Data protection 

We, the operators of Zahnarztpraxis Dr. Niko Güttler, take the protection of your personal data very seriously and strictly adhere to data protection laws. Personal data is collected on this website only to the extent technically necessary. Under no circumstances will the collected data be sold or passed on to third parties for any other reason.

The practice owner is responsible for collecting and storing data. You can find their contact details in the website’s imprint.

The following statement provides you with an overview of how we ensure this protection and what type of data is collected for what purpose.

Definitions 

The privacy policy of the dental practice Dr. Niko Güttler is based on the terms used by the European legislator for the adoption of the General Data Protection Regulation (GDPR). Our privacy policy is intended to be easily readable and understandable for the public, as well as for our customers and business partners. To ensure this, we would like to explain the terms used in advance.

In this privacy policy we use, among other things, the following terms:

• Personal data: Personal data is any information relating to an identified or identifiable natural person (hereinafter “data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
• Data subject: A data subject is any identified or identifiable natural person whose personal data is processed by the controller.
• Processing: Processing is any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

• Restriction of processing: Restriction of processing is the marking of stored personal data with the aim of limiting its future processing.
• Pseudonymisation: Pseudonymisation is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that this additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.
• Controller or person responsible for processing: The controller or person responsible for processing is the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of processing personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.
• Processor: A processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
• Recipient: A recipient is a natural or legal person, public authority, agency, or other body to which personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be considered recipients.

• Third party: A third party is a natural or legal person, public authority, agency or body other than the data subject, the controller, the processor and the persons authorised to process the personal data under the direct authority of the controller or processor.
• Consent: Consent is any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data concerning him or her.

Data processing on this website

Our website serves exclusively to provide information about our practice, our range of treatments, and therapeutic options for various illnesses. When you visit our website, only the data transmitted from your browser to our server is collected. This data is necessary for you to view and navigate our website. The legal basis for collecting this data is Article 6 (1) (f) of the EU General Data Protection Regulation. Specifically, the following data is collected when you visit our website:

• browser types and versions used,
• the operating system used by the accessing system,
• the website from which an accessing system reaches our website (so-called referrers),
• the sub-websites accessed via an accessing system on our website,
• the date and time of access to the website,
• an Internet protocol address (IP address),
• the Internet service provider of the accessing system, and
• other similar data and information that serve to avert dangers in the event of attacks on our information technology systems.

When using this general data and information, we do not draw any conclusions about the data subject. Rather, this information is needed to

• to deliver the contents of our website correctly,
• to ensure the long-term functionality of our information technology systems and the technology of our website, and
• to provide law enforcement authorities with the information necessary for prosecution in the event of a cyberattack.

We evaluate this anonymously collected data and information with the aim of increasing data protection and data security within our company, ultimately ensuring an optimal level of protection for the personal We would like to clarify that the provision of personal data is sometimes required by law (e.g., tax regulations) or may also arise from contractual provisions (e.g., information on the contractual partner). In some cases, it may be necessary for a data subject to provide us with personal data in order to conclude a contract, which we must subsequently process. For example, the data subject is obligated to provide us with personal data if our company concludes a contract with them. Failure to provide the personal data would mean that the contract with the data subject could not be concluded.

Rights of data subjects 

Every data subject has the right granted by the European legislator to obtain confirmation from the controller as to whether or not personal data concerning him or her are being processed. If a data subject wishes to exercise this right of confirmation, they may contact our data protection officer or another employee of the controller at any time.

Any person affected by the processing of personal data has the right, granted by the European legislator, to obtain from the controller free information about the personal data concerning him or her stored at any time and a copy of this information. Furthermore, the European legislator has granted the data subject the right to obtain the following information:

• the processing purposes
• the categories of personal data being processed
• the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations
• where possible, the envisaged period for which the personal data will be stored, or, where not possible, the criteria used to determine that period
• the existence of a right to rectification or erasure of personal data concerning them or to restriction of processing by the controller or a right to object to such processing
• the existence of a right of complaint to a supervisory authority
• if the personal data are not collected from the data subject: all available information about the origin of the data

Furthermore, the data subject has the right to information as to whether personal data has been transferred to a third country or to an international organization. Where this is the case, the data subject also has the right to receive information about the appropriate safeguards related to the transfer.

