1. General

a) What does this privacy policy apply to?
This privacy policy informs the user (hereinafter also referred to as the "data subject") of this website about the handling of personal data. The operator and controller of this website is the company dentognostics GmbH (hereinafter also referred to as "dentognostics" or "controller"). This privacy policy contains in particular the precise, transparent and easily understandable information pursuant to Art. 13 f. GDPR. The privacy policy also informs the user about their rights as a data subject in accordance with Articles 15 to 18, 20 and 21 GDPR.

Furthermore, the scope of this data protection declaration also extends to the processing of personal data of customers, interested parties, applicants (m/f/d) as well as suppliers and other partners outside the website by the company dentognostics.

The scope of this privacy policy of dentognostics expressly does not extend to external links that are indicated on the website. It should be noted that the relevant data protection provisions of the respective website operator apply here. For this reason, we expressly recommend that you read these in full and take note of them before using the respective website.

b) Which terms are particularly important?
What is personal data?
"Personal data" means any information relating to an identified or identifiable natural person (hereinafter "data subject" or "user"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person." (Art. 4 No. 1 GDPR)

What is meant by processing?
"Processing" means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction." (Art. 4 No. 2 GDPR)

c) Note
If only the male gender is mentioned in this declaration or on the website, this expressly does not constitute discrimination against another gender (w/d), but serves solely to improve readability.

2. Which body is responsible for the processing?

The controller pursuant to Art. 4 (7) GDPR for the processing of personal data is

Address:
dentognostics GmbH
Ober der Mühle 39
D-42699 Solingen

If you have any concerns about data protection, you can contact the person responsible by e-mail at info@dentognostics.de.

3. What personal data does the website operator process?

When processing personal data, the website operator always works in accordance with the principles set out in Art. 5 (1) GDPR. These include the principles of transparency, purpose limitation and data minimization.

Access to personal data is only granted to those persons (employees) at the controller who actually need it and who are appropriately trained and obliged to handle personal data.

a. automatically collected personal data
This website does not automatically collect any personal data without the user's consent to the use of cookies or the voluntary provision of information (e.g. via the contact form).

Immediately at the start of use, the user is asked for consent to the use of cookies and external media. If the user does not give their consent, external media and their content will not be displayed. Beyond this, the selected settings have no further effect on the usability of the website.

Further information on cookies can be found in article 7 "Cookies".

Notice
The transmission of the IP address is necessary for successful data transmission to the device used by the user. This is stored anonymously in the server log files to protect personal data.
In addition to the IP address, the following information is stored in a log file:

- Date and time of the website visit
- Useful life
- Usage path within the website
- Referrer URL (from which page the user came to this page)
- Operating system and / or browser used
- Amount of data transferred in bytes
- Errors during website use (status codes)
- Screen resolution used

All data collected in a server log file is generally only used for (anonymized) statistical evaluations, for improvement and to enable error-free and secure use of the website. However, the controller reserves the right to check the server log files retrospectively as soon as there are concrete indications of illegal use of the website.
By anonymizing the IP addresses, it is not possible to assign the individual log files to a user or an individual device. For this reason, the automatically generated server log files are no longer personal data within the meaning of the GDPR from the time of anonymization. Anonymization is carried out by the provider (hosting provider) after 7 days at the latest. To protect personal data, we can only view the IP addresses in anonymized form before they are anonymized by the provider.

b. Voluntary information via the contact form
By filling out the contact form on this website, the user voluntarily enters personal data. By clicking on "Send", the user consents to the processing of their personal data for the purpose of processing their request. This involves the following information:

- Name of the company
- Name of contact person (mandatory)
- E-mail address (mandatory)
- Telephone number (mobile if applicable)
- Individual message with details of the respective request (mandatory)
- Address, if applicable

