Skip to content
Cabinet dentaire Dr. Strukan

Personal data

Privacy policy

Document to be completed

The content below is an outline following the structure the GDPR expects. It must be completed by the practice and approved by a lawyer before going live.

What this site does today

The following describes how this site actually works technically, and can be verified:

  • This site sets no cookies for visitors. The only cookies are the sign-in and preview cookies of practice staff using the admin area.
  • No analytics, advertising or tracking tool is installed.
  • Fonts are served from this site’s own server: no request is made to a third-party service to display them.
  • The Google Maps map loads only after you explicitly click. Until you do, nothing is sent to Google.
  • The contact form transmits only what you type into it: name, email address and message.
  • The medical questionnaire sends your answers to this site’s server, where they are stored as a PDF that only authorised practice staff can open. They are not passed to any other service, and the notice the practice receives when a questionnaire arrives contains neither your name nor your answers.
  • The Doctena booking calendar appears only on the appointment page, which you reach by choosing to book; no other page sends anything to Doctena. The Doctena recommendations and reviews shown elsewhere are fetched by this site’s server, not by your browser. The same goes for the next free appointments shown.
  • If your browser is set to a different language from the page, the site may offer you that language. That you closed the offer or chose a language is remembered in your browser (local storage, not a cookie) and is never sent to the server.

Data controller

Full identity and contact details of the data controller, and where applicable of the data protection officer — to be completed by the practice.

Purposes and legal bases

Purposes of processing (contact enquiries, appointment management, patient records) and the legal basis for each — to be completed and approved.

Data processed

Categories of data collected through the site, and how these differ from the health data processed in the patient record at the practice — to be completed.

Retention periods

Applicable retention periods, including the statutory retention periods for patient records in Luxembourg — to be completed.

Recipients and processors

Hosting provider, mail provider and any other processor, with the applicable safeguards — to be completed at launch.

Your rights

Rights of access, rectification, erasure, restriction, objection and portability, how to exercise them, and the right to lodge a complaint with the Commission nationale pour la protection des données (CNPD) — to be completed.

Cookies

This site sets no cookies for visitors. Practice staff who sign in to the admin area receive a strictly necessary sign-in cookie. If cookies are introduced for visitors, this section must describe their purpose and duration and how consent is obtained.

CallBook