If a data subject wishes to exercise this right to information, he or she may contact our data protection officer or another employee of the controller at any time.

Any person affected by the processing of personal data has the right granted by the European legislator to request the immediate rectification of inaccurate personal data concerning him or her. Furthermore, taking into account the purposes of the processing, the data subject has the right to request the completion of incomplete personal data, including by means of providing a supplementary statement.

If a data subject wishes to exercise this right to rectification, he or she may contact our data protection officer or another employee of the controller at any time.

Any person affected by the processing of personal data has the right granted by the European legislator to obtain from the controller the erasure of personal data concerning him or her without undue delay, where one of the following grounds applies and where processing is not necessary:

• The personal data were collected or otherwise processed for purposes for which they are no longer necessary.
• The data subject withdraws his or her consent on which the processing is based according to Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR, and there is no other legal ground for the processing.
• The data subject objects to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Art. 21 (2) GDPR.
• The personal data was processed unlawfully.
• The erasure of personal data is necessary to fulfil a legal obligation under Union or Member State law to which the controller is subject.
• The personal data were collected in relation to information society services offered in accordance with Art.8 (1) GDPR.

If one of the above reasons applies, and a data subject wishes to request the erasure of personal data stored by the Dr. Niko Güttler Dental Practice, they may contact our data protection officer or another employee of the controller at any time. The data protection officer of the Dr. Niko Güttler Dental Practice or another employee will ensure that the erasure request is complied with immediately.

If the personal data was made public by the dental practice Dr. Niko Güttler and our company as the controller pursuant to Art. 17 Para. 1 GDPR is obliged to erase the personal data, the dental practice Dr. Niko Güttler shall take appropriate measures, including technical ones, taking into account the available technology and the implementation costs, in order to inform other data controllers which process the published personal data that the data subject has requested the erasure by such controllers of all links to these personal data or of copies or replications of these personal data, unless processing is required. The data protection officer of the dental practice Dr. Niko Güttler or another employee will arrange the necessary measures in individual cases.

Any person affected by the processing of personal data has the right granted by the European legislator to request the controller to restrict processing if one of the following conditions applies:

• The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data.
• The processing is unlawful, the data subject opposes the erasure of the personal data and requests the restriction of the use of the personal data instead.
• The controller no longer needs the personal data for the purposes of the processing, but the data subject needs them to assert, exercise or defend legal claims.
• The data subject has objected to processing pursuant to Art. 21 (1) GDPR and it has not yet been determined whether the legitimate grounds of the controller outweigh those of the data subject.

If one of the aforementioned conditions is met, and a data subject wishes to request the restriction of personal data stored by the dental practice Dr. Niko Güttler, they may contact our data protection officer or another employee of the controller at any time. The data protection officer of the dental practice Dr. Niko Güttler or another employee will arrange for the restriction of processing. 

Every person affected by the processing of personal data has the right granted by the European legislator to receive the personal data concerning him or her, which was provided to a controller, in a structured, commonly used and machine-readable format. He or she also has the right to transmit these data to another controller without hindrance from the controller to which the personal data was provided, provided that the processing is based on consent pursuant to Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR or on a contract pursuant to Art. 6 (1) (b) GDPR and the processing is carried out by automated means, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. 

Furthermore, when exercising their right to data portability pursuant to Art. 20 (1) GDPR, the data subject has the right to have the personal data transmitted directly from one controller to another, where technically feasible and provided that this does not adversely affect the rights and freedoms of others.

To assert the right to data portability, the data subject may contact the data protection officer appointed by the dental practice Dr. Niko Güttler or another employee at any time.

Any person affected by the processing of personal data has the right granted by the European legislator to object at any time to the processing of personal data concerning him or her which is based on Article 6 (1) (e) or (f) GDPR, for reasons related to his or her particular situation.

