Datenschutzerklärung

II. Name and Address of the Person Responsible

As the operator of the website, the International Implant Foundation is the controller of your personal data processed through the use of this website.

Internationale Implantatstiftung
(International Implant Foundation IF^®)
Leopoldstr. 116
D-80802 Munich
Germany

represented by

Mr. Michael Zach (Fachanwalt für Medizinrecht / Specialist lawyer for medical law)
Chairman of the Foundation Board of the International Implant Foundation IF^®
Volksgartenstrasse 222a
41065 Mönchengladbach
Tel.: 02161 6887410
Fax: 02161 6887411

E-Mail: info(at)rechtsanwalt-zach.de

III. Processing of Personal Data

1. Provision of the Website and Creation of Log Files

a) Description and Scope of Data Processing

For technical reasons, the following data transmitted by your browser is automatically stored each time you visit our website:

• Information about your browser type and version
• The operating system you are using
• The website from which you visit us (referrer URL)
• Date and time of your visit

Our system does not store your IP address or other data in the log files that could be used to identify you personally. The data in the log files are not stored together with other personal data relating to you.

b) Legal Basis for Data Processing

The legal basis for the temporary processing of data and log files is Art. 6 para. 1 sentence 1 lit. f GDPR.

c) Purpose of Data Processing

The temporary processing of your IP address by our system is necessary to enable the provision of the website on your end device. We also use your personal data to optimize our website and ensure the security of our IT systems. Your data is not processed for marketing purposes. This also results in our legitimate interest in data processing.

d) Duration of Storage

The aforementioned personal data will be deleted as soon as they are no longer required to achieve the purpose of processing. In the case of data processing for the provision of the website, this is the case when you end the respective session.

e) Right of Objection and Removal in Accordance with Art. 21 GDPR

It is not possible to object to this data processing, as the processing of the data is absolutely necessary for the provision of the website.

2. Donation Option

a) Description and Scope of Data Processing

On our website, we give you the opportunity to donate to us by providing your personal data. Personal data that is processed when you donate online using the registration form is your first and last name, your address, your e-mail address and your account details if you choose direct debit. If you donate via your institution, we collect the name of your institution, your business address and your first and last name.

Your data will not be passed on to third parties. When you register on this site, we will also save your IP address and the date and time of your registration.

b) Legal Basis for Data Processing

The processing of the aforementioned personal data is necessary for the initiation and fulfillment of the donation contract that you conclude with us via the registration function. The legal basis for the processing of your personal data is Art. 6 para. 1 sentence 1 lit. b GDPR.
The legal basis for the collection and storage of your IP address is Art. 6 para. 1 sentence 1 lit. f GDPR.

c) Purpose of Data Processing

The personal data collected during registration is required for the execution of the donation contract, under which the user undertakes to pay a membership fee of their own choosing.

We process your IP address for our security in the event that a third party registers on our website without your knowledge or misuses your personal data. This is also our legitimate interest in the processing. Data is not passed on to third parties or compared with data collected by other website services.

d) Duration of Storage

As soon as we no longer need your personal data for the aforementioned purpose, it will be deleted immediately. This is usually the case after the three-year limitation period has expired, starting at the end of the year in which you donated to us.

As we are also subject to statutory retention obligations, your personal data will be blocked after the statute of limitations has expired and deleted after a total of ten years, starting at the end of the calendar year in which the donation was made.

e) Right of Objection and Removal in Accordance with Art. 21 GDPR

It is not possible to object to the processing of the IP address, as the processing of the data is absolutely necessary for the prevention and tracking of misuse.

f) Consequences of Not Providing Your Personal Data

You are not obliged to provide your data for the aforementioned purposes. However, in the event that you refrain from providing your data, we cannot guarantee that we will be able to offer you the benefits associated with a donation contract in the desired form.

