (collected during consultation)
• Technical information: IP address, browser type, operating system, and page views through cookies

Purpose of processing

We process your personal data for the following purposes:

• Manage appointments and deliver the treatment you have booked
• Respond to enquiries submitted through the contact form
• Fulfill legal obligations related to medical records and health legislation
• Improve our website and user experience through anonymised analytics
• Send relevant marketing communications with your consent

Legal basis

We process your personal data based on the following legal grounds:

• Consent (GDPR Art. 6(1)(a)): For marketing and non-essential cookies
• Contract (GDPR Art. 6(1)(b)): To fulfill treatment agreements and appointment bookings
• Legal obligation (GDPR Art. 6(1)(c)): For medical record-keeping under health legislation
• Legitimate interest (GDPR Art. 6(1)(f)): To improve our services and secure our operations

Cookies

We use the following types of cookies on our website:

Storage and security

Your personal data is stored securely on servers within the EU/EEA. We use encryption and access controls to protect your data. Only authorised personnel have access to personal data.

Retention periods

We retain your personal data for as long as necessary for the purpose for which it was collected:

• Contact form enquiries: Deleted within 12 months after the enquiry has been answered
• Booking data: Retained for up to 3 years after the last treatment for follow-up purposes
• Patient records: Retained for at least 10 years after the last treatment, as required by the Norwegian Health Personnel Act § 40
• Analytics cookies: Data is automatically deleted after 14 months

Your rights

You have the following rights under the GDPR:

• Access: You have the right to know what personal data we have stored about you
• Rectification: You can request that incorrect data be corrected
• Erasure: You can request that your data be deleted, unless we have a legal obligation to retain it
• Data portability: You can request your data in a machine-readable format
• Restriction: You can request that the processing of your data be restricted
• Objection: You can object to processing based on legitimate interest

To exercise your rights, contact us at kontakt@dentaldermal.no or call +47 939 66 888.

Data processors

We use the following third parties as data processors:

• Vercel Inc. - website hosting and operation
• Google LLC - analytics (Google Analytics 4) and advertising (Google Ads)
• Meta Platforms Inc. - advertising (Meta Pixel)
• Booking system provider - appointment management and patient data

Data processing agreements have been established with all third parties. Transfers to countries outside the EU/EEA are secured through EU Standard Contractual Clauses (SCCs).

Complaints

If you believe that we are not processing your personal data in accordance with the regulations, you have the right to file a complaint with the Norwegian Data Protection Authority (Datatilsynet):

• Datatilsynet (Norwegian Data Protection Authority)
• P.O. Box 458 Sentrum, 0105 Oslo, Norway
• Phone: +47 22 39 69 00
• Email: postkasse@datatilsynet.no
• Website: www.datatilsynet.no

Changes to this privacy policy

We may update this privacy policy as needed. Any significant changes will be communicated through our website. We recommend reviewing this policy periodically.