Privacy policy

1.General provisions
1.1. UAB SDC klinika, company code 304989582, Kalvarijų str. 128A-2, LT-08210 Vilnius (hereinafter – the Company), when processing personal data, complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter – GDPR), the Law of the Republic of Lithuania on Legal Protection of Personal Data, as well as other legal acts regulating the processing and protection of personal data.
1.2. The Company respects the privacy of all natural persons and its clients and undertakes to ensure the security of your personal data when providing the Company’s services or when visiting the Company’s website.
1.3. This Privacy Policy provides information on the Company’s policy regarding the collection, processing and storage of personal data.
1.4. The terms used in this Privacy Policy correspond to the terms used in the GDPR and the Law of the Republic of Lithuania on Legal Protection of Personal Data.
1.5. Merely browsing the website or using services does not constitute consent to optional tracking technologies. Where processing relies on consent, we request it separately.
1.6. The Company may periodically amend this Privacy Policy taking into account changes in the GDPR or other legal acts, the scope of services provided by the Company and other circumstances.

2. Main principles of personal data processing
2.1. When collecting and processing personal data entrusted to the Company, the Company adheres to the following principles:
2.1.1. personal data are processed lawfully and fairly;
2.1.2. personal data are collected for specified, explicit and legitimate purposes and are not further processed in a manner incompatible with those purposes;
2.1.3. personal data are adequate, relevant and limited to what is necessary;
2.1.4. personal data are accurate and, where necessary, kept up to date;
2.1.5. personal data are kept in a form which permits identification of data subjects for no longer than necessary;
2.1.6. personal data are processed in a manner that ensures appropriate security.

3. Processing of personal data
3.1. You ensure that the personal data provided to the Company are accurate and correct and that you do not provide personal data of third parties.
3.2. The Company operates as a dental clinic. You have the right to contact the Company by e-mail [email protected]
or at its registered office address and obtain information on the processing of your personal data.
3.3. The Company processes personal data for the following purposes:
3.3.1. provision of dental services, registration for visits and service provision;
3.3.2. video surveillance for property and security purposes;
3.3.3. recruitment;
3.3.4. marketing.
3.4. Upon receiving your consent, personal data may also be processed for other purposes.
3.5. Cookies and similar technologies on sdcklinika.lt. Necessary cookies support website functions. Analytics and advertising technologies are enabled only with your consent to the relevant category. This control covers sdcklinika.lt; the app.sdcklinika.lt self-service system is accessed through a separate link.
Necessary. SDC klinika’s sdc_consent_v2 stores your categories, date, policy version and random choice identifier for 180 days. Polylang pll_language remembers your language for up to 1 year. Test previews use a separate sdc_consent_preview_v2 for 180 days. The contact form uses Google reCAPTCHA to protect against spam and abuse. It loads independently of analytics or advertising choices and uses the _GRECAPTCHA cookie for risk assessment. See reCAPTCHA information.
Analytics. Google Analytics measures visits and interactions. The default lifetime of _ga and _ga_* cookies is up to 2 years; browsers may shorten it. GetAutoSEO measures article visits and attribution. Its local browser storage keeps autoseo_visitor_id until removal, uses autoseo_last_article_attribution for up to 30 days, and autoseo_pv_sent_* during the browser session. We remove these local entries when analytics consent is withdrawn. GetAutoSEO receives a browser identifier, page and referrer URLs, time, article information and recorded event data.
Advertising. Google Ads measures advertising results and, with consent, allows personalised advertising and sharing advertising data with Google. _gcl_* cookies generally last up to 90 days. Data may include browser identifiers, visited pages and interactions. Analytics and advertising choices are communicated to Google through Consent Mode v2.
Choice and withdrawal. Choose “Reject optional”, “Accept all” or individual categories. Change your choice at any time using “Cookie settings”. Rejecting optional technologies does not prevent browsing or using booking links. Changing an enabled category may reload the page. Withdrawal does not affect the lawfulness of earlier processing; browser settings also let you remove cookies from other domains.
Consent record. SDC klinika stores a hash of the choice identifier, categories, date and policy version on its server for up to 180 days. This record contains no name, contact details, IP address, user agent or visited page URL. Preview choices are not written to the server log.
Provider information. Learn about Google’s processing, including international processing, in its partner-site information and privacy policy. Contact [email protected] with questions.
3.6. For service provision purposes, the following data may be processed: name, surname, personal identification number, date of birth, e-mail address, phone number, passport or identity card number, residential address.
3.7. For video surveillance purposes: image of the recorded person.
3.8. For recruitment purposes: name, surname, personal identification number, date of birth, contact details, identity document data, address, education and work experience.
3.9. For marketing purposes: name, surname, e-mail, phone number, browsing behavior and geographical location.
3.10. Personal data are stored for the period required by law or no longer than 2 years.

4. Video surveillance
4.1. Video surveillance is carried out for the protection of property and persons.
4.2. Surveillance is carried out in premises with dental chairs, administrator’s workplace, corridors and parking areas.
4.3. Video recordings are stored for up to 1 month unless longer storage is required.
4.4. The purpose of cameras is security, not monitoring clients.

5. Rights of data subjects
5.1. You have the right to be informed, access, withdraw consent, rectify, erase, restrict processing, data portability, object and lodge a complaint.
5.2. Requests are examined within 1 month.

6. Data security
6.1. The Company implements appropriate technical and organizational measures.
6.2. Employees must comply with legal requirements.
6.3. Data breaches are reported within 72 hours.
6.4. Data subjects are informed when risks arise.

7. Contact information
UAB SDC klinika
Company code 304989582
Kalvarijų str. 128A-2, LT-08210 Vilnius
Phone +370 696 66247
E-mail [email protected]