Privacy policy

In principle, you can use our website without providing personal data. In individual cases, however, it may be necessary to collect and process your personal data in order to be able to use certain functions of our website. In addition, we collect and process personal data to optimize our website and services, which we process in accordance with data protection regulations.

We take the protection of your personal data very seriously and would therefore like to inform you below about your rights and the type and scope of the respective data collection.

1. Responsible person and contact person for data protection inquiries 

 

Person responsible for processing within the meaning of the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG):

Dr. med. Christopher Topar
Clayallee 225 A
14195 Berlin
Phone: +49 30 85071777
E-mail: topar@ortho-eins.de

2. information on the processing of personal data

 

We process your personal data using various technical options and, if necessary, with the assistance of other service providers. We would like to inform you about the specific details of the processing in the following points.

Visit our website

1. when you visit our website, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6 para. 1 lit. f GDPR). 1 p. 1 lit. f GDPR:

• IP address and service provider
• Date and time of the request
• Content of the request (specific page)
• Access status/HTTP status code
• Amount of data transferred in each case
• Website from which the request comes
• Browser incl. Language and software version
• Operating system and its interface

2. 1 are also automatically stored in the log files of our server. The log data is stored separately from other data and can only be viewed by the hoster. The log data is stored for 7 days. The legal basis for the processing of your data when you visit our website is Art. 6 para. 1 p. 1 lit. f GDPR.

Use of cookies

1. This website uses the following types of cookies, the scope and function of which are explained below:
2. In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard disk assigned to the browser you are using and through which certain information flows to the body that sets the cookie (in this case us). Cookies cannot run programs or transfer viruses to your computer. They serve to make the website more user-friendly and effective overall.transient cookies
   Persistent cookies
3. Transient cookies are automatically deleted when you close the browser. These include session cookies in particular. These store a so-called session ID, with which various requests from your browser can be assigned to the shared session. This allows your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.
4. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete the cookies in the security settings of your browser at any time.
5. You can configure your browser settings according to your wishes and also refuse to accept third-party cookies or all cookies. We would like to point out that you may then not be able to use all the functions of this website. The legal basis for the use of cookies is Art. 6 para. 1 p. 1 lit. f GDPR.

Use of the contact form 

1. When you contact us via the contact form on our website, the data you enter (your e-mail address and regularly your name, your telephone number and the other data you provide) will be stored by us at the time of sending in order to process your request.
2. As an alternative to the contact form, you can also contact us via the e-mail address provided on our website, which can be found in the legal notice.
3. You can object to the processing of your personal data at any time by sending an e-mail to topar@ortho-eins.de or by declaring your objection to the processing of your personal data to the person(s) listed in section 1. If you contact us directly by e-mail, you can object to the processing of your personal data at any time in the same way.
4. We delete the data arising in this context after storage is no longer required, or restrict processing if there are statutory retention obligations. The legal basis is Art. 6 para. 1 p. 1 lit. f GDPR.
5. If your contact is aimed at the conclusion of a contract, the additional legal basis for the processing of your personal data is Art. 6 para. 1 lit. b GDPR.

Use of Borlabs – Consent management

1. Our website uses Borlabs Cookie, which sets a technically necessary cookie(borlabs cookie) to store your cookie consent. The legal basis is in accordance with Art. 6 para. 1 lit. f GDPR. Our legitimate interest is to respect and apply your choice of web services. Borlabs Cookie does not process any personal data. However, the runtime and version of the respective cookie are stored and a randomly generated ID that anonymizes you as a user.
2. Borlabs cookie consent technology is used to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6 para. 1 lit. c GDPR.
3. The borlabs-cookie stores the consent you gave when you entered the website. If you wish to revoke this consent, simply delete the cookie in your browser or click on the icon at the bottom left of the window. When you re-enter/reload the website, you will be asked for your cookie consent again. Details on the data processing of Borlabs Cookie can be found at https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/.

