Imprint and Privacy Policy

Information according to § 5 Telemedia Act (TMG)

Provider Information
Dr. med. dent. Marko Knauf
Knauf.Kollegen Zahnärzte

Im Hotel Stadt Freiburg
Breisacher Str. 84
79110 Freiburg

Telephone: 0761 6008801
Fax: 0761 6008802
eMail: info@zahnmedizin-freiburg.de
zahnmedizin-freiburg.de

Supervisory Authority
Landeszahnärztekammer Baden-Württemberg (LZK BW)
Albstadtweg 9
70567 Stuttgart
Telephone: +49 (0)7 11 / 2 28 45 – 0
Fax: +49 (0)7 11 / 2 28 45 – 44
Mail: info@lzk-bw.de
lzk-bw.de

Responsible Dentistry Association
Kassenzahnärztliche Vereinigung Baden-Württemberg (KZV BW)

Merzhauser Straße 114-116
79100 Freiburg
Telephone: +49 (0)7 61 / 45 06 – 0
Fax: +49 (0)7 61 / 45 06 – 4 00
e-Mail: bd-freiburg@kzvbw.de
zahn-forum.de

Approval Authority
Regierungspräsidium Stuttgart
Ruppmannstraße 21
70565 Stuttgart
Telephone: +49 (0)7 11 / 9 04 – 0
Fax: +49 (0)7 11 / 9 04 – 1 11 90
rp.baden-wuerttemberg.de

State in which the licence to practice was granted
Federal Republic of Germany

Acquisition of the license to practice
December 14, 2000

Job Title
Dentist

Professional Regulations

As a doctor Dr. med. dent. Marko Knauf is liable to professional regulations, which in particular include the following professional regulations:

– Dentistry Law
– Medical Profession Law
– Professional Code for Dentists
– Medical Fee Schedule for Dentists

These regulations can also be viewed on the website of the State Landeszahnärztekammer Baden-Württemberg in its current version.

Copyrights:
This website and all contained contributions and illustrations are protected by copyright. Any use outside the limits of the copyright law without the consent of the provider is inadmissible and punishable. This applies in particular to reproductions, microfilming and storage in electronic systems.

Some internet websites of Knauf.Kollegen Dentists, Dr. med. Marko Knauf also contains images that are subject to the copyright of those who provided them.

Author of photos:

Nobel Biocare Germany GmbH
Stolberger Strasse 200
50933 Cologne
http://www.nobelbiocare.com

Electro Medical Systems SA (EMS)
Ch. De la Vuarpillière 31
CH-1260 Nyon
http://www.ems-company.com

 

Initiative proDente e.V.
Dirk Kropp
Aachener Straße 1053-1055
50858 Köln
http://www.prodente.de

Design und Presentation of the Homepage:
TCL Consulting GmbH – www.tcl-consulting.de

© Copyright 2011 Praxis Knauf.Kollegen Zahnärzte / All Rights reserved.

 

 

Privacy Policy corresponding to General Data Protection Regulation (GDPR)

 

Welcome to the website of Knauf.Kollegen Dentists

We attach great importance to compliance with data protection regulations. A use of our internet pages is basically possible without any indication of personal data. However, if you wish to use special services via our website, it may be necessary to process personal data. If the processing of personal data is required and there is no legal basis for such processing, we will seek your consent.

The processing of your personal data, such as your name, address, e-mail address or telephone number, is always carried out in accordance with the General Data Protection Regulation and the Federal Data Protection Act, as well as in accordance with our country-specific data protection regulations. By means of this Privacy Policy we would like to inform you about the nature, extent and purpose of the personal data collected, used and processed by us.

Furthermore, you will be informed in this privacy policy about the rights to which you are entitled.

As the responsible body, we have implemented numerous technical and organizational measures to ensure the most complete protection possible for personal data processed via this website. Nevertheless, Internet-based data transmissions (e-mail, for example) can generally have security holes, so that absolute protection can not be guaranteed. For this reason, you are at any time free to transmit personal data to us in alternative ways, for example by telephone or by mail.

