Privacy policy.

Controller

Dr. med. dent. univ. Thomas Pawlowski
Tuchlauben 7
1010 Vienna, Austria
Phone: 01 532 3269
Email: info@neue-zaehne.at

Purpose and legal basis of processing

We process personal data exclusively within the framework of the applicable legal provisions (GDPR, Austrian Data Protection Act, Telecommunications Act). The principal processing activities concern:

• Contact enquiries via the form or by phone — legal basis: Art. 6 (1) (b) GDPR (pre-contractual measures).
• Patient records and treatment & cost plans — legal basis: Art. 9 (2) (h) GDPR and dental documentation obligations.
• Invoicing and accounting — legal basis: Art. 6 (1) (c) GDPR (legal obligation).
• Marketing, conversion measurement and remarketing (see below), legal basis: Art. 6 (1) (a) GDPR (consent via the consent banner) and § 165 (3) of the Austrian Telecommunications Act 2021.
• Anonymous reach measurement with Plausible (see below). No cookies are set and no personal data is collected, which is why no consent is required for this.

Storage period

Patient data is retained in accordance with statutory retention obligations (at least 10 years after the last treatment). Data from the contact form is deleted after the enquiry has been handled, unless a further business relationship arises. Server log files are deleted automatically after 14 days. Cookies and tracking data are processed in accordance with the storage periods of the respective providers listed below.

Server log files

When you access our website, our hosting provider automatically collects technical data in so-called server log files: browser type and version, operating system used, referrer URL, host name of the accessing computer, time of the server request and IP address. This data is used solely to ensure trouble-free operation and the security of our systems. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest). The data is not combined with other data sources.

SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this website uses SSL/TLS encryption. You can identify an encrypted connection by "https://" and the lock icon in your browser's address bar.

Cookies

We use cookies and comparable technologies (e.g. local storage). Technically necessary cookies are required for the operation of the site and are stored without consent (legal basis: § 165 (3) of the Austrian Telecommunications Act 2021, Art. 6 (1) (f) GDPR). Marketing cookies (Google Ads and Meta Pixel, see below) are only set after your express consent via our consent banner. Our statistics service Plausible sets no cookies and is therefore not included as a selectable category in the consent banner. You can withdraw or adjust your consent at any time via the consent banner. You can also use your browser settings to prevent cookies from being set in general or to delete cookies that have already been set.

Manage cookie settings

Plausible Analytics

For anonymous reach measurement we use Plausible Analytics. Plausible sets no cookies, uses no cross-device identifiers and collects no personal data. Only aggregated metrics are recorded, such as the number of page views, the page requested, the referral source and broad device and browser information. Individual visitors cannot be identified from this and cannot be recognised across multiple visits. Your IP address is used solely to derive a coarse location and a temporary daily identifier that resets every 24 hours. The IP address itself is not stored. According to the provider, all visitor data is processed and stored in the EU on infrastructure owned by European companies and does not leave the EU. Because no personal data is processed and no information is stored on or read from your device, no consent is required for this reach measurement. It therefore deliberately does not appear as a category you can switch off in the consent banner. Further information is available in Plausible's privacy policy.

Appointment enquiries via Tally

The enquiry form on this website is provided by the form service Tally and is loaded as an embedded frame from tally.so. The provider is a Belgian company established in the EU. When you submit the form, the data you have entered is transmitted to Tally and held there for us to retrieve. According to the provider, form responses are encrypted both in transit and at rest and are stored in Europe. For ancillary functions such as email delivery, error monitoring, payment processing, support and abuse detection, Tally in turn engages sub-processors, some of which are established outside the EU, in particular in the USA and in Canada. Processing outside the EU can therefore not be ruled out. A data processing agreement is in place with Tally. We collect your first and last name, your phone number, your email address and whatever you enter in the free-text field about your concern. Please note that details about your concern may contain health data within the meaning of Art. 9 GDPR. We therefore ask you to provide only what is needed to arrange an initial appointment. Detailed medical histories are discussed in person at the practice. The legal basis for processing your enquiry is Art. 6 (1) (b) GDPR (pre-contractual measures), and for health data additionally your explicit consent under Art. 9 (2) (a) GDPR, which you give by submitting the form. You are welcome to send us your enquiry by phone or email instead at any time. Further information is available in Tally's privacy policy.

Google Ads: conversion tracking and remarketing

On the basis of your consent, we use Google Ads (Google Ireland Limited) including conversion tracking and remarketing. Conversion tracking allows us to measure whether users who reached the website via one of our ads complete a specific action. The actions we record are clicking a phone number, clicking an email address, clicking a button to request an appointment, submitting the enquiry form, and dwelling on an ad landing page. For this purpose, a cookie is set as soon as you click on an ad served by Google. These cookies generally expire after 30–90 days. Remarketing allows us to re-address users who have already visited our website on other websites within the Google advertising network. The legal basis is Art. 6 (1) (a) GDPR. You can withdraw your consent at any time via the consent banner. You can additionally disable personalised advertising in Google's ads settings.

Meta Pixel (Facebook Pixel)

On the basis of your consent, we use the Meta Pixel, a tracking tool provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland ("Meta"). It allows us to measure the effectiveness of our ads on Facebook and Instagram (conversion tracking) and to re-address users who have already visited our website within the Meta advertising network (remarketing). When you access our pages, selected events (e.g. page view, contact form submission) and technical information such as IP address, browser data and cookie identifier are transmitted to Meta. A transfer to the USA is possible. For the collection of data via the Pixel, we and Meta are joint controllers within the meaning of Art. 26 GDPR; subsequent processing is carried out solely by Meta. The legal basis is Art. 6 (1) (a) GDPR. You can withdraw your consent at any time via the consent banner. Further information on data processing by Meta is available in Meta's privacy policy.

Data transfer to third countries

When using Google and Meta services, personal data may be transferred to the USA. Google LLC and Meta Platforms, Inc. are certified under the EU-US Data Privacy Framework; in addition, standard contractual clauses pursuant to Art. 46 (2) (c) GDPR exist as an appropriate safeguard. Despite these measures, access to personal data by US authorities cannot be ruled out.

Our hosting provider BunnyWay d.o.o. is established in Slovenia and therefore in the EU. As a content delivery network, however, it operates a global network of edge locations and serves content via the location nearest to you. Depending on where you access our website from, your request may therefore also be processed outside the EU.

The provider of our enquiry form, Tally, is established in Belgium and therefore in the EU, and states that form responses are stored in Europe. For ancillary functions, however, Tally engages sub-processors outside the EU, including in the USA and in Canada. The provider's public documentation does not make clear whether these services can access the content of form responses.

Processors

We use carefully selected service providers. For the operation of this website these are the services of BunnyWay d.o.o., Dunajska cesta 165, 1000 Ljubljana, Slovenia (bunny.net) for hosting and delivery, Plausible for anonymous reach measurement, Tally for the enquiry form, and Google and Meta for the advertising services described above. In addition, we use service providers for practice management and dental laboratory work in the running of the practice. Contractual agreements pursuant to Art. 28 GDPR are in place with all processors.

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing (Art. 21 GDPR). You can withdraw consent given pursuant to Art. 7 (3) GDPR at any time with effect for the future — most easily via the consent banner or by email to info@neue-zaehne.at. In the event of breaches of data protection law, you have the right to lodge a complaint with the Austrian Data Protection Authority (dsb.gv.at).