In the event of an objection, the dental practice Dr. Niko Güttler will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which outweigh the interests, rights and freedoms of the data subject or which serve the processing, assertion, exercise or defence of legal claims.

Any person affected by the processing of personal data has the right granted by the European legislator to withdraw his or her consent to the processing of personal data at any time.

If the data subject wishes to exercise his or her right to withdraw consent, he or she may contact our data protection officer or another employee of the controller at any time.

Use of cookies 

To make visiting our website more attractive and enable the use of certain functions, we use cookies on various pages. These are small text programs that are stored on your computer (in your browser) after you visit our website. If you visit our website again, the browser you use sends the information stored in the cookie to our website and can thus make navigation easier for you, for example, by adopting default settings. Cookies are not viruses and cannot install malware on your computer. They are simply short texts that are exchanged between the web server and the browser. The following types of cookies are used on our website:

• Transient cookies (temporary cookies)

These cookies are stored only for the duration of your browser’s use. They store a so-called session ID, which allows various browser requests to be assigned to the shared session. This allows your computer to be recognized when you return to the website. As soon as you close the browser, these cookies are automatically deleted.

• Persistent cookies (time-limited cookies)

These cookies differ from transient cookies only in that they are not automatically deleted when you close your browser, but only after a preset period of time. However, you can delete these cookies at any time via your browser settings.

In principle, you can configure your browser settings so that cookies are not accepted or stored at all, or only to a limited extent. However, if you make use of this option, your ability to use our website may be restricted.

Announcement of changes 

Changes in the law or changes to our internal processes may make it necessary to adapt this privacy policy.

In the event of such a change, we will notify you at least six weeks before it takes effect. You generally have the right to revoke your consent.

Please note that (unless you exercise your right of withdrawal) the current version of the privacy policy is the valid one.

Legal basis for processing

Art. 6 (1) (a) GDPR serves as the legal basis for our company’s processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary to fulfill a contract to which the data subject is a party, as is the case, for example, with processing operations necessary for the delivery of goods or the provision of other services or consideration, the processing is based on Art. 6 (1) (b) GDPR. The same applies to processing operations necessary to carry out pre-contractual measures, such as in cases of inquiries about our products or services. If our company is subject to a legal obligation that requires the processing of personal data, such as to fulfill tax obligations, the processing is based on Art. 6 (1) (c) GDPR. In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor were injured in our company and their name, age, health insurance details, or other vital information had to be passed on to a doctor, hospital, or other third party. In this case, the processing would be based on Art. 6 (1) (d) GDPR. Finally, processing operations could be based on Art. 6 (1) (f) GDPR. This legal basis applies to processing operations that are not covered by any of the aforementioned legal grounds if the processing is necessary to protect the legitimate interests of our company or a third party, unless the interests, fundamental rights, and freedoms of the data subject override these interests. We are permitted to carry out such processing operations, in particular, because they were specifically mentioned by the European legislator. The legislator considered that a legitimate interest could be assumed if the data subject is a customer of the controller (Recital 47, Sentence 2 GDPR).

Legitimate interests in the processing pursued by the controller or a third party

If the processing of personal data is based on Art. 6 (1) (f) GDPR, our legitimate interest is the conduct of our business activities for the benefit of the well-being of all our employees and our shareholders.

Duration for which the personal data will be stored

The criterion for the duration of storage of personal data is the respective statutory retention period. After expiration of this period, the corresponding data will be routinely deleted unless it is no longer required for the fulfillment or initiation of a contract.

Data protection in applications and during the application process 

The controller collects and processes the personal data of applicants for the purpose of processing the application procedure. Processing may also be carried out electronically. This is particularly the case if an applicant submits corresponding application documents to the controller electronically, for example by email or via a web form on the website. If the controller concludes an employment contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If the controller does not conclude an employment contract with the applicant, the application documents will be deleted after two months, provided that no other legitimate interests of the controller conflict with deletion. Other legitimate interests in this sense include, for example, the burden of proof in proceedings under the General Equal Treatment Act (AGG).

