Privacy Policy

Responsible for data protection:

Dr. Mustermann Zahnarztpraxis Berlin
Munsterdamm 32
12169 Berlin
Phone: (030) 333 111 90
E-Mail: info@dr-mustermann.de

For all inquiries or the exercise of rights in connection with data processing, please contact us using the above contact details.

Privacy Policy

The protection of your personal data (hereinafter: „data“) is important to us.

The following statements give you an overview of the nature, scope, purpose and duration of the processing of your data by us.

Scope?
The information in this statement applies to all of our online offerings that refer to this statement.

This can include: our websites, our presences on third-party online platforms (e.g. social media profiles), services, functions and content we offer online, including internet-capable applications (hereinafter: „apps“), as well as other data processing initiated or facilitated via our online presences and apps (hereinafter jointly: „online offering“).

Why do we process data?
Data is generally processed only insofar as this is necessary for the functional provision of our online offering as well as our content and services, or is required due to contractual or statutory provisions.

In addition, we process the data to the extent described in order to

- offer you a personalized user experience on our online offering,
- communicate with you within the framework of our offers and services, if you initiate such communication,
- initiate contracts at your request and fulfil concluded contracts,
- offer you personalized information, advertising and marketing communications, - detect, prevent, contain and investigate attacks on our IT systems as well as fraudulent or unlawful use of our online offering.

Are we permitted to process the data?
If there is no statutory permission for such processing (e.g. for purposes of contract performance or on the basis of legitimate interests), it only takes place on the basis of your express consent, which can be revoked at any time with effect for the future.

What rights do you have?
We also inform you about your rights in connection with data processing, e.g. your right to information and how you can revoke consent given and object to processing carried out without your consent.

What do the technical terms mean?
The terms used in this privacy policy, such as „personal data“, „processing“, „restriction of processing“, „profiling“, „processor“ or „controller“, correspond to the definitions in Art. 4 of the EU General Data Protection Regulation (hereinafter: „GDPR“).

Table of contents

I. General information on data processing
1. Controller
2. Data protection officer
3. Categories of data subjects
4. Sources and categories of data
5. Legal basis for the processing of your data
a. Your consent (Art. 6(1)(a) GDPR)
b. Fulfilment of (pre-)contractual obligations (Art. 6(1)(b) GDPR)
c. Fulfilment of a legal obligation (Art. 6(1)(c) GDPR)
d. Protection of vital interests (Art. 6(1)(d) GDPR)
e. An overriding interest (Art. 6(1)(f) GDPR)
6. Children / age verification
7. Retention period and data deletion
8. Obligation to provide data
9. Categories of recipients of your data
10. Data transfer to a third country or an international organisation
11. External links

II. Data processing in detail
1. Provision of the online offering and creation of log files
2. Use of cookies
3. Contact form and e-mail contact
4. Facebook plugin
5. Google+ plugin
6. Twitter plugin
7. YouTube videos
8. Google Web Fonts
9. Google Maps

III. Your rights
1. Right to information
2. Right to rectification
3. Right to erasure of data or restriction of processing
4. Right to notification
5. Right to data portability
7. Right to withdraw a data protection consent declaration
8. Automated decision-making in individual cases, including profiling
9. Right to lodge a complaint with a supervisory authority

IV. Your right to object

I. General information on data processing

1. Controller
The publisher of this privacy policy and the controller responsible for data processing in connection with our online offering is:

See above.

2. Data protection officer
Our data protection officer is:

See above.

3. Categories of data subjects
This privacy policy provides an overall overview of the nature, purpose and scope of possible data processing in connection with our online offering. Which of these data processing activities are actually carried out depends, for example, on whether you merely visit our online offering or also use the functions and services offered there. As a visitor or user of our online offering, you may therefore be affected by the data processing described here (hereinafter jointly: „users“).

Insofar as our online offering enables other users to publish content containing data about you, or to transmit such content to us or third parties, you may also be affected by the data processing. The same applies in cases where our online offering is linked to external data sources concerning you, or data about you is transmitted to us by third parties (e.g. other doctors or psychotherapists, associations of statutory health insurance physicians, health insurance funds, the medical service of the health insurance funds, medical associations and private billing agencies). You may therefore also be affected by the data processing described here even if you were neither a visitor nor a user of our online offering (hereinafter: „other data subjects“). Insofar as this is legally required, we will separately inform other data subjects about the data processing, stating the origin of the data.

