1. Data controller
For the patient data clinics enter into DentalPlan, the clinic is the data controller; DentalPlan acts as a data processor on the clinic’s instructions (see section 9).
2. Personal data we process
- Demo / contact form: name, clinic name, e-mail, phone, country / city, your message, the language and page the form was sent from, the date sent and your consent choices.
- Free trial (sign-up) form: name, clinic name, e-mail, phone, country / city, currency, your password (only an irreversible hash of it is stored) and your consent choices. Sign-ups whose e-mail is not confirmed expire after 24 hours.
- Panel users (clinic staff): name, e-mail, role and permissions, sign-in records and a log of actions taken in the panel (audit log).
- Technical data: IP address, browser and device information, request time (server logs, for security and abuse prevention).
3. Purposes
- Replying to your demo request, presenting the product and sending an offer,
- Setting up and performing the subscription agreement, providing the service and support,
- Keeping accounts and systems secure, preventing automated (bot) submissions and abuse,
- Meeting legal obligations and requests of authorised public bodies,
- And, if you opted in, sending e-mails about product news and offers.
4. Legal grounds
Personal data is processed under KVKK article 5/2-c (necessary to conclude or perform a contract), 5/2-ç (legal obligation) and 5/2-f (legitimate interest, provided it does not harm your fundamental rights and freedoms).
Marketing e-mails are only sent with your explicit consent (KVKK 5/1) and your approval under Law No. 6563 on electronic commerce; you can withdraw it at any time.
5. How data is collected
Data is collected electronically through the forms on this website and the DentalPlan panel, entered by you or by your clinic.
6. Recipients
Personal data may be shared, only as far as needed for the purposes above, with providers we work with for hosting, e-mail delivery and technical support, and with authorised public bodies. Your data is never sold or shared for advertising.
Where a provider’s servers are located abroad, the transfer is made in line with KVKK article 9.
7. Retention
Demo requests are kept for at most 2 years after we reply, or deleted earlier on request. Customer accounts are kept for the term of the agreement and afterwards for the periods required by law. After that, data is deleted, destroyed or anonymised.
8. Your rights
Under KVKK article 11 you may apply to the data controller to:
- Learn whether your personal data is processed and request information about it,
- Learn the purpose of processing and whether it is used accordingly,
- Know the third parties in Turkey or abroad it is transferred to,
- Have incomplete or incorrect data corrected,
- Have it deleted or destroyed under the conditions of KVKK article 7,
- Have third parties it was transferred to notified of such corrections or deletions,
- Object to a result against you that arises solely from automated analysis,
- Claim compensation for damage caused by unlawful processing.
9. Patient data of clinics
Clinics enter their patients’ identity, contact and health data (treatment plans, tooth chart, X-rays and photos) into DentalPlan. This is special category personal data; the clinic is its data controller and is responsible for informing patients and obtaining any consent required.
DentalPlan processes this data only to provide the service, on the clinic’s instructions, and keeps every clinic’s data separate. Patients should first contact the clinic that treats them to exercise their rights.
10. How to apply
Send your request by e-mail to [email protected]. Requests are answered free of charge within 30 days at the latest.
11. Changes
This notice is updated when needed; the current version is always published on this page. When you send the demo form, the version you read is recorded.