Last updated: October 22, 2025
1. Definition of terms
1.1. Personal data – any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
1.2. Processing of personal data – any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
1.3. Data controller – the legal entity that, alone or jointly with others, determines the purposes and means of the processing of personal data. For the purposes of this Policy, the Controllers are the legal entities of the «Favorit Dent» network in Ukraine, Poland, and Spain.
2. What data do we collect and for what purpose?
We collect and process your personal data for clearly defined purposes:
| Data category | Мета обробки | Правова підстава (GDPR) |
|---|---|---|
| Contact details: First name, last name, phone number, email address. | Contact with you, consultations, order discussions, providing reports, course registration. | Contract (Article 6(1)(b) GDPR) – for the performance of an order or pre-contractual relations. |
| Health data (special category): Dental images, scans (STL/CT), medical prescriptions, description of the clinical situation. | Fabrication of dental/maxillofacial structures, clinical case analysis, material selection. | Provision of healthcare for treatment purposes (Article 9(2)(h) GDPR); Explicit consent (Article 9(2)(a) GDPR). |
| Professional data (for partner physicians): Name of clinic, position, qualifications. | Maintaining a partner database, cooperation analysis, informing about new services/materials. | Legitimate interest (Article 6(1)(f) GDPR) – maintaining business relationships with partners. |
| Financial data: Payment details, transaction history. | Settlement of services rendered, accounting management. | Compliance with legal obligation (Article 6(1)(c) GDPR) – Tax Code. |
| Technical data (when visiting the website): IP address, cookie data, browser type. | Ensuring proper website functionality, traffic analysis, service quality improvement. | Legitimate interest (art. 6.1.f GDPR) – ensuring website security and functionality. |
3. Your rights under the GDPR
As a data subject, you have the following rights:
Right of access: You can request confirmation as to whether or not your data is being processed and obtain access to it.
Rectification: You can request the correction of inaccurate or incomplete data.
Erasure («Right to be forgotten»): You can request the deletion of your data under certain circumstances.
Restriction of processing: You can request temporary suspension of data processing (e.g., while challenging its accuracy).
Right to data portability: You can receive your data in a structured, commonly used and machine-readable format to transmit it to another controller.
Objection to processing: You may object to the processing of your data based on legitimate interests.
Withdrawal of consent: If processing is based on your consent, you may withdraw it at any time.
To exercise your rights, please contact us using the details provided below.
4. Who has access to your data?
We do not sell or transfer your personal data to third parties for marketing purposes. Your data may be accessible to:
To Laboratory staff: Only to those who need it to perform their job duties (technicians, managers).
Data processors (Processors): Service providers who assist us in our work (e.g., cloud services for data storage, email services). All processors act on our behalf and under contracts with us that meet GDPR requirements.
Partner physicians: Your health data is transmitted to the physician who submitted the order, for treatment purposes.
Government authorities: Only in cases provided by law (e.g., upon request from law enforcement agencies).
5. International data transfer
Since «Favorit Dent» is an international network, your data may be transferred between our laboratories in Ukraine, Poland, and Spain to coordinate work and ensure service quality. Such transfers are governed by:
Within the EU: The GDPR ensures a uniform level of protection.
From the EU to Ukraine: Ukraine has been recognized as a country with an adequate level of data protection by the European Commission decision (June 2024), ensuring secure transfer.
6. Data retention periods
We retain your personal data for no longer than necessary to achieve the purposes for which it was collected, or in accordance with legal requirements.
Health data: Retained in accordance with national medical legislation requirements.
Financial data: Retained in accordance with tax legislation requirements.
Partner contact details: Retained for the duration of the contract and for a specified period after its termination.
7. Contact and Responsible Person
For all matters related to the protection of your personal data and the exercise of your rights, please contact:
In Ukraine:
favorit.dent@gmail.com
In Poland:
Inspektor Ochrony Danych (IOD) / Data Protection Officer (DPO)
Warszawa
ul. Płochocińska 98a, favorit.d.lab@gmail.com
In Spain:
Delegado de Protección de Datos (DPD) / Data Protection Officer (DPO)
callé Delfín 20, 29680, Estepona, Málaga, favoritodental@gmail.com
You also have the right to lodge a complaint with a supervisory authority:
In Ukraine: Commissioner of the Verkhovna Rada of Ukraine for Human Rights.
In Poland: Prezes Urzędu Ochrony Danych Osobowych (PUODO).
In Spain: Agencia Española de Protección de Datos (AEPD).
This Policy may be updated from time to time. The current version will always be available on our website.
