Data Protection Notice
We process your personal data exclusively in compliance with applicable law (in particular the EU General Data Protection Regulation (GDPR), the Austrian data protection law (DSG) and the telecommunications law (TKG). In this data protection information we inform you about the most important aspects of data processing within the framework of our website and our business activities.
Purposes of this notice
This data protection declaration is applicable to everyone who uses the dental and orthodontic services of Dr. Robert Scherngell, MSc and his team („we“, „us“), is in business contact with us or visits the website (http://www.zahnregulierung.com). We hereby inform you about the type, scope and purpose of the collection and use of your personal data by us. We respect your privacy and endeavour to comply with the legal requirements for the processing of your personal data and to process your personal data exclusively within the framework of the provisions of the GDPR and the DSG.
Who is responsible for data processing and data protection?
Responsible for your data is:
Dr. Robert Scherngell, MSc
Mariahilfer Strasse 128/5
What are personal data?
Personal data are all those information that refer to a certain person, identify or make them identifiable (e.g. name, age, date of birth, social security number, contact data, invoice data, IP address, e-mail address, etc.).
Processed data categories and purpose of data processing
We process the personal data that you provide to us through your details, for example in the context of an inquiry or the medical treatment contract, as well as data that becomes known to us in fulfilment of our contractual obligation under the medical treatment contract. In case we process personal data which we have not obtained from you, this data comes from public sources.
Data Processing in connection with dental/orthodontic treatment:
In addition to your master data (such as name, address, contact data), we process the data required to fulfil our contractual obligation and thereby related activities, e.g. order and service data, correspondence data, payment data, etc. as well as special categories of data („sensitive data“; in particular health data). Sensitive data will only be processed by us to the extent that this data is required to fulfil the medical treatment contract or if you have expressly consented to the processing of this data.
If you have made personal data available to us as a patient and/or other business partner we will only use it to answer your inquiries, to process and execute (patient) contracts and for technical administration.
We process personal data of other (contact) persons, e.g. contact persons at (social) insurance companies, authorities and other market participants to the extent or as long as these are essential for us due to their function.
Processing of personal data in the context of the maintenance of (potential) patient and business contacts:
As part of the constant care of business and (potential) patient contacts, we send out invitations to events, information on current developments in the fields of dentistry, orthodontics and related services. This information is provided free of charge, without obligation and without any liability for its completeness and correctness. For this purpose, we process your master and contact data as well as correspondence data.
Processing of personal data during your visit to our website:
When visiting our website, the request, your IP address, the browser type and language settings as well as the date and time of the request is being collected in order to
- provide you this website and to further improve and develop it;
- create usage statistics;
- detect, prevent and investigate attacks on our website;
- be able to respond to your request
and will be deleted automatically within 3 Months.
The information that is generated following your use of this website (including your IP address and the URLs of the websites accessed) is transmitted to the Google server in the USA and stored there. We do not store any of your data that is collected in connection with Google Analytics.
This website uses the IP anonymization option offered by Google Analytics. Google will therefore make your IP address anonymous as soon as Google receives your IP address.
On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide us other services relating to website and internet use. The IP address transmitted by your browser is not merged with other data by Google. A corresponding order data agreement pursuant to Art 28 DSGVO with Google Analytics is currently being worked on. User data is stored for a period of three months.
Integration of Google Maps
Use of YouTube plugins
On this website we use YouTube video plugins. YouTube is operated by YouTube LLC, headquartered in 901 Cherry Avenue, San Bruno, CA 94066, USA. and represented by Google Inc., located at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
By playing the videos embedded on the website, a connection to the YouTube server is established and the plugin is displayed. This transfers information and personal data to the YouTube server (e.g. IP-Address and from which website the video was accessed).
If you are logged in to YouTube, your personal information is going to be assigned to your personal user account. When using the plugin, e.g. clicking the play button of a video, this information is also assigned to your user account. You can prevent this assignment by logging out of your YouTube account and other user accounts of YouTube LLC and Google Inc. and deleting the corresponding cookies of the companies before using our website.