3. Membership Option

a) Description and Scope of Data Processing

On our website, we give you the opportunity to become a member by providing your personal data. The personal data that we process via the registration form are your first and last name, your address, your date of birth, your e-mail address, your account details and the amount of your annual membership fee.
Your data will not be passed on to third parties. When you register on this page, we will also save your IP address and the date and time of your registration.

b) Legal Basis for Data Processing

The processing of the aforementioned personal data is necessary for the initiation and fulfillment of the membership relationship that you conclude with us via the registration function. The legal basis for the processing of your personal data is Art. 6 para. 1 sentence 1 lit. b GDPR.

The legal basis for the collection and storage of your IP address is Art. 6 para. 1 sentence 1 lit. f GDPR.

c) Purpose of Data Processing

The personal data collected during registration is required to carry out the membership relationship.
We process your IP address for our security in the event that a third party registers on our website without your knowledge or misuses your personal data. This is also our legitimate interest in the processing. Data is not passed on to third parties or compared with data collected by other website services.

d) Duration of Storage

As soon as we no longer need your personal data for the aforementioned purpose, it will be deleted immediately. This is usually the case after the three-year limitation period has expired, starting at the end of the year in which the membership relationship is terminated.
As we are also subject to statutory retention obligations, your personal data will be blocked after the statute of limitations has expired and deleted after a total of ten years, starting at the end of the calendar year in which your membership was terminated.

e) Right of Objection and Removal in Accordance with Art. 21 GDPR

It is not possible to object to the processing of the IP address, as the processing of the data is absolutely necessary for the prevention and tracking of misuse.

f) Consequences of Not Providing Your Personal Data

You are not obliged to provide your data for the aforementioned purposes. However, if you choose not to provide your data, we cannot guarantee that we will be able to offer you the benefits associated with membership in the desired form.

4. Cookies

a) Description and Scope of Data Processing

We use so-called cookies on our website, which serve to recognize you as a user and make it easier for you to use our site. Cookies are small text files that your internet browser installs on your end device. These are often so-called “session cookies”, which are deleted again at the end of your session.

Other cookies remain installed on your end device until you remove them. These installed cookies allow us to identify your web browser on your next visit.

You can also set your web browser so that you are informed about the installation of cookies. As part of the settings, you can choose whether cookies should only be allowed in individual cases, or only be installed in certain cases, or generally not be accepted or automatically deleted after closing your web browser. If you decide to deactivate cookies, this may restrict your use of the website.

We use cookies on our website to make it more user-friendly for you. Some elements of our website require that the accessing browser can be identified even after a page change. The following data is stored and transmitted in the cookies:

• Log-in information for input masks

b) Legal Basis for Data Processing

The legal basis for the processing of your personal data using cookies is Art. 6 para. 1 sentence 1 lit. f GDPR.

c) Purpose of Data Processing

We use technically necessary cookies to optimize the use of the website for you. Otherwise, we will not be able to offer you some functions of our website, as these require your web browser to be recognized after a page change. Our legitimate interest in processing your personal data also lies in these purposes.

We do not use the personal data collected by technically necessary cookies to create user profiles.

d) Duration of Storage

These session cookies are stored on the user's computer and are automatically deleted after 1440 minutes. You can also deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.

5. Use of Cookies for Analysis Purposes

a) Matomo with anonymization function

aa. Description and Scope of Data Processing

We use Matomo on our website, a web analysis service that is hosted on a server in Germany. When using Matomo, so-called cookies are used. Cookies are text files that are installed on your end device and enable the analysis of your behavior when using our website.

Such cookies are used to generate information about your usage behavior, which is transmitted to the server located in Germany and stored there.

As data protection is very important to us, we make it possible for you to use our website anonymously. We therefore only use Matomo to record anonymized IP addresses, which are not merged with other data collected. This means that no conclusions can be drawn about your person.

bb. Legal Basis for Data Processing

The legal basis for the processing of your personal data using cookies is Art. 6 para. 1 sentence 1 lit. f GDPR.

cc. Purpose of Data Processing

We use the information to determine how you have used the website, to provide us with a summary of website activity and to offer other services related to internet and website use. These purposes also constitute our legitimate interest in processing your personal data.

dd. Duration of Storage

The cookies used by Matomo to analyze website usage have a default storage period of 392 days or until the browser window is closed. You can independently uninstall the cookies installed by Matomo and thus delete the stored data.

ee. Right of Objection and Removal in Accordance with Art. 7 GDPR

You are free to revoke your consent at any time with effect for the future by deactivating the cookies through a corresponding setting in your browser software. The legality of the processing carried out up to that point is not affected by the revocation.

