política de privacidad
Estamos comprometidos a proteger sus datos personales y su derecho a la privacidad. Esta política explica exactamente qué recopilamos, por qué y cómo lo protegemos.
ETERNAL Dental International ("ETERNAL Dental") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, share, and protect information about you when you visit our website, book a consultation, or receive dental treatment. We comply with the GDPR, Indonesian Personal Data Protection Law (UU PDP), and equivalent healthcare privacy laws.
Quiénes somos (Responsable del tratamiento)
ETERNAL Dental International is the data controller responsible for your personal data. We operate dental clinics delivering cosmetic, restorative, and implant dentistry across multiple international locations. Our contact details:
- Email: dental@cliniceternal.com
- Phone/WhatsApp: +46732302241
Si tiene alguna pregunta sobre cómo manejamos sus datos, comuníquese con nosotros al dental@cliniceternal.com.
Datos que recopilamos
Recopilamos diferentes categorías de datos personales dependiendo de cómo interactúa con nosotros:
Data is collected directly from you when you submit a form, book a consultation, undergo a procedure, or contact us. Technical data is collected automatically when you browse our website.
Cómo utilizamos sus datos
Your personal data is used only for the purposes for which it was collected:
- To provide dental consultation, treatment planning, procedures, and aftercare.
- To schedule, confirm, and remind you of appointments.
- To communicate treatment plans, estimates, and post-procedure instructions.
- To process payments securely and issue invoices.
- To maintain accurate medical records as required by healthcare law.
- To send service updates, newsletters, and aftercare tips — only where you have consented.
- To improve our website, services, and patient experience through anonymised analytics.
- To prevent fraud, ensure system security, and enforce our Terms of Service.
Base Legal para el Tratamiento
Under GDPR and applicable data protection law, we process your personal data under the following legal bases:
Necesidad contractual
To deliver the dental services you have requested — consultations, procedures, payments, and aftercare.
Intereses legítimos
To improve our services, prevent fraud, and maintain system security. These interests are always balanced against your rights.
Obligación Legal
Medical records, tax records, and other data must be retained for legally mandated periods.
Consentir
For marketing emails, clinical photography for marketing use, and processing of sensitive health data — you may withdraw consent at any time.
Dental & Medical Data (Special Category)
Dental and medical information is classified as "special category data" under GDPR and receives the strongest protections. We process it only where strictly necessary for providing healthcare and with your explicit consent.
Medical data — consultation notes, intraoral photos, 3D scans, X-rays, treatment records, Digital Smile Design files — is handled with strict confidentiality. Access is limited to:
- Your treating dentist(s) and directly involved clinical team.
- Dental laboratories producing your crowns, veneers, or aligners.
- Administrative staff managing your appointments and records.
- Our secure encrypted electronic medical records system.
Your dental data will never be shared with advertisers, insurers, or employers for commercial purposes without your explicit written consent. Before-and-after photographs are used for your clinical file only, unless you separately consent in writing to marketing use.
Compartir sus datos
We do not sell your personal data. It is shared only in these limited circumstances:
Proveedores de servicios
Carefully vetted third parties bound by data processing agreements — payment processors (Stripe, PayPal), email delivery services, cloud hosting, and dental imaging platforms. They process data only for purposes we instruct.
Dental Laboratories
Authorised labs producing your prosthetics receive the minimum data needed to fabricate your crowns, bridges, veneers, or aligners.
Entidades del grupo
If you transfer care between our international clinic locations, relevant records may be shared for continuity of treatment.
Requisitos legales
We may disclose data when required by law, court order, or regulatory authority, or to protect rights, property, or safety.
Cookies y seguimiento
Our website uses cookies and similar technologies to improve your experience.
Galletas esenciales
Required for site functionality — session management, form security. Cannot be disabled.
Cookies analíticas
Anonymised data showing how visitors use our site. Individual tracking data is not shared with third parties.
Galletas de marketing
Used only with your consent to serve relevant dental service advertising. Opt out any time via browser settings.
Retención de datos
We keep data only as long as needed, or as required by law:
- Dental records (consultation notes, X-rays, scans, treatment files): minimum 10 years from last treatment, per healthcare regulations.
- Financial and transaction records: 7 years for tax and accounting compliance.
- Marketing consent records: until consent is withdrawn plus 3 years.
- Consultation enquiries without treatment: 2 years, then securely deleted.
- Website analytics data: up to 26 months, anonymised.
Transferencias Internacionales de Datos
Because ETERNAL Dental operates internationally, your data may be transferred between our clinic locations for continuity of care.
Transfers outside the EEA rely on Standard Contractual Clauses (SCCs) approved by the European Commission, which impose equivalent data protection obligations on the recipient.
Tus derechos
Depending on your location, you have rights over your personal data. We honour these globally:
Request a copy of the data we hold about you.
Correct inaccurate or incomplete data.
Delete data where no legal retention applies.
Restrict processing in certain circumstances.
Receive data in a structured electronic format.
Object to legitimate-interest or marketing processing.
Request human review of automated decisions.
Withdraw consent at any time.
To exercise any right, contact dental@cliniceternal.com. We respond within 30 days. We may verify your identity before processing. EU/EEA residents dissatisfied with our response may complain to their national Data Protection Authority.
Privacidad de los niños
Patients under 18 require verifiable parental or guardian consent before consultation or treatment. The parent or guardian retains rights of access to the child's medical records as provided by law.
We do not knowingly collect personal data from any child under 13 through our website. If you believe we have inadvertently collected data from a minor online, please contact us immediately for deletion.
Seguridad
We implement appropriate technical and organisational measures to protect your data:
- TLS/SSL encryption on all data transmitted between your browser and our servers.
- Encrypted storage for dental records, X-rays, 3D scans, and sensitive data.
- Role-based access controls — staff only access data relevant to their duties.
- Regular security audits and vulnerability assessments.
- Staff training on data protection and clinical confidentiality.
- PCI-DSS compliant payment processing — we never store full card numbers.
In the event of a data breach likely to risk your rights and freedoms, we will notify you and the relevant authority as required by law.
Enlaces de terceros
Our website may link to third-party services (Google Maps, social media, payment gateways). We are not responsible for their privacy practices. Please review their policies separately.
Cambios a esta política
We may update this Privacy Policy over time. The "Last Updated" date at the top shows when it was last revised. Material changes will be communicated by email or a prominent site notice before taking effect. Continued use of our services after changes constitutes acceptance.
Contáctenos y Delegado de Protección de Datos
For questions, requests, or concerns about this Privacy Policy: