Privacy Policy
§ 1 General Information
In this privacy policy, you will find detailed information about what happens to your personal data when you visit our website https://zap-kaltenkirchen.de/https://zap-kaltenkirchen.de/. All data that allows your personal identification is considered personal data. When processing your data, we strictly adhere to legal requirements, in particular the General Data Protection Regulation (“GDPR”). It is very important to us that your visit to our website is completely secure.
§ 2 Responsible Entity
The entity responsible under data protection law for the collection and processing of personal data on this website is:
• Name: Zahnarztpraxis am Rathaus
• Street, house number, postal code, city: Holstenstraße 13 B 24568 Kaltenkirchen
• Country: Germany
• E-mail: info@zap-kaltenkirchen.de
• Tel.: 04191/89306
§ 3 Access Data (Server Log Files)
When you access our website, we automatically collect access data transmitted by your browser and store it in so-called server log files. This includes:
• Browser type and browser version of your PC
• Referrer URL (source/reference from which you accessed our website)
• Hostname of the accessing computer
• Date and time of the server request
As a rule, it is neither possible nor intended for us to assign this data to a specific person. The processing of this data is carried out in accordance with Art. 6 para. 1 lit. f GDPR in order to safeguard our legitimate interest in improving the stability and functionality of our website.
§ 4 Cookies
We use so-called cookies to make visiting our website more attractive and to enable the use of certain functions. These are small text files that are stored on your device. Cookies are not capable of executing programs or transmitting viruses to your computer system.
Necessary cookies required for electronic communication or for providing requested functions are stored in accordance with Art. 6 para. 1 lit. f GDPR. Our legitimate interest in storage lies in the technically flawless and optimized provision of our services. Other cookies (e.g. for analyzing your surfing behavior) are addressed separately in this privacy policy.
We mainly use so-called “session cookies,” which are automatically deleted after the end of your visit. In addition, we use cookies that remain stored on your device until you delete them yourself. These enable us to recognize your browser on your next visit.
You can configure your browser so that you are informed about the setting of cookies. You can then decide on a case-by-case basis whether to allow cookies, to allow cookies for specific cases, or to generally exclude cookies. You can also configure your browser to automatically delete cookies when it is closed. Please note that the functionality of this website may be limited if cookies are disabled.
§ 5 Contact
If you contact us, including by e-mail, the transmitted data, including your contact details, will be stored in order to process your inquiry and to be available for possible follow-up questions. This data will not be passed on to third parties without your express consent.
The processing of your personal data is carried out exclusively on the basis of your consent given in accordance with Art. 6 para. 1 lit. a GDPR. You have the right to revoke this consent at any time without giving reasons. An informal notification by e-mail to us is sufficient for the revocation. The legality of the data processing carried out before the revocation remains unaffected by the revocation.
The transmitted data will be stored by us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies. Mandatory statutory retention periods remain unaffected.
§ 6 Use and Disclosure of Data
We assure you that personal data which you provide to us, for example via e-mail (such as your name, address or e-mail address), will not be sold to third parties or otherwise used commercially. The processing of your data is carried out exclusively for the purpose of correspondence with you and for fulfilling the purpose for which you have provided the data. As part of payment processing, your payment data will be forwarded to the commissioned credit institution.
The data automatically collected during your visit to our website is used exclusively for the purposes stated above. The data will not be used for any other purpose.
The protection of your personal data is important to us. Therefore, we generally do not pass your data on to third parties unless there is a legal obligation to do so or you have given your express consent.
§ 7 Encryption (SSL/TLS)
Our website uses SSL or TLS encryption to ensure the security and protection of the transmission of confidential content. This particularly applies to inquiries that you send to us as the operator of the website. An encrypted connection can be recognized by the “https://” in the address line of your browser and the lock symbol in your browser bar.
The activation of SSL or TLS encryption ensures that the data you transmit to us cannot be read by unauthorized third parties.
