Source: https://www.kinderdent.com/en/data-protection
Timestamp: 2019-04-25 16:00:54+00:00

Document:
The protection of your personal data and the preservation of your privacy are very important to us. Because privacy is very important to us we treat all information about you as confidential!
As the responsible provider, KinderDent GmbH, collects, processes and uses personal data that you leave when you visit our website or communicate to us by other means only in accordance with the relevant data protection provisions, in particular the Federal Data Protection Act (BDSG), the Telecommunications Act (TKG), the Telemedia Act (TMG) and the General Data Protection Regulation (GDPR).
We therefore inform you here about the nature, scope and purpose of the collection and use of personal data.
According to recital 14 on the material scope of the GDPR (Art. 2 GDPR), the protection afforded by this regulation applies to the processing of personal data of individuals regardless of their nationality or place of residence. This regulation does not apply to the processing of personal data of legal persons and in particular companies established as legal persons, including data such as the name, legal form or contact details of the legal person.
“Processing” means any operation or series of operations related to personal data, such as collection, gathering, organisation, ordering, storage, adaptation or modification, read-out, queries, performed with or without the aid of automated procedures, use, disclosure through submission, dissemination or other form of provision, reconciliation or association, restriction, erasure or destruction.
“Pseudonymisation” means the processing of personal data in such a way that the personal data can no longer be assigned to a specific data subject without additional information being provided, provided that such additional information is kept separate and is subject to technical and organisational measures to ensure that the personal data cannot be assigned to an identified or identifiable natural person.
“Profiling” means any kind of automated processing of personal data which consists in using that personal data to evaluate certain personal aspects relating to a natural person, in particular aspects relating to job performance, economic situation, health, or to analyse or predict personal preferences, interests, reliability, behaviour, location or change of location of that natural person.
“Controller” means the natural or legal person, public authority, body or entity that decides, alone or in concert with others, on the purposes and means of processing personal data.
“Commissioned processor” means a natural or legal person, public authority, body or entity that processes personal data on behalf of the controller.
In principle, we process personal data only insofar as this is necessary for the provision of a functional website and our content and services and/or for the fulfilment or initiation of the contracts concluded with us.
Insofar as we obtain the consent of the data subject for processing of personal data, the legal basis is Art. 6 (1) (a) of the General Data Protection Regulation (GDPR).
In the processing of personal data necessary for the performance of a contract to which the data subject is a party, the legal basis is Art. 6 (1) (b) GDPR. This also applies to processing operations required to carry out pre-contractual measures.
In the event that vital interests of the data subject or another natural person require the processing of personal data, the legal basis of the processing is Art. 6 (1) (d) GDPR.
If processing is necessary to safeguard the legitimate interests of our company or a third party, and if the interests, fundamental rights and freedoms of the data subject do not prevail over the former interests, the legal basis for processing is Art. 6 (1) (f) GDPR.
The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage not longer applies, unless statutory retention requirements (e.g. commercial and/or fiscal retention obligations) are opposed to deletion. In addition, such storage may be provided for by the European or national legislator in EU regulations, laws or other regulations to which the controller is subject. Blocking or deletion of the data also takes place when a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for conclusion of a contract or fulfilment of a contract.
(1) IP address, (2) Date and time of retrieval, (3) Pages accessed, (4) Amount of data transmitted, (5) Protocols, (6) Status code, (7) Referrer URL (the website previously visited by the user), (8) User agent, (9) Queried host name.
The data is stored in anonymous logs on the server. This also applies to IP addresses. Storage of this data together with other personal data of the user does not take place.
An attempt to assign the respective IP address to its owner is expressly not made.
The legal basis for the temporary storage of data is Art. 6 (1) (f) GDPR.
The storage of the IP address is necessary to enable delivery of the website to the computer of the user. The IP address of the user must be stored for this purpose. This allows us to display the customer’s shopping cart on their next visit, provided that they use the same IP.
The storage of the IP in log files is done to ensure the functionality of the website. In addition, the data is used to ensure the security of our information technology systems.
We have a legitimate interest in the processing of data pursuant to Art. 6 (1) (f) GDPR for these purposes.
The IP address will be deleted from our website as soon as the purchase process is completed in the shop.
In the event of storage of the data in log files on the server of our provider, it will be deleted after 60 days. Error logs that log pageview errors are deleted after seven days. In addition to the error messages, these logs include the accessing IP address and, depending on the error, the website accessed.
