Data protection declaration according to the GDPR General information and mandatory information Naming of the responsible body: The responsible body for data processing on this website is: MKG-Praxis Dr. Hafner contact person: Dr. Sigurd Hafner Reichenbachstr. 180469 Munich The responsible body decides alone or together with others on the purposes and means of processing personal data (e.g. names, contact details, etc.). Name and address of the person responsible The person responsible within the meaning of the General Data Protection Regulation and other national data protection laws of the member states and other data protection regulations is: Dr. medical dent Sigurd HafnerReichenbachstr. 180469 MunichTelephone: (089) 24599075Fax: 089-24599077E-Mail: hafner@hafner-mkg.deInternet: https://www.hafner-mkg.deData protection officerA company data protection officer has not been appointed because there is no legal need for an appointment.General on data processing Scope of processing of personal data We only process personal data of our users insofar as this is necessary to provide a functional website and our content and services. The processing of personal data of our users takes place regularly only with the consent of the user. An exception applies in such cases in which it is not possible to obtain prior consent for actual reasons and the processing of the data is permitted by statutory provisions. It will be pointed out that personal data such as name, postal address, email address, telephone number or the date of birth will only be collected and used in accordance with the applicable data protection law and the data will only be stored if they are actively transmitted. Data that is used, for example, only to answer inquiries or to send information material, as well as contact data or e-mail addresses that are provided in the context of inquiries are intended exclusively for correspondence. Legal basis for the processing of personal data Insofar as we obtain the consent of the data subject for the processing of personal data, Article 6 (1) (a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis. Article 6 (1) (b) GDPR serves as the legal basis for the processing of personal data required to fulfill a contract (treatment contract) to which the data subject is a party. This also applies to processing operations that are necessary to carry out pre-treatment contractual measures. Insofar as processing of personal data is necessary to fulfill a legal obligation to which this practice is subject, Article 6 (1) (c) GDPR serves as the legal basis. If the processing is necessary to safeguard a legitimate interest of this practice or a third party and if the interests, fundamental rights and fundamental freedoms of the person concerned do not outweigh the first interest, Article 6 Paragraph 1 Letter f GDPR serves as the legal basis for the processing. Data deletion and storage period The personal data of the person concerned will be deleted or blocked as soon as the purpose of storage no longer applies. Storage can also take place if this has been provided for by the European or national legislator in EU regulations, laws or other regulations to which the person responsible is subject. The data will also be blocked or deleted if a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract. Provision of the website and creation of log files/server Log files Description and scope of data processing Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer. The provider of the website automatically collects and stores information in server log files, which your browser automatically transmits to us. The following data is collected and transmitted: 1. Information about the browser type and the version used2. The operating system used by the user3. The IP address of the user4. The page visited on our domain5. Date and time of access / server request6. Referrer URL7. Host name of the accessing computer8. Websites from which the user's system accesses our website. The data is also stored in the log files of our system. This data is not stored together with other personal data of the user. This data is not merged with other data sources. Legal basis for the data processing The legal basis for the temporary storage of the data and the log files is Article 6 Paragraph 1 lit . For this purpose, the IP address of the user must remain stored for the duration of the session. Storage in log files takes place to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context. Our legitimate interest in data processing in accordance with Article 6 Paragraph 1 lit. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. In the case of the storage of data in log files, this is the case after 14 months at the latest. Possibility of objection and elimination The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection on the part of the user. Use of cookiesOur website uses cookies (see also next section). These are small text files that your web browser stores on your end device. Cookies help us to make our website more user-friendly, more effective and more secure. Some cookies are "session cookies." Such cookies are automatically deleted at the end of your browser session. On the other hand, other cookies remain on your end device until you delete them yourself. Such cookies help us to recognize you when you return to our website. With a modern web browser you can monitor, restrict or prevent the setting of cookies. Many web browsers can be configured in such a way that cookies are automatically deleted when the program is closed. The deactivation of cookies can result in a restricted functionality of our website. The setting of cookies, which are necessary for the execution of electronic communication processes or the provision of certain functions desired by you, takes place on the basis of Article 6 Paragraph 1 lit. f GDPR . As the operator of this website, we have a legitimate interest in the storage of cookies for the technically error-free and smooth provision of our services. If other cookies are set (e.g. for analysis functions), they will be treated separately in this data protection declaration (see next paragraph). About the use of Google Analytics This website uses Google Analytics or functions of Google Analytics, a web analysis service provided by Google Inc ("Google"). The provider of the web analysis service is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. Google Analytics uses "cookies." These are small text files that your web browser stores on your end device and enable analysis of website usage. Information generated by cookies about your use of