§ 8 Storage Duration
Your personal data transmitted to us via our website will only be stored for as long as necessary to achieve the respective purpose of data processing. However, in accordance with commercial and tax law retention obligations, certain data may be stored for up to 10 years.
§ 9 Your Data Protection Rights
As a data subject, you have the following rights vis-à-vis the controller with regard to your personal data, in accordance with the statutory provisions:
A. Right of Withdrawal
Many data processing operations are only possible with your explicit consent. If the processing of your data is based on your consent, you have the right to withdraw this consent at any time with effect for the future in accordance with Art. 7 para. 3 GDPR. The lawfulness of data processing carried out on the basis of your consent before the withdrawal remains unaffected. The storage of data for billing and accounting purposes is not affected by a withdrawal.
B. Right of Access
In accordance with Art. 15 GDPR, you have the right to request confirmation from us as to whether we process your personal data. If this is the case, you have the right to obtain information about this data, including the purposes of processing, the categories of processed data, the recipients or categories of recipients to whom the data has been or will be disclosed, the planned storage duration or the criteria for determining it, the existence of a right to rectification, erasure, restriction of processing, objection to processing, lodging a complaint with a supervisory authority, the origin of the data if it was not collected from you, the existence of automated decision-making including profiling and, where applicable, meaningful information about the logic involved as well as the significance and the intended consequences of such processing for you, as well as your right to be informed about what safeguards pursuant to Art. 46 GDPR exist in the event of transfer of your data to third countries.
C. Right to Rectification
You have the right, in accordance with Art. 16 GDPR, to request the correction of inaccurate personal data concerning you and/or the completion of your incomplete data at any time.
D. Right to Erasure
You have the right, in accordance with Art. 17 GDPR, to request the erasure of your personal data if one of the following reasons applies:
a. Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
b. You withdraw your consent on which the processing pursuant to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR was based, and there is no other legal basis for the processing.
c. You object to the processing pursuant to Art. 21 para. 1 GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 para. 2 GDPR.
d. Your personal data has been unlawfully processed.
e. The deletion of your personal data is necessary to comply with a legal obligation under Union law or the law of a Member State to which we are subject.
f. The personal data was collected in relation to the offer of information society services referred to in Art. 8 para. 1 GDPR.
Under the following circumstances, this right may be restricted if processing is necessary:
a. to comply with a legal obligation requiring processing under Union law or the law of the Member State to which we are subject, or to perform a task carried out in the public interest or in the exercise of official authority;
b. to fulfill a legal obligation requiring processing under Union law or the law of the Member State to which we are subject, or to perform a task that is in the public interest or carried out in the exercise of official authority vested in us;
c. for reasons of public interest in the area of public health pursuant to Art. 9 para. 2 lit. h and i as well as Art. 9 para. 3 GDPR;
d. for archiving purposes, scientific or historical research purposes, or for statistical purposes pursuant to Art. 89 para. 1 GDPR in the public interest, insofar as the exercise of the rights of the data subject would render impossible or seriously impair the achievement of the objectives of that processing; or
e. for the establishment, exercise or defense of legal claims.
If we have made your personal data public and are obliged to delete it in accordance with the above provisions, we shall take reasonable measures, including technical measures, taking into account available technology and implementation costs, to inform controllers processing the data that you, as the data subject, have requested the erasure of all links to, or copies or replications of, those personal data.
E. Right to Restriction of Processing
In accordance with Art. 18 GDPR, you have the right to request the restriction of processing (blocking) of your personal data. To exercise this right, you may contact us at any time. The contact details can be found in the legal notice. Restriction of processing may be requested in the following cases:
a. If you contest the accuracy of your personal data stored by us, we usually need time to verify this. For the duration of the verification, you have the right to request restriction of the processing of your personal data.
b. If the processing of your personal data was/is unlawful, you may request restriction of processing instead of erasure.
c. If we no longer need your personal data, but you require it for the establishment, exercise or defense of legal claims, you have the right to request restriction of processing instead of erasure.
d. If you have objected pursuant to Art. 21 para. 1 GDPR, a balancing of interests must be carried out. As long as it has not yet been determined whose interests prevail, you have the right to request restriction of the processing of your personal data.
