Privacy Policy for Llistosella Dental

Last updated: July 4, 2025

At Llistosella Dental, a dental clinic located in Platja d’Aro, we are committed to protecting the privacy of our patients. This Privacy Policy details how we collect, use, disclose, and protect your personal information in accordance with the General Data Protection Regulation (GDPR) and the Organic Law on Data Protection and Guarantee of Digital Rights (LOPDGDD).

1. Data Controller

The data controller responsible for processing your personal data is:

• Clinic Name: Llistosella Dental

• Address: Av. del Cavall Bernat, 81, 17250 Platja d’Aro, Girona, Spain

• Phone: 614 68 73 59

• Email: info@llistoselladental.com

• Website: llistoselladental.com

2. What personal data do we process?

At Llistosella Dental, we may process the following categories of personal data:

• Identification data: Name and surname, DNI/NIE, date of birth, gender, image.

• Contact data: Postal address, phone number, email address.

• Health data: Information about your clinical history, dental treatments performed and planned, X-rays, intraoral and extraoral photographs, and any other information necessary for dental diagnosis and treatment. As these are special categories of data, their processing is carried out with the utmost rigor and confidentiality.

• Economic and billing data: Payment information, bank details, information about medical insurance.

3. For what purpose do we process your data?

Your personal data will be processed for the following purposes:

• Management of the patient-clinic relationship: scheduling, modifying, and reminding appointments.

• Provision of oral health services: Conducting diagnoses, preparing treatment plans, executing relevant dental treatments, and monitoring them.

• Administrative and billing management: Issuing invoices, managing collections, and processing with insurance entities.

• Commercial communications: Sending information about our services, promotions, relevant news for oral health, provided we have your explicit consent.

• Compliance with legal obligations: Transfer of data to public bodies when required by current regulations.

4. What is the legal basis for processing your data?

The legal basis for processing your personal data varies depending on the purpose:

• The management of your oral health and the provision of dental services are legitimate under the execution of a healthcare services contract and the necessity for purposes of preventive or occupational medicine, medical diagnosis, provision of health or social care or treatment.

• For the processing of health data, the legal basis is strengthened by your explicit consent, which will be requested during your first visit.

• The sending of commercial communications is based on your explicit consent, which you can withdraw at any time.

• Compliance with legal obligations legitimizes us to transfer your data to competent authorities.

5. How long will we retain your data?

Your personal data will be retained for the time necessary to fulfill the purpose for which they were collected and to determine any possible liabilities that may arise from that purpose and data processing. In the case of clinical records, they will be kept for at least five years after the completion of the last treatment, in accordance with current legislation.

6. To whom will your data be communicated?

Your personal data will not be transferred to third parties without your explicit consent, except in the following cases:

• To dental prosthesis laboratories and other providers necessary for the correct provision of dental services.

• To insurance entities for the management of treatments covered by your policy.

• To health authorities, judges and courts, and other competent public bodies when there is a legal obligation.

7. What are your rights?

You have the right to:

• Access your personal data.

• Rectify inaccurate or incomplete data.

• Request the erasure of your data when, among other reasons, they are no longer necessary for the purposes for which they were collected.

• Object to the processing of your data.

• Request the restriction of the processing of your data.

• Request the portability of your data to be transmitted to another controller.

You can exercise your rights by sending a written request to our postal address or via email to info@llistoselladental.com, attaching a copy of your DNI or equivalent identification document.

Furthermore, if you believe that we have not processed your personal data in accordance with the regulations, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es).

8. Security Measures

Llistosella Dental has adopted the necessary technical and organizational measures to guarantee the security of your personal data and prevent its alteration, loss, unauthorized processing, or access, taking into account the state of technology, the nature of the data stored, and the risks to which they are exposed.

9. Changes to the Privacy Policy

Llistosella Dental reserves the right to modify this policy to adapt it to new legislative or jurisprudential developments. In such cases, the changes introduced will be announced on this page with reasonable notice before their implementation.