Source: http://zahnarzt-scholz-wiesbaden.de/data-privacy-statement-dsgvo-gdpr/
Timestamp: 2019-04-18 11:19:58+00:00

Document:
In principle, we only collect and use personal data of our users to the extent necessary for the provision of a functional website as well as of our content and services. The collection and use of personal data of our users takes place regularly only with the consent of the user. An exception applies in cases where prior consent cannot be given or reasonably obtained, and the processing of the data is permitted by law.
Insofar the obtaining of the consent of users for processing their personal data Art. 6 para. 1 lit. a EU General Data Protection Regulation (DSGVO / GDPR) serves as the legal basis.
Insofar as the processing of personal data is required to fulfil a legal obligation to which the concerned person is subject, Art. 6 para. 1 lit. c DSGVO serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.
In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d DSGVO serves as the legal basis.
If processing is necessary to safeguard the legitimate interests of our company or a third party, and if the interests, basic rights, and fundamental freedoms of the person concerned do not outweigh the former interest, Art. 6 para. 1 lit. f DSGVO serves as the legal basis for the processing.
Personal data of the party in question will be deleted or blocked as soon as the purpose of the storage is no longer needed.
In addition, such storage may be provided for by European or national legislators in EU regulations, laws, or other regulations to which the controller is subject. We will block or delete the data stored even if a storage period prescribed by the mentioned standards expires, unless there is a need for further data storage for the conclusion of fulfilment of a contract.
are set not to create web server log files. We consciously abstain from the possibility to create web server log files / storing and using IP addresses.
The data is also stored in the log files of our system. Not affected by this are the IP addresses of the user or other data that allow the assignment of the data to a user. This data is not stored together with other personal user data.
The legal basis for the temporary storage of the data is Art. 6 para. 1 lit. f DSGVO.
This is our legitimate interest in the processing of data within the meaning of Art. 6 para. 1 lit. f DSGVO.
The data will be deleted as soon as it is no longer necessary for the achievement of the purpose of its processing. If the data is gathered in order to provide the website, this is the case when the respective session is completed.
The collection of the data for the provision of the website and the storage of the data in log files is essential for the operation of the website. Consequently, the user has no right to object for privacy reasons.
General information: To disable Google Analytics, Google provides a browser plug-in at http://tools.google.com/dlpage/gaoptout?hl=en.
We point out that on this website Google Analytics has been extended by the code “gat._anonymizeIp ();” in order to ensure an anonymous collection of IP addresses (so-called IP-Masking). If the anonymization is active, Google truncates IP addresses within member states of the European Union or in other contracting states of the Agreement on the European Economic Area, and therefore no identification of your identity is possible. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there.
User data collected by cookies will not be used to create individual user profiles.
We have a legitimate interest in processing personal data for the purposes described above pursuant to Art. 6 para. 1 lit. f DSGVO.
Visitors can contact us electronically by using the contact form available on our website. By choosing this option, the user’s data entered into the input mask will be transmitted to us and stored.
As you go through the sending process, we will obtain your consent and refer to this privacy statement.
Alternatively, you have the option to contact us via the e-mail address provided on our website. In this case, the user’s personal data transmitted by e-mail will be stored.
In this context, personal data will not be provided in any form to third parties without your consent. The data stored is used solely for conversation purpose.
Provided the user’s consent is obtained, the legal basis to the data processing is Art. 6 para. 1 lit. a GDPR.
The legal basis to process the data transmitted by of sending an e-mail is Article 6 (1) lit. f DSGVO. If the e-mail contact aims at the conclusion of a contract, then additional legal basis for the processing is Art. 6 para. 1 lit. b DSGVO.
The processing of personal data from the input mask only serves to create and maintain contact. In the case of contact by e-mail, this also includes the required legitimate interest in the processing of the data provided.
Other personal data processed during the mailing process serves only to prevent misuse of the contact form and to ensure the security of our information technology systems.
The data will be deleted as soon as storage is no longer required for purposes as described in this policy. If personal data is gained from the input mask of the contact form and sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is considered terminated when it can be inferred from the circumstances that the relevant facts have been finally clarified.
Personal data additionally gathered during the sending process will be deleted at the latest after a period of seven days.
The user has the possibility to revoke his consent to the processing of personal data at any time. If the user contacts us by e-mail, he may object to the storage of his personal data at any time. In such a case, the conversation cannot be continued.
In this case, all personal data stored in the course of contacting will be deleted.
To provide security against comments with illegal content, your IP address will be saved in comments on the blog until we have read and approved these comments.
With a click on „delete now“ in our deletion request form (go to form!) you can request the deletion of the stored data including ID, e-mail, first and last name. This will usually happen within a few hours.
Please note: We have closed our blog comments funktion due to data privacy reasons.
Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland („Facebook“).
