Privacy policy

DENTYS & ESTHETIC Limited Liability Company

DENTYS & ESTHETIC Limited Liability Company (headquarters: 9012 Győr, Hármashatár út 14, fsz. 3.; hereinafter referred to as the Company) based on “REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL (April 27, 2016)” (hereinafter REGULATION) issued by the highest body of the Company 2/2018 (05.24) adopted and will enter into force on May 25, 2018 the following data management information, which was issued by the Company’s highest body on 1/2018. (05.24.) is based on the data management regulations adopted by resolution no.

I. DEFINITIONS:

„personal data” means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;

„processing” means any operation or set of operations which is performed upon personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;

„restriction of processing” means the marking of stored personal data for the purpose of restricting their future processing;

„profiling” means any form of automated processing of personal data whereby personal data are used to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict characteristics associated with that person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements;

„pseudonymisation” means the processing of personal data in such a way that it is no longer possible to identify the natural person to whom the personal data relate without further information, provided that such further information is kept separately and technical and organisational measures are taken to ensure that no natural person who is identified or identifiable can be linked to that personal data;

„filing system” means a set of personal data, structured in any way, whether centralised, decentralised or structured according to functional or geographical criteria, which is accessible on the basis of specified criteria;

„controller” means a natural or legal person, public authority, agency or any other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of the processing are determined by Union or Member State law, the controller or specific criteria for the designation of the controller may also be determined by Union or Member State law;

„processor” means a natural or legal person, public authority, agency or any other body which processes personal data on behalf of the controller;

„recipient” means a natural or legal person, public authority, agency or any other body to whom or with which personal data is disclosed, whether or not a third party. Public authorities which may have access to personal data in the context of an individual investigation in accordance with Union or Member State law are not recipients; the processing of those data by those public authorities must comply with the applicable data protection rules in accordance with the purposes of the processing;

„third party”: a natural or legal person, public authority, agency or any other body other than the data subject, the controller, the processor or the persons who, under the direct authority of the controller or processor, are authorised to process personal data;

„the data subject’s consent” means a freely given, specific, informed and unambiguous indication of his or her wishes by which the data subject signifies, by a statement or by an act expressing his or her unambiguous consent, that he or she signifies his or her agreement to the processing of personal data concerning him or her;

„data breach” means a breach of security that results in the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed;

„genetic data” means any personal data relating to the inherited or acquired genetic characteristics of a natural person which contains specific information about the physiology or state of health of that person and which results primarily from the analysis of a biological sample taken from that natural person;

„biometric data” means any personal data relating to the physical, physiological or behavioural characteristics of a natural person obtained by means of specific technical procedures which allow or confirm the unique identification of a natural person, such as facial image or dactyloscopic data;

„health data” means personal data relating to the physical or mental health of a natural person, including data relating to the provision of health services to a natural person which contains information about the health of the natural person;

,,activity centre”:

  • in the case of a controller established in more than one Member State, the place of its central administration within the Union, but where decisions concerning the purposes and means of the processing of personal data are taken in another place of activity of the controller within the Union and the latter place of activity is competent to implement those decisions, the place of activity which took those decisions shall be considered the centre of activity;
  • in the case of a processor established in more than one Member State, the place of its central administration within the Union or, if the processor does not have a central administration in the Union, the place of the processor’s establishment within the Union where the main processing activities are carried out in relation to the activities carried out at the processor’s place of establishment, where the processor is subject to obligations under this Regulation;

„representative” means a natural or legal person established or resident in the Union and designated in writing by the controller or processor pursuant to Article 27 to represent the controller or processor in relation to the obligations incumbent on the controller or processor under this Regulation;

„enterprise” means any natural or legal person carrying on an economic activity, regardless of its legal form, including partnerships or associations carrying on a regular economic activity;

„group of undertakings” means the controlling undertaking and the undertakings controlled by it;

„Binding Corporate Rules” means the rules on the protection of personal data followed by a controller or processor established in the territory of a Member State of the Union in one or more third countries in relation to the transfer or series of transfers of personal data by a controller or processor within the same group of undertakings or the same group of undertakings engaged in a joint economic activity.

