PERSONAL DATA PROTECTION

VIVE – DENTAL CLINIC Sh.p.k. (“The Clinic”, “Vive Dental Clinic” or “We”) is strongly committed to protecting personal data. Personal data will not be collected, processed, or used except to the extent required for technical reasons and for the execution of individual services and content, and unless you have provided your specific consent or the data is processed based on our legitimate interests.

Through this document, we inform you about how your personal data, including health data, is processed, as well as the rights you have in relation to them. This information is based on Articles 13 and 14 of the General Data Protection Regulation (GDPR), as well as Law No. 124/2024 “On the Protection of Personal Data”.

What data is processed and from which sources?

The Clinic processes data obtained directly from you during the provision of dental services, through the completion of forms, appointment registration, electronic communications, as well as data that may be lawfully obtained from public sources (e.g. commercial register, public websites, media).

• Identification data: name, surname, date of birth, phone number, address, email, personal ID number.
• Health data: diagnosis, dental medical history, performed treatments, radiographs, medical prescriptions, allergies, medications used.
• Financial data: information on payments, invoices, and health insurance, where applicable.
• Other data: video footage from the security system (CCTV) within the clinic premises, if applicable.

For what purpose and on what legal basis is the data processed?

We process data in accordance with the GDPR and Law No. 124/2024 for the following purposes:

1. Fulfillment of contractual and medical obligations – Article 6 of the GDPR and Article 7 of Law No. 124/2024.
2. Compliance with legal obligations – Article 6 of the GDPR and Article 7 of Law No. 124/2024.
3. Based on your consent – Article 9 of the GDPR and Article 7 of Law No. 124/2024.
4. To protect legitimate interests – Article 6 of the GDPR and Article 7 of Law No. 124/2024.
5. For legitimate marketing purposes – Article 6 of the GDPR and Article 7 of Law No. 124/2024.

Who has access to your data?

• Medical and administrative staff of the clinic, who are authorized and trained in data protection.
• Third-party contractors (e.g. diagnostic laboratories, IT companies, billing service providers), only to the extent necessary to provide the service.

Transfer of data abroad?

In principle, the clinic does not transfer personal data outside the Republic of Albania or the EU. If such a transfer becomes necessary (e.g. for laboratory analysis or cloud storage), it will only be carried out after obtaining the authorization of the Commissioner and your explicit consent.

Data retention period?

Your data is retained for as long as required by health legislation (usually 10 years from the date of the last treatment), except in cases where a longer retention period is required by law or for tax purposes. After the retention period expires, the data will be securely deleted or anonymized.

Your rights as a data subject

• Access your personal data;
• Request correction or deletion of your data;
• Restrict or object to processing;
• Transfer your data (portability);
• Withdraw your consent at any time;
• File a complaint with the Commissioner for the Right to Information and Personal Data Protection (www.idp.al).

Obligation to provide data

As part of the service relationship, you are required to provide all necessary personal information to enable the requested service. If you refuse to provide the required data, the clinic may be unable to perform or continue providing the service. However, consent for data processing that is not essential to the service remains optional and without negative consequences for you.

Automated decision-making

The clinic does not use automated decision-making (as defined in Article 22 of the GDPR) to create or manage relationships with patients. If such procedures are ever implemented, you will be specifically and transparently informed, in accordance with the law.

Responsibility and contact

Cookies and website tracking

Our website may use cookies to enhance your browsing experience. Cookies store technical information, preferences, or analyze site usage to improve functionality and services.

• Necessary cookies: required for basic site functionality (e.g. online forms).
• Functional cookies: allow us to analyze website usage based on legitimate interest.
• Marketing cookies: enable tailored content and advertising based on your interests.

Users can configure their browser to refuse or delete cookies at any time. Disabling cookies may affect the optimal functionality of the site.

Website Privacy Policy

Anyone accessing the website of VIVE – DENTAL CLINIC agrees to its terms of use. Some sections of the site may require filling out an online form (e.g. for booking an appointment or applying for a job), where personal data may be voluntarily provided. The Clinic guarantees that any collected information is processed and stored according to the highest security standards, in compliance with Law No. 124/2024 and the GDPR. Users confirm the accuracy and completeness of the information provided and consent to its internal processing solely for the purpose for which it was voluntarily submitted. At any time, users have the right to request access, correction, blocking, or deletion of their data by submitting a written request to the Clinic.