Privacy Policy for vita-zahnfabrik.com

(hereinafter "Privacy Policy")

Welcome to our website. We appreciate your interest in our company and services. We are committed to safeguarding your privacy when you use our website. As the controller and service provider of the website

vita-zahnfabrik.com

(hereinafter also "website")

we,

VITA Zahnfabrik H. Rauter GmbH & Co. KG
Spitalgasse 3
79713 Bad Säckingen
(Legal Information)

(hereinafter also "we" or "VITA")

would like to inform you about how we process your personal data and explain your rights as a data subject when you use our website.

Your personal data is processed solely in accordance with the provisions of the data protection laws of the European Union, in particular, the EU General Data Protection Regulation (hereinafter "GDPR") and supplementary to the Federal Data Protection Act (hereinafter "BDSG") as well as other statutory provisions on data protection (together "privacy laws").

If you would like to review the GDPR, you can find it on the Internet at: https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32016R0679.

This Privacy Policy applies solely to the website accessible at the domain vita-zahnfabrik.com, including all subdomains. The following notices do not apply to other websites of VITA or third-party websites to which this website links. The terms used in this policy, such as "personal data" or its "processing", correspond to the definitions in Article 4 of the GDPR.

 

1. Subject matter of data protection and legal bases

The subject matter of data protection is personal data. Personal data means any information relating to an identified or identifiable natural person ('data subject'). Your personal data therefore includes any data that can be used to identify you, such as your name, address, telephone number or e-mail address. Personal data also includes information arising from the use of our website, such as the beginning, end and scope of use, or your IP address.

Personal data is also collected when you provide information for a new MyVITA user account. It is also required for performance of a contract in the VITA online store (contract data).

Personal data will continue to be collected to the extent that you enter information in your user profile and create, post or otherwise contribute content to the user forum (profile data).

We process your data only where permitted under an applicable law. We base the processing of your data on the following legal bases, among others:

• Consent (Article 6 (1), sentence 1 (a) of the GDPR):
  We will process certain data only with your prior explicit and voluntary consent. You have the right to withdraw your consent to future processing at any time.
• Performance of a contract or in order to take steps prior to entering into a contract (Article 6 (1), sentence 1 (b) of the GDPR): We require certain data from you to initiate or fulfill your contractual relationship with VITA.
• Compliance with a legal obligation (Article 6 (1), sentence 1 (c) GDPR): In addition, we process your personal data in order to fulfill legal obligations, regulatory requirements or commercial and tax-related retention requirements.
• Safeguarding of legitimate interests (Article 6 (1), sentence 1 (f) GDPR): VITA will process certain data in order to safeguard its interests or those of third parties. However, this does not apply if such interests are overridden by your interests.

Please note that this is not a complete or exhaustive list of possible legal bases. These are merely examples designed to make the legal bases for data protection more transparent. For details on the legal basis for individual data processing activities on our website, please refer to the explanations in the following sections.

 

2. Server log data

You can visit the public part of our website, which is accessible without prior registration, without providing any personal information. The following information about your access can be collected when you visit our website:

• The IP address of the requesting device
• Pages and files viewed
• The http response code
• The size of pages and files viewed, in bytes
• The website from which you accessed our website (referrer URL)
• Date, time and time zone of the server request
• Browser type and version
• Operating system of the requesting device 

 

We process this data on the basis of Article 6 (1), sentence 1 (f) of the GDPR for the purpose of providing the website as well as ensuring the technical operation and security of our IT systems. In doing so, we pursue the interest of enabling and sustaining the use of our website and its technical functions. This data is automatically processed when you visit our website. You cannot use our website without providing this data. We do not use this data for the purpose of identifying you.

Data that is collected automatically is usually deleted after 11 weeks, unless we are required to retain it longer for the above purposes under exceptional circumstances. In such cases, we will delete the data as soon as it is no longer needed for the specific purpose.

You cannot object to the collection and storage of your server log data because this information is essential for the smooth operation of the website.

