This policy is effective from 15 October 2026.
This is a translation for your convenience. In case of any discrepancy, the Slovak version applies.
Controller
The controller is H-Dental Zvolen s. r. o., registered office at Na Rákoši 3635, 960 01 Zvolen, Company ID (IČO) 52955389, registered in the Commercial Register of the District Court Banská Bystrica, section Sro, file no. 38412/S.
Contact for data protection matters: info@zubarzvolen.sk, +421 940 992 584.
We process data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Slovak Act No. 18/2018 Coll. on the protection of personal data.
What data we process
- Identification and contact details: first name and surname, phone number, email address.
- Data you send us through the booking form: the type of consultation, the service your enquiry concerns and the text of your message.
- Data from a job application: the position you are interested in and the text you write to us. We process a CV only if you send it to us by email yourself.
- Data concerning health and medical records, if you are treated at our clinic. This is a special category of data under Article 9 GDPR.
- Data needed to bill your treatment and to communicate with your health insurer.
- Technical data about your visit to the website: IP address, device and browser type, and cookie data — to the extent you have allowed in the consent banner.
Purposes of processing and legal basis
- Providing healthcare and keeping medical records — Article 6(1)(c) and Article 9(2)(h) GDPR — compliance with a legal obligation under Slovak Act No. 576/2004 Coll. on healthcare.
- Handling an appointment request sent through the form on this website — Article 6(1)(a) GDPR — your consent, given by ticking the box in the form.
- Handling a job application — Article 6(1)(a) GDPR — your consent, given in the form in the Careers section.
- Billing treatment and communicating with health insurers — Article 6(1)(c) GDPR — compliance with a legal obligation under Slovak Act No. 580/2004 Coll. on health insurance.
- Accounting and tax obligations — Article 6(1)(c) GDPR — in particular Slovak Act No. 431/2002 Coll. on accounting.
- Website analytics and marketing — Article 6(1)(a) GDPR — your consent, given in the cookie consent banner. We do not run these tools without your consent.
- Establishing or defending legal claims — Article 6(1)(f) GDPR — our legitimate interest in protecting our rights.
Who we share data with
We do not sell personal data. We share it only to the extent necessary, with the following recipients:
- the health insurers we have contracts with (Dôvera, Union, VšZP), the Health Care Surveillance Authority and the National Health Information Centre, to the extent required by law;
- dental laboratories and cooperating specialists, if your treatment requires it;
- providers of technical services for this website — the hosting provider and Clinic Accelerator, which processes messages sent through the forms and the website content for us;
- Google Ireland Limited and Meta Platforms Ireland Limited, if you have allowed analytics or marketing cookies in the consent banner;
- our accountant and legal counsel;
- courts and public authorities, where the law requires it.
Transfers outside the European Union
Google and Meta tools may also process data outside the European Economic Area, in particular in the United States. These transfers are covered by a European Commission adequacy decision or by standard contractual clauses, and they take place only when you have allowed the relevant cookies.
How long we keep data
- Medical records — for the period set by Slovak Act No. 576/2004 Coll.
- Messages from the booking form — until your request is handled; if you do not become our patient, no longer than one year after it was sent.
- Job applications — until the recruitment process ends, no longer than six months after receipt, unless we agree otherwise with you.
- Accounting documents — ten years under Slovak Act No. 431/2002 Coll.
- Cookie consent — twelve months if you consent and six months if you refuse; after that we ask you again.
Your rights
Under Sections 21 to 28 of Slovak Act No. 18/2018 Coll., you have the following rights regarding your personal data:
- the right of access to your data and to a copy of it;
- the right to have inaccurate data corrected and incomplete data completed;
- the right to erasure, if the data is no longer needed or you have withdrawn your consent;
- the right to restriction of processing;
- the right to data portability, for data we process on the basis of consent or a contract;
- the right to object to processing based on legitimate interest;
- the right to withdraw consent at any time, where processing is based on consent.
When we cannot comply with a request
We are required by law to keep and retain medical records, so we cannot erase them on request. The same applies to documents we must keep for accounting and tax purposes. In such a case we will tell you why.
How to exercise your rights
Write to us at info@zubarzvolen.sk or contact us at our registered office. We will reply within one month of receiving your request.
If you are not satisfied with how your request was handled, you can lodge a complaint with the supervisory authority: Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, statny.dozor@pdp.gov.sk, www.dataprotection.gov.sk.
Changes to this policy
We may update this policy from time to time, for example when we add a new tool or the law changes. The version published on this page always applies.