This page describes what personal data the Grande Dental website collects, why it collects it, who it is passed to and what rights you have. It covers your visit to the site and the enquiries you send through it.
1. Who processes your data
The controller of your personal data is the Grande Dental dental clinic.
Practice address: 161 Slivnitsa Blvd, Varna
Phone: +359 877 07 09 79
Email: [email protected]
For any question about your personal data you can write to us or call us at the contacts above.
2. What data we collect
The site has two forms, and they are the only place where you give us data:
• The appointment form - name, phone, email and the date you would like.
• The contact form - name, phone, email and the text of your message.
The message is free text. If you describe a complaint, a symptom or a treatment in it, that is information about your health. Please do not send medical records or details of your condition through the site - call us or come in for an examination instead.
Beyond that, on every visit the site receives the technical data every website receives: your IP address, the kind of browser you use and which page you opened.
3. On what basis
• Enquiries through the forms are processed so that we can reply and arrange an appointment - steps taken at your request before a contract for dental services (Article 6(1)(b) of the Regulation).
• If you describe a health complaint in your message, we process that information to direct you to suitable treatment - Article 9(2)(h) of the Regulation allows this for the purposes of health care, under the obligation of professional secrecy.
• Analytics and advertising cookies are set only with your consent (Article 6(1)(a)), which you can withdraw at any time.
• The essential cookies and the protection of the forms against abuse rest on our legitimate interest in a site that works and is not the target of automated attacks (Article 6(1)(f)).
We do not ask for your consent to the enquiry itself. If we required you to tick "I agree" before you could send the form, that would not be freely given consent - and it is not needed, because the basis is a different one.
4. Who receives the data
• Resend - the provider through which the mail from the forms is sent.
• Hetzner - the server the site runs on, in the European Union.
• Cloudflare - the service in front of the site, through which every request passes.
• Google - for reCAPTCHA (protection of the forms), for Google Maps if you have allowed external content, and for Google Analytics / Google Ads if you have given consent.
• Soro and Supabase - the platform and storage the blog's content is loaded from.
Each of them processes the data only on our instructions and for the stated purpose. We do not sell data and do not pass it to third parties for their own purposes.
5. Transfers outside the European Union
Google, Cloudflare and Resend are companies based in the USA and part of the processing takes place there. The transfer rests on the safeguards the Regulation provides for - standard contractual clauses and/or the EU-US Data Privacy Framework. The server the site runs on and the clinic's mail stay in the European Union.
6. How long we keep the data
• Enquiries from the forms are kept for up to 12 months and then deleted. If you become our patient, the data about your treatment is kept under the rules of health legislation, not under this policy.
• The record of your cookie consent is kept as proof that you gave it, for as long as it can matter.
• The cookies themselves have their own lifetimes - see the cookie policy.
7. How we protect it
The site works only over a secure connection (HTTPS), sessions are stored encrypted, and both forms are protected against automated submissions. Only the clinic's team has access to the enquiries. Nobody can promise complete security - but we collect no more through the site than is needed, precisely because that is the most reliable protection.
8. Children's data
The forms on the site are meant for adults. When an appointment is booked for a child, we expect a parent or guardian to fill in the form with their own contact details.
9. Automated decisions
We make no automated decisions about you and do no profiling. Every enquiry is read by a person.
10. Your rights
You have the right to request access to your data, correction of an inaccuracy, erasure, restriction of processing, portability, and to object to processing based on legitimate interest. Where we process on the basis of consent, you can withdraw it at any time without affecting the lawfulness of the processing until then.
To exercise any of these rights, write to us at [email protected] or call +359 877 07 09 79. We will ask to make sure who you are before providing any data. We reply within one month.
11. Complaints
If you believe we are processing your data unlawfully, you can lodge a complaint with the Bulgarian Commission for Personal Data Protection - 2 Prof. Tsvetan Lazarov Blvd, Sofia 1592, kzld.bg.
12. Changes
When we change something material in this policy we will update the date below, and if the change concerns cookies we will ask you again.
Cookies
Exactly what is stored in your browser and how to change your choice - in the Cookie policy.
Last revised: 15 September 2026.