our website (including your IP address) is transmitted to a Google server and stored there. The server location is usually the USA. Google Analytics cookies are set on the basis of Article 6 (1) (f) GDPR. As the operator of this website, we have a legitimate interest in analyzing user behavior in order to make our website more user-friendly, effective and secure. Google will use this information to evaluate your use of the website, to compile reports on website activity for the website operator and to provide other services related to website and internet use. Google may also transfer this information to third parties if required to do so by law or if third parties process this data on Google's behalf. Under no circumstances will Google associate your IP address with other Google data. You can prevent the installation of cookies by setting your browser software accordingly; we would like to point out to you however that in this case you can if applicable not use all functions of this website in full. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and from processing this data by Google by clicking on the following link: http:// tools.google.com/dlpage/gaoptout?hl=de Download and install the available browser plug-in. You can find more information on this at http://tools.google.com/dlpage/gaoptout?hl=de or at www.google .com (Privacy Overview) (general information on Google Analytics and data protection). By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above. IP anonymization We use Google Analytics in connection with the IP anonymization function. It ensures that Google shortens your IP address within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before it is transmitted to the USA. There may be exceptional cases in which Google transmits the full IP address to a server in the USA and shortens it there. On our behalf, Google will use this information to evaluate your use of the website, to create reports on website activity and to provide us with other services related to website activity and internet usage. The IP address transmitted by Google Analytics is not merged with other Google data. Browser Plugin You can prevent your web browser from setting cookies (see also above). However, this could limit some functions of our website. You can also prevent the collection of data relating to your website use, including your IP address and subsequent processing by Google. This is possible by downloading and installing the browser plugin available via the following link: https://tools.google.com/dlpage/gaoptout?hl=de. Objection to data collection You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to our website: Disable Google Analytics. For details on how Google Analytics handles user data, see Google's privacy policy: https://support.google. com/analytics/answer/6004245?hl=de.Order processingIn order to fully meet the legal data protection requirements, we have concluded an order processing contract with Google. The relevant provisions can be found here: https://www.google.com/analytics/terms/de.htmlDemographic characteristics in Google AnalyticsOur website uses the "demographic characteristics" function of Google Analytics. It can be used to create reports that contain statements about the age, gender and interests of the site visitors. This data comes from interest-based advertising from Google and visitor data from third-party providers. It is not possible to assign the data to a specific person. You can deactivate this function at any time. This is possible via the ad settings in your Google account or by generally prohibiting the collection of your data by Google Analytics, as explained in the point "Objection to data collection". Google Web FontsThis page uses so-called web fonts provided by Google to display fonts in a more appealing way. According to the Google Fonts FAQ, this does not result in the storage of cookies and no information about the Google account used by the visitor is passed on. So there is no user tracking in this way. In order for texts to be displayed correctly and your browser to load the required web fonts into your browser cache when you call up a page, your browser must therefore connect to the Google servers. This gives Google knowledge that our website was accessed via your IP address. Google Web Fonts are used in the interest of a uniform and appealing presentation of our online offering. This represents a legitimate interest within the meaning of Article 6 (1) (f) GDPR. If your browser does not support web fonts, a standard font will be used by your computer. You can find more information in Google's data protection information, which you can access here can: www.google.com/policies/privacy/ and www.google.com/fonts#AboutPlace:about registrationOn our website we currently do not offer users the option of registering by providing personal data.E-mail contact / contact form / Description and scope of data processing On our website, it is possible to contact us via the provided e-mail address hafner@hafner-mkg.de and via a contact form. In this case, the user's personal data transmitted with the e-mail or the contact form will be stored. In this context, the data will not be passed on to third parties. The data will only be used to process the conversation. Data transmitted via the contact form will be stored, including your contact details, in order to be able to process your request or to be available for follow-up questions. This data will not be passed on without your consent. The data entered in the contact form will be processed exclusively on the basis of your consent (Article 6 (1) (a) GDPR). You can revoke your consent that you have already given at any time. An informal message by e-mail is sufficient for the revocation. The legality of the data processing operations that took place up until the revocation remains unaffected by the revocation. Data transmitted via the contact form will remain with us until you request deletion, revoke your consent to storage or there is no longer any need for data storage. Mandatory legal provisions - in particular retention periods - remain unaffected. Legal basis for data processing The legal basis for processing data that is transmitted in the course of sending an e-mail or via the contact form is Article 6 Paragraph 1 lit. f GDPR. Purpose of the data processingThe processing of the personal data from the contact by e-mail or the contact form serves us solely to process the contact. This is also the necessary legitimate interest in the processing of the data. If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. We do not pass on this data without