Matomo (formerly Piwik)

1. This website uses the web analysis service Matomo to analyze and regularly improve the use of our website. We can use the statistics obtained to improve our offer and make it more interesting for you as a user.
   The legal basis for the use of Matomo is Art. 6 para. 1 p. 1 lit. a GDPR in conjunction with. § Section 25 para. 1 TTDSG.
2. Cookies (see section above: “Use of cookies”) are stored on your computer for this analysis. The controller stores the information collected in this way exclusively on its server in Germany. You can set the evaluation by deleting existing cookies and preventing the storage of cookies. If you prevent the storage of cookies, we would like to point out that you may not be able to use this website to its full extent. You can prevent the storage of cookies by changing the settings in your browser. You can prevent the use of Matomo by revoking your consent in Borlabs Consent Management and thus activating the opt-out plug-in.
3. This website uses Matomo with the extension “AnonymizeIP”. As a result, IP addresses are further processed in abbreviated form, so that direct personal references can be ruled out. The IP address transmitted by your browser via Matomo is not merged with other data collected by us.
4. The Matomo program is an open source project. Information from the third-party provider on data protection can be found at https://matomo.org/privacy/.

Integration of Google reCAPTCHA

1. We use the Google service to protect the contact form on our website. This involves a query as to whether the entry in the contact form was made by a human or abusively by automated, machine processing.
2. When you visit the website, the reCAPTCHA described above is retrieved from a Google server. In addition, the data mentioned under section “Use of cookies” and “Visiting our website” of this declaration are transmitted. This takes place regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish to be associated with your Google profile, you must log out of your Google account before visiting our website. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.
3. Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the provider’s privacy policy. There you will also find further information on your rights in this regard and setting options to protect your privacy: https://policies.google.com/privacy?hl=de&gl=de.

Integration of Google Maps

1. We use Google Maps on this website. This allows us to show you interactive maps directly on the website and enables you to use the map function conveniently.
2. By visiting the website, Google receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned under section 3, “Use of cookies” and “Visiting our website”, of this declaration are transmitted. This takes place regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish to be associated with your Google profile, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.
3. (3) Information from the provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the provider’s privacy policy. There you will also find further information on your rights in this regard and setting options to protect your privacy: https://policies.google.com/privacy?hl=de&gl=de.

Google Adwords Conversion

1. We use the Google Adwords Conversion service to draw attention to our attractive offers on external websites with the help of advertising material (so-called Google Adwords). We can determine how successful the individual advertising measures are in relation to the advertising campaign data. In doing so, we pursue the interest of showing you advertising that is of interest to you, making our website more interesting for you and achieving a fair calculation of advertising costs. The legal basis for the processing of your data is Art. 6 para. 1 p. 1 lit. a GDPR.
2. These advertising materials are delivered by Google via so-called “ad servers”. For this purpose, we use ad server cookies, through which certain parameters for measuring success, such as the display of ads or clicks by users, can be measured. If you access our website via a Google ad, Google Adwords will store a cookie on your PC. These cookies generally lose their validity after 30 days and are not intended to identify you personally. For this cookie, the unique cookie ID, number of ad impressions per placement (frequency of insertions), last impression (relevant for post-view conversions, i.e. the number of insertions of the advertisement before it is clicked on) and opt-out information (marking that the user no longer wishes to be addressed) are usually stored as analysis values.
3. These cookies enable Google to recognize your Internet browser. If a user visits certain pages of an Adwords customer’s website and the cookie stored on their computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to this page. A different cookie is assigned to each Adwords customer. Cookies can therefore not be tracked via the websites of Adwords customers. We ourselves do not collect and process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. Based on these evaluations, we can recognize which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising media; in particular, we cannot identify users on the basis of this information.
4. Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our level of knowledge: Through the integration of AdWords Conversion, Google receives the information that you have accessed the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will find out your IP address and store it.
5. You can prevent participation in this tracking process in various ways: a) by setting your browser software accordingly; in particular, the suppression of third-party cookies means that you will not receive any ads from third-party providers; b) by deactivating cookies for conversion tracking by setting your browser to block cookies from the domain “www.googleadservices.com”, https://www.google.de/settings/ads, whereby this setting is deleted when you delete your cookies; c) by deactivating the interest-based ads of the providers that are part of the “About Ads” self-regulation campaign via the link https://www.aboutads.info/choices, whereby this setting is deleted when you delete your cookies; d) by permanently deactivating them in your Firefox, Internet Explorer or Google Chrome browsers under the link https://www.google.com/settings/ads/plugin. We would like to point out that in this case you may not be able to use all the functions of this website to their full extent.
6. Information from the provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Further information on data protection at Google can be found here: https://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html. Alternatively, you can visit the website of the Network Advertising Initiative (NAI) at https://www.networkadvertising.org.

