Privacy Policy

Last updated: 21/04/2026

1. Data Controller

Translations Place S.R.L.
VAT Code: 53627010
No. Registrar of Companies: J2026006217000
Address: Sat Gorunesti Com. Slatioara, Str Principala, Nr.54, Gorunesti (Slatioara), Valcea, Romania

Email: contact@europeandentallab.com
Phone: +40 728 887 146
Website: https://europeandentallab.com

2. Nature of Our Services

Translations Place S.R.L. operates a digital dental laboratory providing:

• CAD/CAM dental restorations
• custom dental devices
• digital design services
• manufacturing support for dental professionals

We act primarily as a data processor for dental clinics, dentists, and partners, who act as data controllers for patient data.

3. Categories of Personal Data

3.1 Business / Contact Data

• name, company, address
• email, phone
• billing and shipping data
• VAT / financial details

3.2 Technical & Website Data

• IP address
• browser/device data
• cookies and tracking identifiers
• analytics and usage behavior

3.3 Professional Dental Case Data

We process dental case files submitted by professionals, including:

• intraoral scans (STL, OBJ, PLY files)
• 3D models and CAD/CAM files
• dental prescriptions
• occlusion data
• bite registrations
• shade information
• treatment instructions

3.4 Patient-Related Data

We may process personal data concerning health under GDPR Article 9, including:

• dental condition information
• oral anatomy data
• intraoral images
• radiographic data, if provided
• digital impressions
• prosthetic design data

This is considered special category sensitive data under GDPR.

4. Roles Under GDPR

4.1 When We Act as Data Processor

In most cases:

• Dental clinic / dentist = Data Controller
• Translations Place SRL = Data Processor

We process patient data only on documented instructions from the controller.

4.2 Controller Responsibilities

The dental clinic/dentist must ensure:

• lawful basis for processing, such as treatment
• patient informed consent, where required
• data minimization
• lawful transfer to us

4.3 Data Processing Agreement (DPA)

We may enter into a Data Processing Agreement (DPA) with clients where required.

5. Legal Basis for Processing

5.1 For Business Data

• contract performance
• legal obligations
• legitimate interests

5.2 For Patient Data

We rely on:

• Article 9(2)(h) GDPR, healthcare purposes
• Article 9(2)(g), substantial public interest, where applicable
• instructions from the controller

6. Purpose of Processing

We process data to:

• manufacture custom dental devices
• design prosthetic solutions
• fulfill orders
• ensure traceability and compliance for medical devices
• provide support and communication
• comply with MDR / regulatory requirements
• improve services
• manage business relationships

7. Medical Device Compliance (EU MDR)

As a dental laboratory, we may be subject to EU Medical Device Regulation (MDR) 2017/745.

This requires:

• traceability of devices
• retention of production data
• documentation of materials and processes
• possible retention of case-related data for regulatory periods

8. Data Minimization & Pseudonymization

We strongly recommend that clients:

• avoid sending full patient names
• use case IDs or pseudonyms
• limit data to what is strictly necessary

We implement:

• access controls
• separation of datasets
• internal minimization policies

9. Data Retention

We retain data based on:

• contractual obligations
• MDR traceability requirements
• legal retention periods
• defense of legal claims

Patient-related data may be retained longer where required for:

• medical device traceability
• regulatory compliance

10. Cookies, Tracking & Google Ads (EEA Compliance)

We use:

• cookies
• tracking pixels
• Google technologies

10.1 Consent Requirement

For users in the EEA, UK and Switzerland, we collect and use cookies and identifiers only based on consent, except strictly necessary ones.

10.2 Google Requirements

We comply with Google Ads EU User Consent Policy, including obtaining consent before:

• storing cookies
• accessing device identifiers

We also inform users about:

• data collection
• data sharing with Google
• enabling consent signals

10.3 Consent Mode

We may implement Google Consent Mode, which adjusts tracking behavior based on user consent.

10.4 Types of Cookies

• Necessary
• Analytics
• Marketing
• Functional

11. Data Sharing

We may share data with:

• IT and hosting providers
• cloud storage providers
• CAD/CAM software providers
• logistics and couriers
• payment processors
• accountants and legal advisors
• regulatory authorities
• Google and analytics providers, with consent

12. International Transfers

Where data is transferred outside the EEA, we use safeguards such as:

• Standard Contractual Clauses (SCCs)
• secure processing agreements

13. Security Measures

We implement:

• encryption, where applicable
• secure file transfer
• restricted access
• authentication controls
• backup systems
• monitoring

14. Data Subject Rights

Individuals may request:

• access
• rectification
• deletion
• restriction
• portability
• objection

Requests can be sent to: contact@europeandentallab.com

15. Data Breach Handling

In case of a data breach:

• we notify controllers/clients without undue delay
• we support GDPR compliance obligations
• we notify authorities where required

16. Automated Decision-Making

We do not use:

• automated decision-making
• profiling with legal effects

17. Children

Our services are not intended for children.

18. Third Parties

We are not responsible for third-party privacy practices.

19. Updates

We may update this policy periodically.

20. Contact

Translations Place S.R.L.
Email: contact@europeandentallab.com
Phone: +40 728 887 146