Privacy Policy

SmileDent, operated by Dr. Monica Vodenicharska, located at g.k. Banishora, ul. Karlovo 7, Sofia 1233, Bulgaria, is the data controller for your personal information.

Contact: +359 895 416 939

Patient Information:

• Full name
• Personal identification number (EGN)
• Contact information (phone, email, address)
• Medical and dental records
• Dental scans and X-rays
• Treatment history

Website Usage Data:

• Anonymous analytics data via Google Analytics
• Authentication tokens for secure portal access

We process your personal data based on:

• Consent: For processing medical records and providing dental services
• Contract: To provide dental treatment services
• Legal obligation: To maintain medical records as required by Bulgarian law
• Legitimate interests: To improve our services and ensure website security

We retain your personal data for:

• Medical records: 10 years as required by Bulgarian healthcare regulations
• Financial records: 5 years for tax and accounting purposes
• Website analytics: Anonymous data retained for up to 2 years

Under GDPR, you have the following rights:

• Right to access: Request a copy of your personal data
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your data (subject to legal retention requirements)
• Right to data portability: Receive your data in a machine-readable format
• Right to object: Object to certain types of processing
• Right to withdraw consent: Withdraw consent at any time

To exercise these rights, please contact us at: +359 895 416 939

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encrypted data transmission (HTTPS)
• Secure authentication for portal access
• Role-based access controls
• Regular security audits
• Secure cloud storage (Firebase)

We use the following third-party services:

• Firebase (Google): For authentication, database, and file storage
• Google Analytics: For anonymous website usage analytics

These services have their own privacy policies and are GDPR compliant.

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date.

Last updated: 8/19/2025