Privacy Notice

1.The Controller

The Controller is not required to appoint a data protection officer; privacy requests are handled by the contact person above.

2.Processing activities

Please do not include health information in the website form – information concerning your health is recorded securely during your consultation.

3.CCTV and call recording

An electronic surveillance system operates at the entrance, reception and waiting area of the clinic for the protection of persons and property; no cameras operate in treatment rooms. Signage at the entrance provides notice of the monitored area. You may request to view or obtain a copy of footage of yourself, request its preservation where you demonstrate a legal interest, and object to this processing.

Incoming and outgoing telephone calls are recorded for the purposes of evidencing arrangements made, investigating complaints and pursuing legal claims; notice of recording is given at the beginning of each call. If you do not wish your call to be recorded, you may contact us by e-mail (info@johannadental.com) or in person. On request you may listen to and obtain a copy of recordings of your own calls and object to this processing. Recordings are retained for 5 years; recordings related to a complaint, dispute or official proceeding are retained until the matter is finally closed.

4.Recipients and processors

Personal data is shared only to the extent necessary for providing our services, with the following categories of recipients:

• dental laboratories and dental design partners (data necessary for producing restorations and surgical guides);
• our accounting service provider;
• IT, e-mail and hosting providers (including Google Ireland Ltd. as e-mail and web-analytics provider) and the provider of our practice-management software;
• where required by law, public authorities and the Hungarian National eHealth Infrastructure (EESZT).

The current list of processors is available at the clinic reception or on request.

5.Transfers outside the EEA

Use of Google and Meta services may involve transfers of personal data to the United States; such transfers are based on the EU–US Data Privacy Framework adequacy decision or standard contractual clauses.

6.Data security

Personal data is stored in password-protected, access-controlled IT systems, and paper records are kept locked away; our staff and contributors are bound by confidentiality in addition to medical secrecy rules. Contact details are recorded under a double-check procedure, and electronic transmission of patient documentation is subject to enhanced safeguards.

7.Your rights

You have the right to information and access, rectification, erasure, restriction of processing, data portability, to object to processing based on legitimate interest (CCTV), and to withdraw consent at any time. Please note that erasure of health records is limited during the statutory retention periods. Requests may be submitted using the contact details above and will be answered within one month.

8.Remedies

You may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH): 1055 Budapest, Falk Miksa utca 9–11.; postal address: 1363 Budapest, Pf. 9.; phone: +36 1 391 1400; e-mail: ugyfelszolgalat@naih.hu; web: www.naih.hu. You may also bring the matter before the competent Hungarian regional court, including the court of your place of residence.

9.Final provisions

The Controller may amend this notice; the current version is available on the website and in printed form at the clinic reception. Patients receive this notice at their first visit and confirm having read it by signature.