Legal

Privacy & Cookie Policy

Who We Are

This Privacy and Cookie Policy explains how Dental Marbella collects, uses and protects your personal data when you visit this website, contact us, or become a patient. The data controller responsible for your personal data is: Dental Marbella - Dr. Sorin Cristea Calle Velazquez 1, 1 - A3, Residencial Casablanca, 29602 Marbella, Malaga, Spain Email: info@dentalmarbella.com CIF/NIF: X2515138L Dental board registration: Colegiado no. 29001812, Ilustre Colegio Oficial de Dentistas de Malaga We have not appointed a Data Protection Officer, as one is not required for a practice of this size and type. If you have any question about how we handle your personal data, you can write to us at info@dentalmarbella.com.

What Personal Data We Collect

We collect personal data in a few different ways, depending on how you interact with us. When you use our contact or enquiry form, we collect the information you enter, which may include your name, email address, phone number, and the message you write, including any details you choose to share about your dental concern. When you message us on WhatsApp, we collect your phone number and the content of the conversation, including any photos or information you send us. If you become a patient or share information about a dental or medical condition, whether by form, WhatsApp, email, or in person, this is *health data*. Under Article 9 of the GDPR, health data is a special category of personal data that receives extra legal protection. We only collect and use it with your clear, explicit consent or where the law allows it for healthcare purposes. When you browse our website, we also collect limited analytics data through Google Analytics 4, but only once you have given consent through our cookie banner. This may include pages visited, approximate location (country or city level), device and browser type, and how you arrived at the site. This data does not identify you by name.

Why We Use Your Data and Our Legal Basis

We use your personal data for the following purposes, each with its own legal basis under the GDPR: To respond to your enquiry and answer your questions, based on your consent when you submit the form or message us, and on the steps needed before entering into a care relationship with you. To provide dental treatment and manage your care as a patient, based on your explicit consent to the processing of health data (Article 9.2.a GDPR) and, where applicable, on the performance of the care relationship and our professional obligations as healthcare providers (Article 9.2.h GDPR). To understand how visitors use our website and improve it, based on your consent given through the cookie banner. Analytics cookies are not active until you accept them. To comply with legal obligations, such as keeping clinical records for the periods required by Spanish health law. You can withdraw your consent at any time. This does not affect the lawfulness of anything we did with your data before you withdrew it.

Who We Share It With

We do not sell your personal data. We share it only with the service providers who help us run the website and communicate with you, known as data processors: Web3Forms, which delivers the messages you send through our contact form to our inbox. Google Analytics (Google Ireland Limited / Google LLC), which processes anonymised, consent-based analytics data about how visitors use the site. Vercel Inc., our website hosting provider, which stores and serves the website itself. Microsoft Clarity (Microsoft Corporation), which provides consent-based analytics such as heatmaps and anonymised session recordings that help us understand how visitors use the site. Clarity masks the text you type, so form fields and personal details are not captured. Some of these providers may process data on servers located outside the European Economic Area (EEA), including in the United States. When this happens, we rely on the safeguards required by GDPR, such as Standard Contractual Clauses approved by the European Commission or the providers' own compliance frameworks for international transfers. We do not share your data with third parties for marketing or advertising purposes.

How Long We Keep Your Data

We keep personal data only for as long as necessary for the purpose it was collected for. Enquiry form and WhatsApp messages from people who do not go on to become patients are kept only while we deal with your enquiry and for a short period afterwards, in case you contact us again, and are then deleted. Clinical and patient records are kept for the minimum period required under Spanish healthcare law (Ley 41/2002), which sets a minimum retention period of five years from the end of each course of treatment. Some records may need to be kept longer where the law requires it. Analytics data collected through Google Analytics is subject to a limited retention period rather than being stored indefinitely.

Your Rights

Under the GDPR and the LOPDGDD, you have the right to: Access the personal data we hold about you. Rectify inaccurate or incomplete data. Request erasure of your data, where legally possible (note that clinical records must be kept for the legal retention period even after this request). Restrict how we use your data in certain circumstances. Object to certain processing, including processing based on legitimate interest. Data portability, meaning you can ask us to provide your data in a structured, commonly used format. Withdraw your consent at any time, without affecting processing carried out before the withdrawal. To exercise any of these rights, write to us at info@dentalmarbella.com. We will respond within the timeframes required by law. If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD) at www.aepd.es.

Security

We take reasonable technical and organisational measures to protect your personal data against loss, misuse, unauthorised access, and disclosure. This includes using reputable service providers, restricting access to patient information to staff who need it to do their job, and using secure connections (HTTPS) on our website. No method of transmission over the internet or electronic storage is completely secure. While we work to protect your information, we cannot guarantee absolute security.

Cookies and Similar Technologies

Our website uses cookies, which are small text files placed on your device when you visit. Essential cookies are necessary for the website to function correctly, such as remembering your cookie consent choice. These do not require your consent and cannot be switched off. Analytics cookies, from Google Analytics 4 and Microsoft Clarity, help us understand how visitors use the site and how the pages perform. These are *not* active when you first arrive. Our cookie banner asks for your consent before any analytics cookie is set, in line with AEPD guidance and GDPR consent requirements. If you decline, analytics cookies stay off. We do not use advertising or marketing cookies. You can change your mind at any time by adjusting your cookie choice through the consent banner or your browser settings. Most browsers also let you delete existing cookies and block new ones, though this may affect how parts of the website work. For more information on managing cookies in your browser, check your browser's help section.

Children's Data

Our website and services are intended for adults capable of making their own healthcare decisions. We do not knowingly collect personal data from children through the website's contact form or analytics. Where treatment involves a minor, information is provided and consent given by a parent or legal guardian on the minor's behalf, in line with standard clinical practice and Spanish law.

Changes to This Policy

We may update this Privacy and Cookie Policy from time to time, for example to reflect changes in our services, the tools we use, or the law. When we make significant changes, we will update this page. Last updated: 20 August 2026