dentalPrices - Privacy Policy

Last updated: June 25th 2026

1. Recitals

dentalPrices, together with the group entities identified in Section 3 below (hereinafter jointly referred to as “dentalPrices”, “we”, “our”, “us” or the “Controller”), is committed to protecting the privacy of the users (hereinafter referred to as “User” or “You”) of its websites (the “Website”), mobile application(s) (the “Application”) and related services, including its dental marketplace, communication tools, AI-powered features and payment and financing solutions (together with the Website and the Application, the “Platform” or the “Services”), and will do everything in its power to ensure that Users’ personal data is treated with respect to their fundamental rights and freedoms and personal dignity, with particular reference to confidentiality.

Any information and data which You provide, or which is otherwise gathered by dentalPrices in the context of the Platform, will be used by dentalPrices in compliance with Regulation (EU) 2016/679 (the “GDPR”) and, where applicable, other data protection laws of the jurisdictions in which dentalPrices operates.

By accessing or using the Platform, You acknowledge that You have read and understood this Privacy Policy. If You have any questions in relation to this Privacy Policy, please contact us using the contact details set out below.

2. Name and Contact Details of the Data Controller and Data Protection Officer

2.1. Name of the Data Controller(s)

  • dentalPrices Kft. (Hungary): registration number 01-09-450763; seat: 1115 Budapest, Keveháza utca 1-3.
  • Diştedavim Teknoloji Hizmetleri A.Ş. (Türkiye): registration number 317023-5; seat: Atatürk Mah Ertuğrul Gazi Sk D2 Blok No 2R İçkapı No:15 Ataşehir İstanbul.
  • dtGlobal Holdings Inc. (Delaware, United States): registration number SR 20260326651 - File Number 10488600 ; seat: 8 THE GREEN STE R DOVER 19901 Delaware (DE).

2.2. Contact Details

3. Who We Are – Group Entities of dentalPrices

The Platform is operated by dentalPrices and its affiliated entities, including regional subsidiaries, group companies, contractors, service providers and payment partners.

As of the effective date of this Policy, dentalPrices operates through entities established in multiple jurisdictions, including Türkiye, Hungary and the United States. These entities currently include, among others:

  • dentalPrices Kft. (Hungary);
  • Diştedavim Teknoloji Hizmetleri A.Ş. (Türkiye);
  • dtGlobal Holdings Inc. (Delaware, United States).

Depending on Your location and the specific services provided to You, one or more dentalPrices entities may act as a data controller, joint controller, service provider, or processor under applicable law:

  • Users located in the European Economic Area (“EEA”), the United Kingdom, or Switzerland: the relevant dentalPrices entity operating in the EEA (i.e. dentalPrices Kft.) acts as the primary Data Controller.
  • Users located in the United States: the relevant U.S. entity or service provider supporting the Platform may act as the data controller or “business” under applicable U.S. privacy laws.
  • Users located in other jurisdictions: the relevant local or international dentalPrices entity providing the services may act as the data controller.

4. Scope of this Privacy Policy

This Privacy Policy applies to patients and individual Users; dental clinics and healthcare professionals; clinic employees and representatives; suppliers, vendors and partners; visitors to the Platform; users of payment, financing or instalment services; and users interacting with dentalPrices’ AI-powered systems, communication tools or customer support channels – regardless of whether the Platform is accessed via website, mobile application, e-mail, chatbot, messaging service, phone call, social media channel or other digital medium.

5. Important Role of Dental Clinics

Dental clinics using the Platform may independently collect and process patient data, including health-related information. In many cases, clinics act as independent data controllers under applicable privacy laws with respect to the healthcare services they provide.

Accordingly:

  • dentalPrices is generally not responsible for medical decisions, diagnoses, treatment outcomes, or the independent data-processing practices of clinics;
  • clinics are responsible for obtaining any consents legally required from patients;
  • patients should contact the relevant clinic directly regarding requests related to their medical records or treatment data.

Where dentalPrices processes personal data strictly on behalf of clinics, dentalPrices acts as a data processor or service provider under applicable law.

6. Categories of Personal Data Processed

Depending on how You use the Platform, dentalPrices may process the following categories of personal data.

