At Gloss & Floss Dental Clinic in Stockholm, we fully comply with the General Data Protection Regulation (GDPR) and Swedish Patient Data Act to safeguard your privacy. This page explains why a dental clinic needs personal data, how we process it, how long we keep it, and what rights you have.

GDPR dental clinic Stockholm – Why we collect personal data

First, accurate personal information enables us to deliver safe, high-quality dental care, monitor treatment outcomes, and fulfill statutory reporting requirements. Typical data include medical history, diagnosis, treatments performed or planned, and who entered each note.

How We Process Your Data

All data are stored in secure electronic patient records. Moreover, we collect your name, email, and phone number when you book an appointment online or by phone. Processing is based on our legal obligation as a healthcare provider and the care agreement with you.

Retention Periods

Under Swedish law, journal documents must be retained for at least ten (10) years after the last entry. After statutory periods expire, data are erased or anonymised in accordance with GDPR.

Who Can Access Your Data

Your health information is strictly confidential. We only disclose it when required by law (e.g., to the Swedish Social Insurance Agency) or with your explicit consent. Trusted service providers may handle data on our behalf under written agreements; they may not use it for any other purpose. Consequently, only authorised staff can view your record.

Your Rights as a Patient

• Access: Request a copy of your patient record at any time.
• Correction: Ask to correct inaccurate information or add your own statement.
• Deletion (erasure): Apply to the Swedish Health and Social Care Inspectorate (IVO) to have data removed in exceptional cases.
• Log extract: Obtain a list of those who have viewed your electronic record.

Contact & Further Information

Finally, if you have questions about data protection, please contact our Data Protection Officer via [email protected]. For general GDPR guidance, visit the European Commission’s GDPR portal.