NEOIMPLANTDental Implants & Advanced Aesthetics
Book a consultation
Privacy

Privacy policy

How NeoImplant processes personal data under the GDPR and Spanish data-protection law: controller, purposes, legal basis, retention and rights.

Last updated: 31 October 2026

In compliance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD), NeoImplant Triana, S.L. informs the user about the processing of personal data collected through this website. Personal data collected via this site is processed in Spain by a Spanish data controller.

1. Data controller

2. Purposes of processing

  • To handle requests for information, queries or appointments submitted through the contact form, by phone or by email.
  • To manage the clinical relationship and, where applicable, the patient's medical record under Spanish healthcare law.
  • To comply with the centre's accounting, tax and administrative obligations.
  • To send informational communications about the clinic only when the user has given express consent.

3. Legal basis

  • Consent of the data subject when submitting the form or initiating contact (Art. 6(1)(a) GDPR).
  • Performance of a contract or pre-contractual measures in the provision of services (Art. 6(1)(b) GDPR).
  • Compliance with legal obligations in healthcare, tax and accounting matters (Art. 6(1)(c) GDPR).
  • Healthcare purposes for health data, where applicable (Art. 9(2)(h) GDPR).

4. Categories of data

Identifying data (full name, phone, email), data about the enquiry or reason for contact and, in a clinical context, health data. Health data is only processed where the user starts or maintains a clinical relationship with the centre.

5. Retention

  • Contact requests without a clinical relationship: up to 12 months from the last interaction.
  • Medical records: as required by Spanish healthcare law (minimum 5 years from discharge of the clinical episode; in some cases, indefinitely where the regulation so requires).
  • Accounting and tax data: 6 years (Spanish Commercial Code) and the periods set by Spanish tax law.

6. Recipients and processors

Personal data is not transferred to third parties save where required by law. The following processors may access the data under contracts compliant with Art. 28 GDPR:

  • Hosting and infrastructure provider for the website.
  • Provider of clinical-management and patient-communication software.
  • Tax and accounting advisers.
  • Dental laboratory and healthcare suppliers strictly necessary to deliver treatment.

No international transfers are made outside the European Economic Area. Should they become necessary in the future, the safeguards required by Chapter V of the GDPR will be applied. UK-based patients should note that, following the European Commission's adequacy decision for the United Kingdom, transfers between Spain and the UK are not currently treated as transfers to a third country.

7. Dental CAD development and anonymisation

Data collected through this website is not used to train artificial-intelligence models. AI Dental Solutions may use copies of dental scans to develop and evaluate its own Dental CAD models only after the copies have passed a separate, documented anonymisation process, with no clinical identity or accessible key that could reasonably link the sample to a person.

Replacing a name with a reversible number or code does not make a scan anonymous. The prior processing carried out in the clinical environment to generate an anonymous copy must have a documented purpose, legal basis, applicable condition for health data, data-protection impact assessment and safeguards. Identifiable or merely pseudonymised scans are not admitted to the training dataset. External providers are not permitted to train their models with this data.

8. Rights of the data subject

The user may exercise the following rights at any time:

  • Right of access to their personal data.
  • Right of rectification of inaccurate data.
  • Right of erasure ("right to be forgotten"), where applicable.
  • Right to restriction of processing.
  • Right to data portability.
  • Right to object to processing.
  • Right to withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
  • Right to lodge a complaint with the Spanish Data Protection Agency, AEPD (www.aepd.es), which is the competent supervisory authority as the controller is established in Spain.

To exercise these rights, write to privacidad@neoimplantclinics.com evidencing your identity.

9. Security

NeoImplant Triana, S.L. applies appropriate technical and organisational measures, in accordance with Art. 32 GDPR, to safeguard the confidentiality, integrity and availability of personal data. These measures are reviewed and updated periodically.

10. Changes

This privacy policy may be amended to reflect regulatory, technical or organisational changes. Amendments take effect from the moment they are published on the website.

11. Governing language

This English text is an adaptation provided for the convenience of English-speaking users. The original and binding version of this privacy policy is the Spanish version available at /es/legal/privacidad. In the event of any inconsistency or dispute regarding interpretation, the Spanish version shall prevail.