Privacy Policy
This English version is provided for convenience. In the event of any discrepancy, the German version shall prevail.
This privacy policy explains which personal data we process when you visit our website and in the course of your treatment, for what purpose and on what legal basis – and which rights you have.
1. Controller and data protection officer
The controller responsible for data processing is:
Zaritzki Fine Dentistry
Dr. Felix Zaritzki
Kurfürstendamm 52, 10707 Berlin, Germany
Jägerstraße 41, 10117 Berlin, Germany
Telephone: +49 30 854 030 00
Email: mail@zaritzki.com
You can reach our data protection officer at:
Kurt Dunkel
c/o Zaritzki Fine Dentistry
Kurfürstendamm 52, 10707 Berlin, Germany
Email: mail@zaritzki.com
2. Hosting, content management and email
Vercel. Our website is hosted by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA. When you visit the website, Vercel records technical data, including your IP address. Data is transferred to the USA on the basis of the EU-US Data Privacy Framework, under which Vercel is certified, and the Standard Contractual Clauses of the European Commission. Further information: https://vercel.com/legal/privacy-policy
Prismic. Website content and images are provided via the content management system of Prismic.io Inc. (data protection contact in the EU: New Prismic, Data Privacy Office, 9 rue de la Pierre Levée, 75011 Paris, France). In this process, your IP address is transmitted to Prismic. Transfers outside the EU are based on the Standard Contractual Clauses of the European Commission. Further information: https://prismic.io/legal/privacy
Strato. Our email account is operated by Strato AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. Emails you send us are stored there. Further information: https://www.strato.de/datenschutz/
The legal basis is our legitimate interest in a reliable website and secure email communication (Art. 6(1)(f) GDPR). We have concluded data processing agreements with all three providers.
3. Data Collected When You Visit Our Website
Server log files. When you access the website, the following data is collected automatically: browser type and version, operating system, referrer URL, host name, time of the request and IP address. This data is used to deliver the website reliably and is not combined with other data sources. The legal basis is Art. 6(1)(f) GDPR.
Cookies. We use technically necessary cookies, for example to store your language setting or your cookie preferences, without consent (Art. 6(1)(f) GDPR, Section 25(2) TDDDG). All other cookies and analytics services are used only with your consent. You can delete or block cookies in your browser at any time; some features of the website may then be limited.
Consent management (iubenda). On your first visit, we ask for your consent via a cookie banner. For this purpose we use iubenda, provided by iubenda S.r.l., Via San Raffaele 1, 20121 Milan, Italy. Your consent decision, the date and time, and technical information about your device are stored. The legal basis is Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR (proof of consent). We have concluded a data processing agreement with iubenda. You can change or withdraw your choice at any time via the "Cookie Settings" link in the footer.
Web analytics (Google Analytics and Google Tag Manager). With your consent, we use Google Analytics 4 and Google Tag Manager to understand how our website is used, for example which pages are visited and where visitors come from. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics sets cookies that are stored for up to two years. IP addresses are not stored by Google Analytics 4. The collected data is deleted after 14 months. Data may be transferred to Google LLC in the USA, which is certified under the EU-US Data Privacy Framework. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG), which you can withdraw at any time via "Cookie Settings" in the footer. We have concluded a data processing agreement with Google. Further information: https://policies.google.com/privacy
Encryption. The website is protected by SSL/TLS encryption, recognisable by "https://" and the padlock icon in the address bar.
4. Contact and appointment booking
Email and telephone. If you contact us by email or telephone, we process your details to handle your request. The legal basis is the preparation or performance of the treatment contract (Art. 6(1)(b) GDPR), for health data Art. 9(2)(h) GDPR, and otherwise our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR).
WhatsApp. At your request, we communicate with you via WhatsApp, for example to arrange appointments (WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland). We use the WhatsApp Business Platform in combination with the software Superchat provided by SuperX GmbH, Prenzlauer Allee 242–247, 10405 Berlin, Germany, which processes messages on our behalf; we have concluded a data processing agreement with SuperX GmbH. Messages are transmitted in encrypted form and processed on servers operated by Meta and Superchat. In this context, data may be transferred to Meta Platforms Inc. in the USA, which is certified under the EU-US Data Privacy Framework. The legal basis is your consent (Art. 6(1)(a) GDPR and, for health data, Art. 9(2)(a) GDPR), which you may withdraw at any time. We do not transmit medical findings or documents via WhatsApp.
Doctolib. For online appointment booking, you are redirected to Doctolib (Doctolib GmbH, Friedrichstraße 111, 10117 Berlin, Germany). Doctolib processes the data required for the appointment, such as name, contact details, appointment and, where applicable, the reason for your visit, on our behalf; a data processing agreement is in place. The legal basis is Art. 6(1)(b) GDPR and, for health data, Art. 9(2)(h) GDPR. Doctolib is itself responsible for any personal user account you create with Doctolib. Further information: https://www.doctolib.de/terms/privacy
5. Processing of patient data
To provide our treatment, we process master data, contact data, insurance and billing data, and health data such as medical history, findings, diagnoses, X-rays, photographs, scans and treatment records. The legal basis is the treatment contract (Art. 6(1)(b) GDPR), for health data Art. 9(2)(h) GDPR in conjunction with Section 22(1)(1)(b) of the German Federal Data Protection Act (BDSG), and, for statutory documentation and billing obligations, Art. 6(1)(c) GDPR. For any use beyond treatment, such as the use of photographs, we obtain your explicit consent.
Where necessary for treatment and billing, or where required by law, we transfer data to dental laboratories, co-treating physicians and dentists, billing service providers, for patients with statutory health insurance to the Association of Statutory Health Insurance Dentists Berlin (KZV Berlin) and your health insurance fund, and, at your request, to your private health insurer or civil service allowance office. All members of our team are bound by medical confidentiality.
6. Storage period
We store personal data only for as long as necessary for the respective purpose or as required by statutory retention obligations. We generally retain treatment records for ten years after the end of treatment (Section 630f(3) of the German Civil Code, BGB); different periods may apply to X-rays and tax-relevant documents. The data is then deleted.
7. Your rights
You have the right at any time to access your stored data (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You may withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR). Please contact us or our data protection officer for this purpose.
Right to object (Art. 21 GDPR): Where we process data on the basis of our legitimate interest (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds or the processing serves the establishment, exercise or defence of legal claims. You may object to processing for direct marketing purposes at any time without giving reasons.
Right to lodge a complaint: You may lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit).
8. Objection to promotional emails
We object to the use of the contact details published in our legal notice for sending unsolicited advertising.