Privacy Policy of Kentzler-Kaschner Dental GmbH

1. Controller for Data Processing, Data Protection Officer; Scope

(1) We, the Kentzler-Kaschner Dental GmbH, Mühlgraben 36, 73479 Ellwangen / Jagst, Germany, Tel.: +49 (7961) 9073-0, Fax: +49 (7961) 52031, E-Mail: This email address is being protected from spambots. You need JavaScript enabled to view it., are controller for the processing of your personal data as a user of our website, available at www.kkd-online.de (hereinafter referred to as “WEBSITE”), as our business partner (e.g. customer or supplier), as an applicant or any other person we are communicating with (“You”) subject to Art. 4 No. 7  General Data Protection Regulation (“GDPR”)
Our Data Protection Officer is Dr. Norbert Kuhn (Kuhn-privacy, Dr. Norbert Kuhn), Thingstraße 3, 70565 Stuttgart, Germany, E-Mail: This email address is being protected from spambots. You need JavaScript enabled to view it.

(2) Hereinafter, in the context of our information obligations, we would like to inform you in detail about the processing of your personal data when visiting our WEBSITE (Sect. 3), when you make use of any other offers and functions (hereinafter also referred to as "services") on our WEBSITE (Sect. 4) as well as in the course of a job application at our company. (Sect. 5). Information on cookies can be found in Sect. 6. Furthermore, we would like to inform you about the associated protective measures we have also taken in technical and organizational terms with regard to our WEBSITE (Sect. 7), as well as your rights with regard to the processing of your personal data Sect. 8).

 

2. General Principles of Processing of Personal Data

(1) „Personal data“ means any information relating to an identified or identifiable natural person (‘data subject’). Your personal data therefore includes all data that can be directly or indirectly assigned to your person such as your name, your address, your phone number or your e-mail address.

(2) Personal data is processed by us primarily if and to the extent of which

  •  you give us your consent to the processing of data for one or more specific purposes (Article 6 (1) Subpar. 1 a) GDPR), 
  • the processing is necessary for the performance of a contract of which you are a party or for the performance of pre-contractual actions that you request (Article 6 (1) Subpar. 1 b) GDPR), or
  • the processing of data is necessary to fulfill a legal obligation to which we are subject to (Article 6 (1) Subpar. 1 c) GDPR),
  • The processing of data is necessary to ensure our legitimate interests or those of a third party, unless your interests or fundamental rights and freedoms requiring the protection of your personal data prevail (Article 6 (1) Subpar. 1 f) GDPR).

(3) In the following provisions of this Privacy Policy, we describe which of the legal bases listed in paragraph 2 or otherwise the processing of your personal data is founded in individual cases.

(4) In part, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly inspected. Furthermore, we may pass on your personal data to third parties if contracts or similar services are offered by us together with partners. Further information can be obtained by stating your personal data or in the following provisions of this Privacy Policy. Insofar as our service providers or partners are based in a state outside the European Economic Area (EEA), we will inform you about the consequences of this circumstance in the following provisions of this Privacy Policy.

(5) The scope and type of data processing differ depending on whether you visit our WEBSITE to retrieve information (the following Sect. 3) or use the services we offer (the following Sect. 4). In addition, cookies are stored on your computer when you use the WEBSITE (the following Sect. 5).

 

3. Merely informative use of our WEBSITE

(1) In connection with the mere informational use of our WEBSITE, that is, if you do not make use of any services and offers on our WEBSITE or provide us with any information, we will only collect those data that your Internet browser automatically transmits to our server. The following data is collected hereby:IP address of the requesting computer

  • Time of the request
  • Content of the request (specific page)
  • Website from which the request comes
  • Browser
  • Browser software version
  • Used operating system
  • Used device type

(2) This information is technically necessary for us to enable you usage and functionality of our WEBSITE, in particular to display the WEBSITE and to ensure the security and stability of the WEBSITE. There is no link between this data and personal data of a specific natural person. Our legitimate interest lies in a functioning website. The legal basis is Art. 6 (1) Subpar. 1 f) GDPR.

(3) We will delete your data as soon as it is no longer necessary for the purpose of its collection. Your data including the IP address will be anonymized immediately after collection and stored for up to eight weeks.

 

4. Further functions and offers

In addition to the mere informative use of our WEBSITE, we provide various offers and functions (hereinafter also referred to as "services”), which you can use if you are interested.
For this purpose, you will generally have to provide additional personal data which we use to provide the respective service and to which the aforementioned data processing principles apply. In detail, this concerns the following services for which we process your personal data:

4.1 Contact/Feedback

(1) If you contact us, e.g. to provide us with feedback, the processing of your communicated contact information (e.g. first name, surname, e-mail address, telephone number) will be used to answer your inquiries and / or suggestions via e-mail or otherwise. The processing of your data serves exclusively to process your contact.

