Book a demo

    Privacy Policy

    How we collect, use, and protect your data.

    The DentView system is designed to support oral self-care for dental health clients, to generate anonymous oral health behavioural data, and to relay self-care information to professionals. The self-care recommendations provided by the system are based on Finnish Current Care Guidelines (Käypä hoito). DentView is not a medical device and should therefore not be used for risk assessment, treatment planning, or diagnosis.

    DentView Privacy Notice (GDPR)

    Version 1.8 - 22 October 2026

    1. Register Information

    Controller:
    DentView Oy, Kiintotähti 2a1, 90440 Kempele, Finland
    VAT ID: FI31015109
    Email: info@dentview.fi

    Contact person:
    Mika Malinen - mika.malinen@dentview.fi - +358 50 3403147

    Name of the register:
    DentView product and customer database

    Scope:
    This policy covers the following DentView services:

    • MyDentView (home app)
    • DentView Kiosk app
    • DentViewWeb (virtual kiosk, i.e. the browser-based kiosk version)
    • DentView Smile Studio (formerly DentView AI Clinic)
    • DentViewPro & DentViewData (web portal for professionals)
    • Website (forms)

    Roles:
    DentView Oy acts as the controller for professional user, website, and feedback data. Where data is collected in the context of a dental care provider's service (e.g., a wellbeing services county's service or the additional features for private clinics described below), the provider acts as the controller and DentView Oy as a processor on the provider's behalf. In use by wellbeing services counties and other public-sector providers, end users use the applications without being identified, and DentView Oy does not process their name, personal identity code or contact details.

    2. What Data Do We Collect?

    A. End user (all DentView apps: device, kiosk, virtual kiosk and home versions)

    • Using the applications does not require registration or providing a name, personal identity code or contact details.
    • Usage-derived data (e.g., number of practice sessions and progress, type of brushing video, whether the video was watched to the end, session duration, app rating 1-5, diploma achievement).
    • Self-care questionnaire and quiz answers per session (e.g., brushing habits, interdental cleaning, use of nicotine products, dietary habits, self-reported oral health concerns). Answers are collected without direct identifiers.
    • 3D markings made by a professional and the related self-care content are stored on the server as part of the session, without direct identifiers. The 3D view opened in the browser is session-based, and no data is stored permanently on the user's device.
    • Form data in the applications (e.g., feedback and contact forms): name, email, and message - only if the user provides them. Filling in a form is voluntary and not required to use the application. The kiosk and virtual kiosk versions used by wellbeing services counties and other public-sector providers have no fields for entering a name, contact details or other identifying information.
    • App settings (e.g., language and age-group selection) are processed during the session to deliver the service and are not linked to the user's identity.
    • Technical logs (timestamps, error messages, and possibly IP address or browser version) to ensure security and service reliability. They are not used to identify the user.

    B. Clinic & professionals (DentViewPro/Data)

    • At registration: name, email, phone (optional), organisation, role/profession, username, access rights.
    • Portal usage and audit logs (logins, configuration and access-rights changes, as well as viewing of session data and report downloads). Log data is available to the organisation's main user on request.
    • Organisation-specific application settings (e.g., form templates, pathway content, guidance, language and branding settings).
    • Technical logs (timestamps, error messages, and possibly IP address or browser version) to ensure security and service reliability.
    • Website forms (e.g., contact requests, support messages).
    • Additional features in private clinics (e.g., check-in, treatment-interest forms, and SMS and marketing features) - not used in the public sector: contact details are processed on the provider's behalf, and messages can be opted out of.

    We do not use the data for personal profiling.

    3. How Will We Use Your Data?

    • To provide and improve the services.
    • To respond to feedback and customer support.
    • To generate anonymised or pseudonymised statistics.
    • To monitor and protect our websites and services.
    • AI-assisted summaries and statistics for professionals: only session-level answers without direct identifiers, or aggregated anonymous statistics, are passed to AI processing. The AI does not diagnose or make treatment decisions.
    • Security, abuse prevention and audit trail (professional portal).
    • No personal profiling.