your consent. Duration of storage The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. For the personal data sent by email, this is the case when the respective conversation with the user has ended. The conversation is over when it can be inferred from the circumstances that the facts in question have been finally clarified. The additional personal data (log files) collected during the sending process will be deleted after a period of sixty days at the latest. Possibility of objection and elimination / revocation of your consent to data processing If the user contacts the practice by e-mail, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued. If you would like to object to the storage of your data, please send an e-mail to hafner@hafner-mkg.de. All personal data stored in the course of making contact will be stored in deleted in this case. It is not possible to continue the conversation. Some data processing operations are only possible with your express consent. You can revoke your consent that you have already given at any time. An informal message by e-mail is sufficient for the revocation. The legality of the data processing that took place up until the revocation remains unaffected by the revocation. You have the right to free information about your stored data and, if necessary, the right to correction, blocking or deletion of this data. If you have further questions about the collection, processing or use of your personal data, please contact the practice. The same applies to information, blocking, deletion and correction requests with regard to your personal data and for the revocation of consent. Please read the contact address above. Before contacting us, we recommend that you observe the following contents of the General Data Protection Regulation (GDPR): Rights of the data subject (right to information, correction, restriction of processing, blocking, deletion) You have the right to free information at any time within the framework of the applicable legal provisions Information about your stored personal data, origin of the data, its recipient and the purpose of data processing and, if applicable, a right to correction, restriction of processing, blocking or deletion of this data. In this regard and also to further questions on the subject of personal data, you can contact us at any time using the contact options listed in the imprint. If personal data is processed by you, you are the data subject within the meaning of the GDPR and you have the following rights vis-à-vis the person responsible: Right to information You can from request confirmation from the person responsible as to whether personal data relating to you is being processed by us. If such processing is available, you can request information from the person responsible about the following: (1) the purposes for which the personal data are being processed ; (2) the categories of personal data that are processed; (3) the recipients or categories of recipients to whom the personal data concerning you have been disclosed or will be disclosed; (4) the planned duration of the storage of the data concerning you personal data or r, if specific information on this is not possible, criteria for determining the storage period; (5) the existence of a right to correction or deletion of the personal data concerning you, a right to restriction of processing by the person responsible or a right to object to this processing; (6) the existence of a right of appeal to a supervisory authority; (7) all available information about the origin of the data if the personal data is not collected from the data subject; (8) the existence of automated decision-making including profiling in accordance with Art. 22 para 1 and 4 GDPR and - at least in these cases - meaningful information about the logic involved and the scope and intended effects of such processing for the person concerned.You have the right to request information as to whether the personal data concerning you to a third country or to e be sent to an international organization. In this context, you can request to be informed of the appropriate guarantees pursuant to Art. 46 GDPR in connection with the transmission concern, are incorrect or incomplete. The person responsible must make the correction immediately. Right to restriction of processing Under the following conditions, you can request the restriction of the processing of your personal data: (1) if you dispute the accuracy of the personal data concerning you for a period of time that enables the person responsible to check the accuracy of the personal data ; (2) the processing is unlawful and you refuse to delete the personal data and instead request the restriction of the use of the personal data; 3) the person responsible no longer needs the personal data for the purposes of the processing, but you need them to assert, exercise or defense of legal claims, or (4) if you have lodged an objection to the processing pursuant to Art. 21 (1) GDPR and it is not yet clear whether the legitimate reasons of the person responsible outweigh your reasons. The processing of your personal data has been restricted , these data - apart from their storage - may only be processed with your consent or to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State If the restriction of processing was restricted according to the above conditions, you will be informed by the person responsible before the restriction is lifted. Right to blocking or deletion a) Obligation to delete You can demand that the person responsible delete the personal data concerning you immediately, and the person responsible is obliged to delete this data immediately if one of the following reasons applies: (1) The personal data concerning you Data are no longer necessary for the purposes for which they were collected or otherwise processed. (2) You revoke your consent to which the processing was based pursuant to Article 6 Paragraph 1 Letter a or Article 9 Paragraph 2 lit. a GDPR and there is no other legal basis for the processing.(3) You object to the processing in accordance with Article 21 (1) GDPR and there are no overriding legitimate reasons for the processing, or you object to the processing in accordance with Art. 21 (2) GDPR.