Vela Dental Studio

Privacy Policy

1. Introduction and controller

The protection of your personal data matters to us. This privacy policy explains which personal data are processed when you visit this website, for which purposes they are processed and on which legal basis. Processing is governed by Regulation (EU) 2016/679 (the General Data Protection Regulation, GDPR) and the Data Protection Act 2018.

The controller within the meaning of Article 4(7) GDPR is:

Vela Dental Studio
12 Merrion Row, Dublin 2, D02 XY45
Dublin
Represented by: Dr. Maya Vela, Principal Dentist
Phone: +353 1 555 0188
Email: smile@veladental.ie

2. Processing when you visit this website

This website is technically operated by SiteMagic (Odyssean LLC, 4730 University Way NE, Ste 104-5528, Seattle, WA 98105, USA). SiteMagic acts as a processor within the meaning of Article 28 GDPR on behalf of the controller named above. The processor's contractual obligations are set out in Section 7 of the SiteMagic Terms. The processing operations described below take place in the course of operating this website.

2.1 Hosting (Netlify)

This website is hosted on the infrastructure of Netlify, Inc. (44 Montgomery Street, Suite 300, San Francisco, CA 94104, USA). When the website is accessed, Netlify processes technically necessary server log data, in particular the IP address, the time of access, the requested URL and the browser's user agent. The legal basis is Article 6(1)(f) GDPR; the legitimate interest is the technical provision and security of the website. Logs are retained for a limited period for troubleshooting and abuse prevention.

2.2 Web fonts (Bunny Fonts)

For a consistent presentation of typefaces, this website loads fonts via the "Bunny Fonts" service provided by BunnyWay d.o.o. (Dunajska cesta 151, 1000 Ljubljana, Slovenia) at fonts.bunny.net. When a page is loaded, your IP address is transmitted to a server operated by BunnyWay within the European Union in order to deliver the font files; no transfer to Google LLC or to the USA takes place for the delivery of fonts. The legal basis is Article 6(1)(f) GDPR; the legitimate interest is a consistent and visually coherent presentation of the content. Further information on data protection at Bunny Fonts: https://bunny.net/privacy/.

2.3 Visitor statistics (first-party analytics)

For audience measurement, SiteMagic operates a first-party analytics tool on behalf of the controller. Only the page visited (path), the referrer URL and the screen width of the device are stored, in a Supabase database operated by SiteMagic. No IP addresses are stored, no cookies are set and no user profiles are created. The tool also honours the browser's "Do Not Track" signal and records nothing in that case. The legal basis is Article 6(1)(f) GDPR; the legitimate interest is the statistical analysis of website usage. The retention period is 90 days.

2.4 Processing on our behalf and sub-processors

SiteMagic processes personal data solely on the instructions of the controller in accordance with Article 28 GDPR. To provide its services, SiteMagic engages sub-processors, in particular Supabase (database/storage), Netlify (hosting) and Anthropic (AI-assisted page generation). The full list of sub-processors and the safeguards for international data transfers (EU Standard Contractual Clauses) are set out in Sections 7.3 and 7.4 of the SiteMagic Terms.

6. Your rights

You have the following rights vis-à-vis the controller with regard to the personal data concerning you:

  • Right of access (Article 15 GDPR)
  • Right to rectification (Article 16 GDPR)
  • Right to erasure (Article 17 GDPR)
  • Right to restriction of processing (Article 18 GDPR)
  • Right to data portability (Article 20 GDPR)
  • Right to object to processing based on Article 6(1)(f) GDPR (Article 21 GDPR)

To exercise your rights, please contact the controller using the contact details given above.

You also have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data (Article 77 GDPR). In Ireland, the competent supervisory authority is the Data Protection Commission (DPC), Dublin — www.dataprotection.ie. A complaint may also be lodged with the supervisory authority of your habitual residence or of the place of the alleged infringement.

7. Retention

Personal data are stored only for as long as necessary for the respective purpose or for the duration of a statutory retention obligation. Visitor statistics are deleted after 90 days. At the controller's request, data stored in the course of the processing relationship are deleted upon its termination in accordance with Section 7.5 of the SiteMagic Terms.

8. Updates to this privacy policy

This privacy policy may be updated to reflect changes in legal requirements or in the actual processing operations. The current version is available on this website at all times.