In order to respond to inquiries via the contact form, it is necessary to provide your name and a valid e-mail address. If you do not provide us with the necessary personal data in full when submitting your inquiry via the contact form, this may result in us not being able to process your inquiry or only being able to process it in part. All data is transmitted in SSL/TSL encrypted form.
The consent given can be revoked at any time without giving reasons. We will only process the data for as long as is necessary for the purpose of your request. If there is a legal obligation to retain data, we will restrict the processing.

c) Direct marketing measures
The website operator may use the address voluntarily provided by users on the website within the meaning of Art. 6 para. 1 lit. f GDPR to advertise current services, promotions and our website by post. If these are existing customers or interested parties in the narrower sense, our company may also do this by e-mail within the meaning of Art. 6 para. 1 lit. f and taking into account Section 7 para. 3 UWG. According to current case law, presumed consent (within the meaning of Section 7 (2) UWG) is sufficient for telephone advertising for companies (B2B), provided that this does not conflict with overriding interests pursuant to Art. 6 (1) (f) GDPR. Of course, you have the right to object to the sending of advertising or other contact for advertising purposes at any time with effect for the future without giving reasons.

d) Subscription to our newsletter
Users of this website can voluntarily subscribe to our newsletter. To subscribe to our newsletter, all you need to do is enter your e-mail address (name optional). After entering the e-mail address, you will receive an e-mail with a confirmation link to subscribe to our newsletter. The so-called double opt-in procedure is necessary and serves to protect against misuse or erroneous newsletter subscriptions.

After clicking on the confirmation link sent to the e-mail address entered (consent pursuant to Art. 6 para. 1 lit. a GDPR), the controller processes the e-mail address provided (and any
optional name provided) exclusively for the purpose of sending the newsletter. Your data will be stored in encrypted form on servers located in Germany and will not be passed on to third parties.

The user can cancel the newsletter subscription at any time without giving reasons. To do so, you can use the link at the end of our newsletter. Immediately upon termination of the newsletter subscription, dentognostics will delete your e-mail address (and your name, if provided) completely from the e-mail distribution list.

4. customer data protection - personal data of customers and interested parties

In particular, our company processes the following personal customer data (processing outside this website):

- Name of the company
- Name of the contact person
- Contact details (address, e-mail address, telephone number (mobile if applicable), fax if applicable)
- Details of concerns / requests
- Order-related data
- Invoice and, if applicable, financial data
- if applicable, data within the scope of order processing (a separate agreement on order processing (AVV) is concluded in accordance with Art. 28 GDPR)
- Consents for advertising purposes (and revocations)
- any other personal data required in the context of pre-contractual measures and / or for the execution of the contract

In the case of interested parties, dentognostics processes in particular the name of the company, the name of the contact person, contact details and data on concerns / inquiries.

The legal bases listed below in Art. 6 also apply, where applicable, to the processing of personal data of customers, interested parties and suppliers. The processing is carried out in particular in accordance with Art. 6 para. 1 lit. b, f GDPR.

5. Data protection for applicants - How will my data be processed?

a) Applications via application form
You can use our application form on our website to apply directly to us or to send questions about the advertised positions to dentognostics. The applicant consents to the controller processing all personal data exclusively within the scope of the respective job advertisement for the purpose of awarding the position.

Applicants (m/f/d, hereinafter referred to as "the applicant") regularly provide the following personal data:

- Full name
- valid e-mail address
- CV details (including name and contact details, details of professional qualifications (training, studies, specializations and other qualifications if applicable), school-leaving certificate, professional career, special skills, other information if applicable)
- Other individual details and attachments, if applicable
- Details of the position applied for
The following personal data is required to answer questions about advertised positions:
- Name of the applicant
- E-mail address
- Question / Request
- All other information is voluntary

All data transmitted via the application form is SSL/TSL (HTTPS) encrypted. The data provided in this way will be used by dentognostics exclusively as part of the application process. The lawfulness of the processing of applicants' personal data is based in particular on Section 26 BDSG.

