Privacy Policy clear aligners treatment planning services

Personal data that we process
Steun Dental processes your personal data because you use our services and/or because you provide them to us yourself. Below you will find an overview of the personal data that we process:

• First and last name
• Address details
• Phone number (optional)
• Email address

Special and/or sensitive personal data that we process
Our website and services are not intended to collect data about visitors younger than 16 years old unless they have permission from parents or guardians. We cannot verify the age of all visitors; we therefore recommend that parents supervise their children’s online activities. If you believe we have collected personal data about a minor without permission, please contact us at info@steundental.com so that the information can be deleted.

Processing of Patient and Clinical Data
In the context of providing clear aligner treatment planning services, Steun Dental may receive clinical files or patient-related data from dental professionals, such as dental scans (e.g., STL files), treatment notes, case photos, or patient identifiers provided by the Client. This information is processed solely for the purpose of delivering the requested treatment planning services.

Steun Dental acts as a data processor, and the prescribing dental professional acts as the data controller for all patient-related data. Steun Dental does not use this information for any purpose other than fulfilling the service requested by the Client. All clinical data is stored securely and is accessible only to authorized personnel involved in the case.

If you believe patient information has been provided without proper legal basis or consent, please contact info@steundental.com so the matter can be immediately reviewed and data can be deleted if required.

For what purpose and on what basis do we process personal data?
Steun Dental processes personal data based on the following legal grounds under the GDPR:

• Contractual necessity: processing is required to provide the services you request,      including account creation, communication, and the delivery of treatment planning.
• Legitimate interest: to maintain communication, manage accounts, and improve the      functionality of our website and services.
• Health-related data (patient files): processed under the responsibility of the prescribing clinician as the data controller, in accordance with Articles 6 and 9 of the GDPR.

Purposes include:

• To be able to call or email you if necessary to carry out our services
• To inform you about changes to our services and products
• To offer you the opportunity to create an account
• To deliver goods and services to you

Automated decision-making
Steun Dental does not use or make decisions based on automated processing on matters that can have (significant) consequences for people. All decisions are made manually with human involvement.

Use of Third-Party Service Providers (Processors)
To operate our services efficiently and securely, Steun Dental may use trusted third-party service providers such as cloud storage services, secure file-transfer tools, website hosting providers, and communication platforms. These providers may process personal data exclusively on our behalf and are bound by data processing agreements ensuring GDPR-compliant security and confidentiality. Steun Dental does not share data with third parties for marketing purposes.

Cookies, or similar techniques, that we use
Steun Dental only uses technical and functional cookies, and analytical cookies that do not infringe on your privacy. A cookie is a small text file that is stored on your computer, tablet, or smartphone when you first visit this website. Cookies we use are necessary for the technical operation of the website and your ease of use. They ensure the website works properly and remember, for example, your preferences. Cookies may also be used to optimize our website. You can opt out of cookies by setting your internet browser to no longer store cookies. You can also delete all previously stored information via your browser settings.

Storage Location and International Transfers
Personal data may be stored on secure servers located within the European Economic Area (EEA). If data is stored or processed outside the EEA (for example, by a cloud service provider), Steun Dental ensures that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs)approved by the European Commission.

How long we store personal data
Steun Dental does not store your personal data longer than strictly necessary. We retain the personal information listed above for as long as the customer maintains an account to allow Steun Dental to fulfill the requested services.

Retention of Clinical Files
Clinical data (such as treatment scans, photos, and planning files) is stored only for as long as necessary to complete the requested treatment plan and for a reasonable period thereafter to allow for follow-up or service improvements. Clients may request deletion of clinical files at any time by contacting info@steundental.com.

View, modify or delete data
You have the right to view, correct, or delete your personal data. You can do this via the personal settings of your account. You also have the right to withdraw your consent for data processing, to object to the processing of your personal data, and the right to data portability. This means you can request to receive the personal data we have about you in a computer file or request that it be sent to another organization.

To exercise these rights, or for other questions or comments about data processing, please send a request to info@steundental.com. Steun Dental will respond as soon as possible, and in any case within four weeks.

You also have the option to file a complaint with the national supervisory authority, the Dutch Data Protection Authority, via: https://autoriteitpersoonsgegevens.nl/nl/contact-met-de-autoriteit-persoonsgegevens/tip-ons

How we protect personal data
Steun Dental takes the protection of your data seriously and implements appropriate measures to prevent misuse, loss, unauthorized access, unwanted disclosure, and unauthorized modification. Security measures include:

• secure storage environments
• restricted access to authorized personnel only
• encrypted data transfers where applicable
• monitoring for unauthorized access
• procedures to detect and respond to security incidents

If you have the impression that your data is not properly secured or there are indications of misuse, please contact us at info@steundental.com.

Data Breach Notification
In the unlikely event of a data breach involving personal or clinical data, Steun Dental will notify the Client (and, where required, the Dutch Data Protection Authority) in accordance with GDPR requirements.