 

3. Communication via contact form or e-mail

If you contact us via contact form or e-mail, the contact details (such as name, e-mail address) you provide voluntarily are collected, processed or used only for the specific purpose, either for recording or responding to your inquiry (or inquiries) or for technical administration purposes.The information you provide on our contact forms is encrypted using Transport Layer Security (TLS) protocol, widely known by its predecessor's name, Secure Socket Layer (SSL), for secure communication.

Data that is transmitted during communication via a contact form or by e-mail is processed on the basis of Article 6 (1), sentence 1 (b) of the GDPR, where required for steps before entering into a contract, or on the basis of Article 6 (1), sentence 1 (f) of the GDPR. In the latter case, we have a legitimate interest in processing contact requests voluntarily sent to us.

We will delete the data you provide as soon as the purpose for collection ceases completely, subject to the fulfillment of ongoing statutory retention requirements.

Where your data is processed on the basis of legitimate interests, you can object at any time to the storage of your personal data. In this case, we will no longer process your data unless we can demonstrate that we have a legitimate interest or are otherwise required by law to store it. To exercise your right to object to storage, please contact us in writing, by fax or by e-mail.

Please note, however, that if you communicate with us via contact form, we cannot guarantee complete data security and e-mails are not transmitted via a secure data connection. Therefore, please refrain from sending confidential information, such as bank or credit card information, etc. via these means of communication. For confidential information, we recommend that you use a secure means of communication, such as postal mail.

 

4. MyVITA access

We provide password-protected direct access to the profile data we have stored for every user who signs up for a MyVITA account. You can manage your profile data and newsletters from your account. Your account also gives you access to other services we provide, such as our e-tutorials and our media database. Required information is indicated by an asterisk (*) next to the input box on the signup form. This includes the following information:

• Title
• First name
• Last name
• Phone number
• Language of correspondence
• Company name
• Addresss
• E-mail address
• Password

 

This data must be provided for the conclusion and performance of the user agreement with us. Data is processed on the basis of Article 6 (1), sentence 1 (b) of the GDPR and Article 6 (1), sentence 1 (c) of the GDPR, provided that the data is stored in order to fulfill statutory retention requirements. We explicitly reserve the right to revert to other legal bases.

When you sign up for an account, you may voluntarily provide further information not required for the signup process, and you alone decide whether you want to share this information with us. This includes the following information:

• Title
• Fax number
• PO box address
• Website

 

If you do not provide this information, we may not be able to provide all the services you require when you use our website.

Voluntary information is stored on the basis of Article 6 (1), sentence 1 (f) of the GDPR, as we have a legitimate interest in processing the data you provide voluntarily so that we can deliver and continually optimize the functions in the MyVITA area. You can object to the processing of voluntary information at any time by deleting this data from your user profile.

Depending on the service you are signing up for, additional data, such as your bookmarks, may be collected and linked to your profile data. If you use the services detailed below, under certain circumstances, other personal information may also be collected and processed (such as payment details when you place orders) so that we can provide you with these products and services.

You can request to have your MyVITA account deleted at any time by sending a message to datenschutz@vita-zahnfabrik.com. Your profile and the stored content will be deleted or blocked immediately upon deletion of your user account (for further details, see Section 14).

 

5. Online registration for VITA classes and training courses

When you register for courses online in the Training Course area, you have the choice of creating an account or logging in, or placing your order as a guest, meaning without creating an account or logging in. If you sign up or log in, you are subject to the terms defined in Section 4. The following data is processed when you place an order in this online store:

• Title
• First name
• Last name
• Phone number
• Language of correspondence
• Company name
• Address
• E-mail address

 

You can also provide additional information on a voluntary basis; however, it is not required for completing the online registration process.

We use the personal data you provide during online registration to process and complete the registration and payment transactions in the Training Course area. If you pay by direct debit, your bank details (name of your bank, IBAN and BIC) are collected for this purpose. If you pay by credit card, the card number, expiration date, the card holder name and the security code are collected.

The applicable legal basis for these data processing operations is Article 6 (1) (b) of the GDPR. In order to process payment transactions, we may pass on your payment data to our payment service provider, who will process this data on our behalf for purposes of payment processing.