„supervisory authority” means an independent public authority established by a Member State in accordance with Article 51;

„supervisory authority concerned” means a supervisory authority which is concerned by the processing of personal data for one of the following reasons:

  • the controller or processor is established in the Member State of that supervisory authority;
  • the processing significantly affects or is likely to significantly affect data subjects residing in the Member State of the supervisory authority; or
  • have lodged a complaint with that supervisory authority;

„cross-border processing of personal data”:

  • the processing of personal data within the Union in the context of activities carried out by a controller or processor established in more than one Member State in several places of business located in several Member States; or
  • the processing of personal data within the Union which takes place in the context of activities carried out by the controller or processor at a single establishment and which affects or is likely to affect data subjects to a significant degree in more than one Member State;

„relevant and reasoned objection” means an objection to a draft decision, which concerns whether this Regulation has been infringed or whether the envisaged measure for the controller or processor is in compliance with the Regulation; the objection must clearly demonstrate the significance of the risks posed by the draft decision to the fundamental rights and freedoms of data subjects and, where applicable, to the free flow of personal data within the Union;

„information society service’ means a service within the meaning of Article 1(1)(b) of Directive (EU) 2015/1535 of the European Parliament and of the Council (19) ;

„international organisation” means an organisation governed by public international law, or its subsidiary organs, or any other body which is established by or under an agreement between two or more States.

    II. DATA MANAGER:

    • Company Name: DENTYS & ESTHETIC Limited Liability Company
    • Tax number: 25563975-2-08
    • Company registration number: 08-09-028105
    • Headquarters: 9012 Győr, Hármashatár út 14, fsz.3
    • Central telephone number: +36-70-770-0331
    • E-mail: info@dentys.hu
    • Website: dentys.hu

    DENTAL AND DENTAL PATIENT RECORD SYSTEM

    • Company Name: Flexi Medical Hungary Limited Liability Company
    • Tax number: 24131140-2-41
    • Company registration number: 01-09-991891
    • Headquarters: 1027 Budapest, Tölgyfa utca 28
    • Central telephone number: 06-1-792-1234
    • Email: info@flexi-dent.hu
    • Website: flexi-dent.hu

    DENTAL LABORATORY:

    • Company Name: Color-Dent Ltd.
    • Headquarters: 9081 Győrújbarát, Akác körút 49.
    • Tax number: 22797902-2-08
    • Company registration number: 08-09-020367

    DENTAL LABORATORY:

    • Name: Vasok Andrea Mária EV
    • Headquarters: 9012 Győr, Öreg út 51 A ép.
    • Tax number: 55380106-1-28
    • Registration number 54047990

    HOSTING SERVICES:

    • Company Name: Sybell Informatika Kft.
    • Headquarters: 1158 Budapest, Késmárk utca 7/B 2. em. 206. ajtó
    • Tax number: 25859502-2-42
    • Company registration number: 09-09-014017
    • Central telephone number: +36 1 707 6726
    • Website: https://sybell.hu/
    • E-mail: hello@sybell.hu

    This Privacy Policy will be published on our Company’s website, dentys.hu, and in our office at 9012 Győr, Hármashatár út 14, fsz.3.

    THE REGULATION lays down rules on the protection of natural persons with regard to the processing of personal data and on the free flow of personal data, and protects the fundamental rights and freedoms of natural persons, in particular their right to the protection of personal data.

    The Regulation applies to the processing of personal data wholly or partly by automated means and to the processing of personal data which form part of a filing system or are intended to form part of a filing system by non-automated means.

    The Regulation should apply to the processing of personal data in the context of the activities of controllers or processors established in the Union, whether or not the processing takes place in the Union.

    The Regulation applies to the processing of personal data of data subjects residing in the Union by a controller or processor not established in the Union where the processing activities:

    • relate to the supply of goods or services to data subjects in the Union, whether or not the data subject has to pay for them; or
    • relate to the monitoring of the behaviour of data subjects, provided that it concerns their behaviour within the territory of the Union.

    The Regulation should apply to the processing of personal data by a controller established in a place other than the Union where the law of a Member State applies by virtue of public international law. The Company declares that it will not transfer to third countries any data covered by this Regulation.