6. Use of PayPal as a Payment Method for Online Donations

a) Description and Scope of Data Processing

If you decide to pay with the online payment service provider PayPal as part of a payment transaction on our website, your personal data such as first and last name, address, e-mail address, information on the amount of the donation, IP address, payment details, device information and geographical information will be transmitted to PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

Depending on the payment method selected via PayPal, e.g. invoice or direct debit, the personal data transmitted to PayPal will be transmitted by PayPal to credit agencies.

PayPal may also pass on your personal data to service providers, subcontractors or other affiliated companies if this is necessary to fulfill the contractual obligations arising from your order or if the personal data is to be processed on behalf of PayPal.

You can find an overview of these third parties under the following link: https://www.paypal.com/de/webapps/mpp/ua/third-parties-list

b) Legal Basis for Data Processing

The legal basis for the processing of personal data is Art. 6 para. 1 sentence 1 lit. f GDPR.

c) Purpose of Data Processing

The processing of your personal data is necessary for the processing of your donation with the “PayPal” payment method you have selected, in particular to confirm your identity and to administer your payment. This is also our legitimate interest in data processing.

Depending on which payment method you select with PayPal, your personal data will be processed by credit agencies for identity and credit checks. You can find out which credit agencies are involved and which data is generally processed by PayPal, as well as further information on the purposes and scope of data processing, in PayPal's privacy policy at https://www.paypal.com/en/webapps/mpp/ua/privacy-prev .

d) Duration of Storage

If you close your PayPal account, PayPal will register it as closed. However, your account information will not be deleted. PayPal does this to prevent fraudulent activity. However, in this case PayPal will not use your personal data for any other purpose, nor will your personal data be sold or disclosed to third parties, unless PayPal is able to prevent fraudulent activity or is required to do so by law.

e) Right of Objection and Removal in Accordance with Art. 7 GDPR

You can object to the processing of your personal data by PayPal at any time by following the instructions provided in the “Your privacy settings” section of your PayPal account.

7. Google Maps

a) Description and Scope of Data Processing

We use the map service Google Maps API (“Google Maps”) on our website. The provider of this service is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). This service enables us to display our location on an interactive map and, after clicking on the “View larger map” button, to provide you with directions to us by redirecting you to the Google website. Google Maps processes the following data for this purpose:

• Information about your browser type and version
• Your IP address
• The website from which the request is sent to Google Maps (referrer URL)
• Date and time of your visit

Your data may be processed on servers in the USA. Google guarantees an appropriate level of data protection through certification in accordance with the EU-U.S. Privacy Shield.

b) Legal Basis for Data Processing

The legal basis for the collection and storage of the aforementioned data is Art. 6 para. 1 sentence 1 lit. f GDPR.

c) Purpose of Data Processing

The data is processed to display and make it easier to find our location. This is also our legitimate interest in the processing. Data is not passed on to third parties or compared with data collected by other website services.

d) Duration of Storage

Google Maps does not specify a storage period. You can view the Google terms of use here: https://policies.google.com/privacy?hl=en#products. The additional terms of use for Google Maps/Google Earth can be found here: https://www.google.com/help/terms_maps.html

e) Right of Objection and Removal in Accordance with Art. 21 GDPR

You are free to revoke your consent at any time with effect for the future by deactivating the cookies through a corresponding setting in your browser software. The legality of the processing carried out up to that point is not affected by the revocation. However, if you object to this data processing, it will no longer be possible to display our location on a Google Map.