6.1. Identity and Contact Information

  • Full name;
  • E-mail address;
  • Phone number;
  • Country and city;
  • Postal address;
  • Date of birth;
  • National identification or tax identification information, where legally required;
  • Account credentials.

6.2. Appointment and Service Information

  • Appointment requests;
  • Requested dental treatments;
  • Communication history;
  • Clinic preferences;
  • Uploaded messages, forms, reviews, or feedback;
  • Treatment-related inquiries.

6.3. Health-Related Information

Users may voluntarily upload or share photos of teeth or the mouth, X-rays or medical documents, dental symptoms or concerns, and treatment requests. Where required by applicable law, dentalPrices processes such data only with Your explicit consent or under another lawful basis. AI-generated analyses, estimates, or recommendations are for informational purposes only and do not constitute medical advice, diagnosis, or treatment.

6.4. Payment and Financing Information

When You use payment or financing services, dentalPrices or its licensed payment partners may process billing details, transaction information, payment method details, instalment or financing application data, and fraud-prevention information. Sensitive payment credentials such as full credit card numbers are generally processed directly by regulated third-party payment providers.

6.5. Device and Technical Information

  • IP address;
  • Browser type;
  • Device identifiers;
  • Operating system;
  • Language preferences;
  • Referral URLs;
  • Session data;
  • Crash reports;
  • Log files;
  • Cookie identifiers.

6.6. Usage and Analytics Information

  • Pages visited;
  • Search activity;
  • Interaction with Platform features;
  • Clickstream data;
  • Time spent on pages;
  • Communication preferences;
  • Marketing interactions.

6.7. Location Information

dentalPrices may collect approximate or precise location information depending on device permissions, browser settings, and applicable law. Location data may be used to show nearby clinics, localized pricing, regional payment options, and fraud-prevention measures.

7. How We Collect Information

dentalPrices may collect information: directly from You; automatically through Your use of the Platform; from clinics and healthcare providers; from payment providers and financing partners; from publicly available sources; from advertising, analytics, and social media partners; through cookies and similar technologies; through customer support interactions; and through AI-powered systems and automated tools.

dentalPrices may also collect publicly available business information regarding clinics, healthcare providers, and dental practices for listing, verification, informational, marketplace, and appointment-facilitation purposes.

8. Purposes and Legal Basis of Data Processing, Retention and Consequences of Non-Provision

Purpose of Data ProcessingLegal BasisScope of Data ProcessedDuration of Data ProcessingConsequences of Non-Provision8.1. Registration and general operation of the Platform (creating and managing accounts, providing customer support, enabling core Platform functionality).Performance of a contract (GDPR Art. 6(1)(b)).Full name, e-mail address, phone number, country/city, postal address, date of birth, account credentials, national/tax identification information where legally required.For the duration of the account opening plus 10 (ten) years.Without this data You cannot register for or use the Platform.8.2. Facilitating appointment requests and connecting Users with dental clinics.Performance of a contract (GDPR Art. 6(1)(b)).Appointment requests, requested treatments, clinic preferences, communication history, uploaded messages, forms, reviews or feedback.For the duration of the account opening plus 10 (ten) years.Without this data dentalPrices cannot facilitate Your appointment requests.8.3. Processing health-related information You voluntarily share (e.g. photos of teeth/mouth, X-rays, medical documents, symptoms, treatment requests) in order to generate AI-supported preliminary insights and to forward Your inquiry to a clinic.Your explicit consent (GDPR Art. 9(2)(a)). Consent may be withdrawn at any time.Health-related data as described above (special category data).For the duration of the account opening plus 10 (ten) years.Without this data dentalPrices cannot provide AI-generated insights or forward Your treatment inquiry to a clinic.8.4. Processing payments, instalments and financing.Performance of the contract concluded with the User (GDPR art. 6,1b).Billing details, transaction information, payment method details, instalment/financing application data, fraud-prevention information.For the duration of the account opening plus 10 (ten) years.Without this data dentalPrices or its payment partners cannot process Your payment or financing application.8.5. Platform security, fraud prevention and identity verification.Legitimate interests of dentalPrices (GDPR Art. 6(1)(f)).Device and technical data (IP address, device identifiers, browser type, log files), fraud-prevention information.For the duration of the account opening plus 10 (ten) years.Without this data dentalPrices cannot guarantee the security of Your account or transactions.8.6. Use of AI-powered features (analysis of uploaded content, preliminary treatment insights, fraud detection, matching Users with clinics, customer-service support).Your consent (for health data, GDPR Art. 9(2)(a)) and legitimate interest (for fraud detection and clinic matching, GDPR Art. 6(1)(f)).Health-related data (where applicable), usage data, uploaded content (photos, X-rays, documents, messages).For the duration of the account opening plus 10 (ten) years.You will not receive AI-generated insights, but can still use the Platform’s core features.