    III. BASIC PRINCIPLES:

    Personal data:

    • processing must be lawful, fair and transparent for the data subject (“lawfulness, fairness and transparency”)
    • collected only for specified, explicit and legitimate purposes and not handled in a way incompatible with those purposes; not considered incompatible with the original purpose for archiving purposes in the public interest, scientific and historical research purposes or
    • further processing for statistical purposes (“purpose limitation”); they must be adequate and relevant for the purposes for which they are processed and limited to what is necessary (“data minimisation”);
    • be accurate and, where necessary, kept up to date; all reasonable steps must be taken to ensure that personal data which are inaccurate for the purposes for which they are processed are erased or rectified without undue delay (“accuracy”);
    • be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; personal data may be kept for longer periods only if the personal data will be processed for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1), subject to the implementation of appropriate technical and organisational measures to safeguard the rights and freedoms of data subjects as provided for in this Regulation (‘limited storage’);
    • be carried out in such a way as to ensure adequate security of personal data, including protection against unauthorised or unlawful processing, accidental loss, destruction or damage (“integrity and confidentiality”), by implementing appropriate technical or organisational measures.
    • The controller is responsible for compliance with the above and must be able to demonstrate such compliance (“accountability”).

    The controller shall take appropriate measures to provide the data subject with all the information on the processing of personal data under the Regulation in a concise, transparent, intelligible and easily accessible form, in clear and plain language, in particular in the case of any information addressed to children. The information shall be provided in writing or by other means, including, where appropriate, by electronic means. At the request of the data subject, information may be provided orally, provided that the identity of the data subject has been verified by other means.

     

    • information at the start of the processing: the name and contact details of the controller and his representative, if any, the contact details of the Data Protection Officer, the purpose and legal basis of the processing, the legal consequences of not providing the data, the legitimate interest in the case of a legal basis based on a balancing of interests, the categories of personal data and their source in the case of processing, information on automated decision making, profiling, recipients in case of transfer, categories of recipients, information on transfers to third countries, safeguards, duration of storage, aspects of storage, rights of the data subject, right to apply to public authorities,
    • data subject’s right of access: right of access to personal data and to the following information: copy of personal data, purpose of processing, categories of data, data relating to automated decision-making, profiling, information on the source of data transfers, recipients to whom the data have been or will be disclosed, information on data transfers to third countries, safeguards, duration of storage, its aspects, data subject’s rights, right to apply to the authorities
    • right to rectification: the data subject is entitled to rectify or complete inaccurate data without undue delay and free of charge
    • the right to erasure (right to be forgotten): the data subject has the right and the controller is obliged to erase the data if the processing is no longer necessary, the data subject withdraws his or her consent and there is no other legal basis, in the event of an objection, if there is no overriding legitimate ground for processing, in the event of unlawful processing, to comply with a legal obligation. Where the controller has disclosed the data and is under an obligation to delete it, the controller shall take reasonable steps to inform other controllers of the deletion of the links, copies and replicas in question
    • the right to restriction of processing: the controller restricts processing at the request of the data subject where the data subject contests the accuracy of the personal data, the processing is unlawful and the data subject opposes its erasure, the controller no longer needs the personal data but the data subject requires them for the establishment, exercise or defence of a legal claim, the data subject has objected to processing and the controller is still investigating the matter
    • the right to data portability: the data subject has the right to receive the data he or she has provided to the controller in a structured, commonly used, machine-readable format, the right to transmit the data to another controller, the right to request the direct transfer of the data to another controller, if technically feasible
    • rights in relation to automated decision-making and profiling: the right of the data subject not to be subject to a decision based solely on automated processing which produces legal effects concerning him or her or similarly significantly affects him or her, except where necessary for entering into, or the performance of, a contract between the data subject and a data controller, where permitted by law, or where the data subject explicitly consents to such a decision
    • the right to object: the data subject may object to the processing of his or her data on grounds of public authority, public interest, weighing of interests, direct marketing, profiling for direct marketing purposes. The processing must be stopped, except for compelling legitimate grounds and legal claims

    IV. DATA MANAGEMENT:

    1/ website-related data processing

    If you wish to contact us through our website, you will be required to provide the following information, which is considered personal data under the REGULATION, which is necessary to process personal data for the purpose of contacting or maintaining contact. Please be informed that the above personal data will be stored only until the purpose of the contact initiated by the data subject is completed, after which the above data will be destroyed. In the event of any subsequent processing, the further storage of your data will be in accordance with the contract necessary for the commencement of the processing.

