Last updated: August 2026
1. Data controller
The data controller is Marco Zito, operating in Italy.
Contact: marco.zito@progettomz.com
2. Data collected and purposes
DentLink collects the following personal data in the situations indicated:
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| First name, last name, email, phone | Account registration, listing management, service communications | Contract performance (art. 6.1.b) | Until account deletion + 12 months |
| Address (street, town, province) | Displaying the approximate location of the equipment | Contract performance (art. 6.1.b) | Until listing deletion |
| Equipment photos | Publishing the listing in the marketplace | Contract performance (art. 6.1.b) | Until listing deletion |
| Tax code, VAT number, IBAN, date and place of birth | Compliance with DAC7 obligations (Legislative Decree 32/2023 – reporting to the Italian Revenue Agency) | Legal obligation (art. 6.1.c) | 10 years (tax obligation) |
| Data on interest in listings (buyer's name, email, phone) | Putting buyer and seller in contact upon explicit request | Contract performance / consent (art. 6.1.b/a) | 24 months |
| Session cookies (Supabase) | Account authentication and security | Legitimate interest / technical necessity (art. 6.1.f) | Session duration |
| Listing view logs (anonymous) | Aggregated statistics for the seller | Legitimate interest (art. 6.1.f) | 12 months |
3. Cookies and tracking technologies
We use the following cookie categories:
| Cookie | Type | Provider | Purpose |
|---|---|---|---|
| Supabase session | Necessary | Supabase Inc. | User authentication, security |
| dentlink_cookie_consent | Necessary | DentLink (local) | Stores your cookie preferences |
| Google Fonts | Optional | Google LLC | Loading typographic fonts. May send data to Google servers. |
| Google Maps / Places | Optional | Google LLC | Address autocomplete. Sends search queries to Google. |
You can change your preferences at any time:
4. Data recipients
Data may be disclosed to the following parties:
- Supabase Inc. (USA) — database and authentication. Supabase is SOC 2 certified and provides adequate safeguards for transfers outside the EU.
- Google LLC (USA) — Google Workspace / Apps Script for sending transactional emails; Google Drive for temporary photo storage; Google Maps for geocoding. Transfer takes place on the basis of the EU Standard Contractual Clauses. For applications to the network via the "Join our network" form, data is collected directly by Google LLC through Google Forms and processed according to Google's Privacy Policy.
- Italian Revenue Agency (Agenzia delle Entrate) — for DAC7 obligations, sellers' tax data is reported annually pursuant to Legislative Decree 32/2023.
- Data is never sold or transferred to third parties for marketing purposes.
5. Data subject rights
Under articles 15-22 GDPR you have the right to:
- Access — obtain a copy of the data concerning you
- Rectification — correct inaccurate data (from your personal area)
- Erasure ("right to be forgotten") — request removal of your data
- Portability — receive your data in a structured format (JSON/CSV)
- Objection — object to processing based on legitimate interest
- Restriction — request suspension of processing
- Withdraw consent — at any time, without retroactive effect
To exercise your rights write to: marco.zito@progettomz.com.
You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante) (garanteprivacy.it).
6. Security
Data is protected through:
- Encrypted HTTPS/TLS connections
- OTP authentication and auto-expiring sessions (5 minutes of inactivity for the admin area)
- Row Level Security (RLS) on the Supabase database — each user can only access their own data
- Admin access restricted to authorized email addresses
7. Minors
The service is reserved for dental industry professionals. We do not knowingly collect data from minors under 18.
8. Changes to this notice
Any changes will be published on this page with an updated date at the top. For substantial changes we will send a notification by email to registered users.
9. Contact
For any privacy-related question: marco.zito@progettomz.com