Privacy policy

1. Introduction

1.1. This Privacy Policy describes how the personal data of visitors to the dentbyte.ro website (the "Website") is collected, used, disclosed and protected.

1.2. Data is processed in accordance with Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data (the "GDPR") and with the applicable national legislation.

1.3. The Website presents the DentByte application, which is in development, and lets those interested in its launch sign up. The processing of data in the DentByte application, after its launch, will be described in a separate document.

2. The Data Controller

2.1. The controller of personal data is:

• Name: DentByte Software SRL
• Tax ID (CUI): 55408024
• Trade Register No.: J2026049262007
• Registered office: Str. Republicii nr. 16, Fălticeni 725200, Suceava County, Romania
• Email: contact@dentbyte.ro

2.2. For any question about the processing of personal data, you can contact us at contact@dentbyte.ro.

3. Scope

3.1. This Policy applies to the processing of the personal data of visitors to the Website and of the people who fill in the sign-up form.

3.2. The Policy does not apply to processing carried out by third parties through their own services, even when those are reachable through links published on the Website, such as social networks. We recommend reading those providers' privacy policies.

4. Categories of Data We Process

4.1. Data from the sign-up form: your full name and email address, which are required, and the name of your clinic and your phone number, which are optional. Together with these we keep the language in which you filled in the form.

4.2. Technical data: the IP address, used solely to limit the number of form submissions, and the technical information a browser sends to any website it visits, processed by the hosting provider for the operation and security of the Website.

4.3. Website usage data: the pages visited, the length of the visit and the source that brought you to the Website, collected through Google Analytics only if you have given your consent to analytics cookies.

4.4. Correspondence: the content of the messages you send to the company's email address.

4.5. Preferences: your cookie choice and the display theme you picked, kept only in your browser.

4.6. The Website does not collect medical data, patient data or any other special category of data within the meaning of Article 9 GDPR. Please do not send such data through the sign-up form or by email.

5. How We Collect Data

5.1. Directly from you: when you fill in the sign-up form and in the correspondence you have with us.

5.2. Automatically: when you visit the Website, through the technical data your browser sends and, only with your consent, through Google Analytics.

6. Purposes of Processing and Legal Bases

6.1. Contacting you at launch: letting you know when the DentByte application launches and presenting it to you, at the request you make through the sign-up form. Legal basis: your consent, given by ticking the agreement checkbox on the sign-up form, Article 6(1)(a) GDPR. You can withdraw your consent at any time, as described in section 11.

6.2. Answering requests: handling the messages you send us. Legal basis: the legitimate interest in answering the requests we receive, Article 6(1)(f) GDPR.

6.3. Website security and abuse prevention: limiting the number of form submissions from the same IP address and protecting the Website against automated attacks. Legal basis: the legitimate interest in protecting the Website and the company's email address, Article 6(1)(f) GDPR.

6.4. Analysing how the Website is used, through Google Analytics. Legal basis: consent, Article 6(1)(a) GDPR, given through the cookie banner.

6.5. Establishing, exercising or defending a legal claim. Legal basis: legitimate interest, Article 6(1)(f) GDPR.

6.6. We do not use your data for advertising, we do not profile you and we do not send you newsletters. We contact you only about the launch of the DentByte application.

7. Recipients of the Data and Processors

7.1. We do not sell or rent personal data. We share data only with service providers acting on our behalf, under data processing agreements, or where the law requires it.

7.2. Amazon Web Services EMEA SARL, hosting of the Website, through the AWS Amplify and Amazon CloudFront services. All data sent through the Website passes through this provider's infrastructure.

7.3. Sendinblue SAS (Brevo), sending the message that contains the data from the sign-up form to the company's email address.

7.4. The company's email service provider, receiving and keeping the messages that contain the data from the sign-up form and the correspondence we have with you.

7.5. Google Ireland Limited and Google LLC, through the Google Analytics service, only on the basis of consent. Google does not receive the data from the sign-up form.