4. Sources and categories of data
We process data that we have lawfully obtained from you in the course of your visit or use of our online offering (e.g. at your request, to initiate or carry out business relationships).

In addition, in connection with the provision of our services, we process data about you that we have lawfully obtained or collected from other users, affiliated companies, other third parties (e.g. other doctors or psychotherapists, associations of statutory health insurance physicians, health insurance funds, the medical service of the health insurance funds, medical associations and private billing agencies) or from publicly accessible sources (e.g. debtor registers, commercial and association registers, land registers, press releases, the internet) (e.g. to detect and investigate attacks on our IT systems, cases of abuse and fraud, to design our online offering to meet demand; to carry out treatment mandates and fulfil contracts, including delivery and payment processing, or on the basis of consent given by you). Insofar as this is legally required, we will separately inform other data subjects about the data processing, stating the origin of the data.

Such data may include:

- Master data (e.g. name, address, account details, date of birth, user ID, password)
- Contact data (e.g. e-mail, telephone number)
- Content data (e.g. texts, images, videos)
- Usage data (e.g. date, time and scope of your access to our website)
- Meta data (e.g. the website from which you access our online offering, IP address, location data, device information)
- Health data (e.g. medical histories, diagnoses, treatment proposals and findings collected by us or other physicians)

5. Legal basis for the processing of your data
Where possible, we process the data primarily on the basis of a statutory permission, without prejudice to any additional consent on your part.

If the intended processing cannot be based on a statutory permission, we will obtain your express consent.

The legal basis for the processing of the aforementioned data, in accordance with the provisions of the GDPR and the Federal Data Protection Act (BDSG), is:

a. Your consent (Art. 6(1)(a) GDPR)
If you have given us consent to process data for specific purposes (e.g. for sending a newsletter), your consent is the legal basis for the processing. Further details on the purpose and scope of the data processing can be found in the detailed explanations in this privacy policy as well as in any additional information provided when your consent was obtained.

You can revoke the consent given at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent up to the revocation. Further information can be found under III. of this statement.

b. Fulfilment of (pre-)contractual obligations (Art. 6(1)(b) GDPR)
If the processing is necessary for the performance of a contract to which you are a party, or for the implementation of pre-contractual measures carried out at your request, the lawfulness of the processing is based on this.

Further details on the purpose and scope of the data processing can be found in the detailed explanations in this privacy policy as well as in the contract documents and terms and conditions provided when the contract was initiated and concluded.

c. Fulfilment of a legal obligation (Art. 6(1)(c) GDPR)
We are subject to various legal obligations that require the collection and processing of data or that affect the scope and duration of data storage (e.g. tax law provisions, money laundering law).

d. Protection of vital interests (Art. 6(1)(d) GDPR)
If the processing of data is necessary to protect the vital interests of you or another natural person, it is permitted. In connection with our online offering, this is only conceivable in exceptional cases (e.g. if you were in a life-threatening situation and our service is used to provide you with medical assistance in this regard).

e. An overriding interest (Art. 6(1)(f) GDPR)
Where necessary, we also process your data to safeguard our legitimate interests or the legitimate interests of a third party. This only applies if your interests or fundamental rights and freedoms requiring the protection of personal data do not prevail.

We assume such a predominant interest on our part, for example, in the following cases:

- Ensuring IT security and IT operations,
- designing our online offering to meet demand, including the use of cookies required to provide a service you requested,
- advertising or market and opinion research, provided you have not objected to the use of your data and it does not involve targeted advertising towards children, cross-site tracking measures to track your behaviour on the internet, or the creation of user profiles,
- obtaining information on creditworthiness and default risk from credit agencies (e.g. SCHUFA, Creditreform) in connection with the use of chargeable services or the conclusion or performance of chargeable contracts,
- asserting legal claims and defence in legal disputes,
- prevention of criminal offences,
- measures to safeguard (virtual) domiciliary rights,
- review and optimisation of procedures for needs analysis and direct customer contact.

Please refer to IV. of this statement for your right to object in this regard.

6. Children / age verification
Our online offering is not aimed at persons under 16 years of age. To prevent the use of our online offering by such persons, we reserve the right to collect the date of birth of users. Collection is based on Art. 6(1)(f) GDPR and serves our predominant interest in excluding the use of our online offering by children.

