Data Controller
The data controller is Schill Dental Clinic s. r. o., with its registered office at Karloveské rameno 8, 841 04 Bratislava, Company Registration Number (IČO): 35 957 492, registered in the Commercial Register of the Municipal Court Bratislava III, Section Sro, Entry No. 37765/B. This is the legal entity that will process your personal data for the purposes defined below.
Data Subject
The data subject is you, as the individual whose personal data is processed by the controller.
Purpose of Processing Your Personal Data
Your personal data is processed for the following purposes:
- Online appointment scheduling: Based on the completed appointment form.
- Provision of healthcare: Performing dental procedures, diagnostics, treatment, and preventative care.
- Maintenance of medical records: In accordance with our obligations under the Health Care Act.
- Billing for services rendered: Processing accounting documents and patient payments.
- Direct marketing: Based on your consent to the processing of personal data or on our legitimate interest if you are already our patient and the offer concerns similar or related services.
Personal Data Collected
During online appointment scheduling, the following personal data is collected:
- First and last name
- Description of the requested procedure and problem
- Telephone contact
- Email address
- Date, time, and location of the requested appointment.
Personal Data for Direct Marketing
We also process your personal data for direct marketing purposes, based on your consent or our legitimate interest.
If you have given our company consent to process your personal data for direct marketing, we process it to send commercial and non-commercial messages to the provided email address (e.g., information about new products and services, special offers, personalized offers, including congratulations and discounts on holidays, offers from our partners, etc.). For this purpose, we process the following personal data:
- First and last name
- Personal email address
- Date of birth
We may also process your personal data based on our legitimate interest if you are already our patient, and we only send you information about services closely related to those you have already used or regularly use (e.g., reminders of preventative check-ups, examinations, information about changes in opening hours or special offers for similar services). For this purpose, we process the following personal data:
- First and last name
- Personal email address
You can object to the processing of personal data based on legitimate interest or withdraw your consent at any time.
Data Sharing
Your personal data is processed using our company’s office software, which is accessible to all employees of the controller authorized to process data.
Your personal data for direct marketing is not shared with any third parties and is exclusively processed for the direct marketing of our company.
Our company has also concluded a joint controllership agreement to improve the quality of services for an indefinite period, and therefore your personal data may also be shared with Schill Dental Clinic Žilina s. r. o., Schill Dental Clinic Košice s.r.o., and Schill Dental Clinic Praha s.r.o. Our company has been designated as the contact person for data subjects, but this does not preclude you from contacting our appointed data protection officer if you wish to exercise your rights.
In addition to the aforementioned joint controllers, your personal data may also be provided to external providers of professional services if necessary for the proper fulfillment of our obligations, such as accountants and tax advisors, auditors, IT service and technical support providers, lawyers and legal advisors, other external advisors, or intermediaries necessary for the operation of our business.
The transfer of your personal data to external service providers is always carried out only to the necessary extent and under conditions ensuring confidentiality and the protection of personal data in accordance with applicable legal regulations, in particular the GDPR.
Transfer of Personal Data to Third Countries or International Organizations
Our aim is to minimize cross-border transfers of personal data to third countries outside the EU/EEA. Therefore, we prioritize services that allow data processing on servers located within the EU/EEA.
However, some of our suppliers (e.g., Google, Facebook, Microsoft 365, etc.) may be based or store data on servers in third countries outside the EU/EEA that may not provide the same level of personal data protection as the EU.
If your personal data is transferred to such third countries, we ensure an adequate level of protection through appropriate safeguards under Article 46 GDPR, in particular through standard contractual clauses approved by the European Commission.
Data Retention Period
We retain your personal data only for the period necessary to fulfill the individual processing purposes. We also regularly review the retention period of personal data. If your data is no longer needed for the given processing purpose or if the legally stipulated retention period expires, the personal data will be securely deleted or anonymized.
Your personal data provided for online appointment scheduling will be retained only for the time necessary to fulfill the secondary purpose, namely the performance of the requested dental procedure. After fulfilling this purpose, some data may be further processed for other related purposes (mainly maintaining medical records and billing for services).
Your personal data related to the provision of healthcare is retained for the period stipulated by law for maintaining medical records (usually 20 years from the provision of healthcare) and for fulfilling accounting and tax obligations (usually 10 years).
