Privacy Policy
Effective: June 8, 2026
This privacy policy applies to the data processing carried out on the dentsi.hu website operated by DENTSI Kft.
The purpose of this policy is to present what personal data we process, for what purpose, on what legal basis, for how long, who may access the data, and what rights the data subjects have.
1. Data Controller Information
Name of data controller: DENTSI Fogtechnikai Korlátolt Felelősségű Társaság
Abbreviated name: DENTSI Kft.
Registered office: 7624 Pécs, Hungária utca 53/1.
Company registration number: 02-09-072280
Tax number: 14237331-1-02
Email: info@dentsi.hu
Phone: +36 30 835 1485
Website: https://dentsi.hu
2. Applicable Legislation
During data processing, the provisions of the following legislation are particularly applicable:
- Regulation (EU) 2016/679 of the European Parliament and of the Council, the General Data Protection Regulation (GDPR),
- Act CXII of 2011 on informational self-determination and freedom of information,
- Act CVIII of 2001 on electronic commerce services,
- Act C of 2000 on accounting,
- the applicable legislation on healthcare and patient care documentation.
3. Principles of Data Processing
The data controller keeps the following principles in mind when processing personal data:
- lawfulness, fairness, and transparency,
- purpose limitation,
- data minimization,
- accuracy,
- storage limitation,
- integrity and confidentiality,
- accountability.
The data controller processes only data that is necessary to achieve the given purpose.
4. Scope of Data Processed
When filling out the appointment request / contact form on the website, the following personal data may be processed:
- name,
- phone number,
- email address,
- area of interest / selected treatment type,
- other information provided in the message.
In the message field, the visitor may also provide health-related information, such as a dental complaint, treatment request, or previous problem. Please only provide data on the form that is necessary for contact and appointment requests.
5. Purpose of Data Processing
The purpose of data processing is:
- handling appointment requests,
- enabling contact,
- contacting inquirers by phone or email,
- providing preliminary information related to the selected treatment,
- communication with the patient,
- operating and developing the website,
- operating the review request process related to the Google Business Profile,
- fulfilling legal obligations.
Messages sent through the website do not constitute a medical diagnosis, treatment plan, or emergency care request. An accurate diagnosis and treatment recommendation can only be given based on an in-person dental examination.
6. Legal Basis of Data Processing
The legal basis for data processing related to appointment requests and contact is the consent of the data subject, given by filling out and submitting the form.
If the data processing is related to the preparation or provision of healthcare, the data processing is carried out on the basis of the applicable healthcare and data protection legislation.
The legal basis for data processing related to the operation, security, and basic technical functioning of the website is the legitimate interest of the data controller.
In the case of fulfilling a legal obligation, the legal basis for data processing is the fulfillment of a legal obligation applicable to the data controller.
7. Source of Data
The personal data processed comes directly from the data subject when the visitor fills out and submits the form on the website, contacts the clinic, or uses the website's contact functions.
8. Data Transfer and Processing
The data provided on the website may be forwarded to the data controller's email address and may also be recorded in the GoHighLevel system used to operate the website.
The data controller may use the following data processors / service providers:
Hosting and website system provider:
HighLevel Inc.
400 North Saint Paul Street, Suite 920, Dallas, TX 75201, USA
Website: https://www.gohighlevel.com
Email provider:
Google Ireland Limited / Google LLC
For the technical provision of correspondence and contact.
Map service:
Google Maps
For displaying the clinic's location.
Web analytics:
Google Analytics / Google Search Console
For measuring website traffic and performance.
In the future, a chatbot, an automatic Google review request process, as well as an email or SMS reminder system may also operate on the website. These may only be used for the purpose of maintaining contact with patients, providing information, managing appointments, and improving service quality.
9. Data Transfer to Third Countries
Some service providers used to operate the website, particularly HighLevel Inc. and Google services, may involve data transfers outside the European Economic Area.
In such cases, the data transfer is carried out in accordance with the applicable data protection regulations, in particular the Standard Contractual Clauses adopted by the European Commission or other appropriate safeguards.