The plugins are provided with an icon of the respective network and recognizable as such. Using these plugins will connect you to the social network server and share your data. Your information will only be passed on to one of these Social Media networks when you deliberately press one of the icons provided. The Social Media providers can thereby create user profiles. We point out to the fact that we have no influence on the information storage and data transfer by any external websites and pages nor on the extent to which and how these data are used.
We use the service „Cerber Security & Antispam“, which is offered by Cerber Tech Inc. New York, NY, 1732 1st Ave, 10128, USA. The plugin protects websites against brute force attacks, blocks harmful requests from IPs or subnets when a defined retry limit is exceeded. This makes brute-force attacks or distributed brute-force attacks of botnets impossible. Furthermore, it is possible to restrict, block, or allow access with a Black IP Access List and a White IP Access List. (More information about the features at: https://wpcerber.com/). According to the provider, no data is collected or processed in this context – neither through the services nor through the software offered.
In order to support SEO activities on our website we use the plugin „YOAST SEO“. According to WP-Support (https://wordpress.org/support/topic/yoast-gdpr/), the tool does not store any personal data and is therefore DSGVO/GDPR-compliant.
You may ask the person in charge to confirm if personal data about you is processed by us.
(8) the existence of automated decision-making including profiling in accordance with Article 22 (1) and (4) DGSVO and – at least in these cases – meaningful information on the logic involved, the extent of consequences and the desired outcome of such processing for the data subject.
You have the right to request information about whether the personal data about you are being transmitted to a third country or to an international organization. In this connection, you can ask for suitable warranties in accordance with Art. 46 GDPR regarding the transfer of personal information about you.
You have a right to rectification and / or completion towards the controller, provided that the personal data processed are incorrect or incomplete. The responsible person must carry out the correction immediately.
If the processing of personal data about you has been restricted, these data may only be used – with the exception of their storage – to assert, exercise, or defend legal claims or to protect the rights of another natural or legal person Person or on grounds of an important public interest of the Union or a Member State.
If the restriction on the processing according to the above-mentioned conditions have been limited, you will be informed by the person in charge before the restriction is lifted.
(1) Personal data about you are no longer necessary for the purposes for which they were collected or otherwise processed.
(2) You revoke your consent, to which the processing acc. Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR, and there is no other legal basis for the processing.
(3) You object to the processing according to Art. 21 para. 1 DSG-VO and there are no prior justifiable reasons for the processing, or you lodge an objection against the processing according to Art. 21 para. 2 DSGVO.
(5) The deletion of the personal data about you is necessary for the fulfillment of a legal obligation in accordance with EU law or the law of Member States to which the data subject is subject.
(6) The personal data about you were collected in relation to information society services offered pursuant to Article 8 (1) DGSVO.
If the person in charge has made public the personal data about you, and is according to Article 17 (1) of the DGSVO bound by lay to delete these data, he is – under consideration of all available technical means od implementation – obliged to take technical and appropriate measures, to inform all staff in charge for the processing of the data about you that you as the data subject have required to erasure any link to such personal information, or any copy or replication of such personal data.
If you have asserted the right to rectify, delete, or limit the processing against the responsible person, the latter is obliged to inform all recipients of your personal data about their rectification or erasure, or restriction of processing, unless this proves to be impossible or involves a disproportionate effort. You have the right towards the responsible person to be informed about these recipients.
In exercising this right, you also have the right to obtain that the personal data about you are transmitted directly from one person responsible to another person in charge, insofar as this is technically feasible. Freedoms and rights of other persons may not be impaired.
The right to data portability does not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of public authority delegated to the responsible person in charge.
You have, at any time and for reasons arising from your particular situation, the right to lodge an objection against the procession of personal data about you pursuant to Art. 6 para. 1 lit. e or f DSGVO; this also applies to profiling based on these regulative terms.
The responsible person in charge will no longer process the personal about you unless he can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of prosecution, exercise, or defense of legal claims.
If the personal data about you are processed in order to carry out direct advertising, you have, at any time, the right to object to the processing of the personal data about you for the purpose of such advertising; this also applies to profiling insofar as it is connected with such direct advertising.
You have the option, in the context of the use of information society services – and regardless of Directive 2002/58 / EG – to exercise your right of withdrawal by means of automated procedures that use technical specifications.
However, these decisions must not be based on special categories of personal data pursuant to Art. 9 (1) GDPR, unless Article 9 (2) lit. a or g DSGVO applies and reasonable measures have been taken to protect the rights and freedoms as well as your legitimate interests.
With regard to the cases mentioned in (1) and (3), the person responsible shall take appropriate measures to protect the rights and freedoms and their legitimate interests, including at least the right to obtain the intervention of a person by the person responsible, upon presentation one’s own position and contesting the decision.
Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to a supervisory authority, in particular in the Member State of its place of residence, place of work or place of alleged infringement, if you consider that the processing personal data about you is contrary to the DGSVO.
The supervisory authority, at which the complaint was lodged, informs the complainant of the status and results of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 DGSVO.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 46
 Art. 6
 Art. 9
 Art. 21
 Art. 21
 Art. 6
 Art. 9
 Art. 78