    4. Legal Bases for Processing

    End user

    • Use of the applications (Section 2A) takes place without identifying data and is not based on the consent of the user or a guardian.
    • Legitimate interests (service security, reliability, statistics, technical logs).
    • Consent only when a user voluntarily provides contact details via a form (e.g., feedback and contact forms on the website or in a private clinic's application). Consent is given by an adult or, on behalf of a minor, by a parent or guardian.
    • When the service is used as part of a dental care provider's service (Section 1), the provider as controller determines the legal basis for processing. In use by wellbeing services counties and other public-sector providers, processing is not based on the user's consent.

    Clinic & professionals

    • Contract (user accounts and service delivery).
    • Legitimate interests (access-rights management, auditing).
    • Legal obligation (e.g., generating and retaining usage and audit logs in accordance with the Finnish Client Data Act).

    5. How Do We Store Your Data?

    • Location: EU/EEA.
    • Cloud hosting: Google Cloud Platform (EU data centres).
    • Security measures: encryption in transit and at rest, least-privilege access controls, audit logs, backups, and staff security policies.
    • Subprocessors: provided upon request; we only use parties that comply with the GDPR and appropriate contractual safeguards.
    • Third-country transfers: no regular transfers; if a transfer is necessary, we use the EU Standard Contractual Clauses (SCCs) or equivalent safeguards.

    6. Data Retention

    Personal data is retained only for as long as necessary to fulfil the purposes of processing, comply with legal obligations, or for technical reasons. Users may request deletion of their data unless retention is required by law or contract. You may submit a request through our data deletion form or by contacting us at info@dentview.fi.

    7. Children's Data

    Use of the applications does not require registration, and no identifying data or contact details are collected from children. As use is not based on consent (see Section 4), using the applications does not require a guardian's consent. The public-sector kiosk and virtual kiosk versions contain no forms through which contact details could be given. If contact details are provided voluntarily elsewhere (e.g., via a feedback form on the website or in a private clinic's application), they are provided by an adult or, on behalf of a minor, by a parent or guardian.

    8. Your Data Protection Rights

    You have the right of:

    • Access
    • Rectification
    • Erasure
    • Restriction
    • Objection
    • Portability

    You can request the deletion of your personal data at any time by submitting a request through our data deletion form or by contacting us at info@dentview.fi. You may exercise your other rights by contacting info@dentview.fi. We may need to verify your identity before fulfilling your request. We respond within one month. You also have the right to lodge a complaint with a supervisory authority if you believe your personal data has been processed in violation of data protection regulations.

    If the data was collected on behalf of a dental care provider (see Section 1), requests should primarily be addressed to that provider.

    9. Cookies

    On our website, we use cookies and similar technologies for functionality, analytics, and user experience. The applications (kiosk, MyDentView) do not use tracking or marketing cookies; only data strictly necessary for the service (e.g., the language setting for the duration of the session) may be stored on the device.

    10. Changes to This Policy

    We update this policy as needed and publish changes on this page.

    11. Contact

    DentView Oy

    Kiintotähti 2a1, 90440 Kempele, Finland

    Email: info@dentview.fi - VAT: FI31015109

    Contact person: Mika Malinen - mika.malinen@dentview.fi - +358 50 3403147

    Changelog

    • v1.8 (22.10.2026): clarified use by wellbeing services counties and other public-sector providers; added the virtual kiosk to the scope; stated that the public-sector kiosk and virtual kiosk versions have no fields for identifying data; clarified the end-user legal bases (use is not based on consent; consent applies only to voluntary forms); added end-user technical logs; clarified the section on minors; renamed the DentView AI Clinic app to DentView Smile Studio.
    • v1.7 (7.7.2026): updated data content descriptions (self-care questionnaire answers, application form data); clarified storage of 3D annotations and app settings; added description of controller/processor roles; separated additional features available only in private clinics (check-in, treatment interests, SMS and marketing functions); added description of AI-assisted features; clarified sections on cookies, minors, and statutory retention; expanded description of audit logs; corrected section numbering.
    • v1.6 (10.3.2026): added description of the DentView system and non-medical device notice; expanded form data description to cover all application forms.
    • v1.5 (22.9.2025): clarified data deletion request URL.
    • v1.5 (25.8.2025): clarification on 3D annotation storage; added DentViewWeb/DataPortal section; corrected hosting to Google Cloud EU; separated end user/clinic sections.
    • v1.0 (17.8.2023): initial publication.

    Current version: v1.8