We will delete the information you provide in an order as soon as the purpose for collection ceases, unless we are required to retain the data for complete performance of contract (e.g. during ongoing statutory limitation periods) and subject to ongoing commercial or fiscal filing requirements (see Section 14 for further details).

 

5.1 Webinars, online meetings and conference calls via "GoTo Webinar"

We use the GoToWebinar software from provider LogMeIn Ireland Limited (processor) to hold webinars, online meetings and conference calls (hereinafter referred to as “webinars”).

As part of the registration process on the infrastructure of the company LogMeIn (Bloodstone Building Block C70 Sir John Rogerson’s Quay Dublin 2, Ireland), personal data is collected/stored. The legal basis for this data processing is Art. 6(1)(f) of the General Data Protection Regulation.

We have concluded a data processing agreement with the provider, which complies with the requirements of Art. 28 of the GDPR.

The data is processed to the extent permissible by law in Germany, the European Union and the U.S. In this regard, please also note the privacy policy of LogMeIn: https://www.logmeininc.com/de/gdpr/gdpr-compliance

What data is processed?

The following personal data is subject to processing:

• Information concerning the user: First name, last name and e-mail address are mandatory fields.
  The following optional information is also prompted: Address, city, zip code, country, company, profession, telephone.
• Meeting metadata: topic, description (optional), participant IP addresses, device/hardware information
• For recordings (optional): MP4 file of all video, audio and presentation recordings; M4A file of all audio recordings; text file of the online meeting chat.
• When dialing in by telephone: information on the incoming and outgoing telephone number, country name, start and end time. If necessary, additional connection data such as the IP address of the device can be stored.
• Text, audio and video data: If applicable, you have the option of using the chat, question or survey functions in an “online meeting”. Your text entries are processed to the extent that they are displayed in the “online meeting” and logged if necessary. For the duration of the meeting, the data is processed via the microphone of the terminal and the video camera.

Extent of the processing

• If we plan to record a “webinar,” we will communicate this to you in advance and ask for your consent. The app displays that it is recording.
• If necessary for the purposes of logging the results of an online meeting, we will log the content of the chat.
• In the case of online seminars, we may also process questions asked by online seminar participants for the purposes of recording and following up on the webinars. 
• If you are registered as a user with “GoToWebinar,” meeting metadata, telephone dial-in data, questions and answers in webinars, survey functions in webinars can be stored at “LogMeIn” for up to one month.

Recipients / data transfer

• Personal data processed in connection with participation in “webinars” will not be disclosed to third parties without your explicit consent.
• Deletion of the data takes place in accordance with the legal storage periods.
  • The data will only be used for a purpose other than fulfilment of the contract, as described above, or transferred to other third parties, if this is legally permissible or the user has expressly consented to this.
  • By registering for the event, participants agree that personal information may be used to contact participants.
  • At any time, each participant may exercise their right to revoke, correct and delete their data and withdraw their consent for the future by sending an email to datenschutz@vita-zahnfabrik.com.

6. Online application and application for e-mail

You have the option of using the online application function on our website or by e-mail, applying for vacancies or unsolicited applications. We process the information you have provided to us in connection with your application in order to assess your suitability for the position (or other open positions, if any), and to complete the application process. This includes, in particular:

• Form of address
• Title,
• First name
• Last name
• Professional title
• Language,
• Address
• E-mail address
• Phone number
• Documents,
• IP address.

 

The legal basis for the processing of your personal data in this application procedure is, in particular, § 26 of the German Federal Data Protection Act (BDSG) in conjunction with Art. 6 Para. 1 p. 1 letter b of the GDPR. According to these laws, the processing of data is permissible insofar as necessary in conjunction with the decision regarding the initiation of an employment relationship.

Of course, your application with us is completely voluntary. However, if you choose to apply, you should provide the personal data necessary to establish an employment relationship. We will tell you what data we deem necessary (for example by marking required fields in forms). Without this data, we cannot consider you in the application process.

The optional additional information by the applicant is saved on the basis of Art. 6 Para. 1 p. 1 letter f of the GDPR, as we have a legitimate interest in processing the additional information voluntarily provided yb you for the purpose of carrying out the application process. At any time, you may object to the processing of voluntarily provided data, which will be applied in the future, without giving any reason. In this case, we will no longer process your data unless we can demonstrate that we have a legitimate interest or are otherwise required by law to store it.