The age information is only stored until, after verification of age, a decision can be made on the release of the requested service or offering. Please note that age information may also be processed for other reasons and may then be subject to a longer retention period; please refer to this privacy policy for the corresponding information.

7. Retention period and data deletion
Your data is processed and stored as long as this is necessary for the purposes stated in this statement, for the fulfilment of our contractual and statutory obligations, or as long as you have expressly consented to this.

Data is thus regularly deleted or its processing restricted as soon as the purpose of storage no longer applies. Beyond the mere period of use or contract, the data is retained by us - for a limited time - for the following purposes:

- We are legally obliged to retain data collected in connection with treatment for between 10 and 30 years (cf. e.g. § 28(3) RöVO).
- To comply with retention periods under labour, commercial and tax law, in particular under the Commercial Code, the Fiscal Code, the Money Laundering Act, the Working Hours Act and the Income Tax Act. This results in retention periods of 2-10 years, and in exceptional cases up to 30 years.
- Further retention of the data may be necessary in connection with legal disputes and to secure evidence within the framework of limitation provisions. In particular, the two-year warranty periods and the regular three-year limitation period must be taken into account, although in individual cases limitation periods may be up to 30 years.

With regard to the aforementioned periods, it should be noted that the actual point in time of deletion or restriction of processing may be delayed considerably due to different rules regarding the start of these periods.

Due to the wide variety of conceivable constellations for invoking the corresponding retention obligations and their commencement, exact information on the retention period and data deletion can only be provided upon request in individual cases. In this respect, we refer to your rights of information as set out under III. of this statement.

8. Obligation to provide data
When collecting data or within the framework of this statement, we expressly point out if it involves mandatory data required for the use of our services or for the conclusion of a contract, or whose provision is required by law or contract.

If you refuse to provide such mandatory data, you will not be able to access the corresponding services or conclude the desired contract with us. No other disadvantages will arise for you from not providing the data.

9. Categories of recipients of your data
Within our practice, those departments that require it for the fulfilment of our contractual and statutory obligations as well as the other purposes pursued with the data processing and named in this privacy policy or when the data was collected are given access to your data.

In addition, external service providers and agents we use may also receive data for these purposes, provided they are subject to professional confidentiality obligations, maintain the confidentiality of your data, or comply with our written data protection instructions.

This may involve the use of third-party specialist services, in which the service provider used by us is independently responsible for the data processing.

Such recipients may be:

- Persons subject to professional secrecy: e.g. physicians, tax advisors, lawyers, external occupational physicians, auditors and others to whom the transmission of data is necessary for the fulfilment of our contractual or statutory obligations, for the exercise of our legitimate interests in connection with labour, tax and social law provisions, or within the framework of legal disputes.
- Billing agencies and debt collection agencies with assignment of claims.
- Banks and payment service providers for money transfer and payment processing.
- Postal and parcel services for letter transport and delivery of goods.

Such transfer takes place exclusively on the basis of the legal bases named in this privacy policy (e.g. for the fulfilment of contractual or statutory obligations, or within the framework of the exercise of legitimate interests, which consist of us wanting or having to have the data processing required in this context carried out by corresponding specialists.)

In addition, processors may be commissioned by us to carry out the data processing. These are checked by us for their suitability before being commissioned. They are contractually obliged to guarantee compliance with the confidentiality obligations relating to us towards you and compliance with the requirements of the GDPR and the BDSG. The legal basis for the transfer of data to processors is in each case the legal basis named in this privacy policy for the data processing carried out by us.

Such recipients may, for example, be:

- Data centres, including cloud computing;
- internet service providers (internet and e-mail services);
- application service providers (third-party software as a service with outsourced data storage);
- accounting services, external financial accounting, payroll accounting;
- IT and telecommunications service providers (including maintenance and repair);
- call centres;
- letter shops;
- service providers for data capture, data conversion, scanning and copying of documents;
- service providers for data backup and archiving;
- service providers for the disposal of data carriers;
- service providers for technical support and user assistance (including remote maintenance);
- dental laboratories.

10. Data transfer to a third country or an international organisation
Data is only transferred to countries outside the EU, the EEA or Switzerland (so-called third countries) insofar as this is necessary for the execution of your orders or required by law.

