Privacy Policy

1. Data Protection at a Glance

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified.

When you visit the website, technically necessary data is processed (see “Server log files”). In addition, we use the web analytics service Google Analytics to evaluate how the website is used (see the section “Google Analytics”). Beyond this, we receive personal data only if you contact us yourself – for example by telephone or email.

2. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (Datenschutz-Grundverordnung, DSGVO/GDPR) is:

3. Hosting and Server Log Files

This website is hosted by an external service provider. The hosting provider processes visitors’ connection data on our behalf. Where required, a data processing agreement in accordance with Art. 28 DSGVO (GDPR) has been concluded with the provider.

When the website is accessed, the server automatically collects and stores information in so-called server log files, which your browser transmits automatically:

• IP address of the accessing device
• date and time of the request
• page or file accessed
• browser type and browser version
• operating system used
• referrer URL (previously visited page)

This data is not merged with other data sources. Processing is carried out on the basis of Art. 6 (1) lit. f DSGVO (GDPR). Our legitimate interest lies in the technically error-free presentation, stability and security of the website. The log files are automatically deleted after a short period of time.

4. Google Analytics

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses cookies and similar technologies that make it possible to analyse your use of the website (e.g. pages visited, time spent, approximate region, browser and device type). Google Analytics 4 does not store full IP addresses: data from users in the EU is collected via servers located in the EU, and IP addresses are truncated and discarded before further processing.

The information obtained is generally transferred to Google servers and processed there; this may involve transfers to the USA. Google LLC is certified under the EU-US Data Privacy Framework. We have concluded a data processing agreement with Google in accordance with Art. 28 GDPR. The collected usage data is automatically deleted after 14 months.

The processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in the anonymised statistical evaluation of website usage in order to improve our website and the information we provide.

You can prevent collection by Google Analytics by installing the browser add-on for deactivating Google Analytics: tools.google.com/dlpage/gaoptout. Further information on how Google Analytics handles user data can be found in Google's privacy policy: policies.google.com/privacy.

5. Fonts and External Content

The fonts used on this website are hosted locally on our server. No connection to third-party providers is established in order to load fonts or other design content. A connection to Google servers is established solely in the context of the Google Analytics web analytics service we use (see section 4).

6. SSL/TLS Encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the fact that the address line of your browser begins with “https://” and by the padlock symbol in your browser bar.

7. Contact by Telephone or Email

If you contact us by telephone or email, the details you provide (e.g. name, telephone number, email address and the content of your enquiry) will be stored by us for the purpose of handling your request. We do not pass this data on without your consent.

Processing is carried out on the basis of Art. 6 (1) lit. b DSGVO (GDPR) where your enquiry is connected with the initiation or performance of a treatment relationship, and otherwise on the basis of our legitimate interest in the effective handling of enquiries (Art. 6 (1) lit. f DSGVO/GDPR). Your data will be deleted as soon as it is no longer required for processing your request and no statutory retention obligations stand in the way of deletion.

Please note: where possible, do not send sensitive health data by unencrypted email. For confidential matters, we recommend a personal conversation at the practice or a telephone call.

8. Online Appointment Booking via Doctolib

For online appointment booking, we link to the service Doctolib (Doctolib GmbH, Mehringdamm 51, 10961 Berlin). When you follow this link, you leave our website. Doctolib is responsible for the data processing that takes place there, jointly with us or in its own right; Doctolib’s privacy policy applies: doctolib.de. On our website itself, no data is transmitted to Doctolib through the mere presence of the link.

9. Contact via WhatsApp

We offer you the option of contacting us via the messenger service WhatsApp (WhatsApp Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland). The link on our website only opens WhatsApp when you actively click on it. If you use WhatsApp, WhatsApp processes your data (including your telephone number and metadata) under its own responsibility; data may be transferred to third countries (including the USA). WhatsApp’s privacy policy applies: whatsapp.com/legal/privacy-policy-eea. The legal basis for communication via WhatsApp is your voluntary use of the service (Art. 6 (1) lit. a and b DSGVO/GDPR). Please do not send sensitive health data via WhatsApp – use the telephone or a personal conversation instead.

10. Instagram

Our website contains a link to our Instagram profile (Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland). This is a simple link only – no data is transmitted to Instagram or Meta when you visit our website. Only when you click on the link are you taken to Instagram; Meta’s privacy policy applies there: privacycenter.instagram.com/policy.

11. Patient Data

Data collected in the course of your dental treatment is processed at the practice in accordance with the statutory requirements (including Art. 9 (2) lit. h DSGVO/GDPR, § 22 BDSG, § 630f BGB) and in compliance with the duty of medical confidentiality. Treatment data is not processed via this website. Statutory retention periods apply to treatment records (as a rule, at least 10 years).

12. Your Rights

You have the following rights with regard to the personal data we store about you:

• right of access (Art. 15 DSGVO/GDPR)
• right to rectification (Art. 16 DSGVO/GDPR)
• right to erasure (Art. 17 DSGVO/GDPR)
• right to restriction of processing (Art. 18 DSGVO/GDPR)
• right to data portability (Art. 20 DSGVO/GDPR)
• right to object to processing (Art. 21 DSGVO/GDPR)
• right to withdraw consent once given, with effect for the future (Art. 7 (3) DSGVO/GDPR)

To exercise your rights, an informal message to the contact details given above is sufficient.

13. Right to Lodge a Complaint with the Supervisory Authority

In the event of breaches of data protection law, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 DSGVO/GDPR). The authority responsible for us is:

14. Currency of this Privacy Policy

We will update this Privacy Policy as soon as the data processing on our website or the legal requirements change.

Last updated: August 2026