If you have given us your consent to process data for direct marketing, your personal data will be processed for a maximum of 3 years, unless consent was given for a shorter period or unless you withdraw your consent earlier.
If you have given us consent for other purposes of processing personal data, we process your personal data for a maximum of 3 years, unless a shorter validity period of consent was specified, or unless you withdraw your consent earlier.
Based on legitimate interest, we process your data for direct marketing purposes for a maximum of 3 years from your last visit or use of our services, and you may object to this processing at any time.
Access to and Correction of Your Personal Data
You have the right to request access to your personal data at any time. You have the right to request confirmation of the processing of personal data, as well as a copy of your personal data. If you are interested in receiving confirmation or a copy of some or all of your personal data, please send us your request by email to gdpr@schill.sk or by post to: Schill Dental Clinic s. r. o., Karloveské rameno 8, 841 04 Bratislava, or you can request confirmation or a copy of your personal data in person.
If your personal data has changed, you can ask us to update or supplement your personal data in person. You also have the right to request the supplementation of your personal data. Our company will correct or supplement your personal data without undue delay upon receipt of a request for such action in person, via email to gdpr@schill.sk, or by post to: Schill Dental Clinic s. r. o., Karloveské rameno 8, 841 04 Bratislava.
Erasure and Restriction of Processing of Your Personal Data
You have the right to request the erasure or restriction of the processing of your personal data at any time, either in person, via email to gdpr@schill.sk, or by post to: Schill Dental Clinic s. r. o., Karloveské rameno 8, 841 04 Bratislava.
Personal data processed based on consent for processing personal data for marketing purposes will be erased without delay upon receipt of a request for erasure of such data, or without delay upon withdrawal of consent to the processing of personal data.
However, your request for erasure may not always be granted in full if we are obliged or entitled to retain your personal data based on specific legal regulations or to prove, exercise, or defend our legal claims (e.g., maintaining medical records under the Health Care Act, accounting and tax purposes, handling complaints or legal disputes).
If we cannot fully comply with your request, we will inform you of this fact along with the reasons for our decision.
Data Portability
If you no longer wish your personal data to be processed by our company, but you are interested in it being processed by someone else, you can ask us to provide the personal data provided in person, via email to gdpr@schill.sk, or by post to: Schill Dental Clinic s. r. o., Karloveské rameno 8, 841 04 Bratislava.
Your personal data will be provided to you without undue delay and in a commonly used and machine-readable format.
We may not comply with your request for data portability if this transfer is technically impossible or if it would adversely affect the rights and freedoms of other individuals. We will inform you of this fact without delay, together with the reasons why the request cannot be granted.
Objection to Processing of Your Personal Data
Your personal data will be used for marketing purposes only if you have explicitly consented to such use or if processing is based on legitimate interest (in the case of existing patients and similar services).
If you have consented to the use of your personal data for direct marketing purposes, you may withdraw this consent at any time. If we process your personal data based on our legitimate interest, you have the right to object to this processing at any time. You can withdraw your consent and object to processing in person, via email to gdpr@schill.sk, or by post to: Schill Dental Clinic s. r. o., Karloveské rameno 8, 841 04 Bratislava.
Automated Individual Decision-Making, Including Profiling
Your personal data will not be used for automated decisions or profiling.
Withdrawal of Your Consent to the Processing of Personal Data
Consent to the processing of personal data can be withdrawn at any time and in any form, in particular in person, via email to gdpr@schill.sk, or by post to: Schill Dental Clinic s. r. o., Karloveské rameno 8, 841 04 Bratislava.
Consent may be withdrawn individually for some personal data or collectively. After withdrawal of consent, your personal data will no longer be processed and will be disposed of without delay.
Withdrawal of consent applies only to those categories of personal data for which consent was granted; it does not apply to personal data processed by law or based on an agreement on the provision of healthcare.
Withdrawal of consent does not affect the lawfulness of the processing of personal data before its withdrawal.
What if Your Rights Regarding the Processing of Personal Data Have Been Violated?
