Privacy policy

Who processes your data

The controller is Z32 Clinic s.r.o., company ID 23868066, registered office Poděbradská 489/116, Hloubětín, 198 00 Praha 9, registered with the Municipal Court in Prague, section C, file 434232, the operator of D3NT Clinic. For anything concerning your data, write to info@d3nt.cz or by post to the clinic's address.

We have not appointed a data protection officer.

Patients: dental care

To treat you, we process your identification and contact details, health insurance details and your medical record, including X-ray and CBCT images, photographs and 3D scans. We keep the record in the XDent system.

Czech law (Act No. 372/2011 Coll., on Health Services) requires us to keep a medical record (Art. 6(1)(c) and Art. 9(2)(h) GDPR). We keep it for the period set by Decree No. 98/2012 Coll., for dental care usually 10 years after the last treatment. We cannot delete it on request before that period ends.

Booking and communication

When you book online (XDent), call, e-mail or message us on WhatsApp, we process your name, contact details and whatever you tell us. Calls to +420 292 332 448 are answered by an automated voice receptionist that notes your name, phone number and the reason for your call so that we can book you in or call you back.

We use this to book you in and to deal with your request (Art. 6(1)(b) GDPR). Messages that do not become part of your medical record are deleted after 3 years at the latest.

Visiting the website

The website runs on Vercel, which briefly keeps technical logs (IP address, browser, time) for security. We measure traffic anonymously, without cookies. Google Maps, Google Analytics statistics and Google Ads measurement load only with your consent. Details are on the cookie page.

Dentists we invite to work with us

We send invitations to dentists at contact details they publish themselves (their practice website, the Czech national register of healthcare providers). On the page linked in the invitation we record whether and how it was opened. The records are kept in a Google spreadsheet and deleted after 12 months at the latest, based on our legitimate interest (Art. 6(1)(f) GDPR). Just write to us and we will stop contacting you and delete the records.

Who receives your data

• XDent: electronic patient records and online booking
• Websupport: the info@d3nt.cz mailbox
• Google: e-mail, spreadsheets, maps, ad measurement
• Vercel: website hosting
• Meta (WhatsApp): only if you message us on WhatsApp
• Dentilia.ai s.r.o.: automated voice receptionist
• dental laboratories: only what is needed to make your restoration
• the dentist who referred you: treatment plan and treatment report
• authorities, insurers and courts where the law requires it

Google, Vercel and Meta may also process data in the USA. Such transfers are covered by the EU–US Data Privacy Framework or the EU standard contractual clauses.

Your rights

You have the right to access your data and receive a copy, to rectification, to erasure (except the medical record during the statutory period), to restriction of processing and to data portability. You can object to processing based on legitimate interest and withdraw cookie consent at any time. Write to info@d3nt.cz; we reply within one month.

You can also lodge a complaint with the Czech Office for Personal Data Protection (ÚOOÚ), Pplk. Sochora 27, 170 00 Prague 7, uoou.gov.cz.

We do not use automated decision-making or profiling.