Privacy & Data Protection

Privacy and Data Protection Policy

At Dentalex, we provide a wide range of specialized services in medical, dental, business, and legal consulting for medical and dental clinics. Our commitment to excellence extends equally to data protection, privacy compliance, and advisory services.

Applicable Legal Framework

We expressly commit to complying with current data protection laws and regulations in the jurisdictions in which we operate. Within the European Union, we apply the General Data Protection Regulation (GDPR) and the Spanish Organic Law 3/2018. In the United Arab Emirates, we comply with Federal Law No. 45 of 2021 on the Protection of Personal Data. In the United States, we comply with relevant state-level legislation such as the California Consumer Privacy Act (CCPA) and HIPAA. In Latin America, we adhere to the principles of the Ibero-American Network of Data Protection (RIPD).

Our Commitments

We use personal information solely to fulfill our contractual obligations. We implement technical and organizational measures to ensure confidentiality, integrity, and availability. We do not disclose personal data to unauthorized third parties. All employees and collaborators are bound by confidentiality obligations.

Categories of Data Processed

We collect and process the following categories of personal data:

• Identification data: first name, surname
• Contact data: email, telephone
• Professional data: clinic, professional activity
• Inquiry-related data: information provided by the client
• Clinical and health data: diagnostic tests, reports, images (including CBCT or other medical records) when the service requires it

Purposes of Processing

Personal data is processed for the following purposes:

• Managing information or contact requests
• Providing medical, dental, legal, or business consulting services
• Analyzing clinical documentation and issuing reports or second opinions
• Managing the contractual and administrative relationship
• Complying with legal obligations
• Maintaining service-related communications

Legal Basis for Processing

Data processing is based on:

• The performance of a contract or pre-contractual measures
• The consent of the data subject
• Compliance with legal obligations
• In the case of health data, the explicit consent of the data subject and, where applicable, the provision of health-related services in accordance with Article 9 of the GDPR

Data Recipients

Personal data may be disclosed to:

• Technology providers necessary for service delivery
• Communication and management platforms
• Collaborating professionals when necessary for service delivery

Under no circumstances will data be shared with third parties for commercial purposes.

International Data Transfers

Given the international nature of our services, data may be processed outside the European Economic Area.

In such cases, Dentalex ensures the application of appropriate protection mechanisms, including Standard Contractual Clauses approved by the European Commission or other legally valid safeguards.

Your Rights

Data subjects are entitled to exercise the rights recognized by the GDPR: access, rectification, erasure, restriction, objection, and portability. To exercise these rights, a written request may be sent to info@dentalexsolutions.com, and additional documentation may be required to verify identity when necessary. You also have the right to lodge a complaint before the competent Supervisory Authority.

Data Controller

Dentalex Health & Legal Solutions FZCO acts as the data controller. Queries may be addressed to info@dentalexsolutions.com or to our Data Protection Officer at dpo@dentalexsolutions.com.

Data Retention

Personal data will be retained:

• For the duration of the service and the contractual relationship
• For the periods necessary to comply with legal obligations
• In the case of clinical data, for the time necessary to ensure traceability and defense against potential claims

Security Measures

Dentalex applies technical and organizational security measures appropriate to the risks involved, ensuring that personal data remains protected against alteration, loss, misuse, unauthorized processing, or access.

Nature of the Service

The services provided by Dentalex are of a consultative nature. Under no circumstances do they constitute a definitive clinical diagnosis nor do they replace the role of a treating healthcare professional. It is the responsibility of the patient or client to validate any decision with their reference professional.

Automated Decisions

No automated decisions or profiling that produce legal effects on the data subject are carried out.

Origin of Data

Personal data is provided directly by the data subject or by third parties authorized by the data subject.

Any questions regarding this Privacy and Data Protection Policy may be addressed to info@dentalexsolutions.com.