Privacy policy

Who we are

Odonto Derma Clinic is responsible (the controller) for processing your personal data as described in this policy. We process data in accordance with Law No. 124/2024 "On personal data protection".

What data we process

Identity and contact data: first name, last name, phone number, email address and, where needed, address and date of birth. Health data related to your treatment: clinical notes, allergies, visits and appointments. This is a special category of data and is handled with extra care. Communication data: which emails we have sent you and their status. For email subscriptions: the date, source and IP address of your consent.

Why we process it and on which basis

Appointments: to book, confirm and manage the appointments you request, as steps taken at your request and to provide the service. Health care: to document and provide treatment, under the obligations of a health-care provider. Reminder 24 hours before an appointment: part of managing the appointment you booked. Periodic check-up reminders (e.g. after 6 months) for our patients: based on our legitimate interest in your continued care. Every reminder contains a link to stop them. Clinic news and reminders for subscribers: only with your explicit consent. You subscribe by ticking a box that is not pre-ticked and confirm through a link we email you (double opt-in). You can withdraw consent at any time with one click from any email.

Who receives the data

Resend, Inc., our email delivery provider, which sends emails on our behalf. Hetzner Online GmbH, our server hosting provider, in its data centre in Helsinki, Finland (European Union). These providers process data only on our instructions and under data processing agreements. We do not sell your data or share it for advertising.

How long we keep it

We keep clinical records for as long as the law requires for medical documentation. Subscription requests that are not confirmed are not stored. After you unsubscribe we keep only what is needed to prove that we must not write to you again, or delete it at your request. Backups are deleted automatically after a short period.

Your rights

You have the right to request access to your data, its rectification, erasure or restriction of processing, and to receive it in a usable format (portability). You have the right to object to processing based on legitimate interest, for example periodic check-up reminders. You can withdraw consent at any time, without affecting the lawfulness of earlier processing. We answer requests within one month. You have the right to lodge a complaint with the Information and Data Protection Commissioner (Komisioneri për të Drejtën e Informimit dhe Mbrojtjen e të Dhënave Personale).

Security

Access to data is limited to clinic staff with personal accounts. Every change is logged. The connection to the website is encrypted and data is stored on protected servers.

Contact

For any question or request about your data, contact us: Email: info@odontoderma.com Phone: +355 69 20 22 592 Address: Rruga Edit Durham, 2001 Durrës, Albania