    Please be informed that the processing of your personal data as described above is based on your consent, contacting you through our website without providing the above data will be fruitless and we will not be able to provide you with any information.

    personal data: name, email address, phone number, IP address

    purpose of processing: necessary for contacting, maintaining contact, in the case of IP address, indispensable for carrying out technical operations

    duration of processing: when the purpose of the contact is fulfilled

    legal basis for processing: consent of the data subject

    Please be informed that our website uses security cookies, which do not process personal data and therefore do not require the consent of the data subject, given that their sole purpose is to transmit communications over electronic communications networks. Please note that you have the possibility to delete cookies under Tools/Settings, under the Privacy settings.

    Please note that the website is operated by the data controller. I hereby inform you that the website uses a hosting service provider, which is a data processor under the REGULATION:

    • Company Name: Sybell Informatika Kft.
    • Headquarters: 1158 Budapest, Késmárk utca 7/B 2. em. 206. ajtó
    • Tax number: 25859502-2-42
    • Company registration number: 09-09-014017
    • Central telephone number: +36 1 707 6726
    • Website: https://sybell.hu/
    • E-mail: hello@sybell.hu

    The hosting service provider is entitled to process all personal data provided by the data subject, in relation to all data subjects, for the purpose of the proper operation of the website and to make it available to data subjects. I inform you that the data processing will continue until the agreement with the hosting service provider is terminated or until the data subject submits a request for erasure to the data controller or the data processor. The legal basis for the processing of data is the consent of the data subject and the relevant provisions of the Infotv. and the Act on certain aspects of electronic commerce services and information society services.

    personal data: all personal data provided on the website

    purpose of processing: necessary for the operation of the website

    duration of processing: termination of the contract with the service provider

    legal basis for processing: consent of the data subject

    Your rights in relation to data management are set out in Sections V and VI of this notice.

    2/ camera use:

    The purpose of the data processing is to protect the assets of the equipment, furniture and dental equipment in the dental practice operated by the Company on its premises. The Data Controller informs the data subjects that the camera system does not record images and sounds. DENTYS & ESTHETIC Ltd. shall record the premises of the dental practice only to the extent and in a manner that is not contrary to the NAIH Recommendation and the applicable law. Only Norbert Nagy has access to it and shall not transmit it to third parties or grant access to others. The processing is based on the explicit consent of the data subject.

    DENTYS & ESTHETIC Ltd. processes the facial image and voice of the data subjects during the camera surveillance. The cameras installed are capable of recording images of a quality that allows the individual identification of the participants. The legal basis for data processing is the legal authorisation of the Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information. The circumstances and conditions of data processing are defined by the provisions of the Infotv.

    DENTYS & ESTHETIC Ltd. declares that it has taken appropriate security measures to protect the personal data contained in the recordings made by the cameras against unauthorised access, alteration, transmission, recording, disclosure, deletion or destruction, accidental destruction or damage, and against inaccessibility due to changes in the technology used.

    DENTYS & ESTHETIC Ltd. has ensured that employees who have access to data have been properly informed of the data protection requirements.

    personal data: the image and voice of the data subject

    purpose of processing: object monitoring for the purpose and aspect of asset protection, without prejudice to the treatments

    duration of processing: no recording is made

    legal basis for processing: consent of the data subject

    Data Controller:

    • Company Name: DENTYS & ESTHETIC Limited Liability Company
    • Tax number: 25563975-2-08
    • Company registration number: 08-09-028105
    • Headquarters: 9012 Győr, Hármashatár út 14, fsz.3
    • Central telephone number: +36-70-770-0331
    • E-mail: info@dentys.hu
    • Website: dentys.hu

    Your rights in relation to data management are set out in Sections V and VI of this notice.

    3/ processing of personal and sensitive data

    I inform you that the data controller processes personal data and data that are considered as sensitive data under the REGULATION when processing your health data for the purpose of carrying out your dental activities. In this context, it processes all your personal data and your medical history that may be related to dental treatment.

