Compliance & Privacy
Review DPIA acknowledgments and publish your clinic's GDPR privacy notice, tools that inform you and never block features.
Settings → Compliance & Privacy (https://dentare.io/clinic/settings/compliance) only appears for clinics in a country where GDPR or an aligned law applies: the EU/EEA, the UK, Switzerland, and the Western Balkans. If your clinic is outside that list, this page doesn't show up in your settings, and nothing here affects how your clinic works.
Everything on this page informs your clinic. Dentare never blocks a feature or forces an acknowledgment because of what's recorded here. Your clinic is the data controller under GDPR and stays responsible for its own compliance decisions.
DPIA acknowledgments
A DPIA (Data Protection Impact Assessment) acknowledgment is a record that someone at your clinic read Dentare's assessment for a specific feature and confirmed the clinic understands its responsibilities. Right now that covers procedure-specific public booking: letting patients book named procedures like root canals or implants on your public booking page, which can reveal health information to anyone with the link.
The acknowledgments list shows every record on file: the DPIA type, its version, when it was acknowledged, and who acknowledged it. Click a row to see the full record, including the locale it was read in and a hash of the exact text acknowledged, useful if you ever need to show an auditor or a patient's data-protection request exactly what your clinic agreed to.
If Dentare updates the assessment's text or version, your existing acknowledgment stays on file but is no longer current. Record a new acknowledgment any time it's useful for your GDPR documentation. Nothing on your booking page changes when you do this. It's a record for your files, not a switch.
Your clinic's privacy notice
Dentare can generate a GDPR Art. 13 privacy notice for your clinic, built from what Dentare knows about your data processing. You review and publish it whenever you're ready.
Setup
Fill in the details that shape your notice: your clinic's legal name and address, contact details, whether you have a Data Protection Officer, how long you keep rejected bookings and patient records, and whether you rely on GDPR Art. 9(2)(h) for health data. Confirm you've reviewed how Dentare's sub-processors handle data on your behalf.
Preview
Read the generated notice before it goes live. Switch between your available languages to check each version.
Publish
Publish a language once you're satisfied with it. Each language publishes on its own, and publishing creates a new, permanent version. Some languages need a native-speaker and lawyer signoff on file before they can be published; the Publish page tells you which ones and why.
Every published version stays on record in History, filterable by language, each one linking to the exact page and PDF a patient would have seen at that time. Published versions never change after the fact. If something needs to change, publish a new version instead.
Sub-processor list
The Sub-processors tab lists the outside services Dentare uses to run your clinic's account, grouped by whether they process data inside the EEA or outside it under Standard Contractual Clauses. This list is managed centrally by Dentare, so nothing here needs your input. It's provided as evidence for your own privacy notice and any data-processing records you keep.
Where patients see it
Once published, your privacy notice appears as a Privacy link on your clinic's public booking page, and it's downloadable as a PDF from the same link. This is what a patient sees before they book: who's processing their data, why, and for how long. If you publish a new version later, the old one stays reachable in your History for anyone who booked under it.
Your clinic stays in charge
Dentare provides the templates, the drafting tool, and the audit trail. Deciding what to acknowledge, what to publish, and when, stays entirely with your clinic. Nothing on this page is required to keep the rest of Dentare working.