Privacy policy
Controller
SC Investors Group Kft. (Aurora Medical). Contact: info@auroraklinika.hu, +36 70 943 6882. Company details are in the Imprint.
When we receive your data
When you book online (foglalas.auroraklinika.hu).
When you message us on Messenger, Instagram, WhatsApp or Telegram, where an AI booking assistant replies.
When you call us (the call may be answered by an AI voice assistant) or reply to our SMS or email notifications.
When you request a call back on this website or visit the clinic in person.
What data we process
Name and phone number, optionally an email address for online booking; your language.
Booking details: service, doctor, time, payment method. We do not process card data.
The content of messages and calls with the assistant, plus channel identifiers and timestamps.
We do not ask for complaints, symptoms or other health information when you book, and the booking system does not store them. Medical records created at your visit are kept under Hungarian Act XLVII of 1997.
AI assistant
Messages and calls are answered by artificial intelligence (Anthropic Claude). We ask for your consent before the AI processes the conversation, and you can withdraw it at any time.
You can ask for a person at any time. The assistant makes no automated decisions with legal effect on you (GDPR Art. 22).
Purposes and legal bases
Conversation with the assistant: consent (GDPR Art. 6(1)(a)).
Booking, rescheduling, confirmations and reminders by SMS or email: entering into and performing a contract (Art. 6(1)(b)).
Accounting and tax records: legal obligation (Art. 6(1)(c)).
Security, abuse prevention and logging: legitimate interest (Art. 6(1)(f)).
Call back from the website: consent (Art. 6(1)(a)).
Who receives the data
Only clinic staff see your data, within their role. Our processors:
Supabase (database, EU, Frankfurt), Railway (application server, EU), WebSupport Magyarország Kft. (website hosting).
Anthropic (artificial intelligence, USA; standard contractual clauses, GDPR Art. 46).
Meta Platforms Ireland (Messenger, Instagram, WhatsApp), Telegram (if you choose that channel, and for staff notifications).
Telnyx (SMS and phone, USA; EU standard contractual clauses, Decision (EU) 2021/914), Deepgram (speech recognition, USA; standard contractual clauses, GDPR Art. 46), ElevenLabs (speech synthesis, USA; EU-US Data Privacy Framework, GDPR Art. 45), Resend (email delivery, USA; EU-US Data Privacy Framework, GDPR Art. 45).
Our accountant and public authorities where the law requires it.
Retention
Name and phone number are anonymised after 1 year of inactivity.
Conversations with the assistant and call transcripts: 30 days.
Booking and payment data that count as accounting records: as required by the Accounting Act (Act C of 2000, s. 169, at least 8 years), without your name.
Call-back requests from the website: your name and phone number are stored encrypted in our system and our staff are notified (the staff Telegram group and the clinic mailbox). Name and phone number are anonymised after 1 year unless you have booked a visit in the meantime.
Cookies
This website uses no analytics or advertising cookies, so it shows no cookie banner.
Your rights
You may request access, rectification, erasure, restriction and portability, object, and withdraw consent: info@auroraklinika.hu. We complete erasure requests within 30 days.
You can complain to the Hungarian data protection authority NAIH (1055 Budapest, Falk Miksa utca 9-11., naih.hu) or go to court.