8.5.1. Additional Security Information

  • Legitimate interests pursued by the controller or by a third party: Protecting the Platform, Users, clinics and payment partners against fraud, abuse and unauthorised access.
  • Access to recordings: Not applicable.
  • Information related to Data Storage: Data is stored on the infrastructure described in Section 10 (Data Transfer) and Section 12 (International Data Transfers) below.
  • Logging: Technical logs are retained for the period specified above for security-monitoring purposes.

8.6.1. Additional AI Processing Information

  • Category of Data Subjects: Users/patients who choose to use the AI-powered features of the Platform.
  • Source of Personal Data: Directly from the data subject (content uploaded by the User).
  • Transfer of Data: May be transferred to AI-processing sub-processors and, where relevant to facilitate treatment, to dental clinics – see Section 9 (How We Share Personal Data).
  • Whether data provision is statutory or contractual: Voluntary – use of the AI-powered features and provision of related data is optional and based on the User’s choice.
  • Legitimate interests pursued by the controller or by a third party: Detecting and preventing fraud, abuse and misuse of the Platform's AI-powered features; and efficiently and accurately matching Users with suitable dental clinics so as to improve the quality and relevance of the Services for Users and clinics alike.
  • Automated decision-making: dentalPrices does not use AI outputs to make decisions producing legal effects concerning You, or similarly significantly affecting You, without human involvement. AI-generated analyses, estimates and recommendations are informational only and do not constitute medical advice, diagnosis or treatment; any treatment decision remains with You and Your treating clinic or healthcare professional.

9. AI-Powered Features

The Platform may use artificial intelligence, machine learning, automated systems and algorithmic technologies to: analyse uploaded content; provide preliminary treatment insights; improve user experience; detect fraud or abuse; optimise the matching of Users with clinics; and support customer-service operations.

AI-generated outputs are informational only and must not be treated as medical diagnoses, prescriptions, or professional healthcare advice. Users remain responsible for consulting licensed healthcare professionals before making healthcare decisions. See also the table in Section 8 above for the legal basis, retention and automated-decision-making information applicable to the AI-powered features.

10. How We Share Personal Data (Data Transfer)

dentalPrices may share personal data with the following categories of recipients:

10.1. Postal and Logistics Service Providers

Name of Postal Service ProviderSeat of Postal Service ProviderData Processing Activities Carried OutNOT APPLICABLENOT APPLICABLENOT APPLICABLE

10.2. Payment Service Providers and Financing Partners

This includes licensed banks, payment institutions, financing providers, fraud-prevention providers, and instalment partners engaged by dentalPrices.

  • Rubik Elektronik Para A.Ş: Dikilitaş, Emirhan Cd. Ata Plaza A Blok No:109 İç Kapı No:14, 34387 Beşiktaş/İstanbul.
  • Paratika Ödeme Hizmeleri A.Ş: Spine Tower, Saat Sokak No:5, Kat:24 Maslak - Sarıyer - İstanbul.

10.3. Service Providers (incl. Hosting)

This includes cloud infrastructure and hosting providers, analytics providers, e-mail and communication providers, customer-support providers, and security providers.

  • GoDaddy Inc. (Hosting): 2155 E GoDaddy Way, Tempe, Arizona, 85284, United States | [email protected].
  • Amazon Web Services, Inc. (Cloud-Security): 410 Terry Avenue North, Seattle, Washington 98109, United States.
  • Google LLC (Analytics, E-mail, Communication): 1600 Amphitheatre Parkway, Mountain View, California 94043, United States.
  • Desk360 Yazilim Anonim Sirketi (Communication Whatsapp Support): Maslak Mahallesi, Buyukdere Caddesi, Uso Center No:245, Floor:7, Sariyer, Istanbul, 34453, Turkey | [email protected].

