privacy

REMAIN LOYAL DENTISTS

Data protection

With this data protection declaration, we would like to inform you about the type, scope and purpose of the processing of personal data (hereinafter also referred to as "data"). Personal data is all data that is personally related to you, e.g. B. name, address, e-mail address or your user behavior. The data protection declaration applies to all data processing operations carried out by us both within the scope of our core activity and for the online media provided by us.

Who is responsible for data processing in our company

Responsible for data processing is:

REMAIN LOYAL DENTISTS
dr Lennard Krueger
Bleibtreustr. 38
10623 Berlin
Germany
0308816658
info@bleibtreu-zahnaerzte.de
https://www.bleibtreu-zahnaerzte.de/impressum

Contact details of our data protection officer

You can contact our data protection officer by e-mail at info@bleibtreu-zahnaerzte.de or at our postal address with the addition "to the data protection officer".

Processing of your data in the context of the healthcare services we provide

If you are our patient or business partner or are interested in our services, the type, scope and purpose of the processing of your data is based on the contractual or pre-contractual relationships between us. In this sense, the data processed by us includes all data that you provide or have provided for the purpose of using the contractual or pre-contractual services and that are required to process your inquiry or the contract concluded between us. Unless otherwise stated in the further information in this data protection declaration, the processing of your data and its transfer to third parties is limited to the data required to answer your inquiries and/or to fulfill the contract concluded between you and us, to protect our rights and are necessary and appropriate for the fulfillment of legal obligations. We will inform you which data is required for this before or as part of the data collection. Insofar as we use third-party providers to provide our services, the data protection notices of the respective third-party providers apply.

Special Categories of Data

If you are a patient with us or send us an inquiry because you are interested in the health services we offer, so-called special categories of data may also be affected by the data processing. This includes, in particular, information about your health, possibly related to your sex life or sexual orientation, genetic and biometric information, as well as information revealing your racial or ethnic origin (Article 9 (1) GDPR). We process this data exclusively for the purposes of your health care or to protect your vital interests. If we need the information just mentioned for purposes other than those just mentioned (health care, protection of vital interests), we will inform you of this in detail before we process this data and then obtain your express consent.

If it is necessary to fulfill the contract concluded between us, to protect your vital interests or due to legal requirements, we will transmit your data to third parties, such as authorities, medical facilities, laboratories, accounting offices and tax consultants, in compliance with our professional requirements for confidentiality.

Affected data:

Inventory data (e.g. names, addresses)
Payment data (e.g. bank details, invoices)
Contact data (e.g. e-mail address, telephone number, postal address)
Contract data (e.g. subject of the contract, contract duration)

Special categories of personal data:

health data
genetic data
biometric data
Data on sex life or sexual orientation
Data showing racial and ethnic origin

Affected people:
Patients, interested parties, business and contractual partners

Purpose of processing:
Processing of contractual services, communication and answering contact requests, office and organizational procedures

Legal basis: Fulfillment of contract and pre-contractual enquiries, Article 6(1)(b) GDPR, legal obligation, Article 6(1)(c) GDPR, legitimate interest, Article 6(1)(f) GDPR

Deletion:
See the point: "When do we delete your data?". In addition, we would like to draw your attention to the fact that we are legally obliged to keep patient files for a period of 10 years, § 630 f BGB. We have to keep blood transfusions for 15 years, X-rays for even 30 years. You can find one here Overview of our obligations to keep your health data safe. In addition, potential liability for damages may make it necessary to keep your data until the 30-year statute of limitations has expired.

Your rights under the GDPR

According to the GDPR, you are entitled to the rights listed below, which you can assert at any time with the person responsible named in Section 1 of this data protection declaration:

Right to information: You have the right to request information from us as to whether and which data we process from you.
Right to rectification: You have the right to request the correction of inaccurate data or the completion of incomplete data.
Right to erasure: You have the right to request the deletion of your data.
Right to Restriction: In certain cases, you have the right to request that we only process your data to a limited extent.
Right to data portability: You have the right to request that we transmit your data to you or another person responsible in a structured, commonly used and machine-readable format.
Right to complain: You have the right to complain to a supervisory authority. The supervisory authority of your usual place of residence, your workplace or our company headquarters is responsible.

right of withdrawal

You have the right to revoke your consent to data processing at any time.