10. Data Retention Period
Contact and appointment request data received through the website is retained by the data controller for the period necessary for administration, but for a maximum of 12 months.
If the inquiry results in actual patient care, a contractual relationship, billing, or healthcare documentation, the retention of the data is governed by the applicable healthcare, accounting, and other statutory regulations.
11. Newsletter and Marketing Contact
The data controller does not use the data provided through the website for sending general marketing newsletters.
The clinic may use the provided contact information primarily for contact, handling appointment requests, appointment-related communication, and requesting reviews related to service quality.
12. Google Review Requests
Following the provision of the service, the clinic may send a Google review request message to the patient's contact information in order to request feedback on the quality of the service.
Providing a review is voluntary. The data controller does not offer discounts, gifts, or consideration in exchange for a Google review.
13. Cookies and Website Measurement
The website may use technically necessary cookies. These ensure the proper operation, security, and basic functions of the website.
The website may also use analytical cookies, such as the Google Analytics service, which helps understand the website's traffic and operation.
The use of non-essential cookies, such as analytical or marketing cookies, may be subject to separate consent. Detailed cookie management is described in a separate Cookie Policy.
14. Data Security
The data controller takes appropriate technical and organizational measures to protect personal data from unauthorized access, modification, transfer, disclosure, deletion, or destruction.
Only those persons may access the data for whom it is necessary for contact, appointment management, patient communication, or website operation.
15. Rights of Data Subjects
The data subject has the right to:
- request information about the processing of their personal data,
- request access to the processed data,
- request the correction of their data,
- request the deletion of their data,
- request the restriction of data processing,
- object to certain data processing,
- withdraw their consent at any time in the case of consent-based data processing,
- exercise their right to data portability if the statutory conditions are met,
- lodge a complaint with the supervisory authority.
The withdrawal of consent does not affect the lawfulness of the data processing carried out before the withdrawal.
16. Right of Access
The data subject has the right to receive feedback on whether the processing of their personal data is underway, and if so, has the right to access the processed data and information related to the data processing.
17. Right to Rectification
The data subject may request the correction of inaccurate personal data or the completion of incomplete data.
18. Right to Erasure
The data subject may request the deletion of their personal data if the data is no longer necessary for the purpose for which it was processed, if they withdraw their consent, or if the data processing is unlawful.
Erasure does not apply if the data processing is necessary for the fulfillment of a legal obligation, the retention of healthcare documentation, or the enforcement of legal claims.
19. Right to Restriction of Processing
The data subject may request the restriction of data processing if they dispute the accuracy of the data, if the data processing is unlawful but they do not request the deletion of the data, or if they need the data for the enforcement of a legal claim.
20. Right to Object
The data subject may object to data processing based on legitimate interests. In this case, the data controller may no longer process the data, unless the data processing is justified by compelling legitimate grounds that override the interests, rights, and freedoms of the data subject, or that are related to the submission, exercise, or defense of legal claims.
21. Automated Decision-Making
Based on the data provided through the website, the data controller does not apply any solely automated decision-making that would have legal effects on the data subject or significantly affect them.
22. Data Protection Incident
In the event of a data protection incident, the data controller acts in accordance with the applicable legislation. If the incident is likely to result in a high risk to the rights and freedoms of the data subjects, the data controller also informs the data subjects.
23. Remedies
In the case of a data processing-related question or request, the data subject may contact the data controller:
Email: info@dentsi.hu
Phone: +36 30 835 1485
If the data subject believes that the processing of their personal data is unlawful, they may lodge a complaint with the supervisory authority:
National Authority for Data Protection and Freedom of Information
Address: 1055 Budapest, Falk Miksa utca 9-11.
Mailing address: 1363 Budapest, Pf. 9.
Website: https://www.naih.hu
Email: ugyfelszolgalat@naih.hu
Phone: +36 1 391 1400
The data subject may also turn to the court in the cases defined by law.
24. Modification of the Policy
The data controller reserves the right to modify this privacy policy, particularly in the event of changes in legislation, new services, new data processors, or changes in the operation of the website.
The currently valid privacy policy is available on the dentsi.hu website.