10.4. Corporate Transactions

In connection with mergers, acquisitions, investments, corporate restructuring, or asset sales, personal data may be transferred as part of the transaction, subject to appropriate confidentiality and data protection safeguards.

10.5. Legal and Regulatory Authorities

Where required by law, regulation, court order, subpoena, or governmental request.

10.6. Advertising and Analytics Partners

Where legally permitted and, where required by applicable law, subject to Your cookie or other consent choices (see Section 13 below).

dentalPrices does not sell personal data in exchange for monetary compensation.

11. International Data Transfers

As dentalPrices operates internationally through entities in Türkiye, Hungary and the United States, personal data may be transferred to, stored in, or processed in multiple jurisdictions that may have different data protection laws than Your country of residence. Where required by applicable law, dentalPrices implements appropriate safeguards for such transfers, including:

  • Standard Contractual Clauses (SCCs);
  • Data Processing Agreements;
  • Contractual confidentiality obligations;
  • Technical and organisational security measures;
  • Other lawful transfer mechanisms recognised by applicable law.

You acknowledge that information submitted through the Platform may be processed on cloud servers and systems located in the United States, the European Union, Türkiye, or other jurisdictions where dentalPrices or its service providers operate.

12. Data Retention

dentalPrices retains personal data only for as long as necessary for: the purposes described in this Privacy Policy; compliance with legal obligations; dispute resolution; enforcement of agreements; and security and fraud-prevention purposes. Retention periods vary depending on applicable law, the nature of the data, operational needs, and regulatory obligations – see the purpose-specific retention periods in the table in Section 8 above. When retention is no longer necessary, data is deleted, anonymised, or securely archived.

13. Cookies and Tracking Technologies

dentalPrices uses cookies, SDKs, pixels, and similar technologies to operate the Platform, remember preferences, analyse usage, improve functionality, measure marketing effectiveness, and personalise Your experience. These may include essential, functional, analytics, advertising, and security cookies. Depending on Your location, You may manage Your cookie preferences through cookie banners, browser settings, or device settings.

14. Security Measures

To guarantee the confidentiality, integrity, and availability of Your personal data, dentalPrices implements technical, administrative, and organisational safeguards proportionate to the level of risk, including encryption, access controls, secure cloud infrastructure, monitoring systems, firewall protection, penetration testing, employee confidentiality obligations, and security training. dentalPrices continuously monitors and manages potential data-protection incidents.

However, no system is completely secure, and dentalPrices cannot guarantee absolute security.

  • Certifications: ISO27001 / 15504

15. Data Collection from Minors (Children’s Privacy)

The Platform is not intended for children under the age required by applicable law to consent to the processing of their own personal data, without parental or legal guardian authorisation.

  • For users located in the European Economic Area: the relevant age threshold is 16 in accordance with GDPR Art. 8 and applicable Member State law (the GDPR default is 16, but Member States, including Hungary, may set the threshold lower, down to a minimum of 13).
  • For users located in the United States: the Platform is not directed to children under 13 years of age, in accordance with the Children’s Online Privacy Protection Act (“COPPA”).

If dentalPrices becomes aware that personal data has been collected unlawfully from a child, it will take reasonable steps to delete such information without undue delay and will assess the case as a potential personal data breach.

16. Rights of the User

The User has the following rights in relation to their personal data:

  • Right to access: You may request information from dentalPrices about the scope of the data processed about You and request access to Your personal data, including a copy thereof and information on the processing.
  • The right to rectification: You have the right to request that dentalPrices correct any personal data You believe is inaccurate or complete any personal data You believe is incomplete.
  • The right to erasure: You have the right to request that dentalPrices erase Your personal data, under certain conditions.
  • The right to restrict processing: You have the right to request that dentalPrices restrict the processing of Your personal data, under certain conditions.
  • The right to object to processing: You have the right to object to dentalPrices’ processing of Your personal data, under certain conditions, including processing carried out for direct marketing purposes.
  • The right to data portability: You have the right to receive Your personal data processed by dentalPrices in a structured, commonly used, machine-readable format and to transmit those data to another controller without hindrance by dentalPrices; where technically feasible, You may request that dentalPrices transfer Your personal data directly to another controller.
  • The right to withdraw consent: Where processing is based on consent, You have the right to withdraw Your consent at any time, without giving any reason and free of charge. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.
  • Opt-out: Opt-out of certain targeted advertising or data-sharing activities, where applicable.

