Address:1027 Budapest Csalogány street 39. 3rd floor 2.
For visitors and registered users of the Smilecraft Dental Studio ( https://smilecraft.hu ) website
During the operation of the website, the service provider / data controller processes the data of persons registered on the site for the purpose of providing them with adequate services.
The service provider intends to fully comply with the legal requirements for the processing of personal data, in particular the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council.
This privacy policy has been prepared on the basis of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, taking into account the content of Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information.
Name of Service Provider, Data Controller:
| Name / Company name: | GSDENT Egészségügyi Szolgáltató Kft |
| Registered office: | 1027 Budapest Csalogány utca 39 III/2. |
| Tax number: | 28771700-1-41 |
| Registration number (NAIH): | |
| Website name, address: | www.smilecaft.hu |
| Availability of the privacy policy: |
Contact details of the data controller:
| Name / Company name: | |
| Registered office: | |
| Mailing address: | |
| E-mail: | |
| Phone: |
The controller declares that it processes personal data in accordance with the provisions of the privacy policy and complies with the requirements of the relevant legislation, with particular regard to the following:
Personal data must be processed lawfully, fairly and in a transparent manner in relation to the data subject.
Personal data shall be collected only for specified, explicit and legitimate purposes.
The purpose of personal data processing shall be adequate, relevant and limited to what is necessary.
Personal data must be accurate and up to date. Inaccurate personal data must be erased without delay.
Personal data shall be kept in a form which permits identification of data subjects for no longer than is necessary. Personal data may be stored for longer periods only insofar as the personal data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes.
Personal data shall be processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.
The principles of data protection shall apply to all information concerning an identified or identifiable natural person.
The purpose of data processing is to enable the service provider / data controller to provide adequate additional services to persons registered on the site during the operation of the website.
The legal basis for data processing is the consent of the data subject.
The scope of data subjects includes the registered users of the website.
Duration of data processing and erasure of data. The duration of data processing always depends on the specific user purpose, but data must be deleted immediately if the originally set purpose has already been achieved. The data subject may withdraw their consent to data processing at any time by sending a letter to the contact email address. If there is no legal obstacle to erasure, the data will be deleted.
Those entitled to access the data are the controller and its employees.
The data subject may request from the controller access to, rectification, erasure or restriction of processing of personal data concerning him or her, and may object to the processing of such personal data, as well as the data subject’s right to data portability.
The data subject may withdraw their consent to data processing at any time, but this does not affect the lawfulness of processing based on consent before its withdrawal.
The data subject has the right to lodge a complaint with a supervisory authority.
If the data subject wishes to use the advantages provided by registration, i.e., wishes to use the services of the website in this direction, it is necessary to provide the requested personal data. The data subject is not obliged to provide personal data; the failure to provide data has no adverse consequences for them. However, certain functions of the website cannot be used without registration.
The data subject is entitled to have the controller rectify or supplement inaccurate personal data concerning him or her without undue delay upon request.
The data subject is entitled to have the controller erase personal data concerning him or her without undue delay upon request, and the controller is obliged to erase personal data concerning the data subject without undue delay if there is no other legal basis for the processing.
Modification or erasure of personal data can be initiated by e-mail, telephone, or letter using the contact details provided above.
The purpose of data processing is to provide additional services and to establish contact.
The legal basis for registration data processing is your consent.
The scope of data subjects includes the registered users of the website.
Duration of data processing. Data processing takes place until consent is withdrawn. You can withdraw your consent to data processing at any time by sending a letter to the contact email address.
Erasure of data takes place upon withdrawal of consent to data processing. You can withdraw your consent to data processing at any time by sending a letter to the contact email address.
Those entitled to access the data are the controller and its employees.
Method of data storage: electronic.
Modification or erasure of personal data can be initiated by e-mail, telephone, or letter using the contact details provided above.
Providing personal data is strictly necessary for identification in databases and for maintaining contact. The exact company name and address are required for billing, which is a legal obligation.
| Scope of processed data | Specific purpose of data processing |
| Name | Identification, contact, billing. |
| Company name | Identification, contact, billing. |
| Address | Identification, contact, billing. |
| Identification, contact. | |
| Phone | Identification, contact. |
| Time of registration | Technical information operation. |
| IP address | Technical information operation. |
The user can provide their consent to data processing by intentionally checking the empty checkbox specifically for this purpose on the website.
You, as the data subject, may object to the processing of your personal data; in this regard, you are entitled to the procedure according to the data processing information detailed above and this policy, as well as the legislation described in the policy.
The purpose of data processing is to provide additional services, maintain contact, and send a confirmation email. We can only fulfill your order if you provide your contact and billing details, which are strictly necessary for contact and billing.
The legal basis for data processing is your consent. In the case of billing, data processing is based on legal requirements.
The scope of data subjects includes the registered users of the website.
Duration of data processing. Data processing takes place according to legal requirements or until consent is withdrawn. You can withdraw your consent to data processing at any time by sending a letter to the contact email address.
