Menu
We are very pleased about your interest in our website - and thus in our company. The protection of your private rights and freedoms is very important to us; we only use your data for the purposes intended. Since it is important to us that you are aware at all times of the extent to which we collect, use and, if necessary, transfer your data to third parties, we will provide you with the following comprehensive information on the processing of your personal data collected by us or stored by us.
Visiting our website is generally possible without providing (personal) data; if there are exceptions to this for selected services, we will explain these in the following chapters. When processing personal data, we strictly adhere to the requirements of the EU General Data Protection Regulation (GDPR) and any other data protection regulations.
Dental Direkt GmbH
Marcel Brüggert, Marvin Kühme
Industriezentrum 106 – 108
32139 Spenge
Germany
Phone: +49 5225 86319-0
E-mail: info@dentaldirekt.de
Website: https://shop.dentaldirekt.de
Jörg ter Beek
Cortina Consult GmbH
Hafenweg 24
48155 Münster
Germany
Data protection team for general data protection inquiries:
Team e-mail: dsb.dental-direkt@cortina-consult.de
Website: https://cortina-consult.com/
To ensure that we always have up-to-date data protection information in connection with the services of our website, we use the CLOUD DSE service of Cortina Consult GmbH, Hafenweg 24 in 48155 Münster. In this process, the contents of our privacy policy are hosted on the servers at Cortina Consult and managed centrally. Necessary changes are implemented promptly by Cortina Consult and immediately displayed via direct integration on our website.
The EU General Data Protection Regulation (GDPR) provides for extensive rights for data subjects in Chapter III, which we explain to you accordingly below with regard to the processing of your personal data:
This requirement concerns in particular information on the following details of data processing:
We will correct any erroneous data immediately, provided that you inform us of the circumstance accordingly.
Provided that the processing is no longer necessary and one of the following conditions is met:
Provided that one of the following conditions is met:
If it is technically possible and does not affect the rights and freedoms of other persons, we will - at your request - transfer your data to another recipient (responsible party).
If we collect or have collected and process personal data from you, you have the right to object to the data processing at any time with effect for the future. In exceptional cases, the objection may be ineffective, e.g. if we can demonstrate compelling interests worthy of protection for the processing that outweigh your interests or processing serves the assertion, exercise or defense of legal claims.
You have the right not to be subject to any decision based solely on automated processing including profiling which produces legal effects concerning you or similarly significantly affects you. Exceptions apply if the decision is necessary for the conclusion or performance of a contract or you have expressly consented to the processing.
You have the right to revoke consent to the processing of personal data at any time.
A list of the supervisory authorities responsible in Germany can be found at: https://www.bfdi.bund.de/EN/Service/Anschriften/Laender/Laender-node.html
The following information applies to the data processing on our website in general. If there are exceptions or additions to this information, these are described in detail in the relevant sections.
We secure our website and other systems through technical and organizational measures against loss, destruction, access, modification or distribution of your data by unauthorized persons. In addition, we have implemented SSL encryption (SHA256) on our website to protect your data. However, despite regular checks, complete protection against all dangers is not possible.
| Permitted use | Specification of the GDPR |
|---|---|
| Informed consent | Art. 6 para. 1 a |
| Performance of a contract | Art. 6 para. 1 b |
| Implementation of pre-contractual measures | Art. 6 para. 1 b |
| Fulfillment of legal obligations | Art. 6 para. 1 c |
| Protection of vital interests | Art. 6 para. 1 d |
| Safeguarding our legitimate interest | Art. 6 para. 1 f |
Our legitimate interest, as defined in Article 6 (1) f GDPR, is based on the performance of our business activities in order to maintain our ability to operate and secure the employment of our employees.
After the purpose of storage has ceased, the retention periods are generally at least six or ten years. As a rule, data is deleted immediately in accordance with our deletion concept, provided that this does not conflict with any retention obligation, necessity for contract fulfillment or a legitimate interest.
