Please note: This translation of the original German privacy policy can – even when the translation was done with the utmost care – result in different interpretations/meanings. For means of interpretation the German version shall prevail
Data protection information of Zahnimplantate Berlin
überörtliche zahnärztliche Berufsausübungsgemeinschaft Öztan &Partner GbR
As of 25 May 2018, the requirements of the EU General Data Protection Regulation apply (in the following: GDPR). In the following, we would like to inform you about the processing of personal data carried out by Überörtliche Zahnärztliche Berufsausübungsgemeinschaft Öztan & Partner GbR (hereinafter Öztan & Partner GbR) in accordance with this new regulation (see Article 13 GDPR). Please read our data protection information carefully. If you have any questions or comments about this data protection information, you can send them at any time to the e-mail address provided in section 2.
Table of contents
- Overview
- Who is responsible for data processing on this website and how can the data protection officer be contacted?
- How, for what purpose, and on what legal basis are your data processed?
- How and on what legal basis do we process your data when you access our website?
- How, to what extent, and on what legal basis do we process your data when concluding, performing or terminating a contract?
- How and on what legal basis do we process your data for advertising purposes?
- How, for what purpose and on what legal basis do we process your data in relation to our website and our website optimisation?
- When do we disclose your data to recipients outside the EU?
- What rights do you have regarding your data?
- How long do we store your data?
1. Overview
The following data protection information explains the nature and scope of the processing of so-called personal data by Öztan & Partner GbR. Personal data is information that is or can be directly or indirectly assigned to your person.
Data processing by Öztan & Partner GbR can essentially be divided into two categories:
- The necessary data is processed for the purpose of processing your appointment and/or treatment-related requests.
- When you access the website of Öztan & Partner GbR, various information is exchanged between your terminal device and our server. This may also include personal data. The information collected in this way is used, among other things, to optimise our website or to display advertising in the browser of your terminal device. You have various rights pursuant to the GDPR which you can assert against us. This includes the right to object to selected data processing, in particular data processing for advertising purposes. The possibility of objection is highlighted in print.
If you have any questions about our data protection information, you are welcome to contact our external data protection officer at any time. You will find the contact details below.
2. Who is responsible for data processing on this website and how can the data protection officer be contacted?
This data protection information applies to the data processing by Öztan & Partner GbR, Dörpfeldstraße 46, 12489 Berlin (“Controller”), and for the following website
WWW.ZAHNIMPLANTATE-BERLIN.DENTAL
You can contact the data protection officer of Öztan & Partner GbR at the above address, for the attention of the data protection officer, or at datenschutzbeauftragter@zahnkultur-berlin.de
3. How, for what purpose, and on what legal basis are your data processed?
3.1. How and on what legal basis do we process your data when you access our website?
When accessing our website, information is automatically sent to the server of our website by the browser used on your terminal device and stored temporarily in a so-called log file. We have no influence over this. The following information is also recorded without your participation and stored until it is automatically deleted:
- the IP address of the requesting Internet-enabled device
- date and time of access
- the name and URL of the retrieved file
- the website from which the access takes place (referrer URL)
- the browser used and, if applicable, the operating system of your Internet-enabled computer and the name of your access provider.
The legal basis for the processing of the IP address is Article 6 (1) lit. f GDPR. Our legitimate interest follows from the purposes of data collection listed below. At this point, we would like to point out that the data collected does not enable us to draw any direct conclusions about your identity and that we do not draw any such conclusions.
The IP address of your terminal device and the other data listed above are used by us for the following purposes:
- ensure smooth connection establishment,
- ensure comfortable use of our website,
- evaluation of system security and stability.
The data are stored for a period of 7 days and then automatically deleted. Furthermore, we use so-called cookies and tracking tools for our website. The exact nature of these processes and how your data will be used for this purpose is explained in more detail in section 3.4. below.
If you have agreed to so-called geolocation in your browser or operating system or other settings of your terminal device, we use this function to offer you individual services related to your current location (e.g. the location of our medical practice). We process your location data processed in this way exclusively for this function. Once you end the use, the data will be deleted.
3.2 How, to what extent, and on what legal basis do we process your data when concluding, performing or terminating a contract?
-
-
- Data processing upon conclusion of contract
The object of Öztan & Partner GbR is dental services (examinations, treatments, consulting, etc.). In this context, we process the data required for the conclusion, performance or termination of a contract with you. These include:
- first name, surname
- billing address
- billing and payment data
- your health insurance provider and type of health insurance (private/statutory)
- e-mail address, if applicable
- date of birth, if applicable
- phone number, if applicable
- other treatment-related information (e.g. type of complaints etc.)
