privacy
Welcome to our website. You can find our privacy policy below:
I. General information
Contact details of the person responsible
Dental office
Contact person: Dr.med.dent. Orcan Yüksel & Dr.med.dent. Bernhard Giesenhagen
Bockenheimer Landstr. 92
60323 Frankfurt
Telephone: (069) 7 43 24 26
Fax: (069) 7 43 26 68
Email: zahnarzt.frankfurt@gmail.com
II. Specific information on the collection of personal data
1. Visit the website
a) Purpose of data collection and processing
Every time a user accesses a page of our offer and every time a file stored on the website is called up, access data about this process is stored in a log file. Each data record consists of:
(1) the page from which the file was requested,
(2) the name of the file,
(3) the date and time of the request,
(4) the amount of data transferred,
(5) the access status (file transferred, file not found etc.),
(6) a description of the type of operating system and web browser used,
(7) the client IP address.
The client IP address is used for the purpose of transmitting the requested data; after the technical requirement has ceased to exist, it is anonymized by deleting the last number block (Ipv4) or the last octet (Ipv6).
b) Duration of storage
The data is stored every time a user accesses a page of our offer and every time our website is accessed and is deleted as soon as it is no longer required for the purpose of collection, which is the case when the visitor leaves our website.
c) Legal basis
The temporary storage of the aforementioned data takes place on the legal basis of Article 6 (1) (f) of the EU General Data Protection Regulation (hereinafter "GDPR"). The legitimate interest lies in the provision of our website.
d) Opposition and removal option
The data subject can object to the processing.
2. Execution of the contract
a) Purpose of data collection and processing
Name, address (es), bank details, e-mail address, telephone or fax number, client IP address at the time of submitting a contract declaration are collected, stored and processed solely for the purpose of establishing or executing the contract, in particular the billing and the Execution of the contract includes.
The personal data will only be passed on to third parties if this is necessary for the purpose of executing the contract, for example when commissioning a shipping company or using a payment service company.
b) Duration of storage
The data are deleted as soon as they are no longer required for the purposes for which they were collected or otherwise processed. This period is five years for personal data subject to Section 147 AO and ten years for personal data subject to Section 257 HGB. The deadlines begin at the end of the calendar year in which the data was collected.
c) Legal basis
The aforementioned data is stored on the legal basis of Art. 6 Paragraph 1 lit. b and lit. c GDPR.
d) Opposition and removal option
Since there are legally standardized retention periods and the data must remain stored and processed for the execution of the contract, an objection or deletion is not possible.
3. E-mail, fax or telephone contact
a) Purpose of data collection and use
A user can contact us by email (also using the contact form), fax or telephone. We save the data transmitted to us and provided by the person concerned in order to process the request. These data are name, address, e-mail address, telephone and / or fax number, date and time of the request and the description of the request, if necessary contract data, if the request is made in the context of entering into or processing a contract. The data will not be passed on to third parties. They are used to process the data subject's contact request.
b) Duration of storage
As soon as the data is no longer necessary to achieve the purpose, it will be deleted, which is the case when the conversation has finally been resolved and the matter has been clarified and there are no contractual or tax retention periods to the contrary. This period is five years for personal data subject to Section 147 AO and ten years for personal data subject to Section 257 HGB. The deadlines begin at the end of the calendar year in which the data was collected.
c) Legal basis
The aforementioned data is stored on the legal basis of Art. 6 Paragraph 1 lit. 6 para. 1 lit.f GDPR. The legitimate interest of the person responsible is to be able to process the contact request and to be able to prevent misuse of the contact request. A revocation of the consent at any time does not affect the legality of the processing of personal data based on the consent up to the time of revocation.
d) Opposition and removal option
The person concerned has the option at any time to revoke their consent to data processing and to object to storage. The data stored for the process will then be deleted. If a contract has been concluded, what has been said above under Section II.2 applies.
III. Rights of the data subject
If "personal data" is processed by the user on our website, the person concerned (affected person) has the following rights vis-Ã -vis the person responsible in accordance with the GDPR.
1. Right to information according to Art. 15 GDPR
The person concerned has the right to the following information:
a) the purposes of the processing;
b) the categories of personal data that are processed;
c) the recipients or categories of recipients to whom the personal data have been disclosed or are still being disclosed, in particular to recipients in third countries or to international organizations;
d) if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration;
e) the existence of a right to correction or deletion of personal data concerning you or to restriction of processing by the person responsible or a right to object to this processing;
f) the right to lodge a complaint with a supervisory authority;
g) if the personal data are not collected from the data subject, all available information on the origin of the data;
h) the existence of automated decision-making including profiling in accordance with Art. 22 Para. 1 and 4 GDPR and - at least in these cases - meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.
i) If personal data are transmitted to a third country or to an international organization, the person concerned has the right to be informed about the appropriate guarantees in accordance with Art. 46 GDPR in connection with the transmission.
We provide the data subject with a copy of the personal data that is the subject of the processing. For all further copies that the person concerned requests, the person responsible can demand an appropriate fee based on the administrative costs.
2. Right to correction according to Art. 16 GDPR
The person concerned has the right to request the person responsible to correct any incorrect personal data relating to them without delay. Taking into account the purposes of the processing, the data subject has the right to request the completion of incomplete personal data - including by means of a supplementary declaration.