In addition to our own cookies, additional cookies may be set for the Google Universal Analytics feature. Please note the information under XI.
The transmission of data to Google Universal Analytics is done via an API with anonymous data.
The cookies we use do not collect or store personal data, only pseudonymous data. If the cookie is activated, it will be assigned an identification number and no assignment of your personal data to this identification number will be made. Your name, IP address or similar data that would allow the cookie to be associated with you will not be included in the cookie. Based on the cookie technology, we only receive pseudonymous information, for example, which pages of our shop were visited, which products were viewed, etc.
You can set your browser so that you are informed in advance about the setting of cookies and can decide on a case-by-case basis whether you exclude the acceptance of cookies for specific cases or in general, or completely prevent setting of cookies. This may limit the functionality of the website.
You can download our catalogue as a PDF file from our website or order it by telephone.
If a user downloads the catalogue as PDF, the IP address is transferred to the server of our web space provider for the technical delivery of the PDF.
When a user orders the catalogue by phone, the user’s personal data submitted by the user is stored.
We also send our catalogue to customers and potential customers. For the direct dispatch of our catalogue, supplemented by possible flyers and or further information material on our current products, we use the addresses of customers who have already been recorded with their data by us. These usually result from at least once transacted orders and thus communication of the address data by the customer himself. These address data are available as long as the storage period specified under point 4. requires. In addition, we process purchased addresses from the fields of dentistry, orthodontics, oral and maxillofacial surgery and oral surgery.
To send the catalogue, we use the necessary data, in particular company/practice/organisation, first name, name, title, postal address.
The sending of the catalogue and possibly further advertising material is usually done as part of commissioned processing on our behalf by a service provider company based in Germany.
The legal basis for the processing of the data when ordering the catalogue with the consent of the user is Art. 6 (1) (a) GDPR.
A further legal basis is Art. 6 (1) (b) GDPR.
A further legal basis is Art. 6 (1) (f) GDPR.
The purpose of the catalogue dispatch and the related collection of data is to inform existing customers continuously and comprehensively and to draw the attention of potential new customers to our products. In this way we will send you information about our specialist offers.
In these purposes are also our legitimate interest in data processing in accordance with Art. 6 Para. 1 lit. f DSGVO, which also enables us to optimise the KinderDent product range for you.
The data is deleted as soon as it is no longer necessary for the achievement of the purpose of its collection, unless statutory retention requirements (e.g. commercial and/or fiscal retention obligations) preclude deletion.
You have a right to object at any time in accordance with Art. 21 (2) GDPR, to which we expressly refer.
Pursuant to this regulation, you can stop the use of your data for the catalogue shipping at any time (Art. 21 (3) GDPR).
We will then no longer provide you with a catalogue.
You may also revoke any consent to the storage of personal data collected for the purpose of catalogue delivery at any time.
You will then receive an e-mail with a link to complete the registration (“Double-Opt-In”).
If the registration serves the fulfilment of a contract of which the user is a party or the implementation of pre-contractual measures, an additional legal basis for the processing of the data is Art. 6 (1) (b) GDPR.
Registration of the user is necessary to fulfil a contract with the user or to carry out pre-contractual measures.
On our website, we offer users the option to conclude purchase contracts for the products we offer.
The data collected is necessary for the initiation, the conclusion of the contract and the transaction within the scope of the execution of orders, deliveries and billing.
The necessary personal data is collected and processed in accordance with the provisions of the BDSG and the GDPR.
If the data is required to fulfil a contract or to carry out pre-contractual measures, premature deletion of the data is possible only if contractual or legal obligations do not preclude deletion.
The legal basis for the processing of the data with granted consent is Art. 6 (1) (a) GDPR.
The legal basis for processing the data is Art. 6 (1) (b) GDPR.
Further legal basis for the processing of the data is Art. 6 (1) (f) GDPR.
As a user, you always have the option to change or delete the data stored about you.
Through our catalogue, we offer you the opportunity to order the products offered by us in the catalogue. Our catalogue contains order forms for this purpose.
The data collected is required for the initiation, the conclusion of the contract and the transaction as well as the design or modification of the legal relationship, in particular for the execution of orders, deliveries and invoices.
Our legitimate interest in the processing of data pursuant to Art. 6 (1) (f) GDPR also lies therein.
If the e-mail contact aims to conclude a contract, then the additional legal basis for the processing is Art. 6 (1) (b) GDPR.
The legal basis for the processing of the data transmitted in the course of sending an e-mail is Art. 6 (1) (f) GDPR.
The processing of the personal data from the input mask or e-mail serves us only for the purpose of processing the contact. Our legitimate interest in the processing of data pursuant to Art. 6 (1) (f) GDPR also lies therein.
Please direct your inquiries and notes as well as all other questions about data protection to us via the e-mail address order@kinderdent.com or write us at the address: KinderDent GmbH, Gutenbergstraße 7, 28844 Weyhe.
Our website uses Google Universal Analytics, a web analytics service provided by Google Inc. (“Google”).
Google Universal Analytics uses so-called “cookies”, text files that are stored on your computer and that allow an analysis of your use of the website.
Your IP address will be shortened by Google within member states of the European Union or other parties to the Agreement on the European Economic Area prior to storage and thus anonymised.
The IP address provided to Google Analytics by your browser within the framework of Google Analytics will not be merged with other Google data to the best of our knowledge.
The legal basis for processing the user's personal data is Art. 6 (1) (f) GDPR.
On behalf of the operator of this website, Google will use this information to evaluate the use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator.
The data will be deleted as soon as it is no longer necessary for the purpose of its collection. Deletion by Google Universal Analytics takes place in our case after 14 months.
You can prevent the collection of data via Google by installing the cookie provided by Google in your browser or by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de. If you use several devices and browsers to access our website, you must save/install it in each browser.
In principle, we only use your personal data within our company. But to initiate and carry out contracts, it is necessary to provide the required data to our service partners for order processing (e.g. logistics service providers/fulfiller, shipping companies, call centres). If and insofar as we engage third parties in carrying out contracts, this personal data is only provided to the extent that the transmission is required for the corresponding service. In the event that we outsource certain parts of the data processing (e.g. commissioned processing), we contractually obligate the other party to use personal data only in accordance with the requirements of data protection laws and to ensure the protection of the data subject's rights.
The legal basis for processing the user's personal data is Art. 6 (1) (b) GDPR.
A further legal basis for processing the user's personal data is Art. 6 (1) (f) GDPR.
In the case of a justified complaint or the taking back of goods out of goodwill, it is usually necessary, in order to safeguard our rights with respect to our suppliers and/or the manufacturers, to transfer your personal data (in particular name, address, e-mail address, telephone number, invoice number, order number and/or customer number) to the direct suppliers or subcontractors and/or the manufacturer for identifying the specific goods and processing the complaint.
In the event of consent given by the user, the legal basis for processing is Art. 6 (1) (a) GDPR.
The legal basis for processing the data is also Article 6 (1) (b) GDPR.
Disclosure of the data may be required in individual cases to safeguard our rights vis-à-vis our direct suppliers or subcontractors or the manufacturers.
Insofar as no explicit storage period is specified during the collection (e.g. as part of a declaration of consent), your personal data will be deleted insofar as it is no longer required to fulfil the purpose for which it was stored, unless statutory retention requirements (e.g. commercial and/or fiscal retention requirements ) are opposed to deletion.
You may revoke any consent given to us at any time (e.g. via order@kinderdent.com or by writing to us at this address: KinderDent GmbH, Gutenbergstraße 7, 28844 Weyhe.
It may happen that contents or services of third-party providers, such as videos from other websites, are integrated within our website. The integration of content from third-party providers always requires that the third-party providers perceive the IP address of the users, since they could not send the content to the users’ browser without the IP address. The IP address is therefore required for the presentation of this content. Furthermore, providers of third-party content can set their own cookies and process users’ data for their own purposes. In the process, user profiles can be created from the processed data. We will use this content as much as possible in a data-minimising and data-avoiding manner and will select reliable third-party providers with regard to data security. We strive to use only those contents whose respective providers use the IP address only for the delivery of the content. However, we have no influence on whether a third party provider stores the IP address e.g. for statistical purposes or collects additional data of the user. We will inform users about this to the best of our knowledge.
Videos from the third-party platform “YouTube” Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.
You may required the controller to confirm if personal data concerning you is processed.