The legal basis for this could be Article 6 (1) lit. b GDPR—i.e. you provide us with the data on the basis of the contractual relationship between you and us—or Article 9 (2) lit. h GDPR. If we do not use your contact data for advertising purposes (see section 3.3. below), we store the data collected for the processing of the contract until the expiry of the statutory or, if applicable, contractual warranty and guarantee rights. After the expiry of this period, we retain the information of the contractual relationship required under medical, commercial, and tax law for the statutory periods. The data may be reprocessed during this period (usually ten years from the date of conclusion of the contract or, in some cases, 18 or 30 years), for example in the event of a review by the tax authorities.
-
-
- Transmission to credit agencies
In the event of a default in payment, we will transfer the necessary data to a company commissioned with the assertion of the claim if the other legal requirements are met. The legal basis for this is both Article 6 (1) lit. b and Article 6 (1) lit. f GDPR. The assertion of a contractual claim is to be regarded as a legitimate interest within the meaning of the second provision. If the other legal requirements are met, we will also forward information about the default in payment or any loss of receivables to credit agencies cooperating with us. The legal basis for this is Article 6 (1) lit. f GDPR. The legitimate interest required here results from our interest and that of third parties in reducing contractual risks for future contracts.
-
-
- Contact option via the website
Due to legal regulations, the website of Öztan & Partner GbR contains information that enables rapid electronic contact with our company as well as direct communication with us, which also includes a general address for so-called electronic mail (e-mail address). If a data subject contacts the controller by e-mail or via a contact form, the personal data transmitted by the data subject are automatically stored. Such personal data transmitted on a voluntary basis (cf. Article 6 (1) lit. a or Article 9 (1) GDPR) from a data subject to the controller are stored for the purposes of processing or for contacting the data subject. This personal data is not be passed on to third parties.
3.3. How and on what legal basis do we process your data for advertising purposes?
The following explanations refer to the processing of personal data for advertising purposes. The GDPR declares such data processing to be conceivable in principle on the basis of Article 6 (1) lit. f and to be a legitimate interest. The duration of data storage for advertising purposes does not follow any rigid principles and is based on the question whether the storage is necessary for advertising purposes. At Öztan & Partner GbR we additionally apply the principle of deleting data for advertising purposes after 2 years. Please refer to section 3.3.3. for the procedure that is followed in the event of your objection.
-
-
- Advertising purposes of Öztan & Partner GbR and third parties
If you have been treated by us or have made use of our other dental services, we will treat you as an existing patient. In this case, we process your postal contact data outside of the existence of a specific consent in order to send you information about new products and services or birthday and/or holiday greetings. We process your e-mail address in order to send you information for our own, similar products/services outside the existence of a specific consent.
-
-
- Right to object
You can object to data processing for the above-mentioned purposes at any time free of charge, separately for each respective communication channel and with effect for the future. For this purpose, it is sufficient to send an e-mail or a postal letter to the contact details stated under section 2.
If you file an objection, the contact address concerned will be blocked for further promotional data processing. We would like to point out that in exceptional cases, advertising material may still be sent temporarily even after receipt of your objection. This is due to technical reasons resulting from the necessary lead time of advertisements and does not mean that we will not implement your objection. Thank you for your understanding.
3.4. How, for what purpose and on what legal basis do we process your data in relation to our website and our website optimisation?
-
-
- Cookies—General information
We use so-called cookies on our website. Insofar as these cookies are personal data, they are used on the basis of Article 6 (1) lit. f GDPR. Our interest in optimising our website is to be considered as justified within the meaning of the aforementioned provision. Cookies are small files that are automatically created by your browser and stored on your terminal device (laptop, tablet, smartphone or similar) when you visit our site. Cookies do not cause any damage to your terminal device and do not contain viruses, trojans or other malware. The cookie stores information that is related to the specific terminal device used. However, this does not mean that we will gain immediate knowledge of your identity. The use of cookies serves on the one hand to make the use of our website more pleasant for you. For example, we use so-called session cookies to recognise that you have already visited individual pages of our website. These are automatically deleted after leaving our site. In addition, we also use temporary cookies for the purpose of user-friendliness, which are stored on your terminal device for a certain defined period of time. If you visit our site again to make use of our services, we will automatically recognise that you have already visited us and what entries and settings you have made so that you do not have to enter them again.
We also use cookies to statistically record the use of our website and to evaluate it for the purpose of optimising our offer for you and to show information personalised for you. These cookies enable us to automatically recognise that you have already visited us when you visit our site again. These cookies are automatically deleted after a defined time. Most browsers automatically accept cookies. You can configure your browser so that no cookies are stored on your computer or so that a message always appears before a new cookie is created. However, the complete deactivation of cookies may mean that you cannot use all functions of our website. The length of time cookies are stored depends on their intended use and is not the same for everyone.
