Gloss & Floss Dental Care GDPR policy
The Gloss & Floss Dental Care GDPR policy explains how we protect your personal data and uphold your privacy in line with the General Data Protection Regulation (GDPR) and the Swedish Patient Data Act. Our commitment to confidentiality and ethical standards ensures that every step of your treatment at our clinic in Stockholm follows strict data-protection rules.
Why the Gloss & Floss Dental Care GDPR Policy Matters
Protecting patient privacy is central to our mission at Gloss & Floss Dental Care. Accurate information allows us to deliver safe, high-quality dental care, monitor outcomes, and meet all statutory healthcare obligations. Typical data include your medical history, diagnostic findings, treatment details, and the names of clinicians responsible for each entry.
What Personal Data We Process
- Patient record data: identity, medical and dental information, radiographs, diagnoses, and clinical notes.
- Administrative data: appointment details, invoices, insurance, and payment information.
- Communication data: messages or emails you exchange with Gloss & Floss Dental Care.
- Website and booking data: name, email, and phone number collected when you book online or by phone.
Legal Bases for Processing
- Legal obligation: to maintain accurate patient records as required by Swedish law.
- Performance of a care contract: to plan, deliver, and document your dental treatments.
- Consent: for optional communications where consent is required; you may withdraw consent at any time.
- Legitimate interest: for essential communication such as appointment reminders and website security. We never use patient data for marketing.
How We Protect Your Data
All information covered by the Gloss & Floss Dental Care GDPR policy is stored in encrypted electronic systems with strict access controls. Only authorised clinical or administrative personnel can access patient records. Our IT partners act under written agreements and cannot use data for any purpose other than that specified. Whenever possible, data are stored within the EU/EEA; if transferred elsewhere, GDPR safeguards such as Standard Contractual Clauses apply.
Retention Periods
According to Swedish law, patient records must be retained for at least ten (10) years after the last entry. After the retention period expires, records are permanently deleted or anonymised in full compliance with GDPR.
Sharing and Disclosures
Your information remains confidential. We disclose data only when legally required—such as to the Swedish Social Insurance Agency—or with your explicit consent. We do not sell or otherwise distribute personal information to third parties.
Your Rights as a Patient
- Access: Request a copy of your personal data.
- Correction: Ask us to correct or update inaccurate information.
- Erasure or restriction: In special cases, apply via IVO for removal or restriction of data.
- Log extract: Obtain a record of who has accessed your electronic journal.
- Complaint: Contact the Swedish Authority for Privacy Protection (IMY) if you believe processing is unlawful.
Contact Information
For questions about the Gloss & Floss Dental Care GDPR policy, email our Data Protection Officer at [email protected]. You can also visit the IMY website or the European Commission’s GDPR portal for general information about your rights.
Updates
We review and update the Gloss & Floss Dental Care GDPR policy whenever legislation or our internal procedures change. Last updated: .