Right to object

You have the right to object at any time to the processing of your data, which we base on our legitimate interest in accordance with Article 6 (1) (f) GDPR. If you make use of your right of objection, we ask you to explain the reasons. We will then no longer process your personal data unless we can prove to you that compelling reasons for data processing worthy of protection outweigh your interests and rights.

Regardless of the above, you have the right to object to the processing of your personal data for advertising and data analysis purposes at any time.

Please address your objection to the contact address of the person responsible given above.

When do we delete your data?

We delete your data when we no longer need them or when you tell us to. This means that - unless otherwise stated in the individual data protection notices of this data protection declaration - we delete your data,

if the purpose of the data processing no longer applies and the legal basis specified in the individual data protection notices no longer exists, e.g.
- after termination of the existing contractual or membership relationship between us (Art. 6 Para. 1 lit. a GDPR) or
- after our legitimate interest in the further processing or storage of your data has ceased to exist (Article 6 (1) (f) GDPR),
if you make use of your right of withdrawal and no other legal basis for the processing within the meaning of Art. 6 Para. 1 lit. bf DSGVO applies,
if you make use of your right to object and there are no compelling reasons worthy of protection to prevent the deletion.

However, if we still have to keep (certain parts) of your data for other purposes, for example because of tax retention periods (usually 6 years for business correspondence or 10 years for accounting documents) or the assertion, exercise or defense of legal claims arising from contractual relationships (up to four years) or the data is needed to protect the rights of another natural or legal person, we will only delete (part of) your data after these periods have expired. However, until these periods expire, we limit the processing of this data to these purposes (fulfilment of storage obligations).

cookies

Our website uses cookies. Cookies are small text files consisting of a series of numbers and letters that are filed and saved on the end device you are using. Cookies are primarily used to exchange information between the end device you are using and our website. This includes, among other things, the language settings on a website, the login status or the point at which a video was viewed.

Two types of cookies are used when you visit our website:

Temporary cookies (session cookies): These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. The session cookies are deleted when you log out or close your browser.
Persistent cookies: Permanent cookies remain stored even after the browser is closed. This allows our website to recognize your computer when you return to our website. Information on language settings or log-in information, for example, is stored in these cookies. In addition, your surfing behavior can be documented and saved with these cookies. This data can be used for statistical, marketing and personalization purposes.

In addition to the above classification, cookies can also be differentiated with regard to their purpose:

Necessary cookies: These are cookies that are strictly necessary for the operation of our website, to save logins or shopping carts for the duration of your session or cookies that are set for security reasons.
Statistics, marketing and personalization cookies: These are cookies that are used for analysis purposes or range measurement. Such “tracking” cookies can store information about search terms entered or the frequency of page views. In addition, the surfing behavior of an individual user (e.g. viewing certain content, using functions, etc.) can also be stored in a user profile. Such profiles are used to show users content that matches their potential interests. Insofar as we use services that store cookies on your end device for statistical, marketing and personalization purposes, we will inform you of this separately in the following sections of our data protection declaration or when obtaining your consent.

Affected data:

Usage data (e.g. access times, websites clicked on)
Communication data (e.g. information about the device used, IP address).

Affected persons :

Users of our online offers

Purpose of processing :
Playing our website, guaranteeing the operation of our website, improving our website, communication and marketing

Legal basis:
Legitimate interest, Art. 6 Para. 1 lit. f GDPR
If we do not obtain your consent to the setting of cookies, we base the processing of your data on our legitimate interest in improving the quality and user-friendliness of our website, in particular the content and functions. You have to object to the use of cookies set by us within the scope of our legitimate interest via the security settings of your browser. There you have the option of specifying whether you do not accept cookies from the outset or only accept them on request, or whether you want cookies to be deleted each time you close your browser. If cookies are deactivated for our website, it may no longer be possible to use all the functions of the website to their full extent.