DoubleClick by Google

1. This website also uses the online marketing tool DoubleClick by Google. DoubleClick uses cookies to serve ads that are relevant to users, to improve campaign performance reports or to prevent a user from seeing the same ads more than once. Google uses a cookie ID to record which ads are displayed in which browser and can thus prevent them from being displayed more than once. In addition, DoubleClick can use cookie IDs to record so-called conversions that are related to ad requests. This is the case, for example, when a user sees a DoubleClick ad and later visits the advertiser’s website with the same browser and buys something there. According to Google, DoubleClick cookies do not contain any personal information. The legal basis for the processing of your data is Art. 6 para. 1 p. 1 lit. a GDPR.
2. Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of DoubleClick, Google receives the information that you have called up the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will find out your IP address and store it.
3. You can prevent participation in this tracking process in various ways: a) by setting your browser software accordingly; in particular, the suppression of third-party cookies means that you will not receive any ads from third-party providers; b) by deactivating cookies for conversion tracking by setting your browser to block cookies from the domain “www.googleadservices.com”, https://www.google.de/settings/ads, whereby this setting is deleted when you delete your cookies; c) by deactivating the interest-based ads of the providers that are part of the “About Ads” self-regulation campaign via the link https://www.aboutads.info/choices, whereby this setting is deleted when you delete your cookies; d) by permanently deactivating them in your Firefox, Internet Explorer or Google Chrome browsers under the link https://www.google.com/settings/ads/plugin. We would like to point out that in this case you may not be able to use all the functions of this website to their full extent.
4. Information from the provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Further information on DoubleClick by Google can be found at https://www.google.de/doubleclick and on data protection at Google in general: https://policies.google.com/privacy?hl=de&gl=de. Alternatively, you can visit the website of the Network Advertising Initiative (NAI) at https://www.networkadvertising.org

Integration of Font Awesome

1. On this website, we use so-called web fonts provided by Fonticons for uniform and improved presentation. These are fonts that are retrieved from an external server when you visit our website and are stored in the cache of your browser to display our website. The legal basis for the use of Font Awesome Web Fonts is Art. 6 para. 1 p. 1 lit. f GDPR.
2. When you call up a page, your browser loads the required web fonts onto your PC in order to display texts and fonts correctly. In addition, the data mentioned under section 3, “Use of cookies” and “Visiting our website”, of this declaration are transmitted. For this purpose, the browser you are using must connect to the Fonticons servers. As a result, Fonticons becomes aware that our website has been accessed via your IP address. If your browser does not support web fonts, a standard font will be used by your computer.
3. Information from the provider: Fonticons Inc, 6 Porter Road, Apartment 3R, Cambridge, MA 02140, United States. Further information about Font Awesome can be found at https://fontawesome.com/help. Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the provider’s privacy policy: https://fontawesome.com/privacy.