If you have consented to the further storage of your personal data, we are authorized, on the basis of your consent (Art. 6 Para. 1 p. 1 letter a of the GDPR), to include your data in our applicant pool and to process it in conjunction with application processes for future open positions at VITA. This also includes contacting you if you are being considered in such an application process. You may revoke your consent, if any, which will be applied in the future and without giving any reason.

If the data are required for legal prosecution after completing the application process, data processing may be used to safeguard legitimate interests in accordance with Art. 6 Para. 1 p. 1 letter f of the GDPR. Our interest consists, in this case, of the enforcement of or defense against claims.

Data from applicants are regularly deleted after six months, in the case of a rejection. If you have consented to further storage of your personal data, your data will be included in our applicant pool. There, the data will be deleted after a period of two years.

If you are selected for a position in the context of the application process, the data from the online application system will be transferred to our personnel information system and processed there as necessary, for the establishment and implementation of the employment relationship.

In addition, processing by other recipients named in Section 12 may take place under the conditions specified therein. Your application data will be viewed by us after receipt of your application by the Human Resources Department, as well as the department responsible at our company. In principle, only those persons in the company who need this for the proper execution of the application process, have access to your data.

 

7. Newsletter

We use the double opt-in procedure for sending newsletters, meaning we will only send you a newsletter by e-mail if you have previously explicitly permitted us to activate the newsletter service. We will then send you a notification e-mail asking you to confirm that you wish to receive our newsletter by clicking on a link in this e-mail. You are consenting to receive the newsletter by completing this separate double opt-in procedure.

We only send newsletters after you have signed up, meaning you have given your consent in accordance with Article 6 (1) (a) of the GDPR. We explicitly reserve the right to apply other legal bases. Where the contents of a newsletter are concretely defined when you subscribe to the newsletter, such contents are definitive for the scope of consent. Our newsletters also contain information about our products, offers, promotions and our company.

If you subscribe to the newsletter from the MyVITA area, we do not have to use the double opt-in procedure because your email address was already confirmed via the verification link when you logged in to the members area for the first time. In this case, a single opt-in in the MyVITA area is sufficient (you simply click a checkbox).

If you no longer want to receive newsletters from us, you can withdraw your consent at any time. To do this, simply send a message (e.g., e-mail, letter) to the above contact address or datenschutz@vita-zahnfabrik.com. You can also use the unsubscribe link included in each newsletter.

 

8. Cookies

The website uses cookies and similar technologies, such as HTML5 storage (hereafter referred to as "cookies"), in order to optimize the website. Among other things, cookies help us to make the website easy to navigate and more user-friendly.

Cookies are small identifiers that our web server sends to your browser and stores on your device, provided your default settings are configured accordingly. Cookies can be used to determine if your device has already communicated with us. In this way, they serve to improve the user experience for you and optimize our website. We distinguish between cookies that are technically strictly necessary, and those that are stored by our website or by third parties. Please refer to the policies below for further details on the type, function, purposes of, legal basis for, and opt-out options for data processing in relation to cookies.

When you use our website, we will inform you about the use of cookies and you can consent to the use and storage of cookies on your device. You can object to the storage of cookies at any time by disabling the cookie settings of this website, described below, or by selecting "Do not accept cookies" in your browser settings. Please refer to your browser's help feature for information about managing and deleting cookies in your browser settings. You can also disable all cookies by using free browser extensions such as "Adblock Plus" (adblockplus.org/de) in combination with the "EasyPrivacy List" (easylist.to). However, if you do not accept cookies, the features of the website may be restricted.

 

a) Strictly necessary cookies

Our website uses the following strictly necessary cookies for which we have a legitimate interest in storing and without which we would not be able to offer certain basic features on our website (for example, you would have to log in every time you open a new page):

Designation	Function/purpose	Duration of storage
PHPSESSID	Initializes the user session for use of the website.	Session
vita-zahnfabrik.com	Saves the user's cookie acceptance status in the current domain.	1 year

This data is processed to safeguard our legitimate interests on the basis of Article 6 (1), sentence 1 (f) of the GDPR. Therefore, our legitimate interest is based on the processing purposes described above.