In addition, data may be transferred to a third country or an international organisation if you have given us consent to do so, or if the transfer takes place within the framework of a processing agreement. If service providers in a third country are used, they are additionally obliged, in addition to written instructions, by the agreement of the EU standard contractual clauses to comply with the data protection level in Europe, or are subject to the rules of the EU-U.S. Privacy Shield.

11. External links
Our online offering may contain references to third-party online offerings (external links).

The mere inclusion of these external links in our offering does not yet mean that the third-party provider receives information about you when you visit our online offering.
Only when you click on the external links do you reach websites and offerings to which our privacy policy does not apply. Data may already be processed by the third-party provider merely by accessing the external link. Please refer to the statements of the party responsible there for information about the level of data protection in place there.

If you wish to avoid data processing by the entities behind the external links, please do not use them. Depending on the device and browser you are using, you can generally have the target URL of a link displayed without following the link (e.g. by right-clicking and selecting further information).

II. Data processing in detail

1. Provision of the online offering and creation of log files

Nature and scope of data processing
When you access our website, we process data about you automatically. This is the following data:

- The browser used to access the site and its version
- Type and version of the user's operating system
- Date and time of access by the user
- The internet protocol address (IP address) of the user and the requesting provider
- if applicable, the website from which the user came to our online offering (referrer URL)
- if applicable, the sub-pages and functions accessed by the user on our online offering
- if applicable, the websites accessed by the user from our online offering
- other similar data and information required for the provision of our online offering and its functions, as well as for the prevention of danger in the event of attacks on our IT systems

This data is stored in a log file of our system (logfile).

Purpose of data processing
We process this data - including its storage and statistical evaluation - not together with other personal data of the user, but use it exclusively insofar as this is necessary in order to

- enable the correct delivery of the content of our online offering to the user,
- optimise the content of our online offering as well as advertising for it,
- ensure the security and functionality of our online offering, and
- be able to provide the information necessary for defence and prosecution in the event of a cyberattack.

Legal basis for data processing
The legal basis for the aforementioned processing, temporary storage and statistical evaluation of the data is Art. 6(1)(f) GDPR. Our legitimate interest in the data processing also arises from the purposes named above.

Duration of storage
The data is generally deleted within 14 days of the end of your access to our online offering. The retention period is necessary for the security concerns named above (e.g. to investigate cyberattacks, fraud or abuse cases). Longer storage only takes place if we are legally obliged to do so.

Statistical evaluations aggregated from the data are stored for up to 3 years. These evaluations are anonymised and can no longer be attributed to any natural person.

Right to object; your rights
Please refer to III. and IV. of this statement for further information on your right to object to the aforementioned processing of data as well as your further rights in connection with data processing.

2. Use of cookies

Nature and scope of data processing
Our online offering uses cookies. These are small text files that your browser or another program you use to access our online offering (e.g. Flash player) stores on your computer or mobile device.

Such cookies contain characteristic character strings that enable unique identification of the browser during the use of our online offering, and, if applicable, also when our online offering is accessed again.

In addition, cookies may contain information required for the provision of our services, or that enable you to have a personalised and more convenient user experience. Information that enables us to analyse your behaviour on our online offering may also be stored there.

The cookies we use exclusively store the following information:

- Session data

The above information is not processed by us together with other data about you. Insofar as possible, the data is also anonymised, or at least pseudonymised, so that it is not possible to assign this data to the accessing user. This data is not passed on to third parties.

We only use cookies that would allow us or third parties to track your behaviour on the internet - outside our online offering - or that serve to create cross-site user profiles, if you have expressly consented to such use beforehand, or if only anonymised data is used that does not allow assignment to the accessing device and your person. You will be separately informed of any such use in this statement.

Purpose of data processing
The purpose of using technically necessary cookies is to enable us to deliver our online offering to you, or to make it more user-friendly. For example, some elements of our online offering require that the accessing browser can still be identified even after a page change, since otherwise our offering could not be used, or not used sensibly.

To ensure and improve the quality of our online offering and its content, we use analysis cookies. Through statistical evaluations of the data thus obtained and pseudonymised, we learn more about how our online offering is used. In addition, this data also serves to avert danger from attacks on our IT systems, cases of abuse or fraud.

Legal basis for data processing
The legal basis for the aforementioned processing of the data is Art. 6(1)(f) GDPR. Our legitimate interest in the data processing also arises from the purposes named above.