Once the processing of your personal data has been restricted, such data may, apart from storage, only be processed with your consent. Exceptions apply in certain legally defined cases, such as for the establishment of legal claims or the protection of public interests.
F. Right to Notification
If you exercise your right to rectification, erasure, or restriction of processing of your personal data, we are obliged pursuant to Art. 19 GDPR to notify all recipients to whom the data has been disclosed. This does not apply if such notification proves impossible or involves disproportionate effort. Upon your request, we will inform you about these recipients.
G. Protection against Automated Decision-Making (Profiling)
In accordance with Art. 22 GDPR, you have the right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you.
This does not apply if the decision:
a. is necessary for entering into or performance of a contract between you and us,
b. is authorized by Union or Member State law to which the controller is subject and which also provides appropriate measures to safeguard your rights, freedoms, and legitimate interests, or
c. is based on your explicit consent.
However, decisions in the cases referred to in (a) to (c) must not be based on special categories of personal data within the meaning of Art. 9 para. 1 GDPR, unless Art. 9 para. 2 lit. a or lit. g applies and appropriate measures to safeguard rights, freedoms, and your legitimate interests have been implemented.
In the cases referred to in (a) and (c), we take appropriate measures to safeguard your rights, freedoms, and legitimate interests. This includes at least the right to obtain human intervention by the controller, to express your point of view, and to contest the decision.
H. Right to Data Portability
In the event that the processing of your personal data is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR or on a contract pursuant to Art. 6 para. 1 lit. b GDPR and is carried out by automated means, you have the right pursuant to Art. 20 GDPR to receive the data you have provided to us in a structured, commonly used, and machine-readable format and to transmit those data to another controller or to request that we transmit those data directly to another controller, where technically feasible.
I. Right to Object
If we process your personal data on the basis of a balancing of interests pursuant to Art. 6 para. 1 lit. f GDPR, you have the right to object at any time to such processing for reasons arising from your particular situation; this also applies to profiling based on this provision. The applicable legal basis for processing can be found in this privacy policy. In the event of an objection, we will no longer process your affected personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims (objection pursuant to Art. 21 para. 1 GDPR).
In the event that your personal data is processed for direct marketing purposes, you have the right to object to such processing at any time; this also applies to profiling insofar as it is related to such direct marketing. In the event of an objection, your personal data will no longer be used for direct marketing purposes (objection pursuant to Art. 21 para. 2 GDPR).
With regard to the use of information society services, notwithstanding Directive 2002/58/EC, you have the possibility to exercise your right to object by automated means using technical specifications.
J. Right to Lodge a Complaint with the Supervisory Authority pursuant to Art. 77 GDPR
In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a competent supervisory authority. This right may be exercised in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement. This right exists without prejudice to other administrative or judicial remedies.
Our competent supervisory authority is:
Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein
Postfach 71 16
24171 Kiel
Holstenstraße 98
24103 Kiel
Phone: 04 31/988-12 00
E-mail: mail@datenschutzzentrum.de
Internet: https://www.datenschutzzentrum.de
§ 10 Validity and Amendment of this Privacy Policy
This privacy policy comes into effect on 01/04/2026. We reserve the right to amend this policy if necessary and in compliance with applicable data protection laws. This may be required, for example, to comply with new legal requirements or to take account of changes to our website or new services offered via our website. The version of the privacy policy available at the time of your visit to our website shall be binding.
In the event of changes to this privacy policy, we will publish them on this page in order to inform you comprehensively about what personal data we collect, how we process it, and under what conditions we may disclose it.