(4) The personal data relating to you were processed unlawfully The personal data concerning you is required to fulfill a legal obligation under Union law or the law of the Member States to which the person responsible is subject. (6) The personal data concerning you were collected in relation to information society services offered in accordance with Article 8 (1) GDPR raised. b) Information to third parties If the person responsible has made the personal data relating to you public and is obliged to delete it in accordance with Article 17 (1) GDPR, he shall take appropriate measures, including technical ones, taking into account the available technology and the implementation costs to inform those responsible for data processing who process the personal data that you, as the data subject, have requested them to delete all links to this personal data or copies or replications of this personal data. c) Exceptions There is no right to deletion , to the extent that the processing is necessary (1) to exercise the right to freedom of expression and information; (2) to fulfill a legal obligation that requires processing under Union or Member State law to which the controller is subject, or to perform a task that is in the public interest or in the exercise of official authority vested in the controller (3) for reasons of public interest in the field of public health in accordance with Article 9 Paragraph 2 lit. h and i and Article 9 Paragraph 3 GDPR; (4) for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes pursuant to Art. 89 (1) GDPR, insofar as the law mentioned under Section a) is likely to make it impossible or seriously impair the achievement of the objectives of this processing, or (5) to assert, exercise or defend legal claims. Right to information If you have asserted the right to correction, deletion or restriction of processing against the person responsible, he is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this correction or deletion of the data or restriction of processing, unless because this proves to be impossible or involves a disproportionate effort. You have the right to be informed about these recipients by the person responsible. Right to data portability Process the contract automatically, hand it over to yourself or to third parties. It is provided in a machine-readable format. If you request the direct transfer of the data to another person responsible, this will only be done to the extent technically feasible. You have the right to receive the personal data relating to you that you have provided to the person responsible in a structured, common and machine-readable format obtain. You also have the right to transmit this data to another person responsible without hindrance from the person responsible to whom the personal data was provided, provided that (1) the processing is based on consent pursuant to Art. 6 (1) lit. a GDPR or Art. 9 (2) (a) GDPR or on a contract in accordance with Article 6 (1) (b) GDPR and (2) the processing is carried out using automated procedures. In exercising this right, you also have the right to obtain that the personal data concerning you are transmitted directly from one person responsible to another person responsible, insofar as this is technically feasible. The freedoms and rights of other persons must not be impaired as a result. The right to data transferability does not apply to the processing of personal data that is necessary for the performance of a task that is in the public interest or in the exercise of official authority that has been transferred to the person responsible. Right to object You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data, which is based on Article 6 Paragraph 1 lit. e or f GDPR; this also applies to profiling based on these provisions. The person responsible will no longer process the personal data relating to you unless he can demonstrate compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, or the processing serves the Assertion, exercise or defense of legal claims. If your personal data is processed in order to operate direct advertising, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct advertising. If you object to the processing for direct advertising purposes, the personal data relating to you will no longer be processed for these purposes. You have the option, in connection with the use of information society services - regardless of Directive 2002/58/EC - to exercise your right of objection by means of automated procedures that use technical specifications. Right to revoke the declaration of consent under data protection law to revoke the declaration of consent at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent up to the point of revocation. Automated decision-making in individual cases, including profiling has a legal effect or significantly affects you in a similar way. This does not apply if the decision (1) is necessary for the conclusion or performance of a contract between you and the person responsible, (2) is permissible on the basis of legal provisions of the Union or the Member States to which the person responsible is subject and these legal provisions take appropriate measures included to protect your rights and freedoms and legitimate interests, or (3) is done with your express consent. However, these decisions must not be based on special categories of personal data according to Article 9 Paragraph 1 GDPR, unless Article 9 Paragraph 2 lit. a or g GDPR applies and appropriate measures have been taken to protect your rights and freedoms and your legitimate interests With regard to the cases referred to in (1) and (3), the person responsible shall take appropriate measures to safeguard your rights and freedoms and your legitimate interests, including at least the right to obtain human intervention on the part of the person responsible, to express his or her point of view and to contest the decision.Right to lodge a complaint with a supervisory authorityWithout prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, your place of work or the place of the alleged infringement, if you are of the opinion that the processing of your personal data violates the GDPR. The supervisory authority to which the complaint was lodged will inform the complainant about the status and the results of the complaint, including the possibility of a judicial remedy under Art. 78 GDPR. Right to lodge a complaint the responsible supervisory authority As the data subject, you have the right to lodge a complaint with the responsible supervisory authority in the event of a breach of data protection law. The responsible supervisory authority with regard to data protection issues is the Bavarian State Commissioner for Data Protection. The following link provides further information and contact details: https://www.datenschutz-bayern.de/ Image rights / Licenses: Graphics: AdobeStock: 27078846, 35690658, 76745493, 111342465, 135188632, 237029850, 240256197 Photos: Own image files ( Dr. Sigurd Hafner)
Share by: