Privacy policy

Confidentiality and security are core values of SUMINISTROS DENTALES ALCALÁ S.L. and, accordingly, we undertake to guarantee the User's privacy at all times and not to collect unnecessary information. Below we provide all the information you need about our Privacy Policy in relation to the personal data we collect, explaining:

• Who is the controller of your data.
• For what purposes we collect the data we request from you.
• What the legal basis for the processing is.
• How long we keep it.
• To which recipients your data is disclosed.
• Whether international data transfers take place.
• What your rights are.

1. Data controller

SUMINISTROS DENTALES ALCALÁ S.L. (Spanish tax ID B85788586).
Paseo de la Estación, 1 - BJ B.
28807 Alcalá de Henares, Madrid (Spain).
Telephone: +34 910 46 05 45
info@dentaldirect.es

2. Purposes, legal basis and retention for data submitted through:

• CONTACT FORM.

Purpose: To provide you with a means of contacting us and to respond to your requests for information, as well as to send you communications about our products, services and activities, including by electronic means, if you tick the acceptance box.

Legal basis: The user's consent when requesting information from us through our contact form and when ticking the box accepting the sending of information.

Retention: Until your request has been resolved through our form or answered by email, if it has not given rise to further processing. Where you have agreed to receive commercial communications, until you ask to be unsubscribed.

• CUSTOMER ACCOUNT AND REGISTRATION FORM.

Purpose: To register you as a user, give you access to the services reserved for registered users of our website, manage your order history and inform you about our activities, products and services, including by electronic means.

Legal basis: Performance of the agreement with the registered user and the user's consent. The controller's legitimate interest in keeping its customers informed about products and services similar to those already purchased, in accordance with Article 21.2 of Spanish Act 34/2002 (LSSICE).

Retention: Until the registered user requests cancellation and thereafter for the periods required by law. Commercial communications: until the user asks to be unsubscribed.

• PURCHASE FORM.

Purpose: To manage your orders, process payment, handle shipping and returns, issue the corresponding invoice, provide after-sales service and the guarantee, and inform you about our products and services, including by electronic means.

Legal basis: Performance of the contract of sale. Compliance with legal obligations in commercial, accounting and tax matters. Legitimate interest in informing our customers about products and services similar to those already purchased.

Retention: For the duration of the contractual relationship and, once it has ended, for the retention periods required by law in order to address any liabilities, in particular those laid down in commercial and tax legislation. Commercial communications: until the user asks to be unsubscribed.

• SENDING EMAILS.

Purpose: To answer your requests for information, deal with your enquiries and respond to your questions.

Legal basis: The user's consent when requesting information from us by email.

Retention: Until your request has been answered by email, if it has not given rise to further processing.

• NEWSLETTER SUBSCRIPTION.

Purpose: Sending our commercial newsletter and informative and advertising communications about our products or services that may be of interest to you, including by electronic means.

Legal basis: The user's consent when subscribing to our commercial communications and/or newsletters.

Retention: Until the data subject withdraws consent and asks to be unsubscribed from the service.

• ACCESS TO THE WEBSITE AS A PROFESSIONAL.

Purpose: To record the visitor's declaration as to their status as a dental professional, which is required in order to access the catalogue, and to avoid requesting it again on subsequent visits.

Legal basis: The controller's legitimate interest in directing its offering of medical devices exclusively to professionals in the sector.

Retention: For the period during which the record of the choice remains valid on the visitor's device.

• BROWSING AND COOKIES.

Purpose: To enable the technical operation of the website, remember your preferences, analyse the use of the site and, where applicable, show you personalised advertising.

Legal basis: The controller's legitimate interest in the case of technical cookies, which are strictly necessary for the provision of the service. The user's consent, given through the cookie settings panel, in all other cases.

Retention: For the periods indicated for each cookie in our Cookie Policy.

Obligation to provide us with your personal data and consequences of not doing so.

The provision of personal data and the purchase of products through our portal require a minimum age of 18 years or, where applicable, sufficient legal capacity to enter into a contract.

The personal data requested is necessary in order to manage your requests and/or provide you with the services you may purchase; therefore, if you do not provide it, we will not be able to assist you properly or provide the service you have requested.

Scope of this policy and origin of the data. This Privacy Policy relates to the processing arising from the use of this website. The data processed in this context is that which you yourself provide to us through the website forms, by email or by telephone, together with the connection and browsing data described in our Cookie Policy.