Insofar as personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Article 6 (1) lit. a GDPR in the case of a granted consent or in accordance with Article 6 (1) lit. f GDPR to protect our legitimate interests in the best possible functionality of the website and in making the site visit customer-friendly and effective.
On our website we use the cookies listed in the following table, with the functions also specified there. You can also see the storage duration of the respective cookies in the overview:
Name of the cookie, function / purpose, storage time
• Google Analytics, measurement of visitor numbers / user statistics, 26 months
• Google (Invisible) reCAPTCHA, securing the form, 12 months
• Google Maps, contact / directions, depending on user settings
• Google AdWords Conversion Tracking, 30 days
-
-
- Google Analytics
For the purpose of adequately designing and continually optimising our pages, we use Google Analytics, a web analysis service offered by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”), on the basis of your consent (see Article 6 (1) lit. a GDPR). Furthermore, the use of Google Analytics for the purpose of adequately designing and continuously optimising our pages represents a legitimate interest within the meaning of Article 6 (1) lit. f GDPR.
Google Analytics uses cookies with a validity of 14 months to record your access data when you visit our website. Google combines the access data on our behalf into pseudonymous usage profiles and transfers them to a Google server in the USA. Your IP address is anonymised beforehand. We are therefore unable to determine which usage profiles belong to a particular user. We can therefore neither identify you nor determine how you use our website on the basis of the data collected by Google.
The information generated by the cookie about your use of this website such as
- browser type/version,
- the operating system used,
- referrer URL (the previously visited page),
- host name of the accessing computer (IP address),
- time of the server request,
are transferred to a Google server in the USA and stored there.
In the event that personal data is exceptionally transferred to the USA, Google has also agreed to submit to the EU-US Privacy Shield. Google has thus committed itself to safeguarding the European data protection principles and the local level of data protection, including in the context of data processing taking place within the USA.
Google will use the information gained from the cookies on our behalf to evaluate the use of our website, to compile reports on website activities, and to provide us with further services associated with use of the website and the Internet. You can also find further information on this in the Data Protection Policy of Google Analytics. Google Analytics sets the following three cookies for the specified purpose with the respective storage period: “_ga” for 2 years, “_gid” for 24 hours (both to distinguish website visitors) and “_gat” for 1 minute (to reduce queries to the Google servers)
You can object to the web analysis by Google at any time. You have several options for this:
- You can set your browser to block cookies from Google Analytics.
- You can adjust your Google advertising settings.
- You can set a deactivation cookie by clicking here: Verbiete Google Analytics, mich zu verfolgen (Prohibit Google Analytics from tracking me)
- You can install the deactivation plug-in provided by Google at the following link from Google in your Firefox, Internet Explorer or Chrome browsers (this type does not work on mobile devices): link browser plug-in
Further information about Google Analytics can be found in the Google Privacy Policy.
-
-
- Google reCAPTCHA
On this website we also use the reCAPTCHA feature of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This function is mainly used to distinguish whether an entry is made by a natural person or is improperly made by machine and automated processing. The service comprises the sending of the IP address and, if applicable, other data required by Google for the service reCAPTCHA to Google and is carried out in accordance with Article 6 (1) lit. f GDPR on the basis of our legitimate interest in establishing individual responsibility on the Internet and avoiding misuse and spam. In the course of using Google reCAPTCHA, personal data may also be transferred to the servers of Google LLC. in the USA.
In the event that personal data is transferred to Google LLC. with its registered office in the USA, Google LLC. has certified itself for the US-European data protection agreement “Privacy Shield”, which guarantees compliance with the level of data protection applicable in the EU. A current certificate can be viewed here: https://www.privacyshield.gov/list
Further information on Google reCAPTCHA and Google’s Privacy Policy is available at the following link: https://www.google.com/intl/de/policies/privacy/
-
-
- Google Maps
This website uses Google Maps to display interactive maps and to provide directions. Google Maps is a map service by Google Inc., 1600 Amphitheatre Parkway, Mountain View, California 94043, USA. By using Google Maps, information about the use of this website including your IP address and the (start) address entered in the route planner function can be transmitted to Google in the USA. When you access a page of our website that contains Google Maps, your browser establishes a direct connection with the Google servers. The map content is transmitted by Google directly to your browser and integrated into the website. We therefore have no influence on the extent of the data collected by Google in this way. According to our state of knowledge, these include at least the following data:
- the date and time of the visit to the relevant website,
- Internet address or URL of the web page called up,
- IP address,
- (start) address entered during route planning.
We have no influence on the further processing and use of the data by Google and therefore cannot assume any responsibility for this.
If you do not want Google to collect, process or use data about you via our website, you can deactivate JavaScript in your browser settings. In this case, however, you will not be able to use our map display.