Consent, Article 6(1)(a) GDPR
If we ask you before you visit our website to allow certain cookies to be placed on your device and you consent to this, the legal basis is the consent you have given. As part of your consent, we will inform you about which cookies we set in detail. If you do not give your consent, only the so-called technically necessary cookies are set, which are required for the proper operation of our website and its display in your browser. If you have consented to the setting of cookies, you can withdraw your consent at any time.

web hosting

We use a provider to maintain our Internet pages, on whose server our Internet pages are stored and made available for access on the Internet (hosting). The provider can process all the data transmitted via the browser you are using that arises when you use our website. This includes, in particular, your IP address, which the provider requires in order to be able to deliver our online offer to the browser you are using, as well as all entries made by you via our website. In addition, the provider we use

the date and time of access to our website
Time zone difference to Greenwich Mean Time (GMT)
Access Status (HTTP Status)
the amount of data transferred
the internet service provider of the accessing system
the type of browser you are using and its version
the operating system you are using
the website from which you may have accessed our website
the pages or subpages that you visit on our website.

raise. The aforementioned data is stored as log files on our provider's servers. This is necessary to ensure the stability and security of the operation of our website.

Affected data:

Content data (e.g. posts, photos, videos)
Usage data (e.g. access times, websites clicked on)
Communication data (e.g. information about the device used, IP address)

Affected persons : users of our website

Purpose of processing: Playing our website, guaranteeing the operation of our website

Legal basis: Legitimate interest, Art. 6 Para. 1 lit. f GDPR

Web host(s) commissioned by us:

wix

Service Provider: Wix.com Ltd., 40 Nemal St., 6350671 Tel Aviv, Israel
Website: https://www.wix.com/#
Data protection: https://www.wix.com/about/privacy

contact

If you contact us via e-mail, social media, telephone, fax, post, our contact form or otherwise and provide us with personal data such as your name, telephone number or e-mail address or other information about yourself or make your request, we process this data to answer your request within the framework of the pre-contractual or contractual relationships existing between us.

Affected data:

Inventory data (e.g. names, addresses)
Contact data (e.g. e-mail address, telephone number, postal address)
Content data (texts, photos, videos)
Contract data (e.g. subject of the contract, contract duration)

Affected people:

Interested parties, customers, business and contractual partners

Purpose of processing:

Communication and answering contact requests, office and organizational procedures

Legal basis: Fulfillment of contract and pre-contractual inquiries, Article 6 Paragraph 1 lit. b GDPR, legitimate interest, Article 6 Paragraph 1 lit. f GDPR

The handling of your data in the application process

If you apply to us, we process the personal data you provide to us in the application process, such as your name, address, place of residence, age, application photo, e-mail and telephone number, professional career including schools, training, studies. If you send the data by e-mail or via a contact form on our website, the data will be processed electronically. If you send your application via the contact form, the transmission of your data is encrypted according to the state of the art. If you send your data by e-mail, we would like to point out that the transmission is usually unencrypted. If an employment contract is concluded after the application process, we will store your data for the purpose of processing the employment relationship in compliance with the statutory provisions.

Affected data:

Inventory data (e.g. names, addresses)
Payment data (e.g. bank details, invoices)
Contact data (e.g. e-mail address, telephone number, postal address)
Contract data (e.g. subject of the contract, contract duration)

Affected people:
Applicants

Purpose of processing :
handling of the application process

Legal basis: Fulfillment of contract and pre-contractual inquiries, Article 6 Paragraph 1 lit. b GDPR, legal obligation, Article 6 Paragraph 1 lit. c GDPR

Deletion:
If an employment contract is not concluded, your data will be deleted after the application process has been completed or no later than 2 months after its completion. This does not apply if legal provisions prevent deletion or if further storage of your data is necessary for the purpose of providing evidence, for example in a procedure under the General Equal Treatment Act (AGG). The application process is considered completed when the rejection is sent to you.