 

Definitions

Our privacy policy is based on the terminology used by the European Regulatory Authority when issuing the General Data Protection Regulation (GDPR). Our privacy policy should be easy to read and understandable for the public as well as for our customers and business partners. In order to ensure this, we list in advance the definitions used in accordance with the wording of Art. 4 GDPR:

a)   Personal Data

Personal data means any information relating to an identified or identifiable natural person (hereinafter referred to as “data subject” or direct address such as “you”). A natural person is considered to be identifiable who, directly or indirectly, in particular by association with an identifier such as a name, an identification number, location data, an online identifier or one or more special features, expresses the physical, physiological, genetic, mental, economic, cultural or social identity of this natural person can be identified.

b)   Data Subject

Data subject is any identified or identifiable natural person whose personal data is processed by the controller.

c)    Processing

Processing means any process or series of operations related to personal data, with or without the aid of automated procedures, such as collecting, evaluating, organizing, regulating, storing, adapting or modifying, reading, querying, using, disclosure by submission, dissemination or other form of provision, reconciliation or association, restriction, erasure or destruction.

d)   Restriction of Processing

Restriction of processing is the marking of stored personal data with the aim to limit their future processing.

e)    Pseudonymisation

Pseudonymisation is the processing of personal data in such a way that personal data can no longer be attributed to a specific data subject without the need for additional information, provided that such additional information is kept separate and subject to technical and organizational measures to ensure that the personal data not assigned to an identified or identifiable natural person.

f)    Responsible Authority

The responsible authority or the person in charge of the converting is the natural or legal person, public authority, body or body that, alone or in concert with others, decides on the purposes and means of processing personal data. Where the purposes and means of such processing are determined by Union law or the law of the Member States, the controller or the specific criteria for his designation may be provided for under Union or national law.

g)    Processor

The processor is a natural or legal person, public authority, agency or other body that processes personal data on behalf of the responsible authority.

h)   Recipients

Recipient is a natural or legal person, public authority, facility or other entity to whom personal data is disclosed, whether or not it is a third party. However, authorities which may receive personal data under Union or national law in connection with a particular mission are not considered as recipients.

i)     Third Party

Third party is a natural or legal person, public authority, facility or body other than the data subject, the controller, the processor and the persons authorized under the direct accountability of the responsible authority or the processor to process the personal data.

j)    Consent

Consent is any of the data subject voluntarily given and unambiguously expressed consent in the form of a statement or other unambiguous confirmatory act on a voluntary basis, by which the data subject indicates that he / she agrees upon the processing of the respective personal data.

 

Name and Adress of the Responsible Authority

The responsible body within the meaning of the General Data Protection Regulation, other applicable data protection laws in the Member States of the European Union and other provisions of a data protection nature is:

Knauf.Kollegen
Dentists
Dr. Marko Knauf
Breisacher Strasse 84

79110 Freiburg
Telephone: 0761-6008801
e-mail: info@zahnmedizin-freiburg.de

 

Data Protection Officer

Knauf.Kollegen Dentists – Dr. Marko Knauf has appointed an external data protection officer:

Sebastian Koye
datenschutzklinik
Basler Landstrasse 115

79111 Freiburg
Telephone: 0761-76992550
e-mail: datenschutz@datenschutzklinik.de

  

Cookies

We use cookies on our website. These are small text files stored on your computer system via an internet browser (e.g., Firefox, Chrome, Safari, Edge, Internet Explorer, Opera).

Many websites and servers use cookies. Many cookies contain a cookie ID. This is a unique identifier of the cookie and consists of a string through which Internet pages and servers can be assigned to the specific internet browser of the user in which the cookie was stored. This allows visited websites and servers to distinguish the individual’s browser from other internet browsers that contain other cookies. A particular web browser can be recognized and identified by the unique cookie ID.