(2) The legal basis for the processing of the data is Art. 6 (1) Subpar. 1 f) GDPR. If your message aims to conclude a contract, then additional legal basis for the processing of your data is Art. 6 (1) Subpar. 1 b) GDPR.

(3) Insofar as the deletion of your personal data does not prevent statutory or contractual retention periods, we will delete them as soon as they are no longer necessary for the purpose of their collection. This is the case when the conversation with you is over. In general, the conversation is over when it can be inferred from the circumstances that the matter in question has been finally clarified.

4.2 Subscription of our Newsletter

(1) With your consent, you can subscribe to our newsletter, with which we inform you about our current interesting offers. The promoted offers are named in the declaration of consent.

(2) The newsletter is sent by the technical service provider CleverReach GmbH & Co. KG (Mühlenstraße 43, 26180 Rastede, Germany; “CleverReach“). For this purpose, it is necessary that we transfer your data to CleverReach as part of the newsletter registration. This data is stored on the CleverReach servers in Germany or Ireland. Our legitimate interests lie in the use of an effective, secure and user-friendly newsletter system. The legal basis for the use of CleverReach is Art. 6 (1) Subpar. 1 f) GDPR. Further information on data protection can be found in the CleverReach privacy policy at https://www.cleverreach.com/en/privacy-policy/.

(3) For the registration to our newsletter we use the so-called double-opt-in procedure. This means that after your registration, we will send you an e-mail to the e-mail address provided, in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. Furthermore, we store your IP address and the time of registration and confirmation. The purpose of the procedure is to be able to verify your registration and, if necessary, to clarify a possible abuse of your personal data.

(4) The only mandatory information for the newsletter dispatch is your e-mail address. After your confirmation we will save your e-mail address for the purpose of sending the newsletter to you. Legal basis is 6 (1) Subpar. 1 f) GDPR.

(5) You can revoke your consent to receive the newsletter and cancel the newsletter at any time. You can declare your revocation by clicking on the link provided in each newsletter e-mail, by sending an e-mail to This email address is being protected from spambots. You need JavaScript enabled to view it. or by sending a message to the contact data provided in Sect. 1.

(6) We will delete your data as soon as they are no longer required for the purpose for which they were collected or if you revoke your declaration of consent for the dispatch of newsletters. Thus, your data will be stored for as long as your newsletter subscription is active.

4.3 Use of our Webshop

(1) If you wish to order in our webshop, it is necessary for the conclusion of the contract that you provide personal data that we require in order to process your order. Mandatory information necessary for the processing of the contracts is marked separately, further information is voluntary. Data voluntarily provided by you will also be used to process your order. For order processing, we may pass on your personal data to shipping or logistics companies. Furthermore, we may pass on your payment data to our principal bank or the payment service provider you have chosen. An overview of our payment service providers can be found in Sect. 5. The legal basis for the voluntary data provided by you is Article 6 (1) Subpar. 1 b) GDPR and Article 6 (1) Subpar. 1 f) GDPR.

(2) You can voluntarily create a customer account, which allows us to store your data for future purchases. When you create an account under "My Account", the data you provide will be stored revocably. All other data, including your user account, can be deleted in the customer area at any time.

(3) We may also process the data you provide in order to inform you about further interesting offers or to send you e-mails with technical information. The legal basis for this is Article 6 (1) Subpar. 1 f) GDPR.

(4) We are obliged by commercial and tax law to store your address, payment and order data for a period of ten years. However, after two years we will restrict processing, i.e. your data will only be used to comply with legal obligations.

(5) To prevent unauthorized access to your personal data by third parties, especially financial data, the ordering process is encrypted using TLS technology.

 

5. Payment Service Providers

Your payment data will be transferred to the appropriate payment service providers depending on the payment method you choose. In this case, the respective payment service provider is responsible for your payment data. The contractual relationship with the respective payment service provider is independent of their contractual relationship with us. We currently use the services of the following payment providers:


PayPal: With the payment method "Paypal" we use the service of the payment service provider PayPal (Europe) S.à r.l. & Cie, S.C.A., 5. Etage, 22-24 Boulevard Royal, L-2449 Luxembourg. For details on how PayPal handles your data as well as your rights and setting options to protect your personal data, please see: https://www.paypal.com/webapps/mpp/ua/legalhub-full?country.x=DE&locale.x=en_DE  

6. Cookies

(1) We use cookies for our WEBSITE. Cookies are small text files that are stored on your hard drive assigned to the browser you use and through which the place that sets the cookie (here through us), certain information flow. Cookies cannot run programs or automatically transfer malware to your computer. They serve to make the internet offer more user-friendly and effective overall.

(2) Our WEBSITE uses transient cookies. These are automatically deleted when you close the browser. In particular, these include the session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the common session. This will allow your computer to be recognized when you return to our WEBSITE. The session cookies are deleted when you log out or close the browser.