Nicht berücksichtigte Bewerbungen werden grundsätzlich spätestens 6 Monate nach Abschluss des Bewerbungsverfahrens gelöscht.

Sie möchten, dass wir Ihre interessante Bewerbung auch bei zukünftig zu vergebenden Stellen berücksichtigen? Ihre personenbezogenen Daten speichern wir ausschließlich dann bis zu 2 Jahre in einer Bewerberdatenbank, wenn Sie hierzu einwilligen. Dies ermöglicht es uns, Sie auch bei der Vergabe zukünftiger Stellen zu berücksichtigen, ohne dass hierfür eine erneute Bewerbung von Ihnen notwendig ist. Selbstverständlich haben Sie jederzeit die Möglichkeit, Ihre freiwillige Einwilligung jederzeit ohne Angabe von Gründen zu widerrufen. Nach spätestens zwei Jahren sowie unmittelbar nach Widerruf der freiwilligen Einwilligung (zur Verarbeitung Ihrer Daten über einen Zeitraum von bis zu 2 Jahren für die Berücksichtigung bei zukünftig zu vergebenden Stellen) werden wir Ihre Daten unmittelbar und vollständig löschen.

Further information on data protection is available to applicants directly in the respective job advertisement on our website. In the case of applications for job advertisements, applicants will receive information about the processing of their data as part of the application process and feedback on the application as soon as possible, but at the latest within two weeks of receipt of the application. In individual cases, it is possible that the applicant will not receive specific feedback on the job allocation within two weeks. This may be the case, for example, if the application deadline is later.

b) Applications by post
Alternatively, you can also send us your application by post to dentognostics GmbH, Ober der Mühle 39, 42699 Solingen. The data protection provisions pursuant to lit. a (letter a) also apply accordingly to postal applications. Unsuccessful applications will be deleted no later than 6 months after the application process has been completed. We will generally return your application sent by post within this period.

c) Would you like to submit a speculative application?
You can send these by e-mail to info@dentognostics.de or by post to dentognostics GmbH, Ober der Mühle 39, 42699 Solingen. Please note that applications sent by e-mail are not encrypted by most e-mail programs and providers. You will receive information about the processing of your data as part of the application process and feedback on your unsolicited application as soon as possible, but at the latest within two weeks of receipt of your application. Our data protection provisions naturally also apply accordingly to unsolicited applications.

d) Note for applications by e-mail
As a rule, e-mails are transmitted on the Internet without any special encryption. Therefore, it cannot be ruled out that you may unintentionally gain knowledge of or even modify e-mail content and unencrypted attachments from parties involved in the transmission (such as e-mail program, Internet access provider, e-mail service provider (hoster)) and other unauthorized third parties.

6. lawfulness of the processing

dentognostics processes all personal data provided via this website for the following purposes:

- to answer inquiries (pursuant to Art. 6 para. 1 lit. b GDPR)
- for communication with the user (pursuant to Art. 6 para. 1 lit. a, b and f GDPR)
- the purpose of contractual or pre-contractual service provision (pursuant to Art. 6 para. 1 lit. b GDPR)
- for the provision of information and / or services intended for the user (pursuant to Art. 6 para. 1 lit. f GDPR)
- Examination of complaints or other information from users (pursuant to Art. 6 para. 1 lit. f GDPR)
- for the improved operation and corresponding administration of the website (pursuant to Art. 6 para. 1 lit. f GDPR)
- to detect and prevent fraud and criminal offenses and/or to ensure the necessary network and data security, insofar as these interests are consistent with the applicable law and with the rights and freedom of the user (pursuant to Section 24 (1) BDSG and Art. 6 (1) (f) GDPR)
- if the controller is obliged to do so for legal reasons (pursuant to Art. 6 para. 1 lit. c GDPR)

If the data subject does not provide us with all the personal data required before, during or after order processing, this may mean that the order / request cannot be processed or can only be processed incompletely. This also applies to a restriction of data, where the respective data is blocked for further use. However, this does not affect your visit to the website.