SUMINISTROS DENTALES ALCALÁ S.L. may also collect professional contact data by means unrelated to this website, such as attendance at congresses, trade fairs, courses and industry events, or direct contact through its sales team, for the purpose of managing the commercial relationship and sending information about its products and services. This processing is based on the controller's legitimate interest in carrying out its commercial activity aimed at professionals, in accordance with Article 19 of Spanish Organic Act 3/2018 on the Protection of Personal Data and guarantee of digital rights, and on the data subject's consent where this is required. In such cases, the corresponding information is provided to the data subject at the time the data is collected, the controller, the rights recognised and the means of exercising them being the same as those set out in this policy.

No special categories of personal data are processed.

3. Recipients of your data

Your data is confidential and is not disclosed to third parties for unrelated commercial purposes. However, in order to provide our services we need to rely on suppliers which, acting as processors or as independent controllers, may access your personal data. The categories of recipients are as follows:

• Provider of the e-commerce platform and its associated services, which includes website hosting, management of customer accounts, the sending of commercial communications and order notifications, and the store's own analytics.
• Payment gateways and financial institutions, for processing payments and preventing fraud. Dental Direct never stores your full card details.
• Carriers and logistics operators, to whom the delivery and contact data strictly necessary to get your order to you is disclosed.
• Email marketing platforms, for managing and sending commercial communications.
• Web analytics and audience measurement providers.
• Social networks and embedded content providers, where the website displays content hosted on their platforms.
• Providers of technology services and of development and maintenance of the website and internal management systems.
• Advisory firms and professional practices providing accounting, tax and administrative management services to the controller.
• Public authorities, courts and law enforcement agencies, where a legal obligation exists.

Data processing agreements are entered into with all suppliers that process data on behalf of the controller, on the terms set out in Article 28 of Regulation (EU) 2016/679.

4. International data transfers

Some of the suppliers referred to in the previous section are established outside the European Economic Area or may process data on servers located in third countries, in particular in Canada and the United States of America.

These transfers are based, as applicable, on an adequacy decision of the European Commission regarding the country of destination, on the supplier's adherence to the data protection framework applicable between the European Union and the relevant country, or on the signing of the standard contractual clauses approved by the European Commission, together with any supplementary measures that may be necessary.

You may request further information about the safeguards applied, as well as a copy of them, by writing to info@dentaldirect.es.

5. Automated decision-making

No automated decisions are taken that produce legal effects concerning the user or similarly significantly affect them. The segmentation of recipients of commercial communications and the advertising personalisation carried out, where applicable, by means of cookies are subject to your consent and may be withdrawn at any time.

6. Rights in relation to your personal data

Anyone may withdraw their consent at any time, where such consent has been given for the processing of their data. Under no circumstances does the withdrawal of this consent affect the performance of the subscription contract or relationships entered into previously.

You may also exercise the following rights:

• Request access to your personal data or its rectification where it is inaccurate.

• Request its erasure where, among other reasons, the data is no longer necessary for the purposes for which it was collected.

• Request the restriction of its processing in certain circumstances.

• Object to the processing of your data on grounds relating to your particular situation, and object at any time to processing for direct marketing purposes.

• Request data portability in the cases provided for by law.

• Other rights recognised under applicable legislation.

Where and how to exercise your rights: by means of a written communication addressed to the controller, at the postal or email address given in section 1, marked "Personal Data", specifying the right you wish to exercise and the personal data concerned. You may be required to prove your identity.

If you have consented to receive commercial communications, you may unsubscribe at any time using the link provided for that purpose in each mailing.

In the event of a disagreement with the company regarding the processing of your data, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos), located at C/ Jorge Juan 6, 28001 Madrid (www.aepd.es), or with the supervisory authority of your country of residence.

7. Cookies

This website uses technical, personalisation, analytics and advertising cookies, both first-party and third-party, which process connection and/or device data as well as browsing habits for statistical and advertising purposes.

Accordingly, when you access our website, in compliance with Article 22 of the Spanish Information Society Services Act, we request your consent for the installation of cookies that are not strictly necessary and provide you with information about them. You may accept them, reject them or configure them by category from the preferences panel, and change your choice at any time.

Full details can be found in our Cookie Policy.

8. Security of your personal data

In order to safeguard the security of your personal data, we inform you that we have adopted all the technical and organisational measures necessary to guarantee the security of the personal data supplied against alteration, loss and unauthorised processing or access.

9. Updating your data and this policy

So that we can keep your personal data up to date, it is important that you inform us whenever there has been any change to it; otherwise, we cannot be held responsible for its accuracy.

We are not responsible for the privacy policy applying to any personal data you may provide to third parties via the links available on our website.

This Privacy Policy may be amended to adapt it to changes made to our website, as well as to any legislative or case-law developments regarding personal data, so we recommend that you read it each time you provide us with your data through this website.

Last updated: 16/09/2026.