Online Advertising

We use services to display internet advertising. Certain user data is collected via the services we use by means of a cookie or pixel. This includes in particular the information from which website you came to our website (so-called referrers), which pages of our website you accessed, how long you visited our pages and what interactions you carried out there. In addition, data is collected on the browser you are using, the computer system and the type of device. In addition, such a service can also be used to record demographic information, such as age or gender, as pseudonymous values. If you have consented to the collection of your location data, these can also be processed, depending on the provider. In order to collect and store this data, the respective service sets a cookie or a so-called counting pixel on the end device you are using, with which the IP address assigned to you is also collected. However, this is shortened using a so-called IP masking process, so that the IP address can no longer be assigned to your visit to our website. In principle, no clear data such as names or e-mail addresses are stored when using the respective service. This is only the case if you are a member of a social network that offers one of the services listed below and merges your profile with the aforementioned data.

The data is evaluated by the service we use in order to produce a report with statistical statements about the number of visitors generated by the advertising and the success of the advertising measure. The reports show, among other things, the total number of users who were forwarded to our website via our ads. In addition, the reports contain information about the end devices and browsers of the Users, at which locations the users were located, at what times the advertisement was clicked. However, the reports do not contain any information that could be used to personally identify you as a user of our site.

We would like to point out that depending on the location of the service provider, the data collected via the service may be transferred and processed outside the European Union. In this case, there is a risk that the level of data protection prescribed by the GDPR is not observed and that your rights cannot be enforced or can only be enforced with difficulty.

Affected data:

Usage data (e.g. access times, websites clicked on)
Communication data (e.g. information about the device used, IP address)

Affected people:
Users of our online offers

Purpose of processing:
Reach measurement, success control of campaigns, remarketing as well as interest and behavioral marketing

Legal basis: If we have asked you for your consent before using the respective service, this is the legal basis, Article 6 (1) (a) GDPR. In addition, we use the respective service based on our legitimate interest in guiding visitor flows to our website, analyzing these visitor flows in order to be able to continuously improve the functions, offers and user experience, Article 6 Paragraph 1 lit. f GDPR .

We use the following service providers for online advertising:

Google Ads

Service Provider: Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA
Headquarters in Europe: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
Website: https://ads.google.com/home/
Data protection: http://www.google.de/intl/de/policies/privacy

Advertising by email, post or telephone

We process personal data for our advertising communication by e-mail, post or telephone. You can object to receiving our advertising measures at any time or revoke the previously given consent to receive our advertising communication at any time. In order to be able to prove in case of doubt that you gave your consent even after your objection or revocation, we can store your data for up to 4 years after your objection/revocation. We will no longer use your data for other purposes after your objection/revocation. If you want us to delete your data beforehand, we will do so after you have confirmed that you originally gave us your consent.

Affected data:

Contact details (e.g. e-mail, telephone number, postal address)
Inventory data (e.g. names, addresses)

Affected people:

communication partner

Purpose of processing:
Direct advertising measures (marketing) by e-mail, post or telephone

Legal basis: Consent, Article 6(1)(a) GDPR, legitimate interest, Article 6(1)(f) GDPR

Web analysis and statistics

We use web analysis services to record and statistically evaluate the flow of visitors to our website. Such services collect, among other things, data about which website you came to our website from (so-called referrers), which pages of our website you accessed, how long you visited our pages and what interactions you carried out there. In addition, data is collected on the browser you are using, the computer system and the type of device. In addition, such a service can also be used to record demographic information, such as age or gender, as pseudonymous values. If you have consented to the collection of your location data, these can also be processed, depending on the provider.

In order to collect and store this data, the web analysis service we use usually places a cookie on the end device you are using, with which the IP address assigned to you is also collected. However, this is shortened using a so-called IP masking process, so that the IP address can no longer be assigned to your visit to our website. Otherwise, no clear data such as names or e-mail addresses are stored. Neither we nor the service we use knows the identity of the visitors to our website.

