GDPR and data protection
Who processes your data
Centre Médico-Dentaire Bonnevoie, 18 rue Pierre Krier, L-1880 Luxembourg is the data controller.
For any question: contact@amds.lu.
Why we ask for this information
Your medical form is used to prepare and deliver your care: to know your medical history, your allergies, your current treatments and anything that changes how dental care must be given. Where applicable, it also records your agreement to the additional fees that will be proposed to you.
Your answers serve no other purpose. They are not sold, not used for commercial purposes, and not used for advertising.
On what legal basis
Processing relies on Article 9(2)(h) of the GDPR: it is necessary for the purposes of preventive medicine, medical diagnosis and the provision of care by a health professional bound by medical confidentiality.
What data
Your identity and contact details, your social security number, your medical and dental history, your allergies, your current treatments, the reason for your visit, and your handwritten signature. For a patient under 18: the identity and telephone number of the parent or legal guardian who completes and signs the form. This is health data, covered by medical confidentiality.
Who has access
The practice's clinicians and staff, as part of your care. No one else. Your data is not passed on to any third party, except where the law requires it.
Where it is kept
On a server located on the practice's own walls, in Luxembourg. When you complete the questionnaire from home, your answers pass through a server hosted in the European Union. That server cannot read your data: it is encrypted end to end between your browser and the practice, and the server holds no key that would let it decrypt anything. No data is kept on that server.
The link you receive is personal, single-use and dated: it stops working once the questionnaire has been sent, and in any case when it expires.
How long it is kept
Ten years from the end of your care, in accordance with Luxembourg legislation on the retention of patient records (law of 24 July 2014 on the rights and obligations of patients).
Your rights
You may ask to access your data, to have it corrected if it is inaccurate, to restrict its processing, and to object to it on grounds relating to your particular situation.
The right to erasure is limited: for as long as the legal retention period for the record runs, the practice cannot delete the information it holds.
To claim these rights: contact@amds.lu.
If you believe your rights are not being respected, you may lodge a complaint with the Commission nationale pour la protection des données (CNPD), 15 boulevard du Jazz, L-4370 Belvaux — cnpd.lu.
Automated decision-making
There is none. Your answers are read by a clinician; no automated process decides anything about you.
If you would rather not use the link
You can also complete the same questionnaire at the practice, on a tablet or on paper.