1. DATA CONTROLLER
Data controller:
Global shops owners, UAB
Company code: 306329475
VAT code: LT100017569812
Address: Giedraičių g. 39, R53, LT-09302 Vilnius
Phone: +370 631 73344
Email: support@all4denta.com
This policy applies when using the website www.all4denta.lt and the All4denta clinic management system.
2. SCOPE
This policy regulates:
• processing of website visitors’ data;
• processing of potential clients’ and partners’ data;
• processing of system users’ data (clinics and staff);
• processing of patients’ data through the system;
• use of cookies and analytical tools.
3. DATA PROCESSING ROLES
All4denta may act as:
Data controller – when processing data of website visitors, inquiries or clients.
Data processor (processor) – when clinics process patient data through the system.
In the case of patient data, the clinic remains the data controller and All4denta acts as the data processor under the concluded agreement.
4. CATEGORIES OF PROCESSED DATA
4.1 Website visitor data
• IP address
• device and browser information
• cookie identifiers
• visit statistics
4.2 Inquiry and sales data
• name, surname
• email address
• phone number
• company / clinic data
• communication content
4.3 System user data
• login information
• username
• position
• system activity history (logs)
4.4 Patient data (processed by clinics)
• identification data
• contact data
• medical records
• treatment history
• examination and procedure data
• payment information
Medical data is considered a special category of data under GDPR Article 9.
5. PURPOSES OF DATA PROCESSING
Data is processed in order to:
• ensure system functionality;
• administer user accounts;
• conclude and execute contracts;
• ensure patient registration and treatment administration;
• perform accounting;
• ensure IT security;
• improve service quality;
• fulfill legal obligations.
6. LEGAL BASIS
Processing is based on:
• GDPR Art. 6(1)(b) (contract performance);
• GDPR Art. 6(1)(c) (legal obligation);
• GDPR Art. 6(1)(f) (legitimate interest);
• GDPR Art. 6(1)(a) (consent);
• GDPR Art. 9(2)(h) (healthcare).
7. DATA RETENTION PERIODS
• Inquiry data – 2 years
• Contractual documents – according to archiving requirements
• System accounts – during the validity of the contract
• Patient data – according to healthcare legislation
• IT security logs – up to 24 months
8. DATA TRANSFER
Data may be transferred to:
• server and cloud infrastructure providers;
• IT maintenance partners;
• payment operators;
• accounting or legal service providers;
• public authorities when required by law.
Data processing agreements are concluded with all data processors.
Data is not sold or rented.
9. DATA TRANSFER OUTSIDE THE EU
If data is transferred outside the European Economic Area, the European Commission’s approved Standard Contractual Clauses or other GDPR-permitted safeguards are applied.
10. SECURITY MEASURES
Applied technical and organizational measures:
• SSL / TLS encryption
• data encryption on servers
• role-based access control
• two-factor authentication
• activity logging (audit log)
• backups
• regular security reviews
11. DATA SUBJECT RIGHTS
You have the right to:
• access your data;
• rectify it;
• request deletion;
• restrict processing;
• object to processing;
• data portability;
• submit a complaint to the supervisory authority.
12. SUBMITTING REQUESTS
Requests may be submitted:
Email: support@all4denta.com
Phone: +370 631 73344
Mail: Giedraičių g. 39, R53, LT-09302 Vilnius
A response is provided within 1 month.
13. POLICY CHANGES
This policy may be updated. The latest version is published at www.all4denta.lt
Last updated: 2026-02-27.