7. Cookies / external media

We use cookies and external media on our website. All cookies (with the exception of technically necessary cookies) and any other tracking technologies are only set/used if the user has consented to this by opting in. Consent is voluntary and can be revoked at any time.

Cookies are small text files that are temporarily stored on the user's hard disk. Each time our website is accessed again, the browser accesses the relevant cookies and sends the data they contain to the website server.
A distinction must be made between technically necessary cookies and cookies that are not necessary for the operation of the website (cookies for personalization, marketing and analysis purposes). For example, the cookie for storing consent to the cookie notice is technically necessary.

External Media are software provided by third parties and integrated into the website by the controller for optimal presentation and usability. Examples include social media buttons. In particular, third-party cookies that process personal data are used to display external media. Therefore, the voluntary consent of the user, which can be revoked at any time, is required for the display of external media.

Other tracking & analysis technologies: If other tracking and analysis technologies are used on this website after consent has been given, we will inform you accordingly in this privacy policy. Of course, consent to the use of other tracking and analysis technologies is voluntary and can be revoked at any time with effect for the future.

a) Which cookies for personalization (third-party cookies) does this website use?  

The third-party cookies used on this website are stored on the computer / mobile device for the specified period of validity after the first storage. In the event of a subsequent update, the cookie is then stored for a maximum of the respective validity period. The cookies actually set may vary slightly depending on the browser / end device or due to changes made by the third-party provider. Users can view a current overview of the cookies actually used depending on the browser
and integrated external media at any time via the link to the cookie plugin.

b) How can I manage cookies within the website?
A cookie plugin is used for this purpose. With the help of this plugin, users can set their preferences for cookies and external media easily and with just a few clicks directly when visiting the website. You can customize the settings at any time using the "Change cookie settings" button at the top of the privacy policy

The following options are available to the user:

- Opt-in / opt-out of all cookies / external media
- Opt-in / opt-out of individual cookies / individual external media

The cookie required for this is essential (necessary) and is set for a maximum of one year. If cookies are deleted prematurely by your browser or on your end device, your previous settings will also be deleted. When you visit this website again, cookies (with the exception of technically necessary / essential cookies) will only be set if you consent to this.

The third-party cookies used on this website are stored on the computer / mobile device for the specified period of validity after the first storage. In the event of a subsequent update (such as a new visit to the website), the cookie is then stored for a maximum of the respective validity period.

c) How can cookies be managed in the browser settings?
In principle, internet browsers offer their users the option of changing the settings for allowing and informing about the placement of cookies themselves. This allows users to completely reject the use of cookies. However, this setting may mean that some functions of this website are only available to a limited extent or are no longer available at all. However, this only applies to content and functions (external media) that can only be displayed by setting cookies (technically unnecessary cookies).

Under the following links, users can manage their cookie preferences in the most commonly used browsers themselves:

Google Chrome: https://support.google.com/chrome/answer/95647?hl=de
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Safari: https://support.apple.com/de-de/guide/safari/sfri11471/12.0/mac/10.14
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen

8. other plugins / software

a) Cookie Plugin
With the cookie plugin provided by dentognostics, users can make individual cookie settings on this website at any time (for more information, see Article 7 b).

b) Newsletter dispatch
To send our newsletter, your e-mail address and the name you optionally provide will be stored exclusively on the servers of our website in appropriately secured high-security data centers located in Germany. Your data is expressly not transmitted to third parties
or to other countries. In addition, dentognostics does not use tracking measures to analyze its newsletters.

9. data from other sources

To the extent permitted by applicable law, dentognostics may combine data provided by the user with other information that dentognostics has already collected and stored about you at an earlier point in time for a lawful purpose (Art. 6 (1) (a), (b) and (f) GDPR). This may be the case, for example, if the user provides dentognostics with personal data via the contact form and dentognostics merges this with data from an order form or offer.

