Privacy Policy
Effective 7 October 2026
This policy explains how Christoff Dental ("we", "us") processes your personal data when you visit christoffdental.com or contact us through it, in accordance with Regulation (EU) 2016/679 (GDPR) and the Bulgarian Personal Data Protection Act. In case of discrepancy, the Bulgarian version prevails.
1. Data controller
Christoff Dental
Address: Tulcha 37, Strelbishte, Sofia, Bulgaria
Email: frontdesk@christoffdental.com
Phone: +359 888 818 349
For any question about your personal data, contact us at the email above.
2. What data we process
- Website visit data: IP address, browser and device type, date and time of access – processed by our hosting provider (Cloudflare) for security and to run the site.
- Analytics and advertising cookies (Meta Pixel): browser identifiers and pages visited – only if you have given consent.
- Contact data: name, phone, email and message content when you call, email or message us on social media.
- Booking data: online booking is provided by Fresha, which processes your data as an independent controller under its own privacy policy.
3. Purposes and legal bases
- Answering enquiries and booking appointments – steps prior to entering into a contract (Art. 6(1)(b)).
- Website security and operation – legitimate interest (Art. 6(1)(f)).
- Analytics and advertising via Meta Pixel – your consent (Art. 6(1)(a)), which you can withdraw at any time.
4. Cookies and similar technologies
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| cookie-consent | Christoff Dental (local storage) | Remembers your cookie choice. Necessary. | Until deleted |
| _fbp, fr | Meta Platforms | Measuring advertising effectiveness. Only with consent. | Up to 90 days |
| NID and others | Embedded Google Maps showing the clinic's location (not yours). Google may set cookies under its own policy. | Per Google |
You can change or withdraw your consent at any time: .
5. Recipients
We do not sell your personal data. We may share it with:
- service providers – hosting (Cloudflare) and online booking (Fresha);
- Meta Platforms and Google – to the extent described in section 4;
- public authorities where required by law.
6. Transfers outside the EEA
Some providers (e.g. Meta, Google, Cloudflare) may process data in the United States. Such transfers rely on the EU–US Data Privacy Framework or on Standard Contractual Clauses approved by the European Commission.
7. Retention
- Correspondence and enquiries – up to 2 years after the last contact.
- Technical visit data – per our hosting provider's (Cloudflare) retention periods.
- Cookie data – as listed in section 4.
8. Your rights
You have the right to: access your data; rectification; erasure ("right to be forgotten"); restriction of processing; data portability; object to processing based on legitimate interest; withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.
To exercise your rights, email us at frontdesk@christoffdental.com. We will respond within one month.
You have the right to lodge a complaint with the Commission for Personal Data Protection: 2 Prof. Tsvetan Lazarov Blvd, Sofia 1592, Bulgaria, www.cpdp.bg.
9. Security
We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss or destruction, including an encrypted (HTTPS) connection to the website.
10. Children
This website is not intended for children under 14 and we do not knowingly collect their data.
11. Changes
We may update this policy. The current version and its effective date are always published on this page.