Privacy Notice

With this Privacy Notice, we inform you as the controller in accordance with the provisions of the Federal Data Protection Act (FADP) about the nature, scope and purpose of the processing of personal data in connection with our website.

I. Definitions

‘Personal data’ means all data relating to an identified or identifiable natural person;

‘Processing’ means any handling of personal data, irrespective of the means and procedures used, in particular the collection, storage, keeping, use, modification, disclosure, archiving, deletion or destruction of data;

‘Controller’ means a private individual who or federal body which, alone or jointly with others, determines the purpose and the means of processing personal data;

‘Recipient’ means a private individual, federal body, institution or other entity to whom personal data is disclosed, whether or not it is a third party.

II. General information

1. Name and contact details of the controller

Grimm Zahnärzte
Dr. med. dent. Marco Zeltner
Seestrasse 122
8810 Horgen
Switzerland

Telephone +41 44 533 76 00
E-Mail info@grimmzahnaerzte.ch

3. Legal bases

We process personal data on the basis of at least one of the following legal bases:

  • Fulfilment of a legal obligation to which we are subject;
  • The data subject’s consent to the processing of personal data relating to him or her for one or more specific purposes;
  • Protection of our legitimate interests or those of a third party. In this Privacy Notice, we refer to the relevant legal basis for each processing activity.

4. Disclosure of personal data to recipients

We disclose personal data to recipients (processors or other third parties) only to the extent necessary and only under one of the following conditions:

  • The data subject has consented to the disclosure;
  • We are legally obliged to disclose the personal data;
  • The disclosure is based on legitimate interests.
  • Personal data will be transferred to a data processor, where it will only be processed in the same way as if we were processing it ourselves.

5. Third countries

The transfer of personal data to a third country or an international organisation outside Switzerland is subject to legal or contractual authorisation and only under the conditions set out in Art. 16 et seq. FADP. This means that an adequacy decision has been issued by the Federal Council for the country in question, adequate data protection guarantees exist in accordance with Art. 16 (2) FADP or disclosure is permitted on the basis of an exception under Art. 17 FADP.

We may have integrated external services into our website whose providers are based in the USA. When these services are active, personal data is collected in connection with the provision of that service and may be transferred to and stored on servers in the USA. The Federal Data Protection and Information Commissioner (FDPIC) considers the USA to be a country with an inadequate level of data protection. If data is transferred to the USA, there is a fundamental risk that the data may be accessed by the US authorities and used for control and monitoring purposes without you being informed and without you being able to seek redress.

6. Rights of data subjects

As a data subject, you have the following rights:

  • Under Art. 25 FADP, you may request information on whether personal data concerning you is being processed. This includes, inter alia, information on the personal data processed as such; the purpose of the processing; the retention period of the personal data or, if this is not possible, the criteria for determining this period; the available information on the origin of the personal data, unless obtained from the data subject; where applicable, the existence of automated decision and the logic on which the decision is based; where applicable, the recipients to whom the personal data are disclosed and, in the case of disclosure of personal data to third countries, the State or international organisation and the safeguards for the protection of the data. Information may be limited or withheld where required by law or where the overriding interests of a third party so require;
  • Under Art. 32 (1) FADP, you may request that inaccurate personal data be corrected, unless a legal provision prohibits the rectification or the data are processed for archiving purposes in the public interest;
  • Under Art. 32 (1) FADP, you may request that a certain processing of personal data be prohibited, that a certain disclosure of personal data to third parties be prohibited, or that personal data be deleted or destroyed;
  • If we process your personal data by automated means and the data is processed with your consent or in direct connection with the conclusion or performance of a contract with you, under Art. 28 FADP you may request that the personal data you have provided to us be made available to you in a standard electronic format or transferred to another controller;
  • You may revoke any consent you have given us to process your data at any time. This means that we will no longer be able to process personal data on the basis of that consent in the future;
  • If you feel that your personal rights have been violated, you can report this to the FDPIC at: https://www.edoeb.admin.ch/edoeb/de/home/deredoeb/kontakt/kontaktformular_datenschutz.html.

If you wish to exercise any of the above rights, you may contact us at any time using the above contact details or our data protection officer.

7. Deletion and restriction of personal data

Except as otherwise provided in this Privacy Notice, personal data will be deleted when it is no longer required for the purposes for which it was collected or otherwise processed and deletion does not conflict with any legal retention obligations. If personal data is required for other lawful purposes, it will not be deleted but its processing will be restricted. In the event of a restriction, the data will not be processed for other purposes. This applies, for example, to personal data that must be retained by us for commercial or tax reasons.

8. Cookies

Our website uses cookies. Cookies are small text files that your browser automatically creates and stores on your device (laptop, tablet, smartphone, PC, etc.) when you visit our website. Cookies do not damage your device and do not contain viruses or other malware. The cookie stores information that is specific to the device being used. However, this does not give us direct knowledge of your identity. Cookies are mainly used to make the website more user-friendly, effective and secure.