10. Will my personal data be passed on to third parties?

Personal data will not be sold, disseminated, transferred to third parties for a fee or used commercially in any other way by dentognostics. The only exception to this is if we are obliged to do so by law or official regulations or if the data subject has given their consent.

If dentognostics offers a service in cooperation with a third party, dentognostics will inform the customer of this in advance. In this context, we will only pass on the data to such a cooperation partner (third party) with express consent. In doing so, dentognostics limits the transferred data to what is absolutely necessary and strictly complies with the applicable data protection regulations (in particular the GDPR and the BDSG).

Thus, dentognostics will only pass on personal data to third parties in the following cases:

1. if the data subject has given their consent in accordance with Art. 6 para. 1 lit. a and Art. 7 GDPR.
2. the transfer is necessary for the fulfillment of contractual or pre-contractual measures pursuant to Art. 6 para. 1 lit. b GDPR.
3. there is a legal obligation to do so in accordance with Art. 6 para. 1 lit. c GDPR.
4. if this is necessary in accordance with Art. 6 para. 1 lit. f GDPR for the assertion, exercise or defense of legal claims and there is no overriding interest worthy of protection.

11. Social Media

This site uses social media plugins (these use cookies and possibly other tracking technologies, see Article 7) from the following social media platforms:

• Facebook
• Instagram
• LinkedIn

For pure HTML links to dentognostics social media pages (without tracking), no consent is generally required.
If these buttons, in particular share or like buttons, collect personal data by means of cookies or other tracking technologies, data processing will only take place after consent has been given. Consent can be actively given, in particular by opting in at the
start of using the site or later using the so-called 2-click procedure.

The cookies link the page usage with an existing social media profile. If there is no profile with a platform, the data can be assigned to the IP address of the device used, depending on the network operator. By clicking on "Reject" immediately at the beginning of the website visit, no cookies are set and no social media buttons are displayed. These will only be displayed and personal data transmitted if the user actively consents to this. The previous settings can be viewed and customized at any time by clicking on the "Change cookie settings" button at the beginning of this privacy policy. Alternatively, cookies can also be adjusted in the browser settings.

For the social media pages operated by dentognostics, there is joint responsibility together with the respective network operator. This means that both dentognostics and the network operator are responsible for the protection of personal data. Insofar as this falls within the scope of influence and responsibility, dentognostics consistently implements data protection in accordance with this privacy policy. However, the controller (in accordance with this privacy policy) has only limited influence on the specific design of and compliance with data protection by the respective network operator.

12. Where will my personal data be processed (processing area)?

In principle, all personal data collected and transmitted by dentognostics via this website is processed exclusively within the European Union. However, individual cookies, external media or plugins may send personal data to servers outside the European Union (third countries). A transfer will only take place if you have consented to its use or if we expressly state another legal basis in this privacy policy in certain cases. The basis for the transfer of data to third countries is either an adequacy decision of the EU Commission pursuant to Art. 45 para. 3 GDPR, standard data protection clauses and on the basis of Art. 49 para. 1 lit. b GDPR. These bases ensure adequate protection of your personal data within the meaning of the GDPR.

You can change the settings for the use of cookies and external media, in particular within the website, at any time by clicking on the "Change cookie settings" button at the beginning of this privacy policy. Further information on cookies and external media can be found in Article 7 of this privacy policy.

All personal data of customers, interested parties and applicants are processed by dentognostics exclusively within the European Union, unless otherwise stated.

13. storage period / deletion of personal data

In principle, dentognostics will only store or otherwise process your personal data within the meaning of Art. 17 para. 1 lit. a for as long as is necessary for the purposes for which the personal data was collected. Subsequently, dentognostics will immediately delete the data of the data subjects. However, in certain cases, dentognostics may be legally obliged to store certain data for a longer period of time.

