Zahnspruchsvoll

PRIVACY POLICY

This English translation is provided for convenience only. The German version is legally binding.

At a glance

This website uses no analytics or advertising trackers, sets no cookies and builds no visitor profiles. Fonts, images and scripts are served from our own web server. External services (online booking, Google Maps, YouTube videos) are only loaded when you click on them yourself.

Below we inform you, in accordance with Art. 13 of the General Data Protection Regulation (GDPR, German: DSGVO), which personal data we process, for what purpose and on what legal basis, and what rights you have.

Controller

Zahnarztpraxis Dirk Formes (Zahnspruchsvoll)
Augustinusstr. 11b
50226 Frechen, Germany

Phone +49 2234 963330
Fax +49 2234 96333 66
E-mail info@zahnspruchsvoll.de

Visiting the website and server log files

When you open this website, your browser sends technically necessary data to our web server. The server briefly stores the following in so-called log files:

  • IP address of the requesting device
  • date and time of access
  • page or file requested and amount of data transferred
  • previously visited page (referrer), if your browser sends it
  • browser and operating system used

We need this data to deliver the website, to keep it stable and secure, and to fend off attacks. The legal basis is our legitimate interest under Art. 6(1)(f) GDPR. We do not analyse the log files for marketing purposes and do not combine them with other data. They are deleted as soon as they are no longer needed for these purposes.

The website is run by a hosting provider who processes the data on our behalf and on our instructions (processing on behalf of the controller under Art. 28 GDPR).

Cookies and local storage

This website sets no cookies and stores no information in your browser (for example in local storage), so no cookie banner is needed. Only when you actively load one of the external services described below may the respective provider use its own cookies or similar technologies.

Contact by phone, fax or e-mail

When you contact us, we process the information you provide (for example name, phone number, e-mail address and your request) in order to answer it. The legal basis is Art. 6(1)(b) GDPR if your request concerns treatment or an appointment, otherwise our legitimate interest in answering it under Art. 6(1)(f) GDPR. If your message contains health data, we process it under Art. 9(2)(h) GDPR in conjunction with Section 22(1)(1)(b) of the German Federal Data Protection Act (BDSG).

Please note: ordinary e-mails are not encrypted end to end. Please send confidential health information through the patient portal instead, or discuss it with us by phone or at the practice.

Requests that do not become part of your treatment are deleted once they have been dealt with and no statutory retention obligation applies. Information that is added to your patient record is kept for ten years after the end of treatment in accordance with Section 630f(3) of the German Civil Code (BGB), unless other rules require a longer period.

Online booking (Dr. Flex)

For online booking we use the service Dr. Flex (dr-flex.de). The booking window is only loaded when you click "Book an appointment". A connection to the Dr. Flex servers is then established and your IP address is transmitted. The information you enter when booking (for example name, contact details, preferred date and reason for the visit) is processed by Dr. Flex on our behalf as a processor under Art. 28 GDPR.

The legal basis is Art. 6(1)(b) GDPR (arranging a treatment appointment) and, where health data is involved, Art. 9(2)(h) GDPR in conjunction with Section 22(1)(1)(b) BDSG. Access to your device that is required for the booking window you requested is based on Section 25(2)(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG). You can always book appointments by phone as well.

History forms (infoskop) and patient portal (medondo)

The history forms for adults and children are provided by the service infoskop (infoskophost.de), the patient portal by medondo (zahnspruchsvoll.medondo.app). Both open through a link in a new window; no data is processed for them on our website itself. The information you enter there is processed by the providers on our behalf as processors under Art. 28 GDPR.

The legal basis is Art. 6(1)(b) GDPR (treatment contract) and, for health data, Art. 9(2)(h) GDPR in conjunction with Section 22(1)(1)(b) BDSG. Using them is voluntary; you can also fill in the forms on paper at the practice.

Google Maps

On the contact page you can show a map from Google Maps. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The map is only loaded when you click "Load map". Only then does your browser connect to Google and transmit, among other things, your IP address and the fact that you visited our contact page. Google may set cookies in the process.

The legal basis is your consent under Art. 6(1)(a) GDPR and Section 25(1) TDDDG, which you give with the click. It applies to that page view only; the map is not loaded automatically on your next visit. The links "Open route in Google Maps" and "Read all reviews on Google" lead directly to Google, where Google's privacy policy applies.

YouTube videos

Some treatment pages include videos from YouTube. The provider is also Google Ireland Limited (address above). We use the privacy-enhanced mode (youtube-nocookie.com). A video is only loaded when you click "Play video". Only then is data such as your IP address transmitted to YouTube, and YouTube may use cookies or similar technologies. If you are signed in to Google, YouTube can link the view to your account.

The legal basis is your consent under Art. 6(1)(a) GDPR and Section 25(1) TDDDG, which you give with the click. It applies to that video only.

Data transfers to the USA

When you use Google Maps or YouTube, data may be transferred to servers of Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework, so these transfers are covered by an adequacy decision of the European Commission under Art. 45 GDPR. For more information, see Google's privacy policy: policies.google.com/privacy.

Links to other websites

Our pages contain links to websites of other providers, for example professional associations and the dental chamber. When you follow such a link you leave our website, and the respective provider is responsible for any data processing there.

Your rights

You have the following rights regarding your personal data:

  • access to the data stored about you (Art. 15 GDPR)
  • rectification of inaccurate data (Art. 16 GDPR)
  • erasure (Art. 17 GDPR), unless a statutory retention obligation applies
  • restriction of processing (Art. 18 GDPR)
  • data portability (Art. 20 GDPR)
  • withdrawal of consent with effect for the future (Art. 7(3) GDPR)

Right to object (Art. 21 GDPR): where we process your data on the basis of our legitimate interest (Art. 6(1)(f) GDPR), you may object to this processing at any time on grounds relating to your particular situation.

For any of these requests, an informal message to info@zahnspruchsvoll.de or to the address above is sufficient.

Right to lodge a complaint

If you believe that the processing of your data infringes data protection law, you can lodge a complaint with a data protection supervisory authority under Art. 77 GDPR. The authority responsible for us is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Postfach 20 04 44, 40102 Düsseldorf, Germany
Phone +49 211 38424-0
E-mail poststelle@ldi.nrw.de
www.ldi.nrw.de

Obligation to provide data and automated decisions

You are not obliged to give us personal data through this website. Without your information, however, we cannot deal with a request or an online booking. We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

Changes to this privacy policy

We update this privacy policy when our website or the legal situation changes. The version published here applies.

As of: October 2026