(1) The purposes for which the personal data is processed; (2) The categories of personal data being processed; (3) The recipients or categories of recipients to whom the personal data relating to you has been disclosed or is still being disclosed; (4) The planned duration of the storage of your personal data or, if specific information is not available, the criteria for determining the duration of storage; (5) The existence of a right to correction or deletion of personal data concerning you, a right to restriction of processing by the controller, and a right to object to such processing; (6) The existence of a right of appeal to a supervisory authority; (7) All available information on the source of the data if the personal data is not collected from the data subject; (8) The existence of automated decision-making including profiling pursuant to Art. 22 (1) and (4) GDPR and, at least in these cases, meaningful information about the logic involved, and the scope and intended impact of such processing on the data subject.
(1) If you contest the accuracy of your personal data for a period of time that enables the controller to verify the accuracy of your personal data; (2) The processing is unlawful and you decline the deletion of the personal data and instead demand the restriction of the use of the personal data; (3) The controller no longer needs the personal data for the purposes of processing, but you need it to assert, exercise or defend legal claims, or (4) You have objected to processing in accordance with Art. 21 (1) GDPR and it is not yet clear whether the legitimate reasons of the controller outweigh your reasons.
If the restriction on processing has been implemented in accordance with the above conditions, the controller must inform you before the restriction is lifted.
(2) You revoke your consent on the basis of which the processing was carried out pursuant to Art. 6 (1) (a) or Art. 9 (2) (a) GDPR, and there is no other legal basis for processing.
(3) Pursuant to Art. 21 (1) GDPR, you object to the processing and there are no prevailing justifiable reasons for the processing, or you object to the processing pursuant to Art. 21 (2) GDPR.
If the controller has made the personal data concerning you public and is obligated to delete it pursuant to Art. 17 (1) GDPR, the controller shall take appropriate measures, including technical measures, under consideration of the available technology and appropriate costs, to inform other controllers who process the personal data that you as a data subject, have requested deletion of all links to or copies or replications of such personal data.
(1) To exercise the right to freedom of expression and information; (2) For reasons of public interest in the field of public health pursuant to Art. 9 (2) (h) and (i) and Art. 9 (3) GDPR; (3) For archival purposes of public interest, scientific or historical research purposes or for statistical purposes pursuant to Art. 89 (1) GDPR, insofar as the right referred to in subparagraph (a) is likely to render impossible or seriously affect the achievement of the objectives of that processing, or (4) To assert, pursue or defend legal claims.
You have vis-a-vis the controller to be informed about these recipients.
(1) The processing is based on consent pursuant to Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR or is based on a contract pursuant to Art. 6 (1) (b) GDPR and (2) the processing is carried out using automated procedures.
In exercising this right, you also have the right to require that your personal data relating to you is transmitted directly from one controller to another, insofar as this is technically feasible. Freedoms and rights of other persons may not be affected.
The right to data portability does not apply to the processing of personal data necessary for the performance of a task in the public interest or the exercise of official authority delegated to the controller.
You have the right at any time, for reasons that arise from your particular situation, to object to the processing of your personal data which takes place pursuant to Art. 6 (1) (e) or (f) GDPR; this also applies to profiling based on these provisions.
The controller must no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of enforcing, exercising or defending legal claims.
(1) Is required for the conclusion or performance of a contract between you and the controller; (2) Is permitted by Union or Member State legislation to which the controller is subject; and such legislation provides for reasonable safeguards of your rights and freedoms and your legitimate interests, or (3) Is done with your express consent.
With regard to the cases referred to in (1) and (3), the controller must take appropriate measures to uphold the data subject’s rights and freedoms and legitimate interests, including at least the right to obtain the intervention of a person at the controller, the right to express their own position and the right to challenge the decision.
Without prejudice to any other administrative or judicial remedies, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or place of alleged infringement, if you believe that the processing of the personal data concerning you violates the GDPR.
The supervisory authority to which the complaint has been submitted will inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.
Please direct your inquiries and notes as well as all other questions and statements about data protection to us via the e-mail address order@kinderdent.com, or write us at the address: KinderDent GmbH, Gutenbergstraße 7, 28844 Weyhe, or send us a fax.
Please note that data transmission in the internet (e.g. unencrypted http connection, communication via unencrypted e-mail) can generally have security gaps and may not be protected against viewing by third parties; therefore, complete data security and and the constant secure protection of your personal data cannot be guaranteed.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 21
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 22
 Art. 21
 Art. 6
 Art. 9
 Art. 21
 Art. 21
 Art. 17
 Art. 9
 Art. 9
 Art. 89
 Art. 6
 Art. 9
 Art. 6
 Art. 6
 Art. 78