8. YouTube

a) Description and Scope of Data Processing

On our website we use the service of the video platform YouTube (“YouTube”). The provider of this service is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). This service enables us to integrate videos uploaded to YouTube into our website and give you the opportunity to play them directly on the website. YouTube processes the following data for this purpose:

• Information about your browser type and version
• Your IP address
• The website from which the request is sent to YouTube (referrer URL)
• Date and time of your visit

b) Legal Basis for Data Processing

The legal basis for the collection and storage of the aforementioned data is Art. 6 para. 1 sentence 1 lit. f GDPR.

c) Purpose of Data Processing

The data is processed to display and play the embedded videos. This is also our legitimate interest in the processing. Data is not passed on to third parties or compared with data collected by other website services.

d) Duration of Storage

YouTube does not specify a storage period. You can view the Google terms of use here: https://policies.google.com/privacy?hl=en#products. You can find the additional terms of use for YouTube here: https://www.youtube.com/static?gl=en&template=terms&hl=en

e) Right of Objection and Removal in Accordance with Art. 21 GDPR

You are free to revoke your consent at any time with effect for the future by deactivating the cookies through a corresponding setting in your browser software. The legality of the processing carried out up to that point is not affected by the revocation. However, if you object to this data processing, it will no longer be possible to view and play the videos embedded on our website.

9. Friendly Captcha

a) Description and Scope of Data Processing

This website uses Friendly Captcha to protect contact forms. Friendly Captcha is a new, privacy-friendly protection solution to make it more difficult for automated programs and scripts (so-called “bots”) to use websites and thus protect websites from misuse.

This means that your device establishes a connection to Friendly Captcha's servers when you submit a contact form. Your device receives a calculation task from Friendly Captcha in the background. The complexity of the calculation task depends on various risk factors. Your device solves the calculation task, which takes up certain system resources, and sends the calculation result to the server of this website. The server contacts the Friendly Captcha server via an interface and receives a response as to whether the puzzle has been solved correctly by the end device. In addition, your device transmits anonymous connection data, environmental data, interaction data and functional data to Friendly Captcha. Friendly Captcha evaluates this data and determines how likely it is that it is a human user or bot and transmits the result to this website.

b) Legal Basis for Data Processing

The legal basis for the collection and storage of the aforementioned data is Art. 6 para. 1 sentence 1 lit. f GDPR.

c) Purpose of Data Processing

All data is used exclusively for the detection and treatment of potential bots and risks as described above. The purpose of the processing is therefore to ensure the security and functionality of websites. Friendly Captcha does not use the data to identify a natural person or for marketing purposes. Friendly Captcha does not store any personal data of the visitor. Data that could identify the visitor (such as IP addresses) is anonymized using one-way hashing. Friendly Captcha does not use HTTP cookies and does not store any data on your device.

d) Duration of Storage

The data processed by Friendly Captcha is deleted after 30 days.

e) Right of Objection and Removal in Accordance with Art. 21 GDPR

By submitting a contact or registration form on this website, you consent to the processing of your data. The processing is carried out on the basis of Art. 6 (1) lit. a GDPR with your consent. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

IV. Your Rights as the Person Concerned

If your personal data is processed by us, you are a data subject within the meaning of the GDPR, meaning that you have the following rights:

1. Right to Information

You have the right to request information from us at any time about your personal data processed by us. This also includes information about the origin, recipients or categories of recipients to whom we transfer your data, as well as the purposes for which we process your personal data.

2. Right to Rectification

You have the right to demand that we correct and / or complete your personal data without delay if your personal data is incorrect or incomplete.

3. Right to Erasure or Restriction of Processing

You can demand that we delete your personal data immediately. We are obliged to carry out the deletion immediately. Anything else only applies if we are obliged to continue processing your personal data due to contractual and/or legal regulations. This is the case, for example, if we are prohibited from deleting data by tax retention obligations. In such a case, we will restrict the processing and delete the personal data in question immediately after the retention period has expired.

4. Right to Data Portability

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format, where technically feasible. You also have the right to transmit this data to another controller without hindrance from us, if you so wish.

5. Automated Decision in Individual Cases Including Profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

6. Right to Lodge a Complaint With a Supervisory Authority

You have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data violates the GDPR. The competent supervisory authority for us is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 27
91522 Ansbach

Phone: +49 (0) 981 53 1300
Fax: +49 (0) 981 53 98 1300
E-Mail: poststelle(at)lda.bayern.de