Privacy policy — Enamel PRO

1. Who is responsible for what

For account data (users’ names and emails, clinic and billing details), Enamel PRO is the data controller.

For patient data that the clinic loads into the system, the clinic is the controller and Enamel PRO acts as processor, under the data processing agreement.

2. What data we process and why

Account data: to create and manage the account, verify the email, provide the service, arrange payment and communicate with the clinic.

Technical usage data (access and security logs): to protect the service and detect abuse.

We use no advertising cookies or tracking tools on this site. The app uses session cookies necessary to sign in and the language preference.

3. Basis and consent

We process account data to perform the service the clinic hires and, where applicable, with its free, prior, express and informed consent.

4. Where data is stored and transfers

Data is hosted on Amazon Web Services infrastructure in the Ireland region (eu-west-1). This involves an international data transfer, made with the safeguards required by Law No. 18.331.

5. Retention

We keep account data while the account is active and for as long as needed to meet legal obligations. Patient data is kept according to the clinic’s instructions and legal obligations to retain clinical records.

6. Security

We apply an encrypted connection (HTTPS), permissions by role, backups and access logging.

7. Your rights

You can exercise your rights of access, rectification, update, inclusion, deletion and objection by writing to the contact shown in the footer. If the data is a patient’s, the request is routed through their clinic.

You may also file a complaint with the Personal Data Regulatory and Control Unit (URCDP).