Patient data declaration

This declaration supplements the Terms and Conditions and applies to doctors and clinics sending work through Dent Lab Pro.

It is deliberately short. It asks nothing beyond what the law already requires of you — it only confirms, in writing, that you know what you are entering into the platform.

1. Why it exists

When you create a case, you enter data about a patient: their name, the teeth being treated, sometimes intraoral photographs or 3D scans. This is health data — a special category, given additional protection by Article 9 GDPR and by Law no. 133/2011.

We do not decide what you enter. We cannot verify that you have the necessary legal basis, nor is that verification ours to make: the patient is yours, and so is the relationship with them.

This declaration makes clear who is responsible for what.

2. What you confirm

By accepting this declaration you confirm that:

2.1. You have a legal basis for processing the patient data you enter, including the additional condition required by Article 9(2) GDPR for health data.

2.2. You have informed the patient as required by Article 13 GDPR: who you are, for what purpose you process the data, who you share it with — including the dental laboratory and the platform serving it — and what rights they have.

2.3. You enter only the data necessary to carry out the work. Concretely: as much as the laboratory needs to identify the case and execute it correctly, not the patient's medical history.

2.4. You do not use free-text fields as a medical record. The "patient" field serves to identify the case. Comments serve technical instructions. Neither is intended for diagnoses, comorbidities, or other information unrelated to the work.

3. Who is who

You are the controller of the patient's data. You decide what is entered and why.

The laboratory is the controller of its own records, built from what you send it.

We are the processor. We host and process the data on your instructions and the laboratory's, not for our own purposes.

4. Patient requests

If a patient asks you for access to their data, its rectification or its erasure, the request is addressed to you — they have no account with us and usually do not know we exist.

The laboratory has a tool that can remove a patient's data from a case. If you need this, ask the laboratory you work with.

We also provide a template patient notice that you can adapt. The template is a help, not a transfer of responsibility: the obligation to deliver it remains yours.

5. What happens if the declaration is not honoured

We do not monitor the content of your fields and have no way to. But if we learn that the platform is being used for data without a legal basis, we may suspend the account under the Terms.

6. Contact

Questions about this declaration: [EMAIL PROTECȚIA DATELOR].