Privacy Policy

Data Controller

Incilex Dental Clinic is the controller of your personal data under the General Data Protection Regulation (GDPR).

Data We Collect

We collect personal data and health information necessary for medical records, including name, surname, ID/passport number, address, phone, email, health data and treatments performed.

Purpose of Processing

Data is processed to manage appointments, medical records, billing, sending reminders and communications related to dental services.

Legal Basis

The processing of health data is based on patient consent and the necessity for the provision of healthcare services.

Patient Rights

• Right of access: To know what data we have about you.
• Right of rectification: To correct inaccurate data.
• Right to erasure: To have your data deleted (right to be forgotten).
• Right to data portability: To receive your data in a structured format.
• Right to object: To object to processing in certain cases.

Data Retention

We retain data for as long as necessary to fulfill the purposes described and according to legal obligations. Medical records are retained according to applicable healthcare legislation.

Data Sharing

We do not share personal data with third parties except when necessary for service provision (dental laboratories, insurance companies) or by legal requirement.

Security

We implement technical and organizational measures to protect your personal data against unauthorized access, loss or alteration.

Data Protection Officer Contact

To exercise your rights or make privacy inquiries, contact our Data Protection Officer at dpo@incilex.com.

Supervisory Authority

If you consider that the processing of your data does not comply with regulations, you can file a complaint with the Spanish Data Protection Agency (AEPD).

Last updated: April 2026