Integration of YouTube videos

1. We have integrated YouTube videos into our online offering, which are stored on https://www.YouTube.com and can be played directly from our website. These are all integrated in “extended data protection mode”, i.e. no data about you as a user is transferred to YouTube if you do not play the videos. Only when you play the videos will the data referred to in paragraph 2 be transmitted. We have no influence on this data transmission. The legal basis for the integration of YouTube videos is Art. 6 para. 1 p. 1 lit. f GDPR.
2. By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned under section 3, “Use of cookies” and “Visiting our website”, of this declaration are transmitted. This takes place regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish to be associated with your profile on YouTube, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.
3. Information from the provider: YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, is responsible for data processing. Further information on the purpose and scope of data collection and its processing by YouTube can be found in the privacy policy. There you will also find further information on your rights and setting options to protect your privacy: https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework

Integration of jQuery

1. We have integrated jQuery on this website to make the site as appealing as possible. This is a fast, small and feature-rich JavaScript library. When you visit our website, animations or other files are retrieved from the jQuery server and stored in the cache of your browser to display our website. By integrating jQuery, we can make our website more interesting for you as a user. Further information can be found at http://jquery.com/. The legal basis for the use of jQuery is Art. 6 para. 1 p. 1 lit. f GDPR.
2. For the connection with jQuery, the data listed above under “Visiting our website” is transmitted to jQuery. In addition, cookies (see “Use of cookies” above) are stored on your computer to enable us to recognize you when you visit our website again. jQuery collects and stores usage data according to its own information in pseudonymous profiles, which are stored on jQuery’s servers and are protected against interference and changes by unauthorized third parties.
3. You can prevent processing by deleting existing cookies and preventing the storage of cookies. You can prevent the storage of cookies by changing the settings in your browser. If you deactivate the storage of cookies, we would like to point out that you may not be able to use this website to its full extent.
4. Provider information: jQuery is a project of various volunteers and part of the JS Foundation, Inc, Attn: Privacy Office, 1 Letterman Drive, San Francisco, CA 94129. Further information can be found at https://js.foundation/. Further information from the provider on data protection can be found at https://js.foundation/about/governance/privacy-policy.

 

3. presence in social networks

1. We also operate online presences (fan pages) within social networks and platforms. This allows us to present ourselves as a company, communicate with you as our customers, partners or interested parties and publish information and offers. The activity on our fan page may also be analyzed using statistical data provided to us by the providers of the social networks and platforms (so-called insights data). However, data processing only takes place as soon as you interact with our fan page. The legal basis for this is Art. 6 para. 1 p. 1 lit. f GDPR, as the data processing is based on our legitimate interests in more effective information and communication with you. For contract-related communication with us, Art. 6 para. 1 p. 1 lit. b GDPR constitutes the legal basis.
2. When you access and use our fan page, your personal data is processed by the providers of the social networks and platforms themselves for analysis and advertising purposes. As the operator of the fan page, we have no influence on this and we do not receive any information from the respective providers about the exact scope of data processing. This allows providers to create user profiles, e.g. to place interest-based advertising. Cookies are usually stored on your devices for this purpose. Data processing may also take place outside the European Union. The US providers of social networks and platforms are certified under the Privacy Shield, which obliges them to comply with EU data protection standards(https://www.privacyshield.gov/list). The respective provider of the social networks and platforms is primarily responsible for data processing via the fan page. You also have the option of asserting your rights as a data subject (see below under “Your rights”) directly against the providers of the social networks and platforms.
3. Further information on data processing and your rights can be found in the data protection declarations of the providers:

• Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; Privacy Policy: https://www.facebook.com/privacy/policy; Agreement on joint responsibility: https://www.facebook.com/legal/terms/page_controller_addendum; Opt-Out: http://www.youronlinechoices.com and via the settings in your personal Facebook profile there is also the option to object to certain data processing. Facebook Ireland Ltd. is also responsible for data processing via Instagram Inc.
• Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA; privacy policy and opt-out: https://privacycenter.instagram.com/policy/.
• Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Privacy Policy: https://policies.google.com/privacy; Opt-Out: https://adssettings.google.com/authenticated.
• Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA; Privacy Policy: https://twitter.com/de/privacy, Opt-Out: https://twitter.com/personalization,
• Pinterest Inc, 635 High Street, Palo Alto, CA, 94301, USA; privacy policy and opt-out: https://about.pinterest.com/de/privacy-policy.
• LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland; Privacy Policy: https://www.linkedin.com/legal/privacy-policy; Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
• XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany; Privacy Policy and Opt-Out: https://privacy.xing.com/de/datenschutzerklaerung

 

4. transfer to third countries

In some cases, your data will be transmitted by external service providers to servers outside the EU (so-called third countries). In particular, these may be service providers in the areas of hosting, fulfillment of regulatory obligations, debt collection and marketing, whereby we carefully select these service providers and contractually oblige them to comply with data protection in accordance with the legal requirements. If the service providers are located outside the EU, it is ensured that in these cases Binding Corporate Rules (BCR) or the standard data protection clauses within the meaning of Art. 46 GDPR apply, or an adequacy decision within the meaning of Art. 45 GDPR exists and thus an adequate level of data protection can be guaranteed.

• Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA; https://policies.google.com/privacy
• YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA; https://policies.google.com/privacy
• Facebook Inc, 1601 S California Ave, Palo Alto, California 94304, USA; https://www.facebook.com/privacy/policy/;
• Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025, USA, https://privacycenter.instagram.com/policy

 

5. your rights

You have the following rights vis-à-vis us with regard to the processing of personal data concerning you, which you can assert informally at any time to the contact person listed above in 1.

Right to information

On request, we will provide you with information about which of your personal data we have stored, for what purpose, for how long, from what source and on what legal basis, and whether we have disclosed this data to third parties.

Right to rectification

If it turns out that the personal data we have about you is incorrect or incomplete, we will correct or supplement it immediately upon request.

Right to erasure (right to be forgotten)

You have the right to have your personal data deleted immediately, provided that there is no legal obligation to retain it.

Right to restriction of processing

You can request that we restrict the processing of your personal data.

Right to data portability

You have the right to receive the personal data you have provided to us in a universally readable format.

Right to lodge a complaint with a supervisory authority

You also have the right to complain to the competent data protection supervisory authority about the processing of your personal data by us. The data protection authority of the federal state in which we have our registered office is responsible. You can find more information on this at https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

We would like to politely point out that the exercise of your rights in individual cases may be subject to the fulfillment of certain conditions.

Ensuring data security and data protection

To ensure the protection and security of your personal data, we implement a variety of technical and organizational security measures, the effectiveness of which we regularly review.

 

 

Definitions

Personal data

Personal data is any information relating to an identified or identifiable natural person (hereinafter “data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Person concerned

A data subject is the person whose personal data is processed by the controller.

Processing

Processing is any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Profiling

Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location or movements.

Pseudonymization

Pseudonymization is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.

Person responsible

The controller is the person who decides on the purposes and means of processing personal data and also carries out this processing accordingly.

Processor

The processor is another natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

Receiver

The recipient is a natural or legal person, public authority, agency or other body to whom personal data is disclosed.

Consent

Consent of the data subject is any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

Violation of the protection of personal data

A personal data breach is a breach of security leading to the destruction, loss or alteration, whether accidental or unlawful, or unauthorized disclosure of, or access to, personal data transmitted, stored or otherwise processed.

Biometric data

Biometric data are personal data relating to the physical, physiological or behavioral characteristics of a natural person, obtained using special technical procedures, which enable or confirm the unique identification of this natural person, such as facial images or dactyloscopic data.

Health data

Health data is personal data that relates to the physical or mental health of a natural person, including the provision of healthcare services, and from which information about their state of health is derived.

Supervisory authority

The supervisory authority is an independent state body established by a member state in accordance with Art. 51 GDPR, which is responsible for monitoring compliance with data protection laws and regulations.