GDPR

Privacy policy.

Controller

Dr. med. dent. univ. Thomas Pawlowski
Tuchlauben 7
1010 Vienna, Austria
Phone: 01 532 3269
Email: info@neue-zaehne.at

Purpose and legal basis of processing

We process personal data exclusively within the framework of the applicable legal provisions (GDPR, Austrian Data Protection Act, Telecommunications Act). The principal processing activities concern:

  • Contact enquiries via the form or by phone — legal basis: Art. 6 (1) (b) GDPR (pre-contractual measures).
  • Patient records and treatment & cost plans — legal basis: Art. 9 (2) (h) GDPR and dental documentation obligations.
  • Invoicing and accounting — legal basis: Art. 6 (1) (c) GDPR (legal obligation).
  • Reach measurement and marketing (see below) — legal basis: Art. 6 (1) (a) GDPR (consent via the consent banner) and § 165 (3) of the Austrian Telecommunications Act 2021.

Storage period

Patient data is retained in accordance with statutory retention obligations (at least 10 years after the last treatment). Data from the contact form is deleted after the enquiry has been handled, unless a further business relationship arises. Server log files are deleted automatically after 14 days. Cookies and tracking data are processed in accordance with the storage periods of the respective providers listed below.

Server log files

When you access our website, our hosting provider automatically collects technical data in so-called server log files: browser type and version, operating system used, referrer URL, host name of the accessing computer, time of the server request and IP address. This data is used solely to ensure trouble-free operation and the security of our systems. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest). The data is not combined with other data sources.

SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this website uses SSL/TLS encryption. You can identify an encrypted connection by "https://" and the lock icon in your browser's address bar.

Cookies

We use cookies and comparable technologies (e.g. local storage). Technically necessary cookies are required for the operation of the site and are stored without consent (legal basis: § 165 (3) of the Austrian Telecommunications Act 2021, Art. 6 (1) (f) GDPR). Analytics and marketing cookies (in particular Google Analytics, Google Ads and Meta Pixel, see below) are only set after your express consent via our consent banner. You can withdraw or adjust your consent at any time via the consent banner. You can also use your browser settings to prevent cookies from being set in general or to delete cookies that have already been set.

Google Analytics 4

On the basis of your consent, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses cookies and similar identifiers to statistically evaluate the use of our website. The information collected (in particular truncated IP address, device and browser data, pages visited, time spent) is generally transmitted to a Google server in the USA and stored there. IP anonymisation is enabled; your IP address is shortened within the EU/EEA before transmission. The legal basis is Art. 6 (1) (a) GDPR. You can withdraw your consent at any time via the consent banner. Further information is available in Google's privacy policy.

Google Ads — conversion tracking and remarketing

On the basis of your consent, we use Google Ads (Google Ireland Limited) including conversion tracking and remarketing. Conversion tracking allows us to measure whether users who reached the website via one of our ads complete a specific action (e.g. submitting the contact form). For this purpose, a cookie is set as soon as you click on an ad served by Google. These cookies generally expire after 30–90 days. Remarketing allows us to re-address users who have already visited our website on other websites within the Google advertising network. The legal basis is Art. 6 (1) (a) GDPR. You can withdraw your consent at any time via the consent banner. You can additionally disable personalised advertising in Google's ads settings.

Meta Pixel (Facebook Pixel)

On the basis of your consent, we use the Meta Pixel, a tracking tool provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland ("Meta"). It allows us to measure the effectiveness of our ads on Facebook and Instagram (conversion tracking) and to re-address users who have already visited our website within the Meta advertising network (remarketing). When you access our pages, selected events (e.g. page view, contact form submission) and technical information such as IP address, browser data and cookie identifier are transmitted to Meta. A transfer to the USA is possible. For the collection of data via the Pixel, we and Meta are joint controllers within the meaning of Art. 26 GDPR; subsequent processing is carried out solely by Meta. The legal basis is Art. 6 (1) (a) GDPR. You can withdraw your consent at any time via the consent banner. Further information on data processing by Meta is available in Meta's privacy policy.

Data transfer to third countries

When using Google and Meta services, personal data may be transferred to the USA. Google LLC and Meta Platforms, Inc. are certified under the EU-US Data Privacy Framework; in addition, standard contractual clauses pursuant to Art. 46 (2) (c) GDPR exist as an appropriate safeguard. Despite these measures, access to personal data by US authorities cannot be ruled out.

Processors

We use carefully selected service providers (hosting, practice management, laboratory, web analytics, advertising services). Contractual agreements pursuant to Art. 28 GDPR are in place with all processors.

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing (Art. 21 GDPR). You can withdraw consent given pursuant to Art. 7 (3) GDPR at any time with effect for the future — most easily via the consent banner or by email to info@neue-zaehne.at. In the event of breaches of data protection law, you have the right to lodge a complaint with the Austrian Data Protection Authority (dsb.gv.at).