Privacy policy
This is a translation for your convenience. Only the German version is legally binding.
Last updated:
Controller
The controller responsible for data processing on this website is:
FM Modellgusstechnik
Owner: Alexander Kost
Reinhard-Müller-Ring 7
64853 Otzberg, Germany
Phone: +49 6162 8303380
E-mail: info@fm-modellgusstechnik.de
[Data protection officer: if one has been appointed, add the name and contact details here. Otherwise delete this paragraph.]
Overview
This policy explains which personal data we process when you visit this website or contact us, for what purpose and on which legal basis. Personal data is any information that can identify you personally.
Hosting and server log files
This website is hosted by [hosting provider and address]. The servers are located in [server location]. We have concluded a data processing agreement with the provider under Art. 28 GDPR.
With every request, the server automatically stores information that your browser transmits:
- IP address
- date and time of the request
- the page or file requested
- the page visited before (referrer)
- browser and operating system
We need this information to deliver the website and keep it secure, for example to detect attacks. The legal basis is Art. 6 (1) (f) GDPR. The log files are deleted after [retention period].
Encryption
This website is only delivered over an encrypted connection (TLS). You can tell by "https://" in your browser's address bar.
Audience measurement with Umami
We measure the use of this website with Umami. Umami runs on our own server; no data is passed on to third parties. Umami sets no cookies and stores nothing on your device. It records the page visited, the page visited before, browser, operating system, device type, screen size, language and the country derived from the IP address. The IP address itself is not stored.
This shows us which content is in demand and helps us improve the website. The legal basis is Art. 6 (1) (f) GDPR.
Settings in your browser
If you choose a colour scheme (light, dark or system setting) or a language, we store that choice in your browser: the colour scheme in local storage, the language in a cookie that is only sent to this website. Both are strictly necessary for the function you requested (Section 25 (2) no. 2 TDDDG). You can delete them in your browser at any time.
Fonts
The font of this website is loaded from our own server. No connection is made to Google or any other provider.
Contact by e-mail, phone and contact form
When you contact us, we process your details, for example name, practice or laboratory, e-mail address, phone number and your message, in order to answer your enquiry. The legal basis is Art. 6 (1) (b) GDPR if your enquiry relates to a contract or the preparation of one, otherwise Art. 6 (1) (f) GDPR. We delete the details once the enquiry has been dealt with, unless statutory retention obligations apply.
[Contact form: add the transmission method and e-mail provider once the form is connected.]
Orders and file upload
Through the order form, dental practices and laboratories send us order details and files such as intraoral scans, photos and order forms. These may contain health data of patients. We process them solely to make the dental work ordered and to invoice it. The legal basis is Art. 6 (1) (b) GDPR, and for health data Art. 9 (2) (h) GDPR. Patients are informed by the practice placing the order.
We keep orders and documents for as long as the law requires, in particular the documentation obligations for custom-made devices under Regulation (EU) 2017/745 on medical devices and the retention periods under tax law.
[File upload: add storage location, encryption and deletion periods once the upload is connected. Have this section checked by a lawyer.]
Links to other providers
Links on this website, such as "Plan route" to Google Maps, lead to pages of other providers. Data is only transmitted to the provider once you follow such a link. That provider is responsible for the processing there.
Your rights
You have the right to:
- access the data we hold about you (Art. 15 GDPR)
- have incorrect data rectified (Art. 16 GDPR)
- have your data erased (Art. 17 GDPR)
- restrict processing (Art. 18 GDPR)
- data portability (Art. 20 GDPR)
- object to processing based on Art. 6 (1) (f) GDPR (Art. 21 GDPR)
- withdraw consent you have given, with effect for the future (Art. 7 (3) GDPR)
To exercise these rights, use the contact details above. You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:
Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Postfach 31 63
65021 Wiesbaden, Germany
datenschutz.hessen.de
No automated decisions
We do not make automated decisions or create profiles within the meaning of Art. 22 GDPR.
Changes
We update this policy when the website or the law changes. The version published here applies.