Any further processing, in particular in the form of cross-site tracking cookies, only takes place if this is separately pointed out in this statement and exclusively on the basis of consent obtained from you prior to the processing pursuant to Art. 6(1)(a) GDPR.

Duration of storage
Cookies are stored on the user's computer and transmitted from it to our site. As a user, you therefore have full control over the use and storage duration of cookies.

Temporary cookies are automatically deleted when you leave our online offering and close the browser. Permanent cookies remain stored on your device even after leaving our online offering and closing the browser, and can be read again when you use our online offering again.

Through appropriate settings on the program you use to access our online offering (e.g. browser, Flash player, etc.), you can prevent or restrict the storage of temporary or permanent cookies on your device at all. Using the corresponding deletion function on your browser, you can also delete cookies already stored at any time. Please note that in that case, not all functions of our online offering may be usable, or any data or logins stored in the cookies may need to be re-entered when you use our online offering again.

Right to object; your rights
Please refer to III. and IV. of this statement for further information on your right to object to the aforementioned processing of data as well as your further rights in connection with data processing.

3. Contact form and e-mail contact

Nature and scope of data processing
We provide contact forms on our online offering, which can be used for electronic contact with us.

If you make use of this option, the data entered in the input mask is transmitted to us and stored.

Please refer to the respective input mask for information on what data this is and which of this data is mandatory for the respective purpose of contact.

When using our contact forms, the following technical access data is also stored:

- The IP address of the user
- Date and time of submission

For the processing of the data, your consent is obtained during the submission process and reference is made to this privacy policy.

In addition, contact via the e-mail addresses provided is also possible. In this case, the data transmitted to us by e-mail is stored. We point out that unencrypted communication by e-mail is not secure. If you nevertheless contact us unencrypted, we consider this your consent to unencrypted communication.

As a rule, no data is passed on to third parties in this context. The data is used exclusively for processing the conversation. However, if the conversation is aimed at initiating or fulfilling a contract, your data may be passed on to third parties (for example, the company commissioned with payment processing or a transport company) for the purpose of processing a payment, a delivery or other contractual or statutory purposes.

Purpose of data processing
Your voluntary provision of data when contacting us serves to conduct the communication initiated by you for the purpose stated by you.

Your contact and the data processing carried out by us in this context may also be necessary for the fulfilment of a contract with you or for the implementation of pre-contractual measures initiated at your request.

Legal basis for data processing
The legal basis for the aforementioned processing of data based on your contact via the contact form is your consent pursuant to Art. 6(1)(a) GDPR.

The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6(1)(f) GDPR; our legitimate interest in the data processing arises from the purpose of your contact.

If the contact serves to fulfil a contract to which you are a party, or if the contact is necessary for the implementation of pre-contractual measures carried out at your request, then Art. 6(1)(b) GDPR is an additional legal basis for the processing of the data.

The technical access data collected on the occasion of your use of the contact form is also processed on the basis of Art. 6(1)(f) GDPR for the prevention and investigation of attacks on our IT systems, cases of abuse and fraud.

Duration of storage
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected.

This is generally the case when the communication purpose associated with your inquiry has been fulfilled. You may also request deletion of the data at any time; in such a case, the conversation may no longer be continued. Longer storage only takes place if we are legally obliged to do so.

If the data is required for the fulfilment of a contract or for the implementation of pre-contractual measures, early deletion of the data is only possible insofar as no contractual or statutory obligations preclude deletion. In this context, it may also be necessary to store changes to the data records in order to maintain a corresponding history and thus comply with statutory requirements, or to prevent or investigate cases of abuse and fraud. Even after the conclusion of the contract, it may be necessary to store your data in order to comply with contractual or statutory obligations.

Right of withdrawal and objection; your rights
Please refer to III. and IV. of this statement for further information on your right to withdraw consent given by you at any time with effect for the future, or to object to the aforementioned processing of data, as well as your further rights in connection with data processing.

4. Facebook plugin

To give you the opportunity to conveniently recommend and discuss our offerings on the internet, we have integrated Facebook on our website. You can recommend our offerings on Facebook via the buttons on our website, which are identified by the Facebook logo or the addition „Like” (hereinafter: Facebook buttons).

The Facebook page is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (Facebook). All rights to the website, the corresponding logos and the name belong to Facebook.

We have deactivated the Facebook buttons by default in order to prevent data from being transmitted to Facebook as soon as our page is accessed, without your consent.

