Privacy Policy

1. Data controller

2. Data we collect and purpose

We collect only the data necessary for the following purposes:

• Appointment and enquiry management: name, phone, email and reason for enquiry, in order to contact you and manage your clinic appointment.
• Patient care: clinical data required to provide dental services. This data is classified as special category health data under Article 9 of the GDPR.
• Commercial communications: if you give your express consent, we may send you information about treatments, promotions and clinic news.
• Website browsing: technical usage data collected via cookies (see our Cookie Policy).

3. Legal basis for processing

• Performance of a pre-contractual or contractual relationship (Art. 6.1.b GDPR): appointment management and clinical care.
• Legitimate interest (Art. 6.1.f GDPR): responding to enquiries and communications.
• Explicit consent (Art. 6.1.a and Art. 9.2.a GDPR): processing of health data and commercial communications.
• Legal obligation (Art. 6.1.c GDPR): compliance with accounting, tax and healthcare obligations.

4. Data retention

Patient data will be retained for the minimum period required by applicable healthcare legislation (Spanish Law 41/2002 on Patient Autonomy and Catalan regional regulations), which establishes a minimum of 5 years from the date of each clinical episode.

Contact data for appointment management will be retained until you request its deletion. Data used for commercial purposes will be kept until you withdraw your consent.

5. Recipients and data transfers

ARRANZ SMILE STUDIO, S.L. does not share your personal data with third parties, except in the following cases:

• Legal obligation or request from a competent authority.
• Technology providers acting as data processors (clinical management software, communications platform) under a data processing agreement with appropriate guarantees.

We do not carry out international transfers of data outside the European Economic Area.

6. Your rights

You may exercise the following rights at any time by writing to info@sergiarranz.com or to the clinic's postal address, enclosing a copy of your ID or other identifying document:

• Access: to find out what data we hold about you.
• Rectification: to correct inaccurate or incomplete data.
• Erasure: to request the deletion of your data when it is no longer necessary.
• Objection: to object to processing based on legitimate interest or for commercial purposes.
• Restriction: to request that processing be restricted in certain circumstances.
• Portability: to receive your data in a structured format and transfer it to another controller.
• Withdrawal of consent: at any time, without affecting the lawfulness of processing carried out prior to withdrawal.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es if you consider that the processing of your data does not comply with applicable regulations.

7. Cookies

This website uses first-party and third-party cookies. For more information, please consult our Cookie Policy.

8. Security

ARRANZ SMILE STUDIO, S.L. has implemented the technical and organisational measures necessary to ensure the security and integrity of personal data and to prevent its alteration, loss, unauthorised processing or access, taking into account the state of the art, the nature of the data and the risks to which it is exposed.

9. Contact and amendments

For any queries relating to this privacy policy:

We reserve the right to update this policy when necessary due to regulatory changes or modifications to our services. We will inform you of any relevant changes by means of a notice on the website.

Last updated: March 2025