Data processing
These terms allocate responsibilities when patient and clinic data is processed through Stokontrol. They are not a registration notice or a bundled consent request.
The clinic is controller for patient, representative and workforce data where it determines the clinical purposes, lawful basis, retention and access. The Stokontrol operator processes that data on the clinic's behalf and documented instructions. Stokontrol may separately be controller for narrowly defined account security, its own legal duties, service support and consented product measurement.
Processing provides appointments, patient records, treatment planning, inventory, finance, laboratory, communication and audit functions in a secure workspace. Instructions are authorised product actions, workspace settings and written support requests. Processing lasts for the service term plus the stated export, legal-retention and deletion period. Stokontrol does not use clinical health data for advertising, sale of data or general-purpose model training.
People may include patients and representatives, clinic staff and clinicians, laboratory staff, and supplier or delivery contacts. Data may include identity, contact, birth and address details; appointments and procedures; dental charts; diagnosis- or treatment-related notes; allergies, chronic conditions, medicines and blood group; images and documents; lab jobs; communication preferences; payment or balance summaries; roles, security and audit records. Card numbers and security codes are not stored in the Stokontrol database.
Stokontrol applies authorised access, workspace isolation, role and permission checks, private file storage, encrypted transport, server-only secrets, audit trails and recovery evidence. Authorised personnel are subject to confidentiality. No technical control is an absolute guarantee; the verified current technical and organisational measures annex forms part of the contract bundle.
Stokontrol uses only subprocessors required for the service whose contract and security have been verified. The current Subprocessors page and acceptance screen identify the active provider, purpose, data category, region and transfer mechanism. Material additions or replacements are notified in advance with an applicable objection route. Clinical processing is not enabled with an unverified country, region or transfer safeguard.
The clinic answers data-subject requests; Stokontrol provides reasonable technical assistance for access, correction, export, restriction and deletion. After becoming aware of a personal-data breach, Stokontrol informs the clinic through the verified channel without undue delay so the clinic can manage its own legal deadlines. Audits use evidence that does not expose another customer or patient.
The clinic may use authorised export tools before termination. After termination, data is returned, deleted or anonymised on the agreed schedule except where law, security records, disputes or a documented hold require retention. Marking a patient passive is not erasure. Exact legal-retention and backup-cycle periods are shown in the verified retention annex and are not guessed.
The clinic confirms that it has a lawful basis, gives its own patient notice, determines the conditions for health data and communications, invites only authorised users and avoids unnecessary or inaccurate data. A privacy notice, explicit consent, treatment consent and marketing preference are separate records and cannot replace one another.
Acceptance is bound to the document version and digest, workspace, accepting user, server time, language, authority attestation and method in an append-only audit record. A material new version requires fresh acceptance. Opening a link or seeing a registration notice is not acceptance of this agreement.