You can activate the Facebook buttons at any time by clicking on them. Only then does your browser establish a direct connection to Facebook's servers. Please note: after clicking on the Facebook button, data may already be transmitted to Facebook, even without you giving an express recommendation. Facebook may then be able to identify you, in particular if you are logged into your Facebook account at the time the Facebook button is activated. We no longer have any influence on this data transmission and further processing.

For further information on data collection by Facebook as well as its processing and use of your data and your rights in this regard, please refer to Facebook's privacy notices (http://de-de.facebook.com/privacy/explanation.php).

Our use of the Facebook plugin is based on the purposes named above pursuant to Art. 6(1)(f) GDPR.

5. Google+ plugin

To give you the opportunity to conveniently recommend and discuss our offerings on the internet, we have integrated Google+ on our website. You can recommend our offerings on Google+ via the buttons on our website, which are identified by the Google+ logo (hereinafter: Google+ buttons).

The Google+ page is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (Google). All rights to the website, the corresponding logos and the name belong to Google.

We have deactivated the Google+ buttons by default in order to prevent data from being transmitted to Google as soon as our page is accessed, without your consent.

You can activate the Google+ buttons at any time by clicking on them. Only then does your browser establish a direct connection to Google's servers. Please note: after clicking on the Google+ button, data may already be transmitted to Google, even without you giving an express recommendation. Google may then be able to identify you, in particular if you are logged into your Google account at the time the Google+ button is activated. We no longer have any influence on this data transmission and further processing.

For further information on data collection by Google as well as its processing and use of your data and your rights in this regard, please refer to Google's privacy notices (https://policies.google.com/privacy/update?hl=de)

Our use of the Google+ plugin is based on the purposes named above pursuant to Art. 6(1)(f) GDPR.

6. Twitter plugin

To give you the opportunity to conveniently recommend and discuss our offerings on the internet, we have integrated Twitter on our website. You can recommend our offerings on Twitter via the buttons on our website, which are identified by the Twitter logo (hereinafter: Twitter buttons).

The Twitter page is operated by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA (Twitter). All rights to the website, the corresponding logos and the name belong to Twitter.

We have deactivated the Twitter buttons by default in order to prevent data from being transmitted to Google as soon as our page is accessed, without your consent.

You can activate the Twitter buttons at any time by clicking on them. Only then does your browser establish a direct connection to Twitter's servers. Please note: after clicking on the Twitter button, data may already be transmitted to Twitter, even without you giving an express recommendation. Twitter may then be able to identify you, in particular if you are logged into your Twitter account at the time the Twitter button is activated. We no longer have any influence on this data transmission and further processing.

For further information on data collection by Twitter as well as its processing and use of your data and your rights in this regard, please refer to Twitter's privacy notices (https://twitter.com/privacy).

Our use of the Twitter plugin is based on the purposes named above pursuant to Art. 6(1)(f) GDPR.

7. YouTube videos

To make our website more appealing, we have integrated content from YouTube. This involves videos that can be accessed in a separate window (hereinafter: YouTube videos).

The YouTube page is operated by the Google subsidiary YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (YouTube). All rights to the website, the corresponding logos and the name belong to YouTube.

We have integrated the YouTube videos in such a way that they are only activated when you click on them, in order to prevent data from being transmitted to YouTube as soon as our page is accessed, without your consent.

You can activate the YouTube videos at any time by clicking on them. Only then does your browser establish a direct connection to YouTube's servers. Please note: after clicking on the YouTube video, data may already be transmitted to Twitter, even without you actually watching the video. YouTube may then be able to identify you, in particular if you are logged into your YouTube account at the time the YouTube video is activated. We no longer have any influence on this data transmission and further processing.

For further information on data collection by YouTube as well as its processing and use of your data and your rights in this regard, please refer to Google's privacy notices (https://policies.google.com/privacy/update?hl=de)

Our use of YouTube videos is based on the purposes named above pursuant to Art. 6(1)(f) GDPR.

8. Google Web Fonts

For the uniform display of fonts on our website, regardless of the browser or device you use, we use so-called web fonts. These are provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (Google).

When you access our page, your browser therefore loads the required web fonts into your browser cache in order to display texts and fonts correctly. For this purpose, your browser must establish a connection to Google's servers. As a result, Google becomes aware that our website was accessed via your IP address.

Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq

For further information on data collection by Google as well as its processing and use of your data and your rights in this regard, please refer to Google's privacy notices (https://policies.google.com/privacy/update?hl=de)

Our use of Google Web Fonts is based on the purposes named above pursuant to Art. 6(1)(f) GDPR.

9. Google Maps

To make it easier for our customers and visitors to find our business premises or other locations specified by us, we have integrated the Google Maps map service on our website.

This is provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (Google).

In order for the corresponding map section to be displayed to you, your browser must establish a connection to Google's servers. As a result, Google becomes aware that our website was accessed via your IP address.

For further information on data collection by Google as well as its processing and use of your data and your rights in this regard, please refer to Google's privacy notices (https://policies.google.com/privacy/update?hl=de)

Our use of Google Maps is based on the purposes named above pursuant to Art. 6(1)(f) GDPR.

III. Your rights

If we process personal data about you, you have the following rights as a data subject within the meaning of the GDPR vis-à-vis us as the controller. To exercise your rights, you can contact us or our data protection officer using the contact details given at the beginning.

1. Right to information
You have a right to information pursuant to Article 15 GDPR. The right to information initially includes the question of whether we process personal data about you. If this is the case, you may request detailed information, to the extent regulated by law, about the data, its processing and your further rights. However, restrictions on your right to information may arise from §§ 27 and 34 of the new Federal Data Protection Act (BDSG).

2. Right to rectification
If the data we process about you is incorrect or incomplete, you have a right to rectification and/or completion pursuant to Article 16 GDPR. We must carry out the rectification without delay following your request. However, restrictions on your right to rectification may arise from § 27 BDSG.

3. Right to erasure of data or restriction of processing
Under the conditions of Articles 17 and 18 GDPR, you can request the immediate erasure of data concerning you, or at least the restriction of the processing of the data. However, restrictions on these rights may arise from §§ 27 and 35 BDSG.

4. Right to notification
If you have effectively exercised a right to rectification, erasure or restriction of processing against us, we are obliged to notify all recipients to whom the data was disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves disproportionate effort. On request, we will inform you of these recipients in such a case.

5. Right to data portability
Under the conditions of Article 20 GDPR, you have a right to data portability to the extent stated therein. This includes in particular the provision of the data by us in a structured, commonly used and machine-readable format, for further use by you.

6. Right to withdraw a data protection consent declaration
Pursuant to Art. 7(3) GDPR, § 51 BDSG, you have the right to withdraw your data protection consent declaration at any time. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent up to the withdrawal.

7. Automated decision-making in individual cases, including profiling
Under the conditions of Art. 22 GDPR, you have the right not to be subject to a decision based solely on automated processing - including profiling - which produces legal effects concerning you or similarly significantly affects you.

We do not use such procedures.

8. Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, your place of work or the place of the alleged infringement, if you consider that the processing of data concerning you infringes the GDPR.

The supervisory authority with which the complaint has been lodged will inform you of the status and outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.

IV. Your right to object

Case-specific right to object
You have the right, for reasons arising from your particular situation, to object at any time to the processing of data concerning you that takes place on the basis of Art. 6(1)(e) GDPR (data processing in the public interest) or Art. 6(1)(f) GDPR (data processing on the basis of a balancing of interests); this also applies to profiling based on these provisions.

We will then no longer process the data concerning you, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

Right to object to direct marketing
If we process data concerning you in order to conduct direct marketing, you have the right to object at any time, without giving any reason, to the processing of your data for the purposes of such marketing; this also applies to profiling insofar as it is related to such direct marketing.

If you object to the processing for the purposes of direct marketing, your data will no longer be processed for these purposes.

Scientific, historical or statistical purposes
For reasons arising from your particular situation, you also have the right to object to the processing of your data carried out for scientific or historical research purposes or for statistical purposes pursuant to Art. 89(1) GDPR.

Your right to object may, however, be restricted in this respect if it is likely to render impossible or seriously impair the achievement of the research or statistical purposes, and the restriction is necessary for the fulfilment of the research or statistical purposes. Please refer to § 27 BDSG for further details.

Exercise in the context of information society services
In connection with the use of information society services, you have the option to exercise your right to object, notwithstanding Directive 2002/58/EC, by means of automated procedures using technical specifications.

You may otherwise also lodge an objection with us or our data protection officer using the contact details given above.