I.Why you should read this policy
COMPLETE DENTAL SOLUTIONS EOOD (hereinafter “Complete Dental Solutions”) processes personal data in its capacity as a personal data controller for our customers, partners, and counterparties, as well as for our employees. This means that your personal data – such as name, address, phone, contact email, delivery details, payment information – may be stored with us.
In expression of our commitment to ensure the highest level of protection of your personal data, we have developed internal rules and follow strict procedures for monitoring the processing of personal data, which comply with the requirements of the General Data Protection Regulation (GDPR) and the Personal Data Protection Act. This policy aims to clarify all the main questions regarding the processing of personal data we perform – for what purposes we do it, on what grounds, and for how long.
Here you can check what your rights are in connection with the personal data we process and how to contact us to exercise them. If you cannot find an answer to any of your questions related to the processing of personal data within this policy, you can contact us by the means indicated below.
Data Controller
COMPLETE DENTAL SOLUTIONS EOOD
Sofia, Manastirski Livadi district, 2 Balgarska Legia Str.
Tel.: +359 899 94 72 93
Email: [email protected]
Website: https://www.dentallongevity.ai
II.Why and how we process customer personal data
The main activity of Complete Dental Solutions is the sale of dietary supplements, dental products, and items for oral health through the Dental Longevity Empire online store. For this purpose, we process the personal data of individuals who are customers of the store or are interested in our products.
We also process data of our partners and counterparties – such data includes information for the identification of the respective person and/or their representatives, contact data, data on provided services and payments made.
We also process data of our employees for the purposes of concluding and performing the obligations under an already concluded employment contract. In this regard, we process data for the identification and contact with the employee, bank account data, education and professional experience, and, when required by law, judicial records.
When processing the personal data of the categories of persons mentioned above, we apply the highest standards of confidentiality that meet and exceed the requirements for storage and protection. When necessary for the performance of a legal or contractual obligation, we may need to provide access to your personal data in a limited volume to a third party – for example, the team that provides us with software support, our accounting, the courier company delivering your orders, and payment processors (Stripe). In these cases, we guarantee that the third parties we engage apply the same high standards for the protection of your personal data.
III.What is meant by “personal data”
Complete Dental Solutions applies its confidentiality standards to any information that becomes known to us in the course of our activity. Nevertheless, this policy specifically concerns the protection of personal data – and guaranteeing the rights of the persons to whom it refers.
The personal data subject to this policy includes any information that relates to a specific natural person and may include name, delivery address, phone, email, payment details, and order history. In some cases, the personal data we process may not be sufficient to determine to whom it refers – for example, data that has been anonymised.
We also process as personal data information about visits to our website, with information stored on the end-user devices only of registered users of the website. For our cookies policy, you can learn more in the dedicated section of the site.
Information about contacts with legal entities – trade name, contact address, office phones, and email addresses – is not considered personal data, and the rules in section V of this policy do not apply to such data.
IV.For what purposes we process personal data
In connection with the sale of products through the online store. The main activity of Complete Dental Solutions through Dental Longevity Empire is related to the sale of dietary supplements and dental products. For this purpose, it is necessary to identify our customers, maintain contact for the purposes of performing our commitments, and track deliveries of the relevant products.
The basis for processing the data in this case is the performance of a contractual obligation, which also includes processing in connection with the provision of certain information and/or services prior to the conclusion of a sales contract. For this purpose, we will process the personal data of each customer until the order is completed, and for a certain period thereafter – within which additional rights and obligations may arise for the parties to the contract. This period is usually 6 years after the termination of the relationship.
To comply with legal obligations. As a commercial company, Complete Dental Solutions is required by law to maintain accounting records and document archives. According to the Accounting Act, all accounting documents are kept for a minimum of 3 years counted from 1 January of the tax year following the tax year in which they were created; documents for tax and social-security control – including invoices and others – are kept for a period of 10 years after 1 January of the tax year following the tax year in which the tax or social security obligation arose.
To protect the legitimate interests of Complete Dental Solutions. Your personal data may be required to prove before the relevant control authorities or third parties that we are complying with our legal obligations, as well as in connection with the clarification of claims from or against the company. For this purpose, personal data is usually stored for a period of up to 6 years from the occurrence of an event that may lead to the arising of claims; if claims have arisen, the data is stored until those claims are settled.
Based on your explicit consent. We will explicitly indicate for what purposes we will use your personal data when requesting your consent, and we will ensure that this data is used only for that purpose. In the rare cases where the processing of your personal data is based on your consent, you can withdraw your consent at any time.
V.Your rights regarding the personal data we process
In most cases, we process data in connection with the services provided to our customers. At any time, while we process your personal data, you have the right to the following:
To receive information about what personal data of yours we process and for what purposes
As a rule, this information will be provided at the start of providing our services – i.e. the conclusion of a contract with customers, partners, or employees – but you can make inquiries in this regard at any time.
To request correction of inaccurate personal data
Upon any change to your personal data, you can request an update so that we continue to work with accurate information.
To request erasure of your personal data
When there is no basis for us to continue processing your personal data, you can request at any time that we delete all information about you that we store. If we have completed our contractual relationship and have no legal obligation to retain this information, it will be deleted.
To request that we store your personal data without processing it in any other way
If there is no basis for us to continue processing your personal data, but you do not wish it to be deleted – for example, with a view to future use of our services – you can at any time request that we stop any other form of processing and only store your data.
To request that we provide your personal data to you
If you want to receive a copy of all data we process about you, you can always request it. In this case, you must indicate whether we can provide the data to you on paper or in a standard electronic file format (.pdf, .doc).
To object to the processing of your personal data
When we process your personal data with a view to protecting our interests, you can object to the processing at any time. If with the processing we are protecting a legitimate interest, we will assess whether we can stop the processing or not.
To exercise any of the rights listed above, please send an inquiry to [email protected]. Your request will be processed within 1 month. If we have difficulties in fulfilling your request, this period may be extended by up to 2 months, and we commit to notifying you of such an extension within 1 month of receiving your request.
Your request may be rejected in the following cases: if we cannot identify you; or if a large number of requests have been received from you in a short period.
If you believe we are violating your rights, you can file a complaint with the Commission for Personal Data Protection, which supervises our processing of personal data.
Commission for Personal Data Protection
Address: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd.
Information and contact centre – tel. 02/91-53-518
Reception – working hours 9:00 – 17:30
Email: [email protected]
Web: www.cpdp.bg