1. Data Controller
8pus OÜ ("we", "our", "us") is the Data Controller responsible for personal data processed via the ES Dental Albania landing page.
Company name: 8pus OÜ
Legal form: Private limited company
Registry code: 17104459
VAT number: EE102797554
Address of contact person:
Harju maakond, Tallinn, Kesklinna linnaosa,
Jõe tn 3-305, 10151, Estonia
Email: info@8pus.shop
2. Data We Collect
Contact & Identification Data
First name, last name, email address, and mobile phone number.
Inquiry & Service-Related Data
Information you provide about your request (e.g., desired procedures, timelines, travel preferences, budget range) and your communication preferences.
Health / Dental Information (Special Category Data)
If you choose to share it, we may process information about your dental/medical needs (e.g., treatment requests, symptoms, prior procedures, dental images, or other health-related details). This data is treated as sensitive and is processed only with your explicit consent or as otherwise permitted under applicable law.
Call, Messaging & Communication Data
When you contact us or we contact you, we may process communication details such as date/time, phone number, call outcome, and follow-up notes. If you communicate with us via messaging apps (e.g., WhatsApp, Messenger, Viber), we process the content you choose to share and basic message metadata.
Technical & Usage Data
IP address, device and browser type, operating system, referral URLs, and interactions with our landing page.
Marketing & Advertising Data
Lead source (landing page, Meta lead form, Google lead form), campaign parameters (where available), and consent status.
3. How We Collect Your Data
- Landing page forms on ita.esdentalalbania.eu (contact/callback/quote requests)
- Meta (Facebook/Instagram) lead/instant forms from our advertising campaigns
- Google Ads lead forms from our advertising campaigns
- Direct contact via email, phone, or messaging apps
- Cookies & similar technologies (Meta Pixel, Google Analytics, Google Ads tags) as described below
4. Purposes of Processing
- Responding to your inquiry and contacting you by phone/email/messages to follow up
- Providing information about dental/medical tourism and coordinating next steps
- Preparing preliminary guidance/quotes based on the information you provide
- Sharing necessary details with partner clinics/dental professionals to evaluate your request and propose options (with safeguards)
- Arranging travel-related logistics only if you request assistance
- Managing leads and communications in our CRM (Vtiger)
- Measuring and improving advertising performance and website experience
- Complying with legal obligations
5. Legal Basis for Processing
- Contract / pre-contract steps (Art. 6(1)(b) GDPR) – to take steps at your request (e.g., provide information/quotes and coordinate services)
- Consent (Art. 6(1)(a) GDPR) – for marketing communications where required and for non-essential cookies/tracking where required
- Explicit consent (Art. 9(2)(a) GDPR) – for any health/dental information you choose to provide (special category data)
- Legitimate interests (Art. 6(1)(f) GDPR) – to operate, secure, prevent abuse, manage inquiries, and measure campaign performance (balanced against your rights)
- Legal obligation (Art. 6(1)(c) GDPR) – where required by applicable law
You can withdraw consent at any time. Withdrawal does not affect processing carried out before withdrawal.
7. Data Retention
We retain data only as long as necessary for the purposes described, unless a longer period is required by law.
- Leads / inquiries: typically up to 24 months after the last interaction
- Health/dental data: stored only as needed for coordination and normally not longer than 24 months, unless you have an ongoing request or legal obligation applies
- Marketing preferences: until you unsubscribe/withdraw consent, then kept only as a suppression record to respect your choice
- Accounting/tax records: retained as required by applicable law
8. Your Rights Under GDPR
You may have the following rights (subject to GDPR conditions and exceptions):
- Access your personal data
- Rectify inaccurate or incomplete data
- Request erasure (delete your data)
- Restrict processing
- Object to processing (including direct marketing)
- Data portability (where applicable)
- Withdraw consent (where processing is based on consent)
To exercise your rights, contact us at info@8pus.shop. You also have the right to lodge a complaint with a supervisory authority. In Estonia, the authority is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).
9. International Data Transfers
Some of our providers (for example, Meta and Google) may process data outside the European Economic Area (EEA). Where transfers occur, we use appropriate safeguards such as the European Commission’s Standard Contractual Clauses and/or other GDPR-approved mechanisms, and we apply additional protections where appropriate.
11. Data Security
We implement technical and organizational measures to protect personal data, including access controls, secure systems, and encryption in transit where applicable.
12. Children
Our services and lead forms are not directed to children. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, please contact us so we can take appropriate action.
13. Automated Decisions
We do not make decisions that produce legal or similarly significant effects solely by automated means. Advertising platforms may use automated optimization for ad delivery based on events and signals, as configured by us.
14. Changes to This Policy
We may update this Privacy Policy from time to time. Updates will be published on this page with a revised effective date.
15. Contact
8pus OÜ
Registry code: 17104459
VAT number: EE102797554
Address of contact person:
Harju maakond, Tallinn, Kesklinna linnaosa,
Jõe tn 3-305, 10151, Estonia
Email: info@8pus.shop
Quick actions
If you want us to delete your lead data, write “Delete my data” and include the phone/email you used on the form.