    The legal basis for data processing is Act XLVII of 1997 on the management and protection of health and related personal data, and the statutory authorisation of the Infotv., and the consent of the data subject, for a minimum period of 30 years after the data is collected, in accordance with the Act on the management and protection of health and related personal data.

    In order for the data subject to be entitled to receive health care services in our clinic, it is essential for the protection of his/her life and physical integrity that his/her health data are processed and recorded by a data controller. The treatment form, which must be filled in by the data subject before the start of treatment, is used to ensure that the doctor carrying out the treatment is aware of all the health data – which, in addition to specific data, also includes the processing of personal data in order to identify the patient – that is necessary for the treatment in question and to reduce or eliminate the risks of treatment (allergic reactions, etc.).

    The Data Controller declares that it processes these data on paper and in the form of a separate electronic dental and dental patient record system, to which access is granted only to designated data processors working as employees of the Company. The Data Controller informs the data subject that data which are considered sensitive data will be transmitted to third parties if the processing requires the services of a dental technician.

    personal and special categories of data: all personal data of the data subject, as well as health data which are indispensable in the context of the processing

    purpose of processing: object monitoring for the purpose and aspect of asset protection, without prejudice to the treatments

    duration of processing: no recording is made

    legal basis for processing: consent of the data subject

    Data processor:

    • Company Name: DENTYS & ESTHETIC Limited Liability Company
    • Tax number: 25563975-2-08
    • Company registration number: 08-09-028105
    • Headquarters: 9012 Győr, Hármashatár út 14, fsz.3
    • Central telephone number: +36-70-770-0331
    • E-mail: info@dentys.hu
    • Website: dentys.hu

    Dental and dental patient record system:

    • Company Name: Flexi Medical Hungary Limited Liability Company
    • Tax number: 24131140-2-41
    • Company registration number: 01-09-991891
    • Headquarters: 1027 Budapest, Tölgyfa utca 28
    • Central telephone number: 06-1-792-1234
    • Email: info@flexi-dent.hu
    • Website: flexi-dent.hu

    The Data Controller informs the data subject that, in the event of the detection of a communicable disease, it is legally authorised and required to transmit the data subject’s health and personal data to the public administration.

    Your rights in relation to data management are set out in Sections V and VI of this notice.

    4/ fulfilment of an accounting obligation arising from a contractual economic event

    I hereby inform you that our Company is a double-entry bookkeeping company under the applicable legislation. In order to be able to fulfil its obligation to issue an invoice for a given business transaction in accordance with the Act on Accounting, the Act on General Sales Tax and the Act on the Rules of Taxation, and to fulfil its obligation to file a return in accordance with the Act, our Company is obliged to transmit personal data in accordance with the REGULATION to the company entrusted with the accounting, which in this case is considered a data processor.

    personal data: all personal data of the data subject that the legislation in force requires to be included in the strictly invoiced document called “invoice” (name, address)

    purpose of processing: to fulfil legal obligations

    data processing period: 8 years

    legal basis for processing: consent of the data subject, legal authorisation

    V. INFORMATION ON DATA MANAGEMENT, COMPLAINT HANDLING

    The controller shall take appropriate measures to provide the data subject with all information and particulars relating to the processing of personal data in a concise, transparent, intelligible and easily accessible form, in clear and plain language, in particular in the case of any information addressed to children. The information shall be provided in writing or by other means, including, where appropriate, by electronic means. At the request of the data subject, information may be provided orally, provided that the identity of the data subject has been verified by other means.

    The controller shall facilitate the exercise of the rights of the data subject. The controller shall not refuse to comply with a request by the data subject to exercise his or her rights, unless the controller proves that it is not possible to identify the data subject.

    The controller shall inform the data subject of the action taken on the request without undue delay and in any event within one month of receipt of the request. If necessary, taking into account the complexity of the request and the number of requests, this time limit may be extended by a further two months. The controller shall inform the data subject of the extension, stating the reasons for the delay, within one month of receipt of the request. Where the data subject has made the request by electronic means, the information shall, where possible, be provided by electronic means, unless the data subject requests otherwise.