You should also be aware that some of these rights may be limited, in whole or in part, by legal obligations or the legitimate interests of dentalPrices.

16.1. EEA, UK, and Switzerland

Users located in the EEA, United Kingdom, and Switzerland have the rights described above under the General Data Protection Regulation (GDPR), the UK GDPR, and other applicable local privacy laws.

16.2. United States

Depending on applicable U.S. state law, users may have rights regarding: access to collected personal information; deletion requests; correction requests; opt-out rights for certain data-sharing activities; and non-discrimination for exercising privacy rights. These rights may apply under laws including, where applicable, the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), and other applicable U.S. state privacy laws. dentalPrices does not sell personal data for monetary compensation.

To exercise any of the above rights, please contact dentalPrices at [email protected]. dentalPrices may request identity verification before processing certain requests.

17. Right to File a Complaint, Legal Redress

If You notice a violation of Your rights in the course of data processing, You have the following options:

  • contact dentalPrices directly by post or by e-mail at the contact details set out in this Privacy Policy;
  • take legal action in the event of unlawful processing of Your data or breaches of Your data security. For information on the jurisdiction and contact details of the competent Hungarian court, please visit www.birosagok.hu;
  • file a complaint with the competent supervisory authority.

17.1. Competent Authorities

  • For users in Hungary (and subject to Section 3 above, other EEA jurisdictions where dentalPrices Kft. acts as controller): National Authority for Data Protection and Freedom of Information (Nemzeti Adatvédelmi és Információszabadság Hatóság, “NAIH”): H-1055 Budapest, Falk Miksa utca 9-11, website: www.naih.hu, e-mail: [email protected].
  • For users in Turkiye: Kişisel Verileri Koruma Kurumu Nasuh Akar Mah. 1407. Sok. No: 6 06520 Çankaya / Ankara Türkiye.
  • For users in the United States: Federal Trade Commission (FTC) Federal Trade Commission 600 Pennsylvania Avenue, NW Washington, DC 20580 USA.

18. Third-Party Services and Links

The Platform may contain links to third-party websites, clinics, payment providers, social networks, or services. dentalPrices is not responsible for the privacy practices, content, or security of third-party services. Users should independently review the privacy policies of such third parties.

19. Marketing Communications

Where permitted by law, dentalPrices may send promotional communications regarding its services, promotions, financing opportunities, partner offers, and product updates. Users may opt out at any time using unsubscribe mechanisms or by contacting dentalPrices.

20. Region-Specific Disclosures

Certain jurisdictions may require additional disclosures, notices, or rights. Where applicable, dentalPrices may publish supplementary privacy notices for specific regions, countries, products, financing services, or healthcare-related activities. In the event of a conflict between a region-specific notice and this Privacy Policy, the region-specific notice shall prevail for Users located in that jurisdiction.

21. Changes to this Privacy Policy

dentalPrices reserves the right to unilaterally amend this Privacy Policy at any time to reflect changes in law, Platform updates, international expansion, new products or services, or security improvements. Updated versions will be published on the Platform with a revised effective date. Continued use of the Platform after such updates may constitute acceptance of the revised Privacy Policy, where permitted by law.

  • Name of the Data Controller: dentalPrices Kft. You can read previous versions of this Privacy Policy here.
  • Name of the Data Controller: Diştedavim Tek Hiz A.Ş You can read previous versions of this Privacy Policy here.
  • Name of the Data Controller: dtGlobal Holdings Inc. You can read previous versions of this Privacy Policy here.

22. Contact Information

For questions, requests, or complaints regarding this Privacy Policy or the processing of Your personal data, please contact:

22.1. Current operational entities may include:

  • dentalPrices Kft. (Hungary);
  • Diştedavim Teknoloji Hizmetleri A.Ş. (Türkiye);
  • dtGlobal Holdings Inc. (Delaware, United States).

You may also contact the relevant supervisory authority or regulatory body in Your jurisdiction if You believe Your rights have been violated.