(3) If personal data are processed by individual cookies, the processing is carried out in accordance with Art. 6 (1) Subpar. 1 b) GDPR either for the execution of the contract or in accordance with Art. 6 (1) Subpar. 1 f) GDPR.

(4) You can configure your browser settings according to your wishes and e.g. decline the acceptance of third-party cookies or all cookies. We point out that in this case you may not be able to use all the features of our WEBSITE.

 

7. Data Security

(1) We use technical and organizational security measures in order to protect accruing or collected personal data, against accidental or intentional manipulation, loss, destruction or against the attack of unauthorized persons in particular. Our security measures are continuously improved in line with technological developments.

(2) Our WEBSITE is encrypted using SSL technology to prevent access by unauthorized third parties. You can recognize the secure transmission by the protocol designation "https://" in the URL line.

 

8. Your Rights

With regard to the processing of personal data concerning you, subject to the legal preconditions you are entitled to the rights listed below in a)-h). Please contact our Data Protection Officer or us for this. The contact details can be found under Sect. 1.

a) Right to information
Subject to Art. 15 DGPR you can require a confirmation as to whether personal data concerning you are processed by us. In this case, according to Art. 15 (1) GDPR, you have the right to obtain information about the processing purposes, the categories of personal data processed, the recipients or categories of recipients whom we have disclosed or disclose the personal data, the planned retention period or the criteria for the personal data determining the retention period, the right of rectification or deletion of your personal data, as well as restriction of processing or objection to processing, the existence of a right to complain to a supervisory authority, the origin of data, if we have not collected your data from you, existence of an automated decision-making including profiling and according to Art. 15 (2) GDPR the right to be informed about the appropriate guarantees according to Art. 46 GDPR in connection with the transfer of personal data to third countries.

b) Right to Rectification
According to Art. 16 GDPR you can demand the immediate correction and / or considering the purpose of the processing the completion of your personal data, if your data is incorrect or incomplete.

c) Right to Deletion
According to Art. 17 GDPR you can require the immediate deletion of your personal data, provided that there is a reason under Art. 17 (1) a) - f) GDPR. However, the right to delete your personal data does not exist, in particular, if its processing is required to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal rights (Art. 17 (3) GDPR).

d) Right to Restriction of Processing
You may restrict the processing of your personal data in accordance with Art. 18 GDPR, as long as we verify the accuracy of your data, if you refuse the deletion of your data due to unlawful processing and instead demand the restriction of the use of your data, if you need your data for the assertion, exercise or defense of legal claims or if you have objected to the processing, as long as it is not certain that our legitimate reasons prevail.

e) Right to Consultation
According to Art. 19 GDPR we communicate any rectification or deletion of your personal data or a limitation of their processing under Art. 16, 17 (1) and 18 GDPR to all recipients to whom your personal data have been disclosed, unless this turns out to be impossible or is associated with a disproportionate effort. According to Art. 19 sent. 2 GDPR you have the right to be informed about these recipients on request.


f) Right to Data Portability
According to Art. 20 GDPR you have the right to receive your personal data, which you have provided us, in a structured, common and machine-readable format and to transmit this data to another person responsible, provided that the further requirements of Art. 20 GDPR exist, in particular, this is technically feasible.

g) Right to Objection
As far as we base the processing of your personal data on the legitimate of interests according to Art. 6 (1) Subpar. 1 f) GDPR, you can object to the processing according to Art. 21 GDPR. This is the case if, in particular, the processing is not required to fulfill a contract with you, which we present in each case in the above description of the offers. In the event of such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the case of your justified objection, we examine the situation and according to Art. 21 (1) sent. 2 GDPR either no longer process the personal data or prove to you our compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms. Further processing is reserved, if the processing serves the assertion, exercise or defense of legal claims.
According to Art. 21 (2) GDPR, you can object to the processing of your personal data for the purpose of advertising and profiling at any time, as far as it is associated with direct advertising.
You can inform our Data Protection Officer or us about your objection under the contact data mentioned in Sect. 1.

h) Right to Revoke the Consent
(1) According to Art. 7 (3) GDPR you have the right to revoke any data protection consent granted to us at any time with effect for the future. However, this does not affect the lawfulness of the processing that took place based on your consent until the time of the cancellation.
(2) If you believe that the processing of your data violates data protection regulations, you have the additional right to complain to a supervisory authority according to Art. 77 GDPR. Please contact a supervisor in the Member State of your place of residence, of your work place or of the location of the potential breach.
 

 

9. Amendments to the Privacy Policy

We reserve the right to change this Privacy Policy at any time with future effect. A current version is available on our WEBSITE. Please visit the WEBSITE regularly to find out about the applicable Privacy Policy.

Effective: January 22nd, 2020