3. Right to deletion according to Article 17 GDPR
The data subject has the right to demand that the person responsible delete personal data concerning him immediately, and the person responsible is obliged to delete personal data immediately if one of the following reasons applies: a) the personal data are for the purposes for which they were collected or otherwise processed, no longer necessary;
b) the data subject revokes their consent on which the processing was based in accordance with Article 6 (1) (a) or Article 9 (2) (a) GDPR, and there is no other legal basis for the processing;
c) the data subject objects to the processing in accordance with Art. 21 Paragraph 1 GDPR and there are no overriding legitimate reasons for the processing, or the data subject objects to the processing in accordance with Art. 21 Paragraph 2 GDPR;
d) the personal data were processed unlawfully;
e) the deletion of personal data is necessary to fulfill a legal obligation under Union law or the law of the member states to which the person responsible is subject;
f) the personal data was collected in relation to information society services offered in accordance with Art. 8 Para. 1 GDPR.
4. Right to restriction of processing according to Art. 18 GDPR
The data subject has the right to request the controller to restrict processing if one of the following conditions is met:
a) the correctness of the personal data is disputed by the data subject, for a period that enables the person responsible to check the correctness of the personal data,
b) the processing is unlawful and the data subject refuses to delete the personal data and instead requests that the use of the personal data be restricted;
c) the controller no longer needs the personal data for the purposes of processing, but the data subject needs them to assert, exercise or defend legal claims, or
d) the person concerned has lodged an objection to the processing in accordance with Art. 21 Paragraph 1 GDPR, as long as it has not yet been determined whether the legitimate reasons of the person responsible outweigh those of the person concerned.
5. Right to information according to Art. 19 GDPR
If the person concerned has asserted a correction according to Art. 16 GDPR, a deletion according to Art. 17 Para. 1 GDPR or a restriction of processing according to Art. 18 GDPR to the person responsible, and the person responsible has all recipients to whom the personal data of the person concerned have been disclosed, informed about the request of the person concerned (unless this was impossible or associated with disproportionate effort), the person concerned has the right to be informed by the person responsible about the recipient.
6. Right to data portability Art. 20 GDPR
The person concerned has the right to receive the personal data concerning him, which he has provided to a responsible person, in a structured, common and machine-readable format, and he has the right to transmit this data to another responsible person without hindrance from us, provided that
a) the processing is based on consent in accordance with Article 6 (1) (a) or Article 9 (2) (a) or on a contract in accordance with Article 6 (1) (b) GDPR and
b) the processing is carried out using automated procedures. This must not impair the rights and freedoms of other people. When exercising the right to data portability in accordance with paragraph 1, the person concerned has the right to have the personal data transmitted directly from us to another person responsible, insofar as this is technically feasible. Exercising the right to data portability does not affect the right to erasure according to Art. 17 GDPR. The right to data portability does not apply to processing that is necessary for the performance of a task that is in the public interest or takes place in the exercise of official authority that has been transferred to the person responsible.
7. Right to object according to Art. 21 GDPR
The data subject has the right to object at any time to the processing of personal data relating to him or her based on Article 6 (1) (e) or (f) GDPR for reasons that arise from his or her particular situation; this also applies to profiling based on these provisions.
We no longer process the personal data unless we can prove compelling legitimate reasons for the processing that outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.
If personal data is processed in order to operate direct mail, the person concerned has the right to object at any time to the processing of personal data concerning him for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct mail. If the data subject objects to processing for direct marketing purposes, the personal data will no longer be processed for these purposes. Any consent given by the person concerned can be revoked at any time. However, the collection and processing that has taken place up to this point remains lawful.
8. Automated decisions in individual cases including profiling according to Art. 22 GDPR
The data subject has the right not to be subjected to a decision based solely on automated processing - including profiling - which has legal effects on him or which significantly affects it in a similar manner. This does not apply if the decision is made
a) is necessary for the conclusion or performance of a contract between the data subject and us,
b) is permissible on the basis of legal provisions of the Union or of the member states to which we are subject and these legal provisions contain appropriate measures to safeguard the rights and freedoms as well as the legitimate interests of the data subject or
c) takes place with the express consent of the person concerned.
These decisions may not be based on special categories of personal data according to Art. 9 Paragraph 1 GDPR, unless Art. 9 Paragraph 2 lit. a or g GDPR applies and appropriate measures to protect the rights and freedoms and legitimate interests of the data subject were hit.
In the cases mentioned under a) and c), we take appropriate measures to protect the rights and freedoms as well as the legitimate interests of the person concerned, including at least the right to obtain intervention by a person on our side, to express our own point of view and heard on contesting the decision.
9. Right to lodge a complaint with a supervisory authority according to Art. 77 GDPR
Without prejudice to any other administrative or judicial remedy, every person concerned has the right to lodge a complaint with a supervisory authority, in particular in the member state of their place of residence, their place of work or the place of the alleged infringement, if the person concerned is of the opinion that the processing of the personal data concerning them is contrary to violates this regulation.
The supervisory authority to which the complaint was lodged informs the complainant about the status and the results of the complaint, including the possibility of a judicial remedy in accordance with Art. 78 GDPR.
10. Right to an effective judicial remedy according to Art. 79 GDPR
Without prejudice to an available administrative or extrajudicial remedy, including the right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR, every person concerned has the right to an effective judicial remedy if he is of the opinion that the rights to which he is entitled under this regulation are not in accordance with processing of his personal data in accordance with this regulation has been violated.
The courts of the Member State in which we or the processor have an establishment are responsible for actions against us or against a processor. Alternatively, such actions can also be brought before the courts of the Member State in which the data subject is domiciled, unless we or the processor are an authority of a Member State that has acted in the exercise of its sovereign powers