If you believe that your rights have been violated in the processing of personal data, or that your personal data is not being processed in accordance with the agreed purpose, scope, or manner, you can contact us with a request for rectification at the email address gdpr@schill.sk, or in writing to the address of our registered office.
If your request is not resolved to your satisfaction or if you have doubts about the lawfulness of the processing of personal data, you have the right to contact the Office for Personal Data Protection, located at Budova Park one, Námestie 1. mája 18, 811 06 Bratislava. More information can be found at https://dataprotection.gov.sk/sk/.
Cookies on Our Website
Our company uses cookies on its website www.schill.sk. Cookies are small text files consisting of a number of numbers and letters that are stored on your computer, mobile phone, or other device you use when visiting our website. Using cookies, we can identify your device and technical information (e.g., your IP address).
Schill Dental Clinic s. r. o. uses cookies when analyzing website usage with the Google Analytics tool. The purpose is statistical analysis of the website. The legal basis for using analytical cookies is your consent. Providing cookies is not a legal or contractual requirement, or a requirement necessary for concluding a contract. Individual cookies will be stored only for the time necessary to fulfill their purpose, for a maximum of 6 months.
You can restrict or block the use of cookies at any time by changing the settings in your web browser. You can delete already stored cookies at any time. For more detailed information on cookie settings, see the “Help” section in your browser.
Please note that blocking or restricting cookies may affect the functionality and user experience of our website.
Use of Google Analytics
On the website www.schill.sk, we use the Google Analytics service from Google LLC (hereinafter “Google”). Google Analytics uses cookies that allow us to analyze the use of our website by visitors.
The information obtained about the use of this website is normally transmitted to and stored on Google’s servers in the USA. Your IP address will be automatically anonymized by Google (i.e., shortened by the last three digits) to prevent clear assignment to a physical person.
The transfer of personal data to the USA is carried out in accordance with the new decision of the European Commission of June 10, 2023, which approved the “EU-US Data Privacy Framework” (adequacy decision under Article 45 GDPR). If the transfer were to take place outside the scope of this decision, we ensure the protection of your personal data through standard contractual clauses approved by the European Commission (under Article 46 GDPR), or other appropriate safeguards.
Google uses this information on behalf of Schill Dental Clinic s. r. o. to evaluate the use of the website and to provide other services related to the use of the website and the internet. Google will only pass this information on to third parties if required by law or if third parties process this data on behalf of Google. Third parties, including Google, use stored cookies to advertise based on the user’s previous visits to this website. Google will in no case associate your IP address with other data.
The collection and storage of data using Google Analytics can be rejected at any time with effect for the future. You can find more information in the documents: How Google uses cookies (https://policies.google.com/technologies/cookies?hl=en), How Google uses information from websites or apps that use its services (https://policies.google.com/technologies/partner-sites?hl=en).
You can deactivate the use of cookies by Google by opening the Google Ads Opt-out page (http://www.google.com/policies/privacy/ads/). However, please note that in this case, you may not be able to use all functions of the website www.schill.sk without restriction.
Schill Dental Clinic s. r. o. does not use remarketing and retargeting tools for ethical reasons, as it is a healthcare facility.
All other information under Article 13 GDPR, including the right to lodge a complaint with a supervisory authority (Office for Personal Data Protection of the Slovak Republic), as well as your right to withdraw your consent to the processing of cookies at any time, is listed above in the section “Data Subject Notice.” Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
Contact Details of the Data Protection Officer
The contact details of the data protection officer, who fulfills the tasks and obligations under the Personal Data Protection Act, or GDPR in the area of personal data protection at the controller, are as follows:
MENKE LEGAL s. r. o.
Gorkého 3
811 01 Bratislava
email: gdpr@menke-legal.com
If you wish to exercise your rights as a data subject, or if you have any questions regarding the protection of your personal data in our company, you can contact our data protection officer, MENKE LEGAL s. r. o., by post at: Gorkého 3, 811 01 Bratislava or by email at: gdpr@menke-legal.com.
Changes to this Notice
Data protection is not a one-off event for us. We regularly review our processing of personal data. Therefore, we reserve the right to amend and update this notice at any time. In the event of significant changes, we will inform you, for example, by means of a general announcement on our website. The current version of the terms is always available at https://www.schill.sk/en/privacy-policy/.