Most browsers automatically accept cookies. However, if you do not wish to accept cookies, you can configure your browser to prevent cookies from being stored on your device or to display a message before a new cookie is created. For information on removing cookies in Internet Explorer / Edge, please visit: https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies. Information on removing cookies in Firefox can be found at: https://support.mozilla.org/en-US/kb/clear-cookies-and-site-data-firefox?redirectlocale=en-US&redirectslug=delete-cookies-remove-info-websites-stored. Here are instructions on how to remove cookies from Safari: https://support.apple.com/en-gb/guide/safari/sfri11471/mac.

You can also opt out of the use of cookies for online marketing purposes for a number of services, for example at http://www.youronlinechoices.com/ or the Network Advertising Initiative deactivation page http://optout.networkadvertising.org. However, if you choose to disable cookies, you may not be able to use all the features of our website.

This website uses the Usercentrics Website Consent Management Platform to manage cookies and consent data. The provider is Usercentrics GmbH, Sendlingerstr. 7, 80331 Munich, Germany (hereinafter ‘Usercentrics’). Consent data means the following data: Date and time of the visit, consent or refusal, device information. The data is processed for the purpose of documenting consent. The legal basis for data processing is our overriding legitimate interest. Our legitimate interest is to comply with our obligations to provide evidence of valid consent. Usercentrics will process the data obtained in this way solely on our behalf and in accordance with our instructions. Local storage will be used to store the data. Consent data will be stored by Usercentrics for 1 year within the EU. Further information about the data collected and contact options can be found in the Usercentrics privacy policy at: https://usercentrics.com/privacy-policy/

You can find an overview of the cookies used, along with their purposes, here:

[Hier Cookie Button platzieren]

Legal basis for the cookies used
The data processed by essential/necessary cookies is required for the purposes stated in each case in order to protect our legitimate interests in the provision and operation of our website. The legal basis for the use of cookies for advertising, market research and the integration of external media is your voluntary consent.

III. Individual processing activities

1. Hosting

In order to provide our website, we use the services of hosting companies, such as the provision of web servers, storage space, database services, security services and maintenance services. In doing so, we or our hosting providers process personal data of the users of our website on the basis of our legitimate interest in the efficient and secure provision of this online service.

2. Access data and log files

When you access our website or any of its pages, the browser on your device automatically sends information to our website server. This information is stored in log files by us or our hosting provider and at the latest 7 Days deleted.

The following information is stored:

  • IP address of the requesting computer in anonymised form;
  • Date and time of access;
  • Name and URL of the retrieved file;
  • Website from which the access is made (referrer URL);
  • the browser used and, if applicable, the operating system of your computer;
  • Status codes and amount of data transferred;
  • Name of your access provider.

This data will be processed for the following purposes:

  • Provision of the web service including all functions and content;
  • Guaranteeing a smooth connection set-up of the website;
  • Guaranteeing a comfortable use of our website;
  • ensuring system security and stability;
  • Anonymised statistical evaluation of the accesses;
  • Optimisation of the website;
  • Transmission to law enforcement authorities, insofar as an illegal intervention/attack on our systems has occurred;
  • Other administrative purposes.

The legal basis for the processing of personal data is our legitimate interest in the purposes set out above. Under no circumstances will we use the information collected to draw conclusions about an individual.

3. General contact

If you contact us using the contact details published on our website (for example, by e-mail) and provide us with personal data, we will use this data in our overriding legitimate interest to process your request, provided that your request is related to the conclusion or performance of a contract. In all other cases, the processing will be based on your consent and/or our legitimate interest in the effective processing of enquiries sent to us. The data will remain with us until you request its deletion, revoke your consent to its storage, or the purpose for which it was stored no longer applies (for example, after processing your enquiry). This is without prejudice to any mandatory legal requirements, in particular retention periods.

IV. Google Services

Provider of the following Google services is Google Ireland Limited (registration number: 368047), Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter ‘Google’).

The information collected by Google in connection with the provision of the respective services may be transferred to Google servers in the USA and stored there. Google has joined the Swiss/US Data Privacy Framework and has committed to abide by Swiss data protection standards, thereby meeting the Swiss’ requirements for the transfer of personal data to the US under Art. 16 (1) FADP. Information about Google’s voluntary commitment can be found at https://www.dataprivacyframework.gov/participant/5780.

For more information about the processing of personal data by Google, please refer to Google’s privacy policies at: https://business.safety.google/privacy/ and https://policies.google.com/privacy?hl=en. Information on Google’s use of data for advertising purposes, settings and opt-out options can be found on these websites: https://www.google.de/policies/privacy/partners/, https://www.google.de/policies/technologies/ads/, https://adssettings.google.de/.

1. Google services for which your consent is required

The legal basis for using the following Google services is your voluntarily given consent. The legal basis for the transfer of data to the USA is also your voluntarily given consent under Art. 17 (1)(a) FADP.

1.1 YouTube

Our website uses media content from the YouTube platform. The purpose is to display media content from the YouTube platform as part of our website. This service collects your IP address and possibly other data required by Google for YouTube. The information generated about your use of this website is stored on a server in the USA. This information may also be transferred to third parties if this is required by law or if third parties process this data on behalf of us or Google. If you are logged in to YouTube at the same time, Google can assign the visit to the page of our website directly to your user account there. If you do not want Google to be able to assign the data collected on our website to your respective user account on YouTube, you must log out of YouTube beforehand.