Privacy policy

1. Data controller

The controller of the personal data collected through this website and the related services is Mattia Santarelli, dental technician and CAD designer, reachable at mattia.santarelli@zirkonzahn.com.

2. What data we collect

In the course of providing the service, we collect and process the following categories of data:

• Contact details: email address and phone number of the registered dental practice or client;
• Identifying data of the practice: business name or name of the client dental practice;
• Data related to production orders: STL files and other design files uploaded for milling, technical notes, order status and history;
• The patient's name associated with each order, when provided by the client practice to identify the case;
• Login credentials for the reserved area (email and password, managed via Supabase Auth).

3. Purposes of processing

The data listed above is processed for the following purposes:

• Providing the outsourced dental milling service requested by the client;
• Managing the account, orders and related communication (e.g. production status updates);
• Fulfilling accounting, tax and administrative obligations connected to the service;
• Responding to contact or support requests sent by the client.

4. Legal basis

Processing is based on the performance of the contract/service requested by the data subject (Art. 6(1)(b) GDPR) and, for accounting and tax obligations, on compliance with a legal obligation (Art. 6(1)(c) GDPR).

5. Data retention

• STL files and design files uploaded are kept for 12 months from delivery of the work, after which they are deleted, unless otherwise agreed with the client (e.g. for rework or warranty purposes);
• Order data with accounting and tax relevance is kept for 10 years, as required by Italian law on the retention of accounting records (Art. 2220 of the Italian Civil Code);
• Account data (email, credentials) is kept for the duration of the relationship and deleted upon request or after prolonged account inactivity.

6. Third parties processing data

To provide the service we rely on the following providers, who process data as data processors or independent controllers:

• Supabase — database hosting, authentication and storage of uploaded files;
• Google (Google Sheets) — the essential data of each order (date, client practice, patient name) is synchronized to a Google spreadsheet for internal production management.

These providers may process data outside the European Economic Area; in that case the transfer takes place on the basis of standard contractual clauses or other appropriate safeguards provided for by the GDPR.

7. Patient data

The patient's name indicated in an order is personal data referring to a third party with respect to the client (the dental practice) that communicates it. By uploading or entering this data, the client practice declares and warrants that it has a valid legal basis — typically the patient's consent or the performance of its own professional relationship with the patient — to share it with the Controller for the purpose of providing the milling service. The Controller processes this data solely to identify the requested work and does not use it for further purposes.

8. Cookies

This site uses only technical and session cookies, necessary for the reserved area to work (authentication via Supabase Auth). No profiling or statistical analytics cookies are currently used. See the cookie banner shown on first visit for more details.

9. Data subject rights

As a data subject, you have the right to request at any time:

• Access to your personal data and information about its processing;
• Rectification of inaccurate or incomplete data;
• Erasure of data (right to be forgotten), within the limits provided by law;
• Restriction of or objection to processing;
• Portability of data in a structured, readable format;
• Lodging a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.gpdp.it).

To exercise these rights you can write at any time to mattia.santarelli@zirkonzahn.com.

10. Data security

Data is processed with adequate technical and organizational measures to ensure its confidentiality and to prevent unauthorized access, loss or accidental destruction.

11. Changes to this policy

This policy may be updated over time to reflect changes to the service or applicable regulations. The last-updated date is shown at the top of the page.