By using cookies, we can provide users of this website with more user-friendly services that would not be possible without cookies.

You can prevent the setting of cookies through our website at any time by means of a corresponding setting of the internet browser used and thus permanently contradict the setting of cookies. Furthermore, already set cookies can be deleted at any time via an internet browser or other software programs. This is possible in all common internet browsers. If you deactivate the setting of cookies in the Internet browser used, not all functions of our website may be fully usable.

​

Collection of general data and information via the website

When you visit our website, our system collects a series of general data and information. This general data and information is stored in the log files of the server. It is possible to collect (1) browser types and versions used, (2) the operating system used by the accessing system, (3) the internet page from which an accessing system accesses our website (so-called referrers), (4) the sub-web pages which can be accessed via (5) the date and time of access to the website, (6) an Internet Protocol address (IP address), (7) the internet service provider of the accessing system and (8) other similar data and information used in the event of attacks on our information technology systems.

When using this general data and information, we draw no conclusions about you as the data subject. Rather, this information is required to (1) correctly deliver the contents of our website, (2) to optimize the content of our website and to advertise it, (3) to ensure the continued functioning of our information technology systems and the technology of our website, and ( 4) to provide law enforcement authorities with the information necessary for law enforcement in the event of a cyberattack. This anonymously collected data and information is therefore statistically and further evaluated by us with the aim of increasing the privacy and data security in our company in order to ultimately ensure an optimal level of protection for the personal data we process. The anonymous data of the server log files are stored separately from all personal data provided by an affected person.

 

Contact via the Website

Our website contains a contact form which allows you to contact our company quickly and communicate directly with us, which also includes a general address of the so-called electronic mail (e-mail address). If a data subject contacts us via e-mail or via a contact form, the personal data transmitted by the data subject will be automatically saved. Such personal data, voluntarily transmitted by an individual to the controller, is stored for the purpose of processing or contacting the data subject. There is no disclosure of this personal data to third parties.

 

SSL Encryption

On our website, we use the SSL encryption to protect your transmitted data (e.g. via the contact form) in the best possible way against unauthorized third-party-access. Such a secure connection can be recognized by the prefix “https: //” in the URL of your address line, for example:

Die Praxis

For unencrypted, the prefix looks like this: “http: //”

 

Deletion and blocking of personal data

We only store your personal data for as long as it is necessary for the purpose of storage or if this has been provided for in the laws or regulations to which we are subject by the European directive and regulatory body or another legislator.

If the purpose of the storage is omitted or if a storage period prescribed by the European directives and regulations or any other relevant legislator expires, your personal data will be blocked or deleted in accordance with the statutory provisions.

​

Rights of the Data Subject

a)   Right to Information

You have the right, granted by the European directive and regulatory authority, to obtain free information from us at any time as to whether we store personal data about you.

If this is the case, you have the right to the following information:

The processing purposes, the categories of personal data being processed, the recipients or categories of recipients to whom the personal data are or will be disclosed, in particular for beneficiaries in third countries or international organizations, if possible, the planned duration for which personal data is stored or, if this is not possible, the criteria for determining that duration, the right of rectification or deletion of the personal data concerning you or restriction of our processing or right to object to such processing with a supervisory authority, if the personal data are not collected from the data subject: all available information about the origin of the data the existence of an automated decision making including profiling according Article 22 (1) and (4) of the GDPR and – at least in these cases – meaningful information on the logic involved and the scope and intended impact of such processing on the data subject.

​If you would like to assert your right to information, you can contact one of our employees at any time.

b)   Right to Rectification

Any person affected by the processing of personal data has the right granted by the European legislator to demand the immediate correction of inaccurate personal data concerning him / her. Furthermore, the data subject has the right to request the completion of incomplete personal data, including by means of a supplementary declaration, taking into account the purposes of the processing.