 

b)        Additional first party cookies

Additional first party cookies, which are not absolutely necessary to use the website, fulfill important tasks. They make it easier to use our website, for example by prepopulating forms. They also allow us to uniquely tailor offers to your interests. We use the following additional first party cookies on our website:

Designation	Function/purpose	Duration of storage
CyconAccessType	Recognizes logged-in VITA employees or users with access to the admin area.	1 year

This data is processed to safeguard our legitimate interests on the basis of Article 6 (1), sentence 1 (f) of the GDPR. Therefore, our legitimate interest is based on the processing purposes described above.

 

c) Third-party cookies

In order to integrate third-party content and features (see following sections), we use third-party cookies that allow third parties to be notified that you have viewed this website. Please visit the third-party website for more information on their use of cookies. We use the following third-party cookies:

Designation	Function/purpose	Third party	Duration of storage
_gat_UA-8061667-1	Anonymized user analysis of downloads, video views, booking of services	Google Inc.	Session
_ga	Anonymized user analysis of website views	Google Inc.	unlimited
_gid	Registers a unique ID that is used to generate statistical information about how the visitor uses the site.	Google Inc.	1 day

This data is processed to safeguard our legitimate interests on the basis of Article 6 (1), sentence 1 (f) of the GDPR. Therefore, our legitimate interest is based on the processing purposes described above.

For further details and opt-out options for use of cookies by third-party providers, please refer to the following descriptions of the individual functions, which are based on the use of such cookies or cookie-like technologies.

9. Google Analytics

This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses third-party cookies to identify the frequency of use of certain areas of our website as well as preferences. The information generated by the cookie regarding how you use our website (including your truncated IP address) is transferred to a Google server in the United States where it is saved. This data is processed on the basis of our legitimate interests pursuant to Article 6 (1) (f) of the GDPR, namely our interest in the analysis, optimization and efficient operation of our website. Google complies with the Privacy Shield Framework, which guarantees compliance with European data protection laws.

Google uses this information on our behalf and on the basis of a contract for order processing to analyze your use of our website, to compile reports on website activities for us, and to provide other services relating to the use of the website and Internet usage.

IP anonymization is always enabled when we use Google Analytics. This means that the IP address of the users is truncated by Google within member states of the European Union (EU) or in other contracting states of the Agreement on the European Economic Area (EEA). Only in exceptional cases will the full IP address be sent to a Google server in the US and truncated. The IP address transmitted by your browser will not be merged with other data provided by Google.

The data is deleted as soon as it is no longer needed for our collection purposes. In our case, data is usually deleted after 14 months.

You can prevent the storage of cookies by disabling "third-party cookies" (see section 8) or by configuring your browser settings accordingly or by using browser extensions. However, please be advised that you may not be able to use all the features of our website in that case. You can also prevent the collection of the data generated by cookies and of data related to your usage of the website (including your IP address), and the transfer of this data to Google as well as the processing of this data by Google, by downloading and installing the browser plugin available here: https://tools.google.com/dlpage/gaoptout?hl=en.

For more information about how Google uses data as well as settings and opt-out options, visit Google's websites here:

• https://www.google.com/intl/en/policies/privacy/partners ("How Google uses information from sites or apps that use our services“),
• https://www.google.com/policies/technologies/ads ("Use of information for advertising purposes")
• https://www.google.com/settings/ads ("Managing information that Google uses to show you ads")

 

10. Embedded videos

This website features embedded YouTube videos. This service is

• operated by YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA ("YouTube"), which is a subsidiary of Google Inc., Amphitheater Parkway, Mountain View, CA 94043, USA.