    If the controller fails to act on the data subject’s request, the controller shall inform the data subject without delay and at the latest within one month of receipt of the request of the reasons for the failure to act and of the possibility for the data subject to lodge a complaint with a supervisory authority and to exercise his or her right of judicial remedy.

    Information and action shall be provided free of charge. Where the data subject’s request is manifestly unfounded or excessive, in particular because of its repetitive nature, the controller shall, having regard to the administrative costs entailed in providing the information or information or taking the action requested:

    • charge a reasonable fee, or
    • refuse to act on the request.

    The burden of proving that the request is manifestly unfounded or excessive lies with the controller.

    If the controller has reasonable doubts as to the identity of the natural person making the request, it may request additional information necessary to confirm the identity of the data subject.

    The information to be provided to the data subject may also be supplemented by standardised icons to provide the data subject with general information about the envisaged processing in a prominent, easily understandable and clearly legible form. Icons displayed electronically should be machine readable.

    In its founding resolution 02/2018 (24.05.2018), the Company adopted Norbert Nagy (phone number: +36 70 200 1421) as the data controller for contacting data subjects.

    In order to process your complaint, we require the following information from you, which is used solely to identify you and to contact you.

    • name, address, telephone number, email address, description of the complaint

    Our Company informs you that if you become aware of unlawful processing by our Company, you may lodge a complaint with the competent authority by:

    • National Authority for Data Protection and Freedom of Information
    • 1125 Budapest, Szilágyi Erzsébet fasor 22/c.
    • 1530 Budapest, Pf.: 5.
    • +36-1-391-1400

    Our Company informs you that you also have the right to bring an action before the Court of Justice in case of unlawful processing.

    VI. DATA BREACHES

    A data breach is a breach of security that results in the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data transmitted, stored or otherwise processed.

    The controller shall notify the data protection incident to the competent supervisory authority without undue delay and, where possible, no later than 72 hours after becoming aware of the data protection incident, unless the data protection incident is unlikely to pose a risk to the rights and freedoms of natural persons.

    Where the personal data breach is likely to result in a high risk to the rights and freedoms of natural persons, the controller shall inform the data subject of the personal data breach without undue delay. The data subject need not be informed if any of the following conditions are met:

    • the data controller has implemented appropriate technical and organisational protection measures and these measures have been applied to the data affected by the personal data breach, in particular measures, such as the use of encryption, which render the data unintelligible to persons not authorised to access the personal data;
    • the controller has taken additional measures following the personal data breach to ensure that the high risk to the rights and freedoms of the data subject referred to in paragraph 1 is no longer likely to materialise;
    • information would require a disproportionate effort. In such cases, the data subjects should be informed by means of publicly disclosed information or a similar measure should be taken to ensure that the data subjects are informed in an equally effective manner.

    If the controller has not yet notified the data subject of the personal data breach, the supervisory authority may, after having considered whether the personal data breach is likely to present a high risk, order the data subject to be informed.

    Our Company informs you that if you become aware of unlawful processing by our Company, you may lodge a complaint with the competent authority by:

    • National Authority for Data Protection and Freedom of Information
    • 1125 Budapest, Szilágyi Erzsébet fasor 22/c.
    • 1530 Budapest, Pf.: 5.
    • +36-1-391-1400

    The Company adopted Norbert Nagy (phone number: +36 70 200 1421) as the data controller for contacting data subjects.

    Our Company informs you that you also have the right to bring an action before the Court of Justice in case of unlawful processing.

    VII. FINAL PROVISIONS

    The data controller undertakes to ensure the security of the personal data it processes, to take technical measures to ensure that the data recorded, stored or processed are protected and to take all necessary steps to prevent their destruction, unauthorised use or unauthorised alteration.

    The data controller reserves the right to unilaterally modify this statement by notifying the users. The Controller will publish information about changes to this Privacy Statement on the Website. After the modification has entered into force, the user accepts the modified Privacy Statement by using the service and by his/her conduct.

      VIII. CONTACT

      We welcome your questions, comments and requests regarding our Privacy Statement, which should be sent to:

      • DENTYS & ESTHETIC Ltd. (székhely: 9012 Győr, Hármashatár út 14, fsz.3
      • E-mail: info@dentys.hu
      • Telephone number: +36 70-770-0331