The purpose and scope of the data collection and the further processing and use of the data by YouTube as well as your relevant rights and setting options for the protection of your privacy can be found in the YouTube data protection information: www.google.de/intl/de/policies/privacy/
On what legal basis do we process your data?
The legal basis for the processing of personal data of (potential) patients and other business partners is the fulfilment of (pre-)contractual obligations and related legal regulations (Art. 6 para. 1 lit b GDPR).
Insofar as we process sensitive data, this is based on your express consent (within the scope of the purposes covered by this consent) and for dental diagnostics, care and/or medical treatment (Art 9 para 1 lit h GDPR).
The legal basis for processing your personal data in connection with the use of our website is your consent and/or our overriding legitimate interest, which consists in achieving the above-mentioned purposes.
The legal basis for processing personal data, for sending invitations to events, information on current developments in the fields of dentistry, orthodontics and related services is our legitimate interest to inform (potential) patients and business contacts and/or your consent.
Will your personal data be transferred to third parties?
Within the scope of the fulfilment of your medical treatment contract, your personal data will only be passed on or transferred by us to third parties (dental technicians, social security, health insurance, etc.) if this is necessary for the purpose of contract processing, billing or to fulfil a legal obligation if we have legitimate interest or if you have given your prior consent to the transfer.
In the area of invoicing and dunning, your personal data may be transferred to third parties (e.g. accountants, tax consultants, etc.) for payment, accounting and other evidence purpose.
We transmit your data (if this is necessary and we are entitled to do so) exclusively to companies, authorities or organisations that are forced by law or contract to comply with Austrian or European data protection laws or submitted to them.
With the exception of authorities (acting within the scope of legal obligations or on behalf of a court) we do not transmit any personal data to recipients who use it for their own purpose.
We will not transfer your personal data to recipients in third countries without your prior consent.
How long do we store your data?
We will only keep your personal data for as long as reasonably deemed necessary by us to achieve the purpose mentioned above and as permitted by applicable law. We store your data for the duration of the contractual relationship, in accordance with statutory retention and verification periods or for the duration of your consent. In addition to that we store personal data if it is necessary to protect or inforce the rights and legitimate interests of our company or third parties. Data which are no longer needed or for whose processing a necessary consent was revoked, will be deleted by us immediately and finally.
Rights of concerned people
With regard to your personal data processed by us you have the following rights:
- Right of information about the personal data processed by us (purpose, categories, origin, recipient, storage period, etc.) and of copies of these data;
- Right to correct incomplete or incorrect personal data;
- Right of erasure of personal data if i) the data are no longer necessary for the purpose for which they were collected ii) you have withdrawn your consent for processing iii) you have raised an objection to the processing iv) the data are processed unlawfully or v) the erasure of the data is necessary to fulfil a legal obligation;
- Right to restrict the processing of personal data for the duration of audits or the safeguarding of legal claims, so that these are excluded from further processing (without deleting them);
- Right to transfer personal data by receiving it in a common and machine-readable format, if technically feasible
- Right on contradiction of the processing of personal data in case that the processing is based on our legitimate interest and if it is advisable due to a special situation.
Please contact us with your data protection concerns or questions by e-mail to email@example.com or by telephone: 0043(0)1/5221966.
When are you able to revoke your consent or when do you have to provide us data?
If we process your data on the basis of your consent, you can revoke this at any time. If we process your data for any other legal reason, e.g. on the basis of a contractual relationship or a legal obligation, you have to provide us the necessary data. Otherwise we can either not or not completely fulfil our contractual or legal obligations towards you or third parties or we may be entitled to withdraw from the contract and claim damages.
Which authority is responsible for control?
You have the right to complain to the competent data protection authority, if you believe that the processing of your data violates legal regulations. We ask you to contact us with your request first (firstname.lastname@example.org oder TelNr: 0043(0)1/5221966).