Privacy Policy

Data controller

The data controller within the meaning of the General Data Protection Regulation (GDPR) is:

Hosting and server log files

This website is hosted by an external service provider (host). When you access the website, the host automatically records information transmitted by your browser in so-called server log files – for example the anonymised IP address, the date and time of access, the page accessed, as well as your browser type and operating system. This data is used solely for the technical provision, security and stability of the website and is not merged with other data sources.

The legal basis is our legitimate interest in providing the website securely and reliably (Art. 6 (1) (f) GDPR). A data processing agreement (Art. 28 GDPR) is in place with the host.

Note: The specific hosting provider will be added before launch.

Cookies, fonts and external content

This website does not use any analytics, tracking or marketing cookies. No web analytics take place. The fonts used are delivered locally from our server (self-hosted); no connections to Google Fonts or other third-party providers are established for this purpose.

We do not directly embed any Google Maps map or other privacy-sensitive third-party content. Where we refer to external services (e.g. a route planner or our social media profile), this is done exclusively via simple links. Only when you click such a link are you taken to the respective provider, whose own data protection provisions then apply.

Online appointment request

When you use our online appointment request, we process the contact details you provide (e.g. name, telephone number, email address) as well as your enquiry. As such an enquiry may contain information about your health, it may constitute health data and therefore a special category of personal data within the meaning of Art. 9 GDPR.

• Purpose: Processing your appointment request and contacting you to arrange an appointment.
• Legal basis: Your explicit consent (Art. 9 (2) (a) in conjunction with Art. 6 (1) (a) GDPR), which you may withdraw at any time with effect for the future.
• Recipients: Your data is not passed on to third parties – except to technical service providers that are required for the transmission and processing of the appointment request and that act on our behalf and according to our instructions.
• Storage period: We store your request only for as long as is necessary to process it. The data is then deleted, unless statutory retention obligations apply.

Digital medical history form

At our invitation, you can fill in a digital medical history form before your appointment. In doing so, we process the health data you provide (e.g. pre-existing conditions, medication, allergies) including your electronic signature. This constitutes special categories of personal data within the meaning of Art. 9 GDPR.

• Purpose: Preparation and delivery of your dental treatment and the legally required treatment documentation.
• Legal basis: Your explicit consent (Art. 9 (2) (a) in conjunction with Art. 6 (1) (a) GDPR), which you give in the form itself and may withdraw at any time with effect for the future.
• Recipients: Your information is stored exclusively within the EU and is not passed on to third parties – except to technical service providers that are required for storage and transmission and that act on our behalf and according to our instructions.
• Storage period: As part of your patient record, the completed medical history form is subject to the statutory dental retention obligation (Section 630f of the German Civil Code, generally ten years after completion of treatment). The data is deleted thereafter.

Contacting us by telephone or email

When you contact us by telephone or email, we process the data you provide in order to handle your enquiry. The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to the initiation or performance of treatment; otherwise our legitimate interest in responding to your enquiry (Art. 6 (1) (f) GDPR). If your enquiry contains health data, we base the processing on Art. 9 (2) (h) GDPR or on your consent. The data is deleted as soon as it is no longer required to achieve the purpose and no retention obligations apply.

Your rights as a data subject

Under the GDPR, you have the following rights:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Objection to processing (Art. 21 GDPR)
• Data portability (Art. 20 GDPR)

You may withdraw any consent you have given at any time with effect for the future. The lawfulness of the processing carried out up to the withdrawal remains unaffected. To exercise your rights, it is sufficient to send a message to praxis@aixsmile.de.

Right to lodge a complaint with the supervisory authority

Without prejudice to any other remedies, you have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:

No automated decision-making

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.