7.6. We may disclose data to public authorities, to the extent the law requires it or it is necessary to establish, exercise or defend a legal claim.

8. International Transfers

8.1. Some of the providers listed in Article 7, in particular Google and Amazon Web Services, may process data outside the European Economic Area, in particular in the United States of America.

8.2. In those cases, the transfer takes place on the basis of an adequacy decision adopted by the European Commission, including the EU-US Data Privacy Framework, or on the basis of the Standard Contractual Clauses, under Chapter V GDPR.

9. Retention Periods

9.1. Data from the sign-up form: until we contact you at the launch of the DentByte application and for no more than 12 months after the launch, unless in the meantime we enter into a contract, in which case the data is processed under that contract. We delete it sooner if you ask us to.

9.2. The IP address used to limit submissions: kept only in the server's memory, for no more than 10 minutes, and never saved.

9.3. Correspondence: for as long as needed to resolve the request and, afterwards, for as long as needed to establish, exercise or defend a legal claim.

9.4. Technical data kept by the hosting provider: under its retention policies, for the operation and security of the service.

9.5. Data collected through Google Analytics: for the retention period configured in the Google Analytics service. The lifetimes of the cookies are described in the Cookie policy.

10. Data Security

10.1. We apply appropriate technical and organisational measures to protect data, including:

• sending data only over encrypted connections (HTTPS)
• not writing the form's data to a database or to the application's logs
• limiting the number of form submissions from the same address
• loading Google Analytics only after consent is given
• restricting internal access to data on a need-to-know basis

10.2. No information system can guarantee absolute security. If you suspect an unauthorised use of your data, please write to us at contact@dentbyte.ro.

11. Rights of the Data Subject

11.1. As a data subject, you have the following rights:

• the right of access to the data processed
• the right to rectification of inaccurate or incomplete data
• the right to erasure of data, under the conditions laid down by law
• the right to restriction of processing
• the right to data portability, in a structured, commonly used and machine-readable format
• the right to object to processing based on legitimate interest
• the right to withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal

11.2. You can exercise these rights by sending a request to contact@dentbyte.ro. We will answer within 30 days of receiving the request at the latest. That period may be extended by up to two months for complex requests, in which case you will be informed in advance.

11.3. Consent to analytics cookies can be withdrawn at any time, directly on the Website, from "Cookie settings" in the page footer.

11.4. The right to lodge a complaint. If you consider that the processing of your data breaches the applicable legislation, you have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP):

• Address: B-dul General Gheorghe Magheru nr. 28-30, Sector 1, Bucharest, postal code 010336, Romania
• Email: anspdcp@dataprotection.ro
• Website: dataprotection.ro

11.5. You also have the right to bring the matter before the competent courts.

12. Automated Processing

12.1. We do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you, within the meaning of Article 22 GDPR.

13. Minors

13.1. The Website is aimed at dentists, clinics and their staff. We do not knowingly collect personal data from people under the age of 18.

13.2. If we become aware that we have collected such data, we will delete it as soon as possible. If you believe a minor has given us personal data, please contact us at contact@dentbyte.ro.

14. Cookies and Similar Technologies

14.1. The Website uses the browser's local storage to remember your preferences and, only with your consent, the Google Analytics cookies.

14.2. The categories used, their legal bases, their retention periods and how to manage consent are described in the Cookie policy, available on the Website.

15. Notification of Security Breaches

15.1. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Romanian National Supervisory Authority for Personal Data Processing within 72 hours of becoming aware of it.

15.2. Where the breach is likely to result in a high risk, we will inform you without undue delay, describing the nature of the breach, its likely consequences and the measures taken.

16. Amendments to This Policy and Contact

16.1. We reserve the right to update this Policy, to adapt it to legislative changes or to the evolution of the Website. Changes are published on this page, together with the version and the date it comes into force.

16.2. For any request about personal data, you can contact us at:

DentByte Software SRL

Address: Str. Republicii nr. 16, Fălticeni 725200, Suceava County, Romania

Email: contact@dentbyte.ro