The purpose and scope of the data collection and the further processing and use of the data by Google, as well as your rights and setting options for protecting your privacy, are outlined in the Google Privacy Policy. There, you can also manage and protect your data by changing your settings in the Privacy Center.
-
-
- Google Web Fonts
This website uses so-called web fonts provided by Google to ensure the consistent presentation of fonts. When you access a website, your browser downloads the required web fonts in your browser’s cache to present text and fonts correctly. If your browser does not support Web Fonts, a standard font from your computer will be used.
You can find further information on Google Web Fonts at https://developers.google.com/fonts/faq and in Google’s Privacy Policy: https://www.google.com/policies/privacy/
-
-
- Objection/opt-out option
In addition to the described deactivation methods, you can also generally prevent the described targeting technologies with the appropriate cookie settings in your browser (see also section 3.4.1.). In addition, you have the option of deactivating preference-based advertising with the preference manager available here.
-
-
- Hyperlinks to third-party websites
On our website, we use hyperlinks to the websites of the social networks Facebook and Twitter on the basis of Article 6 (1) lit. f GDPR in order to promote our company. The advertising purpose behind this is to be regarded as a legitimate interest within the meaning of the GDPR. Their respective providers are responsible for ensuring operation that is compliant with data protection.
-
-
- Jameda hyperlink
Our website also includes a hyperlink to Jameda, the Internet advertising portal for doctors and other healthcare professionals. You can recognise the Jameda hyperlink by the Jameda logo (a white face with glasses on a blue background). When you click on the Jameda hyperlink, you will be redirected to our contact details and reviews at Jameda in a separate browser window. If you are logged in to your Jameda user account, you can rate us at Jameda. In addition, if you are logged in to your Jameda user account, Jameda will be able to assign your visit to our website to you and your user account. Please note that we obtain no knowledge about the content of the transferred data or the use of such data by Jameda.
You can find further information on this here. If you do not want Jameda to be able to assign your visit to our website to your Jameda user account, please log out of your Jameda user account.
4. When do we disclose your data to recipients outside the EU?
With the exception of the processing described under section 3.4., we do not pass on your data to recipients based outside the European Union or the European Economic Area. The processing mentioned under section 3.4. results in a data transfer to the servers of the providers of tracking technologies commissioned by us. These servers are located in the USA. The data transfer is carried out according to the principles of the so-called Privacy Shield and on the basis of so-called standard contractual clauses of the EU Commission.
5. What rights do you have regarding your data?
- Overview
In addition to the right to revoke your consent granted to us, you are entitled to the following further rights if the respective legal requirements are met:
- Right to information about your personal data stored with us in accordance with Article 15 GDPR; in particular, you can obtain information about the purposes of processing, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the origin of your data if this data were not collected directly from you,
- Right to rectification of incorrect data or completion of correct data in accordance with Article 16 GDPR,
- Right to erasure of your data stored with us in accordance with Article 17 GDPR insofar as no legal or contractual retention periods or other legal obligations or rights to further storage must be observed,
- Right to the restriction of the processing of your data in accordance with Article 18 GDPR, if the accuracy of the data is disputed by you, if the processing is unlawful but you refuse the erasure of your data; the controller no longer requires the data, but you require it for the assertion, exercise or defence of legal claims, or if you have lodged an objection to the processing pursuant to Article 21 GDPR;
- Right to data transferability in accordance with Article 20 GDPR, i.e. the right to have selected data stored by us about you transferred in a common, machine-readable format, or to request transfer to another controller
- Right to appeal to a supervisory authority. You can generally contact the supervisory authority of your usual place of residence or workplace or our head office for this purpose.
- Right to object
Under the conditions of Article 21 (1) GDPR, the data processing may be objected to for reasons arising from the specific situation of the data subject.
The above general right of objection applies to all processing purposes described in this data protection information which are processed on the basis of Article 6 (1) lit. f GDPR. In contrast to the special right of objection with regard to data processing for advertising purposes (see section 3.3.3. above), we are only obliged under the GDPR to implement such a general objection if you give us reasons of overriding importance (e.g. a possible danger to life or health). In addition, it is possible to contact the supervisory authority responsible for Öztan & Partner GbR, the Berlin Commissioner for Data Protection and Freedom of Information.
6. How long do we store your data?
The duration of the storage of personal data is determined by the respective legal retention period (e.g. retention periods under medical, commercial, and tax law). This period is usually 3 years (e.g. in the case of the regular limitation period for contractual or medical liability claims) or 10 years (e.g. in the case of retention periods under tax law). In some cases, the retention period is 18 or 30 years (e.g. in the case of chronic diseases). After expiry of the period, the corresponding data are routinely deleted, provided that the data are no longer required for the fulfilment or initiation of the contract and/or we have no justified interest in further storage.
Updated: December 2019