1. What Is Explicit Consent and When Is It Needed?
Explicit consent is a freely given, informed and specific indication of agreement. To be valid it must not be given in blanket form, the provision of the service must not be conditional on it, and it must be withdrawable at any time.
- Processing special category data such as health data generally requires explicit consent (Art. 6(2) KVKK, Art. 9(2)(a) GDPR).
- Explicit consent is required for international transfers where no appropriate safeguard mechanism is available (Art. 9 KVKK).
- Sending commercial electronic messages requires prior opt-in.
- Non-essential cookies may only be set with consent.
Withdrawing consent
You may withdraw your consent at any time without giving reasons, by writing to support@dentexa.co or updating your preferences in account settings. Withdrawal does not affect processing carried out lawfully before it.
2. Consent Statement for Subscribers
None of the consents below is required to use Dentexa AI; each may be given or refused independently. Refusing does not prevent you from using the Service.
- International transfer consent
- I give explicit consent to the transfer of my personal data processed by Dentexa AI to the providers established abroad listed in section 7 of the Privacy Policy (Supabase, Meta/WhatsApp, OpenRouter and model providers, Google, Stripe, Vercel, and the practice management software provider connected by the clinic — Open Dental or Dentally), solely for the purpose of providing the Service.
- Commercial electronic message consent
- I consent to receiving commercial electronic messages from Dentexa AI regarding product updates, campaigns and promotions by email and/or SMS. I may opt out at any time via the link in the message.
- Reference use consent
- I consent to Dentexa AI using my clinic's trade name and logo as a reference customer on its website and promotional materials. (Entirely optional.)
Optional consents
None of these three consents is a precondition for using the Service. Where transfer consent is not given, transfers are carried out on the basis of the standard contract mechanisms published by the Board.
3. For Clinics: Patient Privacy Notice Template
How to use
The template below is an example of the privacy notice your clinic must provide to patients as controller. Fill in the bracketed fields with your own details and have the text reviewed by your legal adviser. This template is not legal advice.
«[Clinic Name], as data controller, processes the personal data you share with us through our WhatsApp line as follows.
Data processed: your phone number, WhatsApp profile name, the content of messages and media you send, your appointment date and time, and — where you voluntarily share it — information about your dental health (special category data).
Purposes: receiving and scheduling appointment requests, answering your questions, providing information about treatment processes, keeping patient records and meeting obligations arising from healthcare legislation.
Legal bases: performance of a contract, compliance with a legal obligation, and the establishment and protection of rights; for health data, your explicit consent or processing by healthcare personnel bound by a duty of confidentiality.
Use of AI: your messages are answered by the Dentexa AI AI assistant operating on behalf of our clinic. The assistant does not diagnose or prescribe treatment or medication; the information it provides does not replace an examination by a dentist. You may request to speak with a member of staff at any time.
Transfers: your data is transferred to Farvex Labs LLC, acting as processor on behalf of our clinic, and to the providers listed in its Privacy Policy — some of which are established abroad — solely for the purpose of delivering the service.
Retention: data is retained for the periods prescribed by healthcare legislation for patient records and for the [__] months we have set for messaging records.
Your rights: you may submit your requests to [clinic email] or in writing to [clinic address]. Your application will be concluded within 30 days at the latest.»
4. For Clinics: Patient Consent Template
«I have read and understood the Privacy Notice provided to me by [Clinic Name].
- I give explicit consent to the processing of my messages sent through the WhatsApp line, which may contain information about my dental health and which I understand to be special category personal data, for the purposes of appointment scheduling and information provision.
- I give explicit consent to my messages being processed by the AI-assisted infrastructure used by the clinic and, in that context, transferred to service providers established abroad.
- I understand that I may withdraw this consent at any time without giving reasons.»
Evidencing consent
The burden of proving that consent was obtained rests with the controller. Record it with a date and time stamp — in the WhatsApp conversation itself (an 'I have read and accept' reply), on a printed patient intake form, or in your clinic software.
5. Sample Opening Message for the WhatsApp Line
A short message that can be sent automatically when a patient first contacts your line, initiating the notice and consent flow:
«Hello! I am the digital assistant of [Clinic Name]. I can help with appointments and general questions. Our conversation is supported by AI through our service provider and your personal data is processed under our Privacy Notice: [short link]. If you share information about your health, you consent to it being processed; you can type 'AGENT' at any time to reach a member of staff. Diagnosis and treatment decisions are made only by your dentist; in an emergency call your local emergency number.»
WhatsApp policy compliance
The patient must initiate first contact. Sending bulk promotional messages without opt-in breaches both electronic communications law and the WhatsApp Business Policies, and may result in your line being disabled.
6. Disclaimer
The templates on this page are provided for information only and do not constitute legal advice. Because each clinic's processing activities differ, you should adapt them to your own processes and have them reviewed by a legal adviser. Farvex Labs LLC accepts no liability for consequences arising from their use.