If you would like to exercise your right to rectification, you can contact one of our employees at any time.

c)   Right to Erasure (right to be forgotten)

You have the right, granted by the European directive and regulatory authority, to require us to delete your personal data without delay if one of the following causes is true and processing is not required:

– If any of the above reasons are correct and you wish to arrange for the deletion of personal data stored by us, you may contact one of our employees at any time.

 – If the personal data have been made public by us and our company as a responsible body under Article 17 paragraph 1 GDPR is obliged to delete the personal data, we take appropriate measures, taking into account the available technical possibilities and the implementation costs, to inform other controllers (e.g. processors) who process your published personal data that you have requested the deletion of your personal data, copies or thereof from these other controllers. This is done as far as the processing is not required by other legal provisions.

– Your personal data has been collected for such purposes or otherwise processed for which they are no longer necessary.

– You revoke your consent, on which the processing was based in accordance with Article 6 (1) (a) of the GDPR or Article 9 (2) (a) of the GDPR, and there is no other legal basis for the processing.

– In accordance with Article 21 (1) of the GDPR, you object to the processing and there are no high-level legitimate grounds for the processing or the data subject objects to the processing in accordance with Article 21 (2) of the GDPR on.

– Your personal data has been processed unlawfully.

– The deletion of your personal data is required to fulfill a legal obligation under EU or national law, to which we as the responsible body are subject.

– The personal data were collected in relation to information society services offered pursuant to Art. 8 paragraph 1 GDPR.

If you would like to assert your right to cancellation, you can contact one of our employees at any time.

d)   Right to Restriction of Processing

You have the right, granted by the European directive and regulatory authority, to require us to restrict processing if any of the following conditions apply:

– One of the above conditions applies and you require the restriction of personal data stored by us.

 – The accuracy of your personal data is contested by you, for a period of time that enables us, as the responsible authority, to verify the accuracy of your personal data.

– The processing is unlawful, you refuse the deletion of your personal data and instead require the restriction of the use of your personal data.

 – We no longer need your personal information for processing purposes, but you need your personal information to assert, exercise or defend your rights and, for example, prevent a deletion.

 – You have objection to the processing acc. Art. 21 paragraph 1 GDPR and it is not yet clear whether the legitimate reasons of us as the responsible body outweigh those of you as the data subject.

If you wish to exercise your right to restrict processing, you can contact one of our employees at any time.

e)    Right to Data Portability

You have the right granted by the European Directive and regulatory body to obtain the personal data relating to you that you have provided to us in a structured, common and machine-readable format.

You also have the right to transmit this data to another person responsible without hindrance by us, if the processing is based on the consent pursuant to Article 6 paragraph 1 letter a GDPR or Article 9 paragraph 2 letter a GDPR or Article 6 (1) (b) of the GDPR and processing by means of automated procedures, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Furthermore, you have the right under Article 20 paragraph 1 GDPR on data portability and may require that your personal data will be transmitted directly from one controller to another, if this is technically feasible and if not the rights and other people’s freedoms.

If you would like to assert your right to data transfer, you can contact one of our employees at any time.

f)    Right to Object

Sie haben das vom Europäischen Richtlinien- und Verordnungsgeber gewährte Recht, aus Gründen, die sich aus Ihrer besonderen Situation ergeben, jederzeit gegen die Verarbeitung der Sie betreffenden personenbezogenen Daten, die aufgrund von Art. 6 Abs. 1 lit. e) oder f) DSGVO erfolgt, Widerspruch einzulegen. Dies gilt auch für ein auf diese Bestimmungen gestütztes Profiling.

Wir verarbeiten Ihre personenbezogenen Daten im Falle des Widerspruchs nicht mehr, es sei denn, wir können zwingende schutzwürdige Gründe für die Verarbeitung nachweisen, die Ihren Interessen, Rechten und Freiheiten überwiegen, oder die Verarbeitung dient der Geltendmachung, Ausübung oder Verteidigung von Rechtsansprüchen.

