GDPR Compliance and Data Privacy at Carestream Dental

At Carestream Dental, protecting customer and patient information is a top priority. As a global provider of dental and oral healthcare technology, we are committed to keeping personal data safe and secure. Our software and systems are built with strong security measures to maintain privacy and earn the trust of our customers.

Our Commitment to GDPR

Carestream Dental follows the requirements of the General Data Protection Regulation (GDPR), which protects the personal data and privacy rights of people in the European Union (EU) and the United Kingdom (UK). The GDPR came into effect on May 25, 2018 and applies to organizations that collect, manage, or process personal information of EU and UK residents.

We also work closely with our third-party vendors and service providers to make sure they follow GDPR standards as well.

Security and Data Protection

We use strict security policies and data management practices to protect personal information. A dedicated internal team, including a Data Protection Officer, oversees GDPR compliance across the organization.

Our policies and procedures are regularly updated to:

Protect personal data inside and outside the EU and UK
Improve security controls
Respond quickly and effectively in the unlikely event of a data breach

We only process personal data based on the instructions provided by our customers.

International Data Transfers

Because Carestream Dental operates globally, some personal data may be stored or processed outside the EU and UK, including in the United States or other countries where our offices, affiliates, or service providers operate.

When transferring personal data internationally, we rely on approved Standard Contractual Clauses (SCCs) to help ensure data remains protected according to GDPR requirements.

Data Retention

We keep personal data only for as long as necessary to:

Fulfill the purpose for which the data was collected
Meet legal or contractual obligations
Provide agreed services to customers and business partners

Once the data is no longer needed, it is securely deleted or archived according to applicable regulations.

Support for Practice Management Software and CS Connect Users

Our practice management software includes features that help customers comply with GDPR requirements, especially regarding security and patient privacy.

These features include:

User authentication and access controls to limit access to patient records
Security tracking for additions, edits, and deletions of records
Patient archiving tools that support the “right to be forgotten,” where legally allowed
Data anonymization when sending image files to laboratories through CS Connect
Secure remote support with encrypted access and customer approval before connection
Secure backup services through trusted third-party providers to improve system reliability and resilience

We continue to improve our software and services to support changing privacy and regulatory requirements.

Support for Imaging Customers

We understand that GDPR compliance can be challenging and time-consuming. To support our imaging customers, we are continuously enhancing our tools and systems with features that help:

Manage user access controls
Delete or anonymize user data
Monitor and audit data processing activities
Support data subject rights
Strengthen data security protections

Our goal is to make compliance easier so customers can focus more on patient care and daily operations.

Updates to This Statement

This GDPR Compliance Statement may be updated from time to time to reflect changes in laws, regulations, or company practices. Any important updates will be shared through notices on this page.

We encourage customers to review this information regularly to stay informed about our privacy practices.

Contact Us

Carestream Dental supports the core principles of GDPR and believes in using personal data fairly, transparently, and securely.

If you have questions or concerns about GDPR or data privacy, you can contact us at:

privacy@csdental.com