1.General provisions
1.1. UAB SDC klinika, company code 304989582, Kalvarijų g. 128A-2, LT-08210 Vilnius (hereinafter – the Company), when processing personal data, complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter – GDPR), the Law of the Republic of Lithuania on Legal Protection of Personal Data, as well as other legal acts regulating the processing and protection of personal data.
1.2. The Company respects the privacy of all natural persons and its clients and undertakes to ensure the security of your personal data when providing the Company’s services or when visiting the Company’s website.
1.3. This Privacy Policy provides information on the Company’s policy regarding the collection, processing and storage of personal data.
1.4. The terms used in this Privacy Policy correspond to the terms used in the GDPR and the Law of the Republic of Lithuania on Legal Protection of Personal Data.
1.5. By using the Company’s services and/or browsing the Company’s website, you agree to the processing of your personal data in accordance with this Privacy Policy.
1.6. The Company may periodically amend this Privacy Policy taking into account changes in the GDPR or other legal acts, the scope of services provided by the Company and other circumstances.

2. Main principles of personal data processing
2.1. When collecting and processing personal data entrusted to the Company, the Company adheres to the following principles:
2.1.1. personal data are processed lawfully and fairly;
2.1.2. personal data are collected for specified, explicit and legitimate purposes and are not further processed in a manner incompatible with those purposes;
2.1.3. personal data are adequate, relevant and limited to what is necessary;
2.1.4. personal data are accurate and, where necessary, kept up to date;
2.1.5. personal data are kept in a form which permits identification of data subjects for no longer than necessary;
2.1.6. personal data are processed in a manner that ensures appropriate security.

3. Processing of personal data
3.1. You ensure that the personal data provided to the Company are accurate and correct and that you do not provide personal data of third parties.
3.2. The Company operates as a dental clinic. You have the right to contact the Company by e-mail [email protected]
or at its registered office address and obtain information on the processing of your personal data.
3.3. The Company processes personal data for the following purposes:
3.3.1. provision of dental services, registration for visits and service provision;
3.3.2. video surveillance for property and security purposes;
3.3.3. recruitment;
3.3.4. marketing.
3.4. Upon receiving your consent, personal data may also be processed for other purposes.
3.5. The Company uses cookies on its website and may collect information about visitor numbers, user actions on the website and geographical location.
3.6. For service provision purposes, the following data may be processed: name, surname, personal identification number, date of birth, e-mail address, phone number, passport or identity card number, residential address.
3.7. For video surveillance purposes: image of the recorded person.
3.8. For recruitment purposes: name, surname, personal identification number, date of birth, contact details, identity document data, address, education and work experience.
3.9. For marketing purposes: name, surname, e-mail, phone number, browsing behavior and geographical location.
3.10. Personal data are stored for the period required by law or no longer than 2 years.

4. Video surveillance
4.1. Video surveillance is carried out for the protection of property and persons.
4.2. Surveillance is carried out in premises with dental chairs, administrator’s workplace, corridors and parking areas.
4.3. Video recordings are stored for up to 1 month unless longer storage is required.
4.4. The purpose of cameras is security, not monitoring clients.

5. Rights of data subjects
5.1. You have the right to be informed, access, withdraw consent, rectify, erase, restrict processing, data portability, object and lodge a complaint.
5.2. Requests are examined within 1 month.

6. Data security
6.1. The Company implements appropriate technical and organizational measures.
6.2. Employees must comply with legal requirements.
6.3. Data breaches are reported within 72 hours.
6.4. Data subjects are informed when risks arise.

7. Contact information
UAB SDC klinika
Company code 304989582
Kalvarijų g. 128A-2, LT-08210 Vilnius
Phone +370 696 66247
E-mail [email protected]