Privacy Policy
Table of Contents
-
Data Controller
-
Data Protection Officer (DPO)
-
Introduction
-
Personal Data Collected
-
Legal Bases for Processing
-
Purposes of Processing
-
Data Recipients and Data Sharing
-
Data Retention Period
-
Data Security and Protection
-
Cookies and Tracking Technologies
-
Your Rights
-
Right to Lodge a Complaint with the Supervisory Authority
-
Changes to this Privacy Policy
1. Data Controller
Cabinet Rodde & Associés
Address: 42 avenue de la Libération, 3850 Schifflange, Luxembourg
Telephone: +352 26 74 57 80
Email: cabinet.dr.rodde@gmail.com
2. Data Protection Officer (DPO)
If you have any questions regarding this Privacy Policy or the processing of your personal data, you may contact our person responsible for data protection:
Email: cabinet.dr.rodde@gmail.com
Telephone: +352 26 74 57 80
3. Introduction
The protection of your personal data is of utmost importance to Cabinet Rodde & Associés. We are committed to respecting your privacy and ensuring the security of your data in accordance with the General Data Protection Regulation (GDPR) and applicable Luxembourg legislation.
This Privacy Policy explains how we collect, use, retain and protect your personal data, including your health data. Please read this policy carefully to fully understand our practices.
4. Personal Data Collected
We collect the following categories of data:
Administrative and Identification Data
Surname, first name(s), date of birth, telephone number, email address, postal address, CNS (National Health Fund) affiliation number.
Health Data (Special Categories of Personal Data)
Dental history, medical history, diagnoses, treatments received, dental X-rays, prescriptions, clinical notes, observations made during consultations, treatment results, dental photographs, and information relating to allergies and medical contraindications.
Billing and Payment Data
Billing information, amounts paid, payment method (without storing complete banking details), and dental insurance information.
Communication Data
Correspondence by email or telephone, call-back requests, and appointment requests.
5. Legal Bases for Processing
We process your personal data on the following legal bases:
-
-
Performance of a dental care contract: to create and maintain your patient record, schedule your appointments, and provide dental treatment.
-
Legal obligations: to comply with our accounting, billing, and healthcare safety obligations required by law.
-
Legitimate interests: to ensure the quality of care, patient safety, and the administrative management of our practice.
-
Explicit consent: for sending commercial communications (newsletters, promotions) or for other purposes not mentioned above.
-
6. Purposes of Processing
We use your personal data to:
-
Provide high-quality dental care and manage your patient record
-
Schedule, confirm, and manage your appointments
-
Issue invoices and manage payments
-
Comply with our legal and regulatory obligations
-
Ensure the safety and quality of care
-
Communicate with you regarding your treatment or appointments
-
Improve our services and patient experience (where you have provided your consent)
7. Data Recipients and Data Sharing
Your data may be shared with:
-
Practice staff: for the provision of your dental care.
-
Health insurance providers: for the reimbursement of treatments, only at your request or with your prior consent.
-
IT and maintenance service providers: who process your data as data processors and are bound by data processing agreements.
-
Competent authorities: where required by law or in response to an official request.
We never sell your data to third parties or use it for commercial purposes without your explicit consent.
8. Data Retention Period
Your personal data is retained for the following periods:
Patient records: retained for a minimum of 5 years from the date of the last consultation, in accordance with Luxembourg law.
Billing and accounting data: retained for 6 years, in accordance with legal requirements.
Marketing data (newsletters, etc.): retained for 6 years or until you unsubscribe or withdraw your consent.
Once the applicable retention period has expired, the data is securely deleted unless we are legally required to retain it.
9. Data Security and Protection
Cabinet Rodde & Associés implements appropriate technical and organisational measures to protect your data against unauthorised access, loss, alteration, or destruction:
-
Restricted access to patient data: only authorised personnel may access patient records.
-
Encryption: sensitive data is encrypted both in transit and at rest.
-
Regular backups: we perform secure backups of our systems.
10. Cookies and Tracking Technologies
Our website uses cookies and tracking technologies to:
-
Improve the user experience and functionality of the website
-
Analyse website usage (Google Analytics or similar services)
-
Remember your preferences
You can manage your cookie settings through your browser settings. Refusing certain cookies will not affect the essential functionality of the website.
11. Your Rights
Under the GDPR, you have the following rights:
-
Right to rectification: to correct inaccurate or incomplete data
-
Right to erasure: to request the deletion of your data, subject to certain conditions
-
Right to object: to object to the processing of your data on legitimate grounds
To exercise these rights, please contact us in writing using the email or postal address provided above. We will respond to your request within 30 days.
12. Right to Lodge a Complaint with the Supervisory Authority
If you believe that your data protection rights have been violated, you have the right to lodge a complaint with the competent supervisory authority:
National Commission for Data Protection (CNPD)
Address: 15, Boulevard du Jazz, L-4370 Esch-sur-Alzette, Luxembourg
Website: www.cnpd.lu
Email: contact@cnpd.lu
Telephone: +352 621 75 44
13. Changes to this Privacy Policy
Cabinet Rodde & Associés reserves the right to modify this Privacy Policy at any time to reflect changes in our practices, technology, or legislation. We will inform you by email or by publishing a notice on our website in the event of any material changes.
Last updated: 28/09/2026