Privacy Policy

1. Controller

The controller of personal data described in this policy is Dentmall s.r.o., Company ID (IČO): 09041036, registered office Pivovarská 214/4, 370 01 České Budějovice, Czech Republic. Contact: dentmall@email.cz.

2. Data-minimised by design

DentVIS is built to avoid processing patient personal data. Case records are identified by a case label chosen by the user, not by a patient name — users are instructed not to enter patient names or other patient-identifying information into the software. Intraoral photographs, where used, are kept locally on the user's device and are not uploaded to our cloud. As a result, the cloud service is designed to hold only non-identifying 3D models and case labels.

3. Data we process

Account data. When you create an account we process your name, e-mail address, practice/organisation name and licence information. Legal basis: performance of a contract.

Billing data. Payments are processed by our merchant of record, Paddle.com Market Ltd, which acts as an independent controller for payment processing. We do not store your card details. We receive order and invoicing information (product, amount, country, invoicing details). Legal basis: performance of a contract and legal obligations (accounting).

Case data. The 3D dental models and case labels you upload are processed solely to provide the service (storage and synchronization between your devices). Case data is not intended to contain patient personal data. In the event a user nonetheless enters personal data into a case label or model, you (the dental professional or practice) act as the controller and we act as your processor under Article 28 GDPR; a data processing agreement is available on request at the contact above.

Technical data. We process technical logs (e.g. authentication events, error logs) necessary to operate and secure the service. Legal basis: legitimate interest in the security and reliability of the service.

4. Cookies

This website is static and uses no advertising, analytics or tracking cookies, so no cookie consent is required to browse it. The DentVIS web dashboard (app.dentvis.com) uses only strictly necessary cookies — for example to keep you signed in. Strictly necessary cookies do not require consent under the ePrivacy rules. We do not use third-party marketing or profiling cookies.

5. Storage and security

Service data is hosted on infrastructure located in the European Union. Data is encrypted in transit. Access to production data is restricted to authorised personnel and protected by authentication. We use processors (hosting and infrastructure providers) bound by data processing agreements; a current list is available on request.

6. Retention

Account and case data are retained for the duration of your contract and for a reasonable period thereafter to allow data export, after which they are deleted. Billing records are retained for the period required by tax and accounting law.

7. Your rights

Under the GDPR you have the right of access, rectification, erasure, restriction of processing, data portability and the right to object to processing based on legitimate interest. You can exercise these rights at dentmall@email.cz. You also have the right to lodge a complaint with the supervisory authority — in the Czech Republic the Office for Personal Data Protection (ÚOOÚ, uoou.gov.cz).

8. Changes

We may update this policy from time to time. The current version is always available at this address; material changes will be announced through the service or by e-mail.