Last updated: 21 January 2026

This Privacy Policy explains how VM Dent Ltd (“we”, “us”, “our”) collects, uses, stores and protects personal data in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Bulgarian legislation.

We respect the confidentiality of personal data and are committed to protecting it. This Privacy Policy describes what personal data we collect, for what purposes, how it is processed, and what rights you have as a data subject.

1. Data controller

VM Dent Ltd
Blagoevgrad, Bulgaria
Email: info@vmdent.com
Phone: +359 877 303 059

2. Purposes of processing personal data

We process personal data for the following purposes:

• Providing dental and healthcare services

• Diagnosing and treating patients

• Performing dental and medical procedures

• Maintaining medical and dental records

• Disease prevention, medical statistics and quality control

• Booking and managing appointments

• Responding to inquiries submitted via our website contact forms and communicating with patients via email, telephone, WhatsApp, Viber or similar communication channels;

• Issuing invoices and fulfilling accounting obligations

• Monitoring and improving treatment outcomes

• Ensuring security and safety through video surveillance on our premises

• Analysing website usage and measuring marketing effectiveness, where consent is given.

Legal basis for processing

We process personal data on the following legal grounds under GDPR, depending on the purpose of processing:

• Performance of a contract or taking steps at your request prior to entering into a contract (e.g. appointment booking, providing treatment, communicating about treatment);

• Compliance with a legal obligation (e.g. maintaining medical records, accounting and tax obligations);

• Protection of vital interests (e.g. emergency situations where processing is necessary to protect life or health);

• Legitimate interests pursued by us (e.g. ensuring security of our premises, preventing fraud/abuse, improving our services and website), unless such interests are overridden by your rights and freedoms;

• Consent, where required (e.g. analytics cookies, marketing/advertising cookies, and related tracking technologies).

Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

3. Categories of personal data processed

Depending on the purpose, we may process the following categories of personal data:

• Names

• Contact details (telephone number, email address)

• Identification data where legally required

• Medical and health-related data (such as diagnoses, treatment history, allergies, medications)

• Technical data and online identifiers (such as IP address and cookie identifiers), where consent is provided

Health-related data is processed only in accordance with applicable medical and data protection laws.

Children’s personal data

We may process personal data relating to minors only where this is necessary for providing dental healthcare services and in accordance with applicable law. Where consent is required, it is provided by the minor’s parent or legal guardian.

4. Disclosure of personal data to third parties

Personal data may be disclosed only where necessary and lawful, including to:

• Medical specialists, laboratories and healthcare partners

• Accounting and legal service providers

• IT service providers, website hosting and maintenance partners

• Public authorities (such as tax authorities, health authorities or courts), where required by law

Health-related personal data is treated as strictly confidential and is disclosed to third parties only where permitted by applicable healthcare legislation and only to the extent necessary. Such disclosure may occur in limited circumstances, including:

• continuation of treatment in another medical institution or by a healthcare specialist (e.g. referrals, consultations, laboratory work), where necessary for your care;

• protection of vital interests, where there is a serious threat to your health or the health or lives of others;

• public health and state health control measures, including prevention of epidemics and the spread of communicable diseases, where required by law;

• medical expertise and social security procedures, where required for official assessment purposes;

• medical statistics or scientific research, only where the data is anonymised or identifying elements have been removed where required;

• lawful requests from competent authorities, including health authorities and courts, where disclosure is required by law.

In all cases, we share only the minimum necessary data and ensure appropriate contractual, technical and organisational safeguards are in place to protect personal data.

5. Advertising, analytics and enhanced conversions

Our website uses services provided by Google (including Google Analytics, Google Ads, and Google Tag Manager) and Meta (including Meta Pixel and related services) to analyze website traffic and measure the effectiveness of advertising campaigns. Analytics and advertising cookies and tracking technologies are used only after you provide consent via our cookie banner.

Where you have provided consent for analytics and/or advertising cookies, these technologies may collect technical and online identifiers such as IP address, cookie identifiers and information about interactions with our website (for example page views, clicks, and form submissions). This helps us understand how our website is used and how our advertising performs.

When you submit your contact details through our forms and you have provided explicit consent for marketing/advertising cookies, we may use enhanced conversion tracking for advertising measurement. This involves hashing (pseudonymizing) limited data such as an email address or telephone number using industry-standard cryptographic methods (SHA-256) before it is shared with Google. The hashed data is used only for measurement and matching purposes and cannot be used by us to directly identify you.

Google and/or Meta may process certain data as independent controllers in accordance with their own privacy policies. Depending on the services used, data may be processed and stored on servers located outside the European Economic Area (EEA), in compliance with applicable data protection requirements and appropriate safeguards.

You may withdraw or change your consent at any time through the cookie settings on our website.

6. Cookies and similar technologies

We use cookies and similar technologies to ensure the proper functioning of the website and, with your consent, to analyze website traffic, personalize content, and measure the effectiveness of our advertising campaigns. Analytics and advertising cookies are used only after you provide consent via our cookie banner.

Cookies are small text files stored on your device when you visit our website. Some cookies are strictly necessary for the website to work, while others help us understand how the site is used and how our advertising performs.

We may use the following categories of cookies:

• Strictly necessary cookies – required for the website to function properly (for example, security, basic functionality, and saving certain preferences such as language). These cookies cannot be switched off.
• Analytics cookies – help us understand how visitors use our website (for example, which pages are visited and how users navigate). We use these cookies only after you provide consent.
• Advertising (marketing) cookies – help us measure the effectiveness of our marketing campaigns and improve the relevance of ads. These cookies are used only after you provide consent, and data may be shared with third parties such as Google.

You can manage or withdraw your consent at any time through our cookie settings. You can also delete or block cookies using your browser settings; however, blocking some cookies may affect the functionality of the website.

For more information about cookies, visit www.allaboutcookies.org.

For further information or to exercise your rights, you can contact us at any time at info@vmdent.com.

7. Data retention

Personal data is stored only for as long as necessary for the purposes for which it was collected or as required by law, including:

• up to 5 years after expiry of statutory limitation periods;
• up to 10 years for accounting records;
• up to 5 years for legal obligations toward public authorities;
• up to 30 days for video surveillance recordings.

8. Protection of your personal data

We apply appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, alteration or disclosure. These measures include access controls, secure storage, staff training and internal procedures aligned with GDPR requirements and best practices.

9. Transfers of personal data

Personal data collected through the website is primarily processed within the European Economic Area (EEA). However, where we use third-party providers such as Google and Meta, certain data (including online identifiers and cookie-related data) may be transferred and/or processed outside the EEA. In such cases, transfers are carried out in compliance with GDPR and are subject to appropriate safeguards, such as Standard Contractual Clauses (SCCs) and other measures required under applicable data protection law.

10. Rights of data subjects

You have the following rights under GDPR:

• Right to information and access
• Right to rectification
• Right to erasure (“right to be forgotten”)
• Right to restriction of processing
• Right to object to processing
• Right to data portability
• Right not to be subject to automated decision-making
• Right to lodge a complaint with a supervisory authority

You may exercise your rights at any time by contacting us at info@vmdent.com.

VM Dent Ltd does not carry out automated decision-making or profiling that produces legal effects or similarly significant effects on individuals.

11. Right to lodge a complaint

If you believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with the Personal Data Protection Commission or the competent court.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Any changes take effect upon publication on this page. We encourage you to review this page periodically.