Privacy Policy

1. Data Controller Information

Data Controller: Brilliant Fogászat Kft
Registered Office: 1134 Budapest, Kassák Lajos utca 39., Hungary
Phone: +36 70 535 6466
Email: fogaszat@brilliantdent.hu
Website: www.brilliantdent.hu

The Data Controller is responsible for the data processing activities described in this Privacy Policy.

2. Purpose of This Notice and Legal Background

The purpose of this Privacy Policy is to explain how the Company processes personal data provided during the use of the website, contacting the clinic, booking appointments, and using our services.

Data processing is carried out in accordance with the following legal frameworks:

• Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation – GDPR),

• Act CXII of 2011 on the Right of Informational Self-Determination and Freedom of Information,

• Relevant healthcare and accounting regulations.

3. Categories of Personal Data Processed

The Company may process the following personal data:

• name,

• email address,

• phone number,

• message content (in the case of contact forms),

• appointment-related information,

• technical data (IP address, browser type, cookies – according to the separate Cookie Policy).

The Company does not request or process special categories of personal data through the website unless it becomes necessary for the provision of healthcare services in accordance with applicable laws.

4. Purpose of Data Processing

Personal data may be processed for the following purposes:

• enabling communication and responding to inquiries,

• managing appointment bookings,

• providing healthcare services,

• fulfilling legal obligations,

• ensuring the proper operation and security of the website.

5. Legal Basis for Data Processing

The legal basis for data processing may include:

• the data subject’s voluntary consent (Article 6(1)(a) GDPR),

• performance of a contract or steps taken prior to entering into a contract (Article 6(1)(b) GDPR),

• compliance with a legal obligation (Article 6(1)(c) GDPR),

• the legitimate interests of the data controller (Article 6(1)(f) GDPR).

6. Data Retention Period

The Company retains personal data only for as long as necessary:

• contact data: until the inquiry has been resolved,

• appointment and service-related data: for the period required by applicable legislation,

• accounting records: according to the relevant accounting regulations.

7. Data Transfers and Data Processors

The Company transfers personal data to third parties only where required by law or with the consent of the data subject.

Data processors may include, in particular:

• hosting service providers,

• IT and web service providers,

• analytics and marketing service providers (where consent has been given).

8. Rights of Data Subjects

Data subjects have the right to:

• request information about the processing of their personal data,

• request access to their personal data,

• request correction or deletion of their data,

• request restriction of data processing,

• object to data processing,

• withdraw their consent at any time,

• lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH).

9. Data Security

The Company implements appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction.

10. Changes to This Privacy Policy

The Company reserves the right to amend this Privacy Policy.

The current version of the Privacy Policy is always available on the website.