 

When you play the videos, you are connected to YouTube's servers in the US. This means that certain information (such as your IP address) is sent to YouTube. In addition, if you have consented to the use and storage of third-party cookies, YouTube may store cookies on your device. We do not receive information about the nature and extent of the data collected by YouTube and have no influence on its use. Where videos are embedded, it also means that YouTube may be informed that your browser has accessed the page of this website containing the video, even if you do not have a YouTube account or are not logged in to YouTube. Your data is processed to enable you to use the aforementioned features and certain content on our website pursuant to Article 6 (1) (f) of the GDPR. In addition, we have a legitimate interest in using the content and services of third parties for efficient operation and optimization of our website.

Please refer to YouTube's privacy policy for more information regarding the purpose and scope of data collection, processing and use by YouTube as well as your rights and the available settings for protecting your privacy.

 

• Privacy Policy of YouTube/Google: https://www.google.de/intl/en/policies/privacy/

If you do not want these providers to associate your visit to this website to their local user account, you must log out of the provider's service before visiting this website. Even if you do not have an account with these providers, websites with enabled plug-ins can use cookies to send data to the providers, allowing them to create a pseudonymized user profile, for example.

The YouTube videos included on this website, which are stored at http://www.youtube.com and can be played directly from this website, are embedded in "enhanced privacy mode." According to YouTube, this means that if you do not play the videos, you will not be transferring any information about you as a user to YouTube.

You can prevent the storage of cookies by disabling "third-party cookies" (see Section 8) or by configuring your browser settings accordingly or by using browser extensions such as "Adblock Plus" (https://adblockplus.org/de/) in combination with "EasyPrivacy" list (https://easylist.to/). However, please be advised that you may not be able to use all the features of our website in that case.

 

11. Integration of third-party services and content/Google Maps

On our website we also use products from the following third parties to integrate their content and services such as maps (hereafter referred to as "content"). Your data will be processed on the basis of our legitimate interests (article 6(1)(f) GDPR) in the economic operation and optimization (in particular user-friendliness) of our website and in ensuring the security of our technical systems.

The third party providers of this content are always aware of your IP address, as they would not be able to transfer the content to your end device without the IP address. The IP address is required to display the content. Third-party providers can also place cookies on your end device.

To display maps we use the service "Google Maps" of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The data to be processed may include in particular IP addresses and location data, which are not, however, collected without your consent (usually through appropriate device settings). For more information about how Google uses data as well as the settings and opt-out options at Google, visit Google's websites listed below.

You can prevent the storage and use of cookies for the listed services by means of appropriate browser settings or browser add-ons.

For more information about how Google uses data as well as the settings and opt-out options at Google, visit Google's websites here:

• https://www.google.com/intl/en/policies/privacy/partners ("How Google uses information from sites or apps that use our services“),
• https://www.google.com/policies/technologies/ads ("Use of information for advertising purposes")
• https://www.google.com/settings/ads ("Managing information that Google uses to show you ads")

This website uses Mouseflow, an analytics tool by Mouseflow, ApS (Flaesketorvet 68, 1711 Copenhagen V, Denmark), to track user activity, page content, click/touch, movement, scroll, and keystroke activity (in some cases). If you are located in Europe, your IP address, keystroke activity, and personal information are never stored or shared with any third-parties. We process and keep all data for our own website within Europe and, if you wish to opt-out from tracking by Mouseflow, you can do so here: https://mouseflow.com/opt-out/   

 12. Recipients of personal data

We will only share your personal data with external recipients where it is necessary for fulfilling or processing your request, where you have given us your consent to do so, or where another form of legal permission applies.

External recipients include:

• Processors: These are service providers that we use for the provision of services, for example for the technical infrastructure and maintenance of our website. These processors are carefully selected and regularly reviewed by us to ensure that your privacy is safeguarded. These service providers may only use your data for the purposes specified by us and according to our instructions. We are entitled to use such processors according to the provisions of Article 28 of the GDPR.
• Public authorities: These include regulators, government institutions and other public-sector entities, such as supervisory authorities, courts, prosecutors or tax authorities. Personal data will only be transferred to such public authorities for legally compelling reasons. The legal basis for such a transfer may be Article 6 (1), sentence 1 (c) of the GDPR.
• Private entities: Service providers and assistants, such as accountants or auditors, to whom data is transferred on the basis of a legal obligation or to protect legitimate interests. In this case, the legal basis for transfer is Article 6 (1), sentence 1 (c) and/or (f) DSGVO.