We would like to point out that, depending on the country of domicile of the service provider mentioned below, the data collected via the service may be transferred and processed outside the European Union. In this case, there is a risk that the level of data protection prescribed by the GDPR is not observed and that your rights cannot be enforced or can only be enforced with difficulty.

Affected data:

Usage data (e.g. access times, websites clicked on)
Communication data (e.g. information about the device used, IP address).

Affected people:
Users of our online offers

Purpose of processing:
Reach measurement, success control of campaigns, remarketing as well as interest and behavioral marketing

Legal basis:
If we have asked you for your consent before using the respective service, this is the legal basis, Article 6 (1) (a) GDPR. In addition, we use the respective service based on our legitimate interest in analyzing the flow of visitors to our website in order to be able to continuously improve the functions, offers and user experience, Article 6 Paragraph 1 lit. f GDPR.

We use the following web analysis services:

Google Universal Analytics

Service Provider: Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA
Seat within the EU: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
Website: https://marketingplatform.google.com/intl/de/about/analytics/
Data protection: https://policies.google.com/privacy?hl=en
Cross device tracking: With cross-device tracking, with the help of a user ID, not only the data from the websites you visit, but also data from other devices can be evaluated and the user can be recognized on the other device. The user ID will be assigned by us. It serves as a pseudonym. An identification of the internet user is excluded.
Opt-out option: If you do not want your data to be used by Google Analytics. you can set a so-called opt-out plugin, which will prevent your data from being recorded on our website in the future. You can get this plugin here: https://tools.google.com/dlpage/gaoptout?hl=de

Our online presence on social networks

We operate online presences within the social networks listed below. If you visit one of these sites, the data listed below will be collected and processed by the respective provider. As a rule, this data is collected for advertising and market research purposes and usage profiles are created with it. Data can be stored in the usage profiles regardless of the device you are using. This is particularly the case if you are a member of the respective platform and are logged in to it. The usage profiles can be used by the providers to show you interest-based advertising. You have a right of withdrawal against the creation of user profiles. To exercise this, you must contact the respective provider.

If you have an account with one of the providers listed below and are logged in when you visit our website, the respective provider can collect data about your usage behavior on our website. To prevent such a linking of your data, you can log out of the provider's service before visiting our site.

For what purpose and to what extent data is collected by the provider can be found in the respective data protection declarations of the providers communicated below.

We would like to point out that, depending on the country of domicile of the provider named below, the data collected via its platform may be transferred and processed outside of the European Union. In this case, there is a risk that the level of data protection prescribed by the GDPR is not observed and that your rights cannot be enforced or can only be enforced with difficulty.

Affected data:

Inventory and contact data (e.g. name, address, telephone number, e-mail address)
Content data (e.g. posts, photos, videos)
Usage data (e.g. access times, websites clicked on)
Communication data (e.g. information about the device used, IP address).

Purpose of processing:
Communication and marketing, tracking and analysis of user behavior

Legal basis: Consent, Article 6(1)(a) GDPR, legitimate interests Article 6(1)(f) GDPR

Opportunities to object:
For the respective objection options (opt-out), we refer to the following linked information from the providers.

We maintain online presences on the following social networks:

Facebook

Service Provider: Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA
Headquarters in the EU: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Website: https://www.facebook.com/
Data protection: https://www.facebook.com/about/privacy/
Privacy Policy for Facebook Pages: https://www.facebook.com/legal/terms/information_about_page_insights_data

Instagram

Service Provider: Instagram Inc., 1601 Willow Road, Menlo Park CA 94025, USA
Parent company: Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA
Headquarters in the EU: Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland
Website: https://www.instagram.com/
Data protection: http://instagram.com/about/legal/privacy

messenger services

We communicate via messenger services. Messenger services are chat programs that can be used to send text messages, but also image or video files between users in real time over the Internet. In addition, messenger services can also be used to transmit emoticons, electronic greeting cards and contacts. In order for messages to be transmitted, participants must be connected to each other with a computer program (called a client) over a network such as the Internet, either directly or through a server. As a rule, messages can also be sent when the person you are talking to is not online - the message is then buffered by the service's server and later delivered to the recipient when he or she is available again. Finally, these services can also be used for screen sharing and online games.

