Privacy Policy

The protection of your personal data is a priority for the OrthoClermont practice. The purpose of this privacy policy is to inform you about how your data is collected, processed and protected, in accordance with the General Data Protection Regulation (GDPR — EU Regulation 2016/679) and the French Data Protection Act of 6 January 1978, as amended.

Data controller

The data controller for information collected via the orthoclermont.com website and in the course of the practice's activities is:

Dr François Normand, dental surgeon qualified as a specialist in dentofacial orthopaedics.
OrthoClermont practice
31 bis avenue Julien, 63000 Clermont-Ferrand
Telephone: 04 23 32 47 37
Email: contact@orthoclermont.com

Data collected

In the course of its activities, the OrthoClermont practice collects and processes the following categories of personal data:

  • Identification data: surname, first name, date of birth, postal address, telephone number, email address.
  • Administrative data: social security number, health insurance fund affiliation, supplementary health insurance details.
  • Health data: medical history, radiographic assessments, clinical photographs, treatment plans, consultation notes, correspondence with other healthcare professionals involved in the patient's care.
  • Browsing data: when using the website, technical data may be collected (IP address, browser type, pages viewed, duration of visit) strictly for the security and technical operation of the site.

Purposes of processing

The personal data collected is processed for the following purposes:

  • Management of appointments and follow-up of orthodontic treatments
  • Creation and maintenance of the patient's medical file, in accordance with legal obligations applicable to healthcare professionals
  • Invoicing of procedures and electronic transmission of care statements to the French health insurance system
  • Communication with the patient (appointment reminders, information relating to ongoing treatment)
  • Correspondence with colleagues and healthcare professionals involved in the patient's overall care
  • Accounting and administrative management of the practice
  • Responding to contact requests made via the website or by email

Legal basis for processing

The processing of personal data carried out by the OrthoClermont practice is based on the following legal grounds:

  • Performance of the care contract: data processing is necessary for the provision of orthodontic care and patient follow-up.
  • Legal obligation: the practitioner is required by regulation to retain the patient's medical file for a specified period (see below) and to transmit certain information to social security bodies.
  • Legitimate interest: for the administrative management of the practice and website security.
  • Consent: for the use of clinical photographs for educational or communication purposes on the website (with prior written consent from the patient or their legal representative).

Data recipients

Personal data is intended exclusively for authorised personnel within the OrthoClermont practice (practitioner and dental assistants) in the strict exercise of their duties. It may be communicated to the following recipients:

  • Health insurance funds and supplementary insurers (in the context of electronic transmission of care statements)
  • Dental and orthodontic laboratories (technical data necessary for appliance manufacture)
  • Healthcare professionals involved in the patient's care (referring dentist, physician, ENT specialist, etc.)
  • IT service providers for the maintenance of the practice management software (under a subcontracting agreement compliant with the GDPR)

No personal data is sold or transferred to third parties for commercial purposes. No data is transferred outside the European Union.

Data retention periods

Personal data is retained for the following periods:

  • Medical file: 20 years from the last consultation, in accordance with Article R.1112-7 of the French Public Health Code. For minor patients, the file is retained until their 28th birthday.
  • Billing data: 10 years from the close of the financial year, in accordance with accounting and tax obligations.
  • Contact data (website form): 3 years from the last contact.
  • Browsing data: 13 months maximum, in accordance with CNIL recommendations.

Data security

The OrthoClermont practice implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure. These measures include:

  • Encryption of communications via the HTTPS protocol across the entire website
  • Access to health data restricted to authorised personnel and subject to authentication
  • Regular backup of practice data on a secure system
  • Practice management software approved for the processing of health data
  • Staff awareness training on best practices in data protection

Your rights

In accordance with the GDPR and the French Data Protection Act, you have the following rights regarding your personal data:

  • Right of access: you may obtain confirmation that data concerning you is being processed and obtain a copy of that data.
  • Right to rectification: you may request the correction of inaccurate or incomplete data.
  • Right to erasure: you may request the deletion of your data, subject to legal retention obligations (in particular the medical file).
  • Right to restriction of processing: you may request the restriction of the processing of your data in certain cases provided for by law.
  • Right to data portability: you may request to receive your data in a structured, commonly used format, or have it transmitted to another data controller.
  • Right to object: you may object to the processing of your data on legitimate grounds, except where processing is necessary for the provision of care or in compliance with a legal obligation.

To exercise these rights, you may send your request by post to OrthoClermont, 31 bis avenue Julien, 63000 Clermont-Ferrand, or by email to contact@orthoclermont.com. You may be asked to provide proof of identity in order to verify your request. The practice undertakes to respond within one month of receipt of the request.

Cookies

The orthoclermont.com website does not use advertising cookies or marketing trackers. Only cookies strictly necessary for the technical operation of the website may be placed on your device. These cookies do not require your prior consent in accordance with CNIL recommendations.

No third-party audience measurement tool (such as Google Analytics) is used on this website. Your browsing is not tracked for statistical or commercial purposes.

Complaint to the CNIL

If you believe that the processing of your personal data does not comply with current regulations, you have the right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL), the competent supervisory authority in France:

CNIL — Commission Nationale de l'Informatique et des Libertés
3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07
Telephone: 01 53 73 22 22
Website: www.cnil.fr

Changes to this privacy policy

This privacy policy may be updated at any time to reflect regulatory developments or changes in the practice's procedures. The version in force is the one accessible online at orthoclermont.com. We encourage you to consult it regularly. Last updated: August 2026.