 

13. Data processing in third countries

Prior to transferring your data to third countries outside the EU or the EEA as described above, we ensure that, except where permitted by law in exceptional circumstances, the recipient has an adequate level of privacy or that you give consent to the transfer of data. An appropriate level of data protection is ensured, for example, if the recipient has an EU-US Privacy Shield certification, if EU standard contractual clauses have been concluded or binding corporate rules (BCR) exist.

 

14. Duration of storage

We only store your personal data for as long as necessary to fulfill the purpose or until you withdraw your consent, provided you have given consent. If you withdraw your consent, we will no longer process your personal data, unless its processing is permitted or even strictly required by the relevant statutory provisions (for example, in order to meet commercial and tax-related retention requirements). We also delete your personal data if we are obligated to do so for legal reasons.

In addition, please refer to the details about the duration of storage of your personal data in the individual explanations in the previous sections.

 

15. Your rights

As a data subject, you have many rights with regard to the processing of your data. These are:

• Right of access (Art. 15 GDPR): You have the right to obtain information about the data we have stored concerning you.
• Right to rectification and erasure (Articles 16 and 17 GDPR): You may ask us to rectify inaccurate data and, insofar as the legal requirements are met, delete your data.
• Right to restriction of processing (Art. 18 GDPR): Provided legal requirements are met, you may request that we restrict the processing of your data.
• Right to data portability (Art. 20 GDPR): If you have provided us with data based on a contract or consent, insofar as legal requirements are met, you have the right to receive the data you have provided to us in a structured, commonly used format or ask us to transfer it to another controller.
• Right to object to data processing based on legitimate interests (Art. 21 GDPR): You have the right to object, on grounds relating to your particular situation, at any time to the processing of your data by us, insofar as your objection is based on legitimate interests pursuant to Article 6 (1), sentence 1 (f) of the GDPR. If you exercise your right to object, we will cease to process your data, unless we can demonstrate compelling legitimate grounds for further processing that override your rights.
• Right to object to cookies: You can also object to the use of cookies at any time. If you want to object to the use of certain cookies, please see our comments in Section 8.
• Withdrawal of consent (Art. 7 GDPR): If you have given us consent to process your data, you can withdraw your consent to future processing at any time. This does not affect the lawfulness of the processing of your data up until you withdraw your consent.
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR): You can also lodge a complaint with the competent supervisory authority if you believe that the processing of your data violates applicable law. You may choose to contact either the data protection authority responsible for your location, place of work, or location of the alleged breach; or you may contact our own data protection authority. The data protection supervisory authority responsible for us is the State Data Protection Commissioner for Baden-Württemberg (www.baden-wuerttemberg.datenschutz.de).

 

If you have any questions about the processing of your personal data, your rights as a data subject or any consent that you have given, please contact our data protection officer using the contact details provided in Section 17. Please also contact our data protection officer directly to exercise your data protection rights.

 

16. Our data protection officer

We have appointed a company data protection officer. You can reach him or her as follows:

VITA Zahnfabrik H. Rauter GmbH & Co. KG
Spitalgasse 3
79713 Bad Säckingen, Germany
Phone: +49 (0) 7761-562-0

Fax: +49 (0) 7761-562-299

E-mail: datenschutz (at) vita-zahnfabrik.com

 

17. Security

We take technical and organizational security measures to protect your personal data from accidental or intentional manipulation, loss, destruction or access by unauthorized persons. These security measures are adapted to the latest technologies.

The personal data you provide when you use our website is transferred via a secure, encrypted connection. We use Transport Layer Security (TLS) encryption protocol, which is more widely known by its predecessor's name, Secure Socket Layer (SSL).

Our employees are committed to data secrecy.

 

18. Changes

Occasionally, it may be necessary to revise the content of this Privacy Policy. We therefore reserve the right to change it at any time. If your consent is required for a change, we will ask for it. We will also publish the amended version of the privacy policy here. You should therefore re-read the privacy policy when you visit our website again.

Date:           October 2018