We store your personal data only for the period required to fulfill the specified purpose. After the purpose no longer applies and after expiration of any existing retention periods, your data will be deleted immediately. If deletion is not possible, the data will be blocked instead.
As soon as you visit our website, our web server collects some general data and technical information as shown below:
| Data collected | Purpose of the survey |
|---|---|
| Browser types and versions used | Correct display of the page content |
| Operating system used, visitor origin (referrer), subpages clicked on | Optimization of our website content as well as our advertising |
| Date and time of access to the website as well as IP address and internet service provider of the visitor | Ensuring the permanent functionality of our IT systems and prevention of misuse |
| Other data and information for security in the event of attacks | Providing relevant information to law enforcement agencies in the event of a cyberattack |
If applicable, in deviation from or in addition to the above-mentioned general information, you will find details of the individual data processing on our website below.
Under certain circumstances an obligation arises for you to provide us with your personal data. Examples:
| Nature or purpose of the processing | Need |
|---|---|
| Conclusion of a sales contract | Fulfillment of the contractual obligation |
| In the employee context | Compliance with legal requirements |
| Purpose of processing | Provision of information in the form of electronic circulars |
| Legal basis | Consent (Art. 6 para. 1 lit. a GDPR) |
| Recipient (if applicable) | none |
| Third-country transfer | A data transfer to a third country does not take place and is not planned. |
| Duration of storage | See General deadlines for data deletion |
| Obligation / necessity | There is no obligation to provide personal data. Newsletters are sent exclusively after registration via a double opt-in procedure or after a purchase contract has been successfully concluded and the e-mail address has been collected in this process. |
| Consequences of non-compliance | The newsletter will not be delivered to you. |
| Automated decision-making | In this context, we do not use automatic decision-making. |
| Origin of the data | The data comes from the data subject himself. |
| Change of purpose | none |
| Purpose of processing | Processing and, if necessary, answering the request of the form sender |
| Legal basis |
|
| Recipient (if applicable) | The data will not be passed on to third parties and/or to a third country. |
| Third-country transfer | Data transfer to a third country does not take place and is not planned. |
| Duration of storage | See General deadlines for data deletion |
| Obligation / necessity | There is no obligation. |
| Consequences of non-compliance | none |
| Automated decision-making | In this context, we do not use automated decision-making. |
| Origin of the data | The data originates from the person concerned. |
| Categories of personal data | Data and categories requested in the respective form. |
| Change of purpose | none |
| Purpose of processing |
| ||||
| Legal basis |
| ||||
| Recipient (if applicable) | none | ||||
| Third-country transfer | A data transfer to a third country does not take place and is not planned. | ||||
| Duration of storage | See General deadlines for data deletion | ||||
| Obligation / necessity | Without the data, the user account cannot be created. | ||||
| Consequences of non-compliance | Without the data, the user account cannot be created. | ||||
| Automated decision-making | In this context, we do not use automatic decision-making. | ||||
| Origin of the data | The data comes from the data subject himself. | ||||
| Change of purpose | none |
| Purpose of the processing of general data |
| ||||||||
| Legal basis | Fulfillment of a contract (Art. 6 para. 1 lit. b GDPR) | ||||||||
| Recipient (if applicable) | Parcel service provider, logistics service provider, payment service provider | ||||||||
| Third-country transfer | A data transfer to a third country does not take place and is not planned. | ||||||||
| Duration of storage | See General deadlines for data deletion | ||||||||
| Obligation / necessity | The data (in the mandatory fields) must be provided as part of the underlying contract. | ||||||||
| Consequences of non-compliance | The creation of a customer account is not possible in this case. | ||||||||
| Automated decision-making | In this context, we do not use automatic decision-making. | ||||||||
| Origin of the data | The data comes from the data subject himself. | ||||||||
| Categories of personal data | The data comes from the data subject himself. | ||||||||
| Change of purpose | none |
We use cookies on this website. These cookies are used for various purposes: many cookies are technically necessary to provide you with certain website functions, others are used for security and some may be used to analyze user behavior. You can delete all cookies manually or automatically at any time via your web browser. It is possible to use our website, although possibly not to its full extent, without cookies.