Falls wir personenbezogene Daten verarbeiten, um Direktwerbung zu betreiben, so haben Sie das Recht, jederzeit Widerspruch gegen die Verarbeitung Ihrer personenbezogenen Daten zum Zwecke derartiger Werbung einzulegen. Dies gilt auch für das Profiling, soweit es mit solcher Direktwerbung in Verbindung steht. Widersprechen Sie uns gegenüber der Verarbeitung für Zwecke der Direktwerbung, so werden wir Ihre personenbezogenen Daten nicht mehr für diese Zwecke verarbeiten.

Ferner haben Sie das Recht, aus Gründen, die sich aus Ihrer besonderen Situation ergeben, gegen die Sie betreffende Verarbeitung personenbezogener Daten, die bei uns zu wissenschaftlichen oder historischen Forschungszwecken oder zu statistischen Zwecken gemäß Art. 89 Abs. 1 DS-GVO erfolgen, Widerspruch einzulegen, es sei denn, eine solche Verarbeitung ist zur Erfüllung einer im öffentlichen Interesse liegenden Aufgabe erforderlich.

Zur Ausübung des Rechts auf Widerspruch können Sie sich direkt an einen unserer Mitarbeiter wenden. Es steht Ihnen außerdem frei, im Zusammenhang mit der Nutzung von Diensten der Informationsgesellschaft, ungeachtet der Richtlinie 2002/58/EG, ihr Widerspruchsrecht mittels automatisierter Verfahren auszuüben, bei denen technische Spezifikationen verwendet werden.

​​g)   Right to Revocation of a Data Protection Consent

You have the right, granted by the European directives and regulations, to revoke your consent to the processing of your personal data at any time.

If you would like to assert your right to revoke your consent, you can contact one of our employees at any time.

​h)   Right to complain to the Competent Authority

You have the right conferred by the European directive and regulatory authority to lodge a complaint with a supervisory authority without prejudice to any other administrative or judicial remedy, in particular in the Member State of your residence, employment or the place of the alleged breach, if you consider that the processing of your personal data in breach of this Regulation.

 

Privacy Policy for the application and use of Google Analytics (with anonymization feature)

We have integrated the component Google Analytics (with anonymization function) on our website. Google Analytics is a web analytics service. Web analysis is the acquisition, collection and analysis of data about the behavior of visitors to websites. Among other things, a web analysis service collects data on which website an affected person has come to a website (so-called referrers), which subpages of the website were accessed or how often and for which length of stay a subpage was viewed. A web analysis is mainly used to optimize a website and cost-benefit analysis of Internet advertising.

The operating company of the Google Analytics component is Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA.

We use the addition “_gat._anonymizeIp” for web analysis via Google Analytics. By means of this addendum, the IP address of the Internet access of the data subject will be shortened and anonymised by Google if the access to our website is from a Member State of the European Union or from another state party to the Agreement on the European Economic Area.

The purpose of the Google Analytics component is to analyze visitor flows on our website. Among other things, Google uses the data and information obtained to evaluate the use of our website, to compile for us online reports showing the activities on our websites, and to provide other services related to the use of our website.

Google Analytics uses a cookie on the information technology system of the data subject. What cookies are, has already been explained above. By using this cookie Google is enabled to analyze the usage of our website. Each time you visit one of the individual pages of this website operated by us and on which a Google Analytics component has been integrated, the internet browser on your information technology system (e.g. PC, tablet, smartphone) automatically becomes the respective Google Analytics component to submit data to Google for online analysis purposes. As part of this technical process, Google will be aware of personally identifiable information, such as your IP address, which, among other things, Google uses to track the origin of visitors and clicks and, as a result, to facilitate commission settlement.

The cookie is used to store personally identifiable information about you, such as access time, the place from which access was made and the frequency of visits to our website. Each time you visit our website, your personal information, including the IP address of the internet connection you use, is transferred to Google in the United States of America. This personal information is stored by Google in the United States of America. Google may transfer such personal data collected through the technical process to third parties. However, we have no influence on this.