The responsible person or your contact person

If you have any questions regarding the collection, processing, or use of your personal data, or if you wish to request information, correction, blocking, or deletion of data, or if you wish to revoke consent you have given or object to a specific use of your data, please contact the website operator directly. You can find their contact details in the website’s imprint.

Use of Google Analytics for web analysis

This website uses Google Analytics, a web analysis service provided by Google Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website is usually transferred to a Google server in the USA and stored there. IP anonymization is activated on this website. Therefore, your IP address will be shortened by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. More information: https://support.google.com/analytics/answer/2763052?hl=de The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You can prevent cookies from being saved by selecting the appropriate settings in your browser. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de. 

You can prevent Google Analytics from collecting your data by clicking on the following link. This will set an opt-out cookie that prevents future collection of your data when you visit this website:

Further and more detailed information on terms of use and data protection can be found at http://www.google.com/analytics/terms/de.html or under https://www.google.de/intl/de/policies/. 
We would like to point out that Google Analytics has been extended on this website with the code “gat._anonymizeIp();” in order to ensure anonymous collection of IP addresses (so-called IP masking).

Use of Google Maps

Our website uses Google Maps to display maps and create directions.

Google Maps is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. 

When you visit the website, Google receives information that you have accessed the corresponding page of our website. This happens regardless of whether you have a Google user account or are logged in using it. If you are logged in using a Google user account while using the website, the data will be assigned directly to your user account. If you do not want this to happen, you must log out before using the service.

By using Google Maps, you consent to the collection, processing, and use of automatically collected data and data you enter by Google and, where applicable, third parties. The terms of use for Google Maps can be found at Terms of Use for Google Maps. Detailed information can be found at google.de: Transparency and choice and Privacy Policy You must exercise your right of objection directly with Google. You can deactivate the Google Maps service via your browser settings (disabling JavaScript in your browser). You will then no longer be able to use it.

Privacy Policy for the “Google Remarketing” and “Similar Audiences” function of Google Inc.

This website uses the remarketing or “Similar Audiences” function of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”). This allows you to be targeted with advertising by displaying personalized and interest-based ads when you visit other websites in the so-called “Google Display Network”. “Google Remarketing” or the “Similar Audiences” function uses so-called “cookies”, text files that are stored on your computer and that enable an analysis of your website use. These text files record your visits and anonymized data about website usage. No personal data is stored. If you visit another website in the so-called “Google Display Network”, you may be shown advertisements that are highly likely to take into account product and information areas previously viewed on our website.

You can prevent “Google Remarketing” or the “Similar Audiences” function by selecting the appropriate settings in your browser software. However, please note that if you do this, you may not be able to use all of the features of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website, as well as from processing this data, by downloading and installing the browser plug-in available under the following link: https://www.google.com/settings/ads/plugin?hl=de. You can also disable the use of cookies by third parties by visiting the Network Advertising Initiative’s opt-out page at http://www.networkadvertising.org/choices/ and implement the additional opt-out information provided there. Google’s privacy policy on remarketing with further information can be found here: http://www.google.com/privacy/ads/. 

More information

Your trust is important to us. Therefore, we would like to be available to answer any questions you may have regarding the processing of your personal data at any time. If you have any questions that this privacy policy could not answer, or if you would like more detailed information on a particular point, please contact the website operator at any time. You can find their contact details in the website’s imprint.

Contact form

If you send us inquiries via the contact form, your information from the form, including the contact details you provided there, will be stored by us for the purpose of processing your inquiry and in case of follow-up questions. We will not share this data without your consent. 

The data entered into the contact form will therefore be processed exclusively on the basis of your consent (Art. 6 (1) (a) GDPR). You can revoke this consent at any time. To do so, simply send us an informal email. The legality of the data processing operations carried out up to the time of revocation remains unaffected by the revocation.

The data you enter in the contact form will remain with us until you request its deletion, revoke your consent to storage, or the purpose for storing the data no longer applies (e.g., after your request has been processed). Mandatory legal provisions—in particular, retention periods—remain unaffected.