| Purpose of processing | Compliance with legal obligations, storage of consent |
| Legal basis |
|
| Recipient (if applicable) | Usercentrics A/S, Havnegade 39, 1058 Kopenhagen, Denmark |
| Third-country transfer | Data transfer to a third country does not take place and is not planned. |
| Duration of storage | See General deadlines for data deletion |
| Obligation / necessity | no |
| Consequences of non-compliance | no |
| Automated decision-making | In this context, we do not use automated decision-making. |
| Origin of the data | The data usually comes from the data subject, but can also come from third parties. |
| Categories of personal data | Opt-in and opt-out data, referrer URL, user agent, user settings, consent ID, time of consent, consent type |
| Change of purpose | no |
| Data protection officer of the provider | privacy@cookiebot.com |
| Privacy policy of the provider | https://www.cookiebot.com/de/privacy-policy/ |
| Purpose of processing | Creation of usage profiles to optimise the cost-benefit factor on the website |
| Legal basis |
|
| Third-country transfer | If applicable, transmission, storage and processing in the USA, Google LLC. The data transfer is based on the EU-U.S. Data Privacy Framework through which Google LLC is certified. |
| Duration of storage | See General deadlines for data erasure |
| Obligation / necessity | none |
| Consequences of non-compliance | none |
| Automated decision-making | In this context, we do not use automated decision-making. |
| Origin of the data | As a rule, the data originates from the data subject themselves. |
| Categories of personal data | Click behaviour, anonymised IP address, referrer, sub-pages visited, time spent on website, frequency of visit, date, access location, time of visit, user agent |
| Change of purpose | none |
| Opt-Out | https://tools.google.com/dlpage/gaoptout https://myactivity.google.com/ |
| Data protection officer of the provider | https://support.google.com/policies/contact/general_privacy_form |
| Privacy policy of the provider | https://policies.google.com/privacy?hl=en |
| Purpose of processing | Hosting and building the website. |
| Legal basis |
|
| Recipient (if applicable) | Shopify International Limited, Victoria Buildings, 2. Etage, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland |
| Third-country transfer | Canada (adequacy decision) |
| Duration of storage | See General deadlines for data deletion |
| Obligation / necessity | Necessity through CMS |
| Consequences of non-compliance | no |
| Automated decision-making | In this context, we do not use automated decision-making. |
| Origin of the data | The data usually comes from the data subject, but can also come from third parties. |
| Categories of personal data | IP address, information about website visits |
| Change of purpose | no |
| Purpose of processing | This service records what happens after a click on an advert placed by us via Google Ads when users subsequently visit the website. |
| Legal basis |
|
| Third-country transfer | If applicable, transfer, storage and processing in the USA, Google LLC. The data transfer is based on the EU-U.S. Data Privacy Framework through which Google LLC is certified. |
| Duration of storage | See General deadlines for data erasure |
| Obligation / necessity | none |
| Consequences of non-compliance | none |
| Automated decision-making | In this context, we do not use automated decision-making. |
| Origin of the data | The data usually originates from the data subject, but may also originate from third parties. |
| Categories of personal data | Browser language, browser type, clicked advertisements, cookie ID, date and time of visit, IP address, referrer URL, web request, user behaviour, user agent |
| Change of purpose | none |
| Opt-Out | https://adssettings.google.de/ https://myactivity.google.com/ |
| Data protection officer of the provider | https://support.google.com/policies/contact/general_privacy_form |
| Privacy policy of the provider | https://business.safety.google/privacy/ |
| Purpose of processing | Simplified management of analysis tools through central control and management of the collected analysis mechanisms |
| Legal basis | Consent (Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG) |
| Recipient (if applicable) | Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Irland |
| Third-country transfer | If applicable, transfer, storage and processing of personal data in the USA. The data transfer is based on the standard contractual clauses of the EU Commission. Google LLC is certified in accordance with the EU-US Data Privacy Framework (DPF). |
| Duration of storage | See General deadlines for data deletion |