You can prevent the setting of cookies through our website, as described above, at any time by means of a corresponding setting in your internet browser and thus permanently contradict the setting of cookies. Such a setting of the internet browser would also prevent Google from setting a cookie on the information technology system of the data subject. In addition, a cookie already set by Google Analytics can be deleted at any time via your internet browser or other software programs.

Furthermore, you have the option of objecting to and preventing the collection of data generated by Google Analytics for the use of our website and the processing of this data by Google. To do this, the affected person must download and install a browser add-on at https://tools.google.com/dlpage/gaoptout. This browser add-on informs Google Analytics via JavaScript that no data and information about website visits may be transmitted to Google Analytics. The installation of the browser add-on is considered by Google as a contradiction. If you delete, format, or reinstall your Information Technology System at a later time, you must reinstall the browser add-ons to disable Google Analytics. If the browser add-on is uninstalled or disabled by you or any other person within your control, you may reinstall or re-enable the browser add-on.

The privacy policy for Google Analytics can be found at the following links:

https://www.google.de/intl/de/policies/privacy/

http://www.google.com/analytics/terms/de.html

Google Analytics is explained in more detail under this link:

https://www.google.com/intl/de_de/analytics/

Privacy Policy for the application and use of Google AdWords

We have integrated Google AdWords on this website. Google AdWords is an Internet advertising service that allows advertisers to run both Google and Google Network search engine results. Google AdWords allows an advertiser to pre-set keywords that will display an ad on Google’s search engine results only when the search engine retrieves a keyword-related search result. In the Google Network, ads are distributed on topical web pages using an automated algorithm and according to pre-defined keywords.

The operating company for the services of Google AdWords is Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA.

The purpose of Google AdWords is to promote our website by displaying interest-based advertising on third-party websites and in the search engine results of Google’s search engine and by displaying advertisements on our website.

If you reach our website via a Google ad, a so-called conversion cookie will be stored by Google on your information technology system. What cookies are, has already been explained above. A conversion cookie expires after thirty days and is not used to identify the data subject. If the cookie has not yet expired, the conversion cookie is used to track whether certain subpages have been visited on our website. The conversion cookie will help us and Google understand if you’ve generated revenue from an AdWords ad on our website.

The data and information collected through the use of the conversion cookie are used by Google to create visitor statistics for our website. These visit statistics are then used by us to determine the total number of users who have been sent to us through AdWords ads, in order to determine the success or failure of each AdWords ad and to optimize our AdWords ads for the future. Neither our company nor any other Google AdWords advertiser receives any information from Google that could identify you.

The conversion cookie stores personal information, such as the websites you visit. Whenever you visit our website, your personal information, including the IP address of the internet connection you use, will be transferred to Google in the United States of America. This personal information is stored by Google in the United States of America. Google may transfer such personal data collected through the technical process to third parties. However, we have no influence on this.

You can prevent the setting of cookies through our website, as shown above, at any time by means of a corresponding setting of the internet browser used and thus permanently contradict the setting of cookies. Such a setting of the internet browser would also prevent Google from setting a conversion cookie on your information technology system. In addition, a cookie already set by Google AdWords can be deleted at any time via the internet browser or other software programs.

You also have the option to opt out of Google’s interest-based advertising. To do this, you must go to the link www.google.de/settings/ads from each of the Internet browsers you use and make the desired settings there.

The Google AdWords privacy policy can be found at the following link: https://www.google.de/intl/de/policies/privacy/

 

Privacy Policy regarding Google Maps

This site uses the mapping service Google Maps via an API. Provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

To use the features of Google Maps, it is necessary to save your IP address. This information is usually transmitted to and stored on a Google server in the United States. The provider of this site has no influence on this data transfer.

The use of Google Maps is in the interest of an attractive presentation of our online offers and an easy findability of the places we have indicated on the website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO.

