Privacy Policy

    Last updated: January 2025

    1. Introduction

    Verus Dental Tourism ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Albanian data protection laws.

    2. Data Controller

    The data controller responsible for your personal data is Verus Dental Tourism, located in Tirana, Albania. For any privacy-related inquiries, contact us at team@verus.care.

    3. Personal Data We Collect

    We may collect the following categories of personal data:

    • Identity Data: Name, title, date of birth
    • Contact Data: Email address, phone number, address
    • Health Data: Dental records, X-rays, medical history relevant to dental treatment
    • Technical Data: IP address, browser type, device information
    • Communication Data: Records of correspondence with us

    4. Legal Basis for Processing

    We process your personal data based on:

    • Consent: For marketing communications and processing of health data
    • Contract: To provide dental services you have requested
    • Legal Obligation: To comply with applicable laws and regulations
    • Legitimate Interest: For business operations and service improvement

    5. How We Use Your Data

    We use your personal data to:

    • Provide dental treatment quotes and consultations
    • Coordinate travel arrangements and accommodations
    • Deliver and manage dental treatments
    • Communicate about your treatment and aftercare
    • Send marketing communications (with your consent)
    • Improve our services and website

    6. Data Sharing

    We may share your personal data with: our dental clinic partners, travel and accommodation providers, payment processors, and legal/regulatory authorities when required. We ensure all third parties respect your data and comply with applicable laws.

    7. International Transfers

    Your data may be transferred to and processed in Albania. We ensure appropriate safeguards are in place for any international data transfers in accordance with GDPR requirements.

    8. Data Retention

    We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, and reporting requirements. Medical records are retained for a minimum of 10 years as required by law.

    9. Your Rights

    Under GDPR, you have the right to:

    • Access: Request a copy of your personal data
    • Rectification: Request correction of inaccurate data
    • Erasure: Request deletion of your data ("right to be forgotten")
    • Restriction: Request limitation of processing
    • Portability: Receive your data in a structured, machine-readable format
    • Object: Object to processing based on legitimate interests
    • Withdraw Consent: Withdraw consent at any time where processing is based on consent

    10. Cookies

    We use cookies to enhance your experience on our website. You can manage cookie preferences through your browser settings. Essential cookies are necessary for the website to function properly.

    11. Security

    We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes encryption, secure servers, and access controls.

    12. Contact & Complaints

    For any privacy-related questions or to exercise your rights, contact us at team@verus.care. You also have the right to lodge a complaint with your local data protection authority.

    13. Changes to This Policy

    We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on our website and updating the "Last updated" date.