| Obligation / necessity | no |
| Consequences of non-compliance | no |
| Automated decision-making | In this context, we do not use automated decision-making. |
| Origin of the data | As a rule, the data comes from the person concerned. |
| Categories of personal data | Pages and functions accessed or clicked, anonymized IP address, referrer, subpages visited, time spent on website, frequency of visits, date, access location, time of visit |
| Opt-Out | no |
| Data protection officer of the provider | https://support.google.com/policies/contact/general_privacy_form |
| Privacy policy of the provider | https://business.safety.google/privacy/ |
| Purpose of processing | Provision of information in the form of electronic newsletters. |
| Legal basis | Consent (Art. 6 para. 1 lit. a GDPR) |
| Recipient (if applicable) | The Rocket Science Group LLC, 675 Ponce de Leon Ave NE, Suite 5000 Atlanta, GA 30308, United States of America |
| Third-country transfer | United States of America |
| Duration of storage | See General deadlines for data deletion |
| Obligation / necessity | There is no obligation to provide personal data. |
| Consequences of non-compliance | The newsletter will not be sent to you. |
| Automated decision-making | In this context, we do not use automated decision-making. |
| Origin of the data | The data comes from the person concerned. |
| Categories of personal data | E-mail address, time of registration |
| Newsletter tracking | Our newsletters contain tracking pixels for statistical purposes. You can object by preventing the download of graphics from the Internet within your email program or the receipt of HTML emails. |
| Data protection officer of the provider | privacy@mailchimp.com |
| Privacy policy of the provider | https://mailchimp.com/legal/privacy/ |
| Purpose of processing | Measurement of conversions and optimisation of advertising measures. |
| Legal basis | Consent (Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG) |
| Recipient (if applicable) | Meta Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland |
| Third-country transfer | If applicable, transfer, storage and processing of personal data in the USA. The data transfer is based on the standard contractual clauses of the EU Commission. Meta Platforms is certified in accordance with the EU-US Data Privacy Framework (DPF). |
| Duration of storage | See General deadlines for data deletion |
| Obligation / necessity | none |
| Consequences of non-compliance | none |
| Automated decision-making | In this context, we do not use automatic decision-making. |
| Origin of the data | The data usually originates from the data subject, but may also originate from third parties. |
| Categories of personal data | Ads viewed, browser information, content viewed, device information, geographic location, interactions, IP address, marketing information, pixel ID, referrer URL, usage data, user behavior, device operating system, device ID, HTTP header, items clicked, pages viewed, Facebook cookie information, page/click behavior, user agent, browser type. |
| Change of purpose | none |
| Data protection officer of the provider | https://www.facebook.com/help/contact/540977946302970 |
| Privacy policy of the provider | https://www.facebook.com/privacy/explanation |
| Purpose of processing | This is a video player service. It can be used by users to view, rate, share, comment on and upload videos. |
| Legal basis |
|
| Recipient (if applicable) | Google Ireland Limited; Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland |
| Third-country transfer | If applicable, transmission, storage and processing in the USA, Google LLC. The data transfer is based on the EU-U.S. Data Privacy Framework through which Google LLC is certified. |
| Duration of storage | See General deadlines for data deletion |
| Obligation / necessity | none |
| Consequences of non-compliance | none |
| Automated decision-making | In this context, we do not use automated decision-making. |
| Origin of the data | The data usually originates from the data subject, but may also originate from third parties. |
| Categories of personal data | Device information, IP address, Referrer URL, Viewed videos |
| Change of purpose | none |
| Privacy controls | https://safety.google/privacy/privacy-controls/ |
| Data protection officer of the provider | https://support.google.com/policies/contact/general_privacy_form |
| Privacy policy of the provider | https://policies.google.com/privacy?hl=en |
Telefon +49 5225 86319-0
E-Mail shop@dentaldirekt.de
Industriezentrum 106 – 108
32139 Spenge, Germany
Phone
Email
Facebook
Instagram
LinkedIn
YouTube