For more information on how to handle user data, please refer to Google’s Privacy Policy: https: //www.google.com/intl/en/policies/privacy/

Integration of Google Fonts

On our website we embed the fonts (“Google Fonts”) of the provider Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

The Google Fonts privacy policy can be found at the following link: https://www.google.com/policies/privacy/.

The opt-out option can be found here: https://adssettings.google.com/authenticated.

 

Integration of the Jameda Plugin

On our website we have the social plug-in of the doctor rating portal Jameda GmbH, St.-Cajetan-Str. 41, 81669 Munich. The plugin is marked with a Jameda logo. If you click on the plugin, your browser establishes a direct connection to the provider’s servers. We have no control over the extent and content of the data collected by the provider with the help of this plugin. The Jameda privacy policy can be found at the following link:

http://www.jameda.de/jameda/datenschutz.php.

 

Integration of Facebook

Our practice is also represented on Facebook. On our website we have linked the Facebook profile. No personal data will be transmitted to Facebook.

 

Integration of Leading Implant Centers

On our website we have linked our profile to the information portal Leading Implant Centers. No personal data is transmitted.

 

Legal basis of processing

As a legal basis for processing operations in which we obtain consent for a specific processing purpose, the legal basis is Art. 6 I letter a). If the processing of personal data is required to fulfill a contract of which you are a party, as is the case, for example, in processing operations which are necessary for the provision of our service or consideration, the processing is based on Art. 6 I letter b) GDPR.

The same applies to processing operations that are necessary to carry out pre-contractual measures, for example in cases of inquiries regarding our products or services. If our company is subject to a legal obligation which requires the processing of personal data, such as the fulfillment of tax obligations, the processing complies to to Art. 6 I letter c) GDPR.

In rare cases, the processing of personal data may be required to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor to our premises were injured and his or her name, age, health insurance or other vital information would have to be passed on to a doctor, hospital or other third party. Then the processing would be based on Art. 6 I letter d) GDPR.

Ultimately, processing operations could be based on Art. 6 I lit. f) GDPR. Based on this legal basis, processing operations that are not covered by any of the above legal bases are required if processing is necessary to safeguard the legitimate interests of our company or a third party, unless your interests, fundamental rights and fundamental freedoms prevail. Such processing operations are particularly allowed to us because they have been specifically mentioned by the European legislator. In this regard, he took the view that a legitimate interest could be assumed if you are our customer as the data subject (see also recital 47 sentence 2 GDPR).

​

Authorized interests in the processing that are being pursued by us or a third party

Is the processing of personal data based on Article 6 I lit. f) GDPR our legitimate interest is in conducting our business for the benefit of all of our employees and our shareholders.

 

Duration for which the personal data is stored

The criterion for the duration of the storage of personal data is the respective statutory retention period. Below are two common rules listed as examples:

– 6 years according to § 257 Abs. 1 HGB (trading books, inventories, opening balance sheets, annual accounts, trade letters, accounting documents, etc.)
– 10 years according to § 147 Abs. 1 AO (books, records, management reports, accounting documents, commercial and business letters, documents relevant for taxation, etc.)

After the deadline, the corresponding data will be routinely deleted, if they are no longer required to fulfill the contract or to initiate a contract.

​

Legal or Contractual Provisions for the Supply of Personal Data; Necessity for the Conclusion of the Contract; Obligation of the Data Subject to provide the Personal Data; possible Consequences of Non-Provision

We clarify that the provision of personal data may in part be required by law (e.g. by tax regulations) or result from contractual arrangements (such as details of the contractor).

Sometimes it may be necessary to conclude a contract that you as the data subject provide us with data as the responsible party, which must subsequently be processed by us. For example, you are required to provide us with personal information when our company concludes a contract with you. Failure to provide your personal information would mean that the contract could not be concluded with you.

Before you provide us with personal information, you must contact one of our employees. Our employee will clarify to you on a case-by-case basis whether the provision of the personal data is required by law or contract or is required for the conclusion of the contract, whether there is an obligation to provide the personal data, and what would be the consequence of the non-provision of the personal data.