Erasure of data takes place upon withdrawal of consent to data processing. You can withdraw your consent to data processing at any time by sending a letter to the contact email address. Billing data can be deleted according to legal requirements.
Those entitled to access the data are the controller and its employees.
Method of data storage: electronic.
Modification or erasure of personal data can be initiated by e-mail, telephone, or letter using the contact details provided above.
| Scope of processed data | Specific purpose of data processing |
| Name | Identification, contact, billing. |
| Company name | Identification, contact, billing. |
| Address | Identification, contact, billing. |
| Identification, contact. | |
| Phone | Identification, contact. |
| Ordered product details | Identification of the product. |
| Time of registration | Technical information operation. |
| IP address | Technical information operation. |
The user can provide their consent to data processing by intentionally checking the empty checkbox specifically for this purpose on the website.
The data subject may object to the processing of their personal data; in this regard, you are entitled to the procedure according to the data processing information detailed above and this policy, as well as the legislation described in the policy.
The purpose of data processing is to issue and send an electronic invoice as an e-mail attachment.
The legal basis for data processing is mandatory data processing based on legislation.
The scope of data subjects includes the service provider’s customer partners.
Duration of data processing. Data processing takes place according to legal requirements or until consent is withdrawn. You can withdraw your consent to data processing at any time by sending a letter to the contact email address.
Erasure of data takes place upon withdrawal of consent to data processing. You can withdraw your consent to data processing at any time by sending a letter to the contact email address. Billing data can be deleted according to legal requirements.
Those entitled to access the data are the controller and its employees.
Method of data storage: electronic.
Modification or erasure of invoice data can be initiated by e-mail, telephone, or letter using the contact details provided above.
| Scope of processed data | Specific purpose of data processing |
| Name | Identification, contact, billing. |
| Company name | Identification, contact, billing. |
| Address | Identification, contact, billing. |
| Identification, contact. | |
| Phone | Identification, contact. |
| Tax number / tax ID | Identification of the buyer. |
| Invoice details | Identification of the invoice. |
| Date of invoice issuance | Technical information operation. |
The user can provide their consent to data processing by intentionally checking the empty checkbox specifically for this purpose on the website.
The data subject may object to the processing of their personal data; in this regard, you are entitled to the procedure according to the data processing information detailed above and this policy, as well as the legislation described in the policy.
As the operator of the website, we declare that we fully comply with the relevant legal provisions in the information and descriptions we publish. We further declare that when subscribing to a newsletter, we are not in a position to verify the authenticity of contact details or to determine whether the provided data relates to a private individual or a business. We treat businesses contacting us as client partners.
The purpose of data processing is to send professional descriptions, electronic messages containing advertising, information, and newsletters, from which you can unsubscribe at any time without consequences. You can also unsubscribe without consequences if your business has ceased in the meantime, you have left the business, or someone else has provided your contact details to us.
The legal basis for data processing is your consent. We inform you that the user may previously and expressly consent to the service provider contacting them with advertising offers, information, and other mailings at the e-mail address provided at registration. Consequently, the user may consent to the service provider processing their necessary personal data for this purpose.
We inform you that if you wish to receive newsletters from us, you are obliged to provide the necessary data. In case of failure to provide data, we cannot send you newsletters.
Duration of data processing. Data processing takes place until consent is withdrawn. You can withdraw your consent to data processing at any time by sending a letter to the contact email address.
Erasure of data takes place upon withdrawal of consent to data processing. You can withdraw your consent to data processing at any time by sending a letter to the contact email address.
Consent can also be withdrawn via the link appearing in the sent newsletters.
Those entitled to access the data are the controller and its employees.
Method of data storage: electronic.
Modification or erasure of data can be initiated by e-mail, telephone, or letter using the contact details provided above.
| Data processor used: | http://www.directinfo.hu |
| Scope of processed data | Specific purpose of data processing |
| Name | Identification, contact. |
| Identification, contact. | |
| Time of subscription | Technical information operation. |
| IP address | Technical information operation. |
We inform you that for neither the username nor the e-mail address is it necessary for it to contain data referring to your person. Thus, for example, it is not necessary for the username or e-mail address to contain your name. You are completely free to decide whether you provide a username or e-mail address that contains information referring to your identity. The e-mail address – which serves for contact – is strictly necessary for the newsletter or professional information sent to you to reach its target.
Cookies are placed on the user’s computer by visited websites and contain information such as site settings or login status.
Cookies are thus small files created by visited websites. They improve the user experience by saving browsing data. With the help of cookies, the website remembers site settings and offers locally relevant content.
The service provider’s website sends a small file (cookie) to the computers of website visitors in order to determine the fact and time of the visit. The service provider informs the website visitor of this.
The scope of data subjects includes the visitors of the website.
The purpose of data processing is additional service, identification, and tracking of visitors.
The legal basis for data processing. The user’s consent is not required if the service provider strictly needs to use cookies.
Scope of data: unique identification number, time, setting data.
