Data protection
Privacy policy
What data we process, why, for how long, and how to exercise your rights.
Controller
The controller is Cabinet d’orthodontie Becker & Associés, whose administrative office is at 37, boulevard Pierre Dupong, L-1430 Luxembourg, Grand-Duché de Luxembourg.
Our clinics are located in Luxembourg-Merl, at the Hôpital Kirchberg (HRS), in Dudelange, Ettelbruck and Wiltz, as well as in Trier (Germany).
For any question about your personal data, or to exercise your rights, you can contact our data protection officer (DPO): dpo@cabinet-becker.lu, or by post at the administrative office address above.
Applicable legal framework
This processing is governed by Règlement (UE) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (the GDPR), and by the Luxembourg loi du 1er août 2018 establishing the Commission nationale pour la protection des données and the general data protection regime.
Health data is further covered by medical confidentiality, protected by article 458 of the Code pénal luxembourgeois (the Luxembourg Criminal Code) and by the Code de déontologie des professions de médecin et de médecin-dentiste (the code of professional conduct for doctors and dentists).
Data processed, purposes, legal bases and retention periods
We collect only the data necessary for each purpose. Whether a field is mandatory or optional is indicated at the point of collection by an asterisk.
- Appointment request (surname, first name, telephone, e-mail, clinic, reason for your appointment, availability) — purpose: to arrange your appointment — legal basis: your consent, collected on the form, and the provision of health care (art. 6(1)(a) and 9(2)(h) GDPR); the reason you give constitutes health data — retention: 12 months after the last contact if no appointment takes place.
- Contact form (surname, first name, e-mail, telephone, subject, message, patient’s date of birth where applicable) — purpose: to handle your request — legal basis: your consent (art. 6(1)(a) GDPR) — retention: 12 months after the request is closed.
- Referral by a fellow practitioner (identity of the referring practitioner, clinic, contact details, clinical reason, documents supplied) — purpose: to arrange care for the referred patient — legal basis: legitimate interests and the provision of care (art. 6(1)(f) and 9(2)(h) GDPR) — retention: held within the patient record.
- Patient record and health data (medical history, examinations, imaging, treatment plan, clinical reports) — purpose: diagnosis, care and follow-up — legal basis: article 9(2)(h) GDPR (preventive medicine, medical diagnosis and the provision of health care) — retention: in accordance with the Luxembourg rules applicable to patient records.
- Speculative application or reply to a vacancy (CV, covering letter, contact details) — purpose: to process your application — legal basis: your consent — retention: 12 months after the end of the recruitment process, unless you agree to a longer period.
- Site analytics (cookie identifiers, pages viewed, browsing data) — purpose: to understand how the site is used and improve it — legal basis: your consent, collected via the cookie banner — retention: see the cookie policy.
- Server technical logs (truncated IP address, file requested, date and time) — purpose: security and proper functioning of the site — legal basis: legitimate interests — retention: 6 months maximum.
Health data
Data concerning your health falls under article 9 GDPR and enjoys enhanced protection. It is processed only by the health professionals of our clinics and by administrative staff bound by professional secrecy, strictly to the extent necessary for your care.
The website is not a consultation channel. Under the Code de déontologie (the code of professional conduct), no personalised medical advice is given by e-mail or through a form: please do not send detailed health data through these channels, and book an appointment at the clinic instead.
Online appointment booking
Online booking is operated by a third-party provider, Doctena (www.doctena.lu), acting as a processor or as a joint controller depending on the case. When you book through Doctena, the data you enter on their platform is governed by their own privacy policy, which we invite you to read.
This service is funded by the clinic and involves no cost to the patient.
Recipients and processors
Your data is intended for Cabinet d’orthodontie Becker & Associés. It is not sold, rented or passed on to third parties for commercial purposes.
It may be disclosed to the following categories of recipient, limited to what is necessary:
- the site’s host, CMD.solutions (Luxembourg);
- Doctena, for online appointment booking;
- your regular dentist or the fellow practitioner who referred you, for treatment reports;
- the Caisse nationale de santé (CNS, Luxembourg’s national health fund) and, where applicable, your insurer, for billing and reimbursement;
- our IT providers, strictly for maintenance purposes, under a processing contract compliant with article 28 GDPR.
Transfers outside the European Union
Our processing operations are hosted within the European Union. Certain third-party tools (analytics, embedded video content) may involve a transfer to a third country; those tools are activated only after your consent via the cookie banner, and rely on the European Commission’s standard contractual clauses.
Our Trier clinic (Germany) is within the European Union: no transfer outside the EU results from it.
Security
Exchanges with the site are encrypted (TLS/SSL). Access to patient records is restricted to authorised staff and is logged. Our providers are contractually required to apply appropriate security measures.
As no transmission over the Internet is entirely foolproof, we ask you not to send sensitive medical information by unencrypted e-mail.
Your rights
In accordance with articles 15 to 22 GDPR, you have the following rights over your data:
- right of access: to obtain confirmation that your data is being processed and to receive a copy of it;
- right to rectification: to have inaccurate or incomplete data corrected;
- right to erasure: to request the deletion of your data, within the limits of the legal obligations to retain medical records;
- right to restriction of processing: to request that the use of your data be temporarily frozen;
- right to object: to object to processing based on legitimate interests;
- right to data portability: to receive your data in a structured, machine-readable format, or to have it transmitted to another controller;
- right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal;
- right to set instructions as to what becomes of your data after your death.
How to exercise your rights
Send your request to dpo@cabinet-becker.lu, or by post to Cabinet d’orthodontie Becker & Associés — DPO, 37 boulevard Pierre Dupong, L-1430 Luxembourg. Proof of identity may be requested in order to prevent any disclosure to a third party.
We reply within one month of receiving the request, extendable by two months for a complex request, in which case you will be informed.
Lodging a complaint with the supervisory authority
If, after contacting us, you consider that your rights are not being respected, you have the right to lodge a complaint with the Luxembourg supervisory authority:
Commission nationale pour la protection des données (CNPD, Luxembourg’s data protection authority) — 15, boulevard du Jazz, L-4370 Belvaux — telephone (+352) 26 10 60 -1 — www.cnpd.lu
Cookies
The site sets functional cookies, needed for it to display, as well as — only after your consent — analytics cookies and cookies set by the embedded third-party content.
You can accept, decline or change your choices at any time from the “Cookie policy” page, which sets out each cookie, its purpose and how long it is kept.
About this site
This site is made available for information purposes. The information offered is intended to support the practitioner-patient relationship and can in no case replace it or constitute a diagnosis.
The site is funded by the clinic. It carries no advertising sales house and no paid sponsored content. The partner, certification and supplier logos shown on it (certification bodies, device manufacturers, partner hospital) are mentioned for information, to give an account of our equipment and our accreditations.
Editorial policy
The administrative information (contact details, opening hours) is produced by the clinic’s administrative team. The health-related content is written or approved by Dr Jean-Philippe Becker.
Any change of content, administrative or medical, is approved before publication.
Changes to this policy
This policy may be adapted to take account of legal, technical or organisational developments. The applicable version is the one published on this page; we invite you to consult it regularly.
Last updated: July 2026.
Contact our DPO
For any question, or to exercise your rights: dpo@cabinet-becker.lu.
This is a translation of the French original. In the event of any discrepancy between the two versions, the French version prevails.