Personal Data Processing Policy

Revision dated 16 September 2026. Data controller: Denta Plus Limited Liability Company (Denta Plus LLC), INN 5957015677, OGRN 1115957000466.

1. General Provisions

This Policy describes how Denta Plus LLC processes and protects personal data of patients, their legal representatives, employees, counterparties, and website visitors. Processing is carried out in accordance with Federal Law No. 152-FZ of 27 July 2006 “On Personal Data”, Federal Law No. 323-FZ of 21 November 2011 “On the Fundamentals of Health Protection of Citizens in the Russian Federation”, and other applicable legal requirements.

Registered address: Apt. 51, 31B Kommunisticheskaya St., Chernushka, Chernushinsky District, Perm Krai, 617830, Russia.
Place of medical care: 1st floor, 113 Lenina St., Chernushka, Perm Krai, 617830, Russia.
Personal-data contact details: +7 (34261) 3-04-43, dentaplus159@yandex.ru.

2. Data Processed and Purposes

Depending on the purpose, Denta Plus LLC may process surname, given name, patronymic, date of birth, sex, address, telephone number, email address (if provided), appointment, contract and payment information, as well as health information, examination results, diagnosis, treatment information, and other medical-record data.

Purposes: appointment booking and communication with the patient; conclusion and performance of a paid medical services agreement; provision of dental care; maintenance, accounting and storage of medical records; payments and issuance of documents; handling requests; and performance of legal duties of the medical organisation.

The clinic does not participate in compulsory or voluntary medical insurance programmes, so OMS/DMS policy details and insurer data are not routinely collected. The clinic does not make copies or scans of patients’ passports.

3. How Data Are Actually Processed

• The main medical records are kept on paper and stored in the clinic archive; only staff have access within the scope of their duties.
• The clinic does not use a separate medical information system or electronic patient database.
• Email dentaplus159@yandex.ru is accessible only to clinic staff. Patients sometimes send images or other medical materials to this address on their own initiative.
• The official VK group is used mainly for appointments. If a patient sends medical results in messages, access is limited to the dentist who needs them to provide care.
• Accounting is outsourced; however, the external accountant receives only aggregate/final amounts for accounting and tax purposes, without patients’ personal or medical data.
• Patients’ personal and medical data are not transferred to dental laboratories.
• There is currently no active video-surveillance system in the clinic. If it is restored, the relevant processes and this Policy will be reviewed before video recordings are processed.

4. Legal Bases

Processing is carried out on the basis of law, the agreement with the patient, the need to provide medical care and fulfil the medical organisation’s legal duties, and, where required, a separate consent of the data subject. Consent to personal-data processing is executed separately from the agreement and other documents signed by the patient.

5. Health Data and Medical Confidentiality

Health information is a special category of personal data. Information about seeking medical care, health status, diagnosis, examinations and treatment is protected by medical confidentiality. Access is granted only to the extent necessary for work, and disclosure is permitted with the patient’s consent or in cases expressly provided by law.

6. Website and External Services

The current website has no online booking form or other form in which a visitor enters their name, telephone number, email address, or medical information. The site does not use Yandex Metrica or Google Analytics.

For the accessibility mode, the browser may store interface settings in local storage and technical navigation-session data for correct return between pages. The clinic does not use this information to identify a patient.

A Yandex Map is embedded on the home page. When it loads, the user’s browser connects to Yandex services, which may receive technical connection data in accordance with their own data-processing rules.

7. Personal Data Transfers

Denta Plus LLC does not transfer patient data to third parties for advertising or other purposes unrelated to treatment. Data may be provided to government bodies, courts, and other authorised persons only in the cases and to the extent provided by law. If the actual data-transfer arrangements change, this Policy will be updated.

8. Storage and Protection

Personal data are stored no longer than necessary for the purposes of processing, except where mandatory retention periods are established by law for medical, contractual, accounting, tax, or other records. Paper medical records are stored in the clinic archive with restricted access.

The clinic takes organisational and technical measures to restrict access and prevent unlawful use, loss, alteration, or disclosure of personal data.

9. Patient Rights and Withdrawal of Consent

A data subject may obtain information about processing of their data, request correction, blocking or destruction in cases provided by law, and withdraw consent to personal-data processing.

A request or withdrawal of consent may be sent in writing to the registered address of Denta Plus LLC or by email to dentaplus159@yandex.ru. To process a request, the clinic may verify that it comes from the data subject or their legal representative.

Withdrawal of consent does not require destruction of data where further processing or storage is necessary on another legal basis, including maintenance and retention of medical records.

10. Final Provisions

This Policy is publicly available on the Denta Plus LLC website. It is reviewed when legislation, data-processing methods, the website, or the clinic’s actual processes change.