The cookies used by the controller will be deleted from the hard disk or your device/storage location at the latest upon expiry of the validity period specified in Art. 7 lit. a of this data protection declaration (cookies) after storage on the device memory or, in the case of an update, at the latest after expiry of the specified validity period after an update.

14 How secure is my data? - Data security

The dentognostics website is hosted exclusively on servers located in certified high-security data centers within Germany. In addition, dentognostics takes appropriate technical and organizational measures to protect your personal data from any unauthorized access.

SSL-encrypted data transmission
When data is transmitted via the website server(s), all data is encrypted using the HTTP/2 SSL/TSL transmission protocol. This means that all data transmitted via the contact form or application form in particular is SSL/TSL encrypted. In addition, we regularly review our security policies and procedures to ensure the highest level of security for our systems and thus for personal data.
Despite all security measures taken to protect personal data, it is not possible to guarantee 100% security of data transmitted via our website when transmitting data over the Internet. If we become aware in any way that personal data may have been lost or stolen via our website, we will inform the data subjects immediately upon becoming aware of this in accordance with Art. 34 GDPR.

15 Rights of data subjects

For dentognostics, the rights of data subjects (in particular users, interested parties, customers, applicants and suppliers) to their personal data are extremely important.

In particular, you have the following rights vis-à-vis dentognostics:
a) Right of access to processed personal data pursuant to Art. 15 GDPR:
Data subjects have a right to a copy of the processed data (if actually processed) as well as further information about its use. This is intended to give users the opportunity to determine whether dentognostics processes their own personal data and whether this processing is carried out in accordance with applicable data protection law. The controller may refuse to disclose information in certain cases. This is justified in particular if the rights and freedoms of other persons are impaired or the provision of information would involve a disproportionate effort.
b) Right to rectification of personal data stored about the data subject pursuant to Art. 16 GDPR:
You may request dentognostics to take reasonable steps to rectify your personal data. Examples include a change of name, a new address or a new e-mail address.
c) Right to erasure ("right to be forgotten" pursuant to Art. 17 (1) GDPR):
As a data subject, you generally have the right to request the erasure of your personal data. This right exists in particular if the data is no longer necessary for the purpose for which it was collected by dentognostics or if the processing is unlawful. However, the right to erasure of personal data
for the duration of statutory retention periods and in particular for the defense and enforcement of legal claims does not exist or only exists to a limited extent.
d) Right to restriction of processing pursuant to Art. 18 GDPR:
Data subjects have the right to restrict the further processing of their personal data. This means that the data may only be stored and further processing is generally excluded. You can request the restriction of your data if we are reviewing a request for rectification of your data or as a weakened alternative to erasure.
e) Right to data portability in accordance with Art. 20 GDPR
In accordance with Art. 20 GDPR, you are entitled to receive your data from dentognostics in a machine-readable format or to request that it be transferred to a third party.
f) Right to object pursuant to Art. 21 GDPR
Data subjects have the right to object to the processing of personal data pursuant to Art. 6 para. 1 lit. e or f GDPR. This objection arises from your particular situation and is possible at any time. In this case, dentognostics may only continue to process your personal data if the company can demonstrate compelling legitimate interests for the processing and there are no overriding interests, rights and freedoms to the contrary or if it needs them to assert, exercise or defend legal claims.
g) Withdrawal of consent
Data subjects have the right to withdraw their consent (such as the sending of advertising information) at any time.

For questions and other concerns in connection with data protection at dentognostics, please contact us at the e-mail address info@dentognostics.de .

16. complaint to the supervisory authority

Data subjects have the right to complain to the competent data protection supervisory authority about breaches of the law in the processing of personal data by the controller.

17. other

Dentognostics reserves the right to amend this privacy policy if necessary. The updated privacy policy will be published on this website in its current version. Subject to applicable law, any changes will take effect as soon as the updated privacy policy is published on the dentognostics website.

Status: 28.03.2024
Created by Pabst Data