The user has the possibility to allow or block cookies item by item in the cookie settings menu, to change their settings at any time, and to delete cookie files from their device at any time.
Data controllers entitled to access the data. The data controller does not process personal data through the use of cookies.
Method of data storage: electronic.
A social media site is a media tool where the message is spread through social users. Social media uses the internet and online presence opportunities to turn users from content consumers into content editors.
Social media is a platform for internet applications that contains content created by users, for example, Facebook, Google+, Twitter, etc.
Forms of social media presence can be public speeches, lectures, presentations, descriptions of products or services.
Forms of information appearing in social media can be forums, blog posts, images, video and audio materials, message boards, e-mail messages, etc.
In accordance with the above, the scope of processed data, beyond personal data, may also be the user’s public profile picture.
Scope of data subjects: all registered users.
The purpose of data collection is to promote the website or the linked webpage.
The legal basis for data processing is the voluntary consent of the data subject.
Duration of data processing: according to the regulations viewable on the given social media site.
Deadline for erasure of data: according to the regulations viewable on the given social media site.
Those entitled to access the data: according to the regulations viewable on the given social media site.
Rights related to data processing: according to the regulations viewable on the given social media site.
Method of data storage: electronic.
It is important to take into account that when a user uploads or submits any personal data, they give a worldwide license to the operator of the social media site to store and use such content. Therefore, it is very important to make sure that the user has full authority to disclose the published information.
Our website x uses □ does not use the Google Analytics application.
In case of using Google Analytics:
Google Analytics compiles a report for its clients on the habits of website users based on internal cookies.
On behalf of the website operator, Google uses the information to evaluate how users use the website. As an additional service, it prepares reports related to website activity for the website operator so that they can perform further services.
Data is stored in encoded format on Google’s servers to make it difficult and prevent data misuse.
Disabling Google Analytics can be done as follows. Quote from the site:
Website users who do not want Google Analytics JavaScript to report their data can install the Google Analytics opt-out browser add-on. The add-on prohibits Google Analytics JavaScript (ga.js, analytics.js, and dc.js) from sending information to the Google Analytics system. The browser add-on can be used in most newer browsers. The Google Analytics opt-out browser add-on does not prevent data from being sent to the website itself and other web analysis services.
https://support.google.com/analytics/answer/6004245?hl=hu
Google Privacy Policy: https://policies.google.com/privacy?hl=hu
Information regarding the use and protection of data is available in detail at the links above.
Data protection in detail:
Hosting provider:
| Name / Company name: | Directinfo Kft. |
| Registered office: | 1147. Budapest. Gyarmat utca 99b |
| Phone: | +36-061-273-16-16 |
| E-mail: | iroda@directinfo.hu |
The data you provide is stored on a server operated by the hosting provider. Only our employees and employees operating the server can access the data, but all of them are responsible for the secure processing of the data.
Name of activity: hosting services, server services.
Purpose of data processing: ensuring the operation of the website.
Processed data: personal data provided by the data subject
Duration of data processing and deadline for erasure of data. Data processing until the end of the website’s operation, or according to the contractual agreement between the website operator and the hosting provider. The data subject can also request the erasure of their data by contacting the hosting provider if necessary.
The legal basis for data processing is the consent of the data subject or data processing based on legislation.
Right to request information
Through the contact details provided, you can request information from us about what data our company processes, on what legal basis, for what data processing purpose, from what source, and for how long. Upon your request, we will send information to the e-mail address you provided without delay, but at most within 30 days.
Right to rectification
Through the contact details provided, you can request us to modify any of your data. We will take action on your request without delay, but at most within 30 days, and send information to the e-mail address you provided.
Right to erasure
Through the contact details provided, you can request the erasure of your data. Upon your request, we will do this without delay, but at most within 30 days, and send information to the e-mail address you provided.
Right to blocking
Through the contact details provided, you can request the blocking of your data. The blocking lasts as long as the reason indicated by you makes it necessary to store the data. Upon your request, we will do this without delay, but at most within 30 days, and send information to the e-mail address you provided.
Right to object
Through the contact details provided, you can object to the data processing. We will examine the objection within the shortest time from the submission of the request, but at most within 15 days, decide on its validity, and inform you of the decision by e-mail.
Possibility of legal enforcement related to data processing
In case of unlawful data processing experienced by you, please notify our company so that it becomes possible to restore the lawful state within a short time. We will do everything in your interest to resolve the outlined problem.
If, in your judgment, the lawful state cannot be restored, please notify the authority at the following contact details:
National Authority for Data Protection and Freedom of Information (NAIH)
Mailing address: 1530 Budapest, Pf.: 5.
Address: 1125 Budapest, Szilágyi Erzsébet fasor 22/c
Phone: +36 (1) 391-1400
Fax: +36 (1) 391-1410
E-mail: ugyfelszolgalat (at) naih.hu
URL: https://naih.hu
Coordinates: N 47°30’56”; E 18°59’57”
Effective date: 2026.02.25
The website was created within the framework and with the support of the Demján Sándor Program.