If the service uses end-to-end encryption for the content sent (texts, attachments), only the selected communication partners can view the message, but not third parties or the service provider itself. In this respect, we recommend installing updates for the service regularly to ensure that the content is encrypted. However, the service provider has the possibility to access the metadata of the communication. This includes the time and (depending on the setting) location of the communication as well as the device you are using.

Affected data:

Inventory and contact data (e.g. name, telephone number, e-mail address)
Content data (e.g. posts, photos, videos)
Usage data (e.g. access times, websites clicked on)
Communication data (e.g. information about the device used, IP address).

Purpose of processing :

communication and marketing

Legal basis:
If we have asked you for your consent before using the respective service, this is the legal basis, Article 6 (1) (a) GDPR. In this respect, we make it clear that we will not transmit your contact data to the service provider for the first time without your consent. If we communicate with you as part of the initiation of a contract or as part of an existing contractual relationship via one of the following services, the legal basis is the fulfillment or preparation of the contract, Article 6 (1) (b) GDPR. In addition, we refer to our legitimate interests in fast and efficient communication and the fulfillment of the needs of our communication partners for the communication of the services listed below, Article 6 Paragraph 1 lit. f GDPR.

Opportunities to object: You can revoke the consent given to us for the use of the following service at any time. You can also object to communication via the messenger service at any time.

We use the following messenger services:

Service Provider: WhatsApp Inc. 1601 Willow Road Menlo Park, California 94025, USA
Registered office in the EU: Whatsapp Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Parent company: Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA
Website: https://www.whatsapp.com/
Data protection: https://www.whatsapp.com/legal/?eea=1#privacy-policy

Content Services

We use certain services to be able to display certain content or graphics (videos, images, music, fonts, maps) via our website. The services we use process the IP address assigned to you at the time of your visit to our website, since this is the only way the respective content can be displayed in the browser you are using. In addition, the providers of these services can set additional cookies on your end device, which collect information about your usage behavior, your interests, the device you are using and the browser you are using, as well as the time and duration of your session. The providers use this data regularly for analysis, statistical and marketing purposes. In addition, this information can also be linked to information from other sources. This applies in particular if you have an account with the service provider yourself and are logged in there at the time of the session.

We would like to point out that, depending on the country in which the service provider named below is based, the data specified below may be transferred and processed on servers outside the European Union. In this case, there is a risk that the level of data protection prescribed by the GDPR is not observed and that your rights cannot be enforced or can only be enforced with difficulty.

Affected data:

Usage data (e.g. access times, websites clicked on)
Communication data (e.g. information about the device used, IP address)

Affected persons :
users of our website

Purpose of processing: Playing our website, offering content, guaranteeing the operation of our website

Legal basis: Consent via cookie content banners, Article 6(1)(a) GDPR, legitimate interests, Article 6(1)(f) GDPR

We use the following content services:

Google Maps

We use Google Maps on our website. The IP address of the visitor is collected and processed by Google. If you visit a website on which Google Maps is integrated, regardless of whether Google Maps is actually used or you are logged into your Google account, your IP address and your location data (the latter usually not without your consent) submitted to Google. Your IP address will be assigned to your Google account if you are logged in there when you visit our website.

Service Provider: Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA
Registered office in the EU: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Website: https://www.google.de/maps
Data protection: https://policies.google.com/privacy
Opt-out option: https://tools.google.com/dlpage/gaoptout?hl=de

Safety measures

We also take state-of-the-art technical and organizational security measures to comply with the provisions of data protection laws and to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorized access by third parties.

Updating and changing this data protection declaration

This data protection declaration is currently valid and has the status of July 2021. Due to changed legal or official requirements, it may be necessary to adapt this data protection declaration.

This data protection declaration was created with the help of the data protection generator from SOS Recht. SOS Recht is an offer from Mueller.legal Rechtsanwälte Partnerschaft based in Berlin.