Privacy Policy

With this Privacy Policy, we inform you about the scope of the processing of your personal data (hereinafter referred to as “data”).

Responsible for Data Processing

The entity responsible for data processing in accordance with the provisions of the General Data Protection Regulation (GDPR) is:

Privatpraxis Dr. med. dent. Ivana Steuber
Business Campus Garching, Parkring 37
85748 Garching-Hochbrück
Tel: +49 89 31 59 48 40
E-Mail: mail@dr-steuber.de

General Information on Data Processing

In the course of our business operations and website operation, we process data.
This also includes disclosure through transmission to third parties and possibly to so-called third countries outside the European Union (“EU”) and the European Economic Area (“EEA”). If we transmit data outside the EU or EEA, we have indicated this accordingly below.

Data Processing

The specific data concerned, processing purposes, legal bases, recipients, and any transfers to third countries are listed in the following breakdown:

1. Logfile during website visits
   We log your website visits. In this process, we process the following data:

   • Names of the website(s) we retrieved,
   • Date and time of retrieval,
   • Transferred data volume,
   • Browser type and version,
   • The operating system you are using,
   • The referring URL (the website previously visited),
   • Your IP address,
   • The requesting provider.

The legal basis for the data processing is, in accordance with Art. 6 (1) f) GDPR, our legitimate interest in the continuous provision and security of our website.
The log file is deleted after seven days unless it is required to demonstrate or investigate specific legal violations that became known during the retention period.

2. Contacting Us
   If you contact us, we process the following data for the purpose of processing and handling your inquiry: name, contact details (if provided by you), and your message.
   The legal basis for data processing is our obligation to fulfill the contract and/or to fulfill our pre-contractual obligations in accordance with Art. 6 (1) b) GDPR and/or our legitimate interest in processing your inquiry in accordance with Art. 6 (1) f) GDPR.

3. We currently use offers from the following service providers (to the extent that they use da-ta or cookies from you):

   • Pirsch Analytics: Emvi Software GmbH (located in Germany) is the provider of the “Pirsch Analytics” service and acts as our processor. Information about data protection with Pirsch Analytics can be found here: https://pirsch.io/de/privacy.
   • Hosting: Vercel Inc. (located in the United States) hosts our website and acts as our processor. Information about data protection with Vercel can be found here: https://vercel.com/legal/privacy-policy.

Duration of Data Retention

We retain personal data only for as long as necessary to achieve the purposes for which it is processed or until your consent is withdrawn. Where statutory retention obligations apply, certain data may be retained for up to 10 years regardless of the processing purpose.
V. Your Rights as a Data Subject

1. Access
   You may request information about all personal data we have stored about you at any time, free of charge.
2. Rectification, Erasure, Restriction of Processing (Blocking), Objection
   If you no longer agree to the storage of your personal data or if the data has become inaccurate, we will, upon your instruction, delete, block, or correct your data, as far as this is permissible under applicable law. The same applies if we are to process data in a more limited manner in the future. You have the right to object particularly in cases where your data is required for the performance of a task carried out in the public interest or based on our legitimate interest, including related profiling. Similarly, you have the right to object in cases of data processing for direct marketing purposes.
3. Right to Withdraw Consent with Future Effect
   You may withdraw your consent at any time with effect for the future. The lawfulness of processing based on your consent up to the point of withdrawal remains unaffected.
4. Data Portability
   If data processing is based on a contract, pre-contractual negotiations, your consent, or automated processing, you have the right to data portability. Upon request, we will provide you with your data in a commonly used, structured, and machine-readable format, allowing you to transfer the data to another controller if desired.
5. Restriction of Processing
   Data that cannot be attributed to a specific individual, for example, data anonymized for analysis purposes, is not subject to the aforementioned rights. Access, deletion, blocking, correction, or transfer to another company may only be possible if you provide us with additional information that enables identification.
6. Exercising Your Rights and Right to Complain
   If you have questions about the processing of your personal data or wish to request access, rectification, blocking, objection, or deletion of your data, or if you want to transfer your data to another company, please contact us at the email address provided above.
   You also have the right to lodge a complaint with a supervisory authority regarding your data subject rights.