MyVITA registration

Data protection regulations

Step 1 of 7

Privacy Policy for vita-zahnfabrik.com

(hereinafter "Privacy Policy")

Welcome to our website. We appreciate your interest in our company and services. We are committed to safeguarding your privacy when you use our website. As the controller and service provider of the website

vita-zahnfabrik.com

(hereinafter also "website")

we,

VITA Zahnfabrik H. Rauter GmbH & Co. KG
Spitalgasse 3
79713 Bad Säckingen
(Legal Information)

(hereinafter also "we" or "VITA")

would like to inform you about how we process your personal data and explain your rights as a data subject when you use our website.

Your personal data is processed solely in accordance with the provisions of the data protection laws of the European Union, in particular, the EU General Data Protection Regulation (hereinafter "GDPR") and supplementary to the Federal Data Protection Act (hereinafter "BDSG") as well as other statutory provisions on data protection (together "privacy laws").

If you would like to review the GDPR, you can find it on the Internet at: https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32016R0679.

This Privacy Policy applies solely to the website accessible at the domain vita-zahnfabrik.com, including all subdomains. The following notices do not apply to other websites of VITA or third-party websites to which this website links. The terms used in this policy, such as "personal data" or its "processing," correspond to the definitions in Article 4 of the GDPR.

1. Subject matter of data protection and legal bases

The subject matter of data protection is personal data. Personal data means any information relating to an identified or identifiable natural person ('data subject'). Your personal data therefore includes any data that can be used to identify you, such as your name, address, telephone number or e-mail address. Personal data also includes information arising from the use of our website, such as the beginning, end and scope of use, or your IP address.

Personal data is also collected when you provide information for a new MyVITA user account. It is also required for performance of a contract in the VITA online store (contract data).

Personal data will continue to be collected to the extent that you enter information in your user profile and create, post or otherwise contribute content to the user forum (profile data).

We process your data only where permitted under an applicable law. We base the processing of your data on the following legal bases, among others:

Consent (Article 6 (1), sentence 1 (a) of the GDPR):
We will process certain data only with your prior explicit and voluntary consent. You have the right to withdraw your consent to future processing at any time.
Performance of a contract or in order to take steps prior to entering into a contract (Article 6 (1), sentence 1 (b) of the GDPR): We require certain data from you to initiate or fulfill your contractual relationship with VITA.
Compliance with a legal obligation (Article 6 (1), sentence 1 (c) GDPR): In addition, we process your personal data in order to fulfill legal obligations, regulatory requirements or commercial and tax-related retention requirements.
Safeguarding of legitimate interests (Article 6 (1), sentence 1 (f) GDPR): VITA will process certain data in order to safeguard its interests or those of third parties. However, this does not apply if such interests are overridden by your interests.

Please note that this is not a complete or exhaustive list of possible legal bases. These are merely examples designed to make the legal bases for data protection more transparent. For details on the legal basis for individual data processing activities on our website, please refer to the explanations in the following sections.

2. Server log data

You can visit the public part of our website, which is accessible without prior registration, without providing any personal information. The following information about your access can be collected when you visit our website:

The IP address of the requesting device
Pages and files viewed
The http response code
The size of pages and files viewed, in bytes
The website from which you accessed our website (referrer URL)
Date, time and time zone of the server request
Browser type and version
Operating system of the requesting device

We process this data on the basis of Article 6 (1), sentence 1 (f) of the GDPR for the purpose of providing the website as well as ensuring the technical operation and security of our IT systems. In doing so, we pursue the interest of enabling and sustaining the use of our website and its technical functions. This data is automatically processed when you visit our website. You cannot use our website without providing this data. We do not use this data for the purpose of identifying you.

Data that is collected automatically is usually deleted after 7 days, unless we are required to retain it longer for the above purposes under exceptional circumstances. In such cases, we will delete the data as soon as it is no longer needed for the specific purpose.

You cannot object to the collection and storage of your server log data because this information is essential for the smooth operation of the website.

3. Communication via contact form or e-mail

If you contact us via contact form or e-mail, the contact details (such as name, e-mail address) you provide voluntarily are collected, processed or used only for the specific purpose, either for recording or responding to your inquiry (or inquiries) or for technical administration purposes.The information you provide on our contact forms is encrypted using Transport Layer Security (TLS) protocol, widely known by its predecessor's name, Secure Socket Layer (SSL), for secure communication.

Data that is transmitted during communication via a contact form or by e-mail is processed on the basis of Article 6 (1), sentence 1 (b) of the GDPR, where required for steps before entering into a contract, or on the basis of Article 6 (1), sentence 1 (f) of the GDPR. In the latter case, we have a legitimate interest in processing contact requests voluntarily sent to us.

We will delete the data you provide as soon as the purpose for collection ceases completely, subject to the fulfillment of ongoing statutory retention requirements.

Where your data is processed on the basis of legitimate interests, you can object at any time to the storage of your personal data. In this case, we will no longer process your data unless we can demonstrate that we have a legitimate interest or are otherwise required by law to store it. To exercise your right to object to storage, please contact us in writing, by fax or by e-mail.

Please note, however, that if you communicate with us via contact form, we cannot guarantee complete data security and e-mails are not transmitted via a secure data connection. Therefore, please refrain from sending confidential information, such as bank or credit card information, etc. via these means of communication. For confidential information, we recommend that you use a secure means of communication, such as postal mail.

4. MyVITA access

We provide password-protected direct access to the profile data we have stored for every user who signs up for a MyVITA account. You can manage your profile data and newsletters from your account. Your account also gives you access to other services we provide, such as our e-tutorials and our media database. Required information is indicated by an asterisk (*) next to the input box on the signup form. This includes the following information:

Title
First name
Last name
Phone number
Language of correspondence
Company name
Addresss
E-mail address
Password

This data must be provided for the conclusion and performance of the user agreement with us. Data is processed on the basis of Article 6 (1), sentence 1 (b) of the GDPR and Article 6 (1), sentence 1 (c) of the GDPR, provided that the data is stored in order to fulfill statutory retention requirements.We explicitly reserve the right to revert to other legal bases.

When you sign up for an account, you may voluntarily provide further information not required for the signup process, and you alone decide whether you want to share this information with us. This includes the following information:

Title
Fax number
PO box address
Website

If you do not provide this information, we may not be able to provide all the services you require when you use our website.

Voluntary information is stored on the basis of Article 6 (1), sentence 1 (f) of the GDPR, as we have a legitimate interest in processing the data you provide voluntarily so that we can deliver and continually optimize the functions in the MyVITA area. You can object to the processing of voluntary information at any time by deleting this data from your user profile.

Depending on the service you are signing up for, additional data, such as your bookmarks, may be collected and linked to your profile data. If you use the services detailed below, under certain circumstances, other personal information, may also be collected and processed (such as payment details when you place orders) so that we can provide you with these products and services.

You can request to have your MyVITA account deleted at any time by sending a message to datenschutz@vita-zahnfabrik.com. Your profile and the stored content will be deleted or blocked immediately upon deletion of your user account (for further details, see Section 12).

5. Online registration for VITA classes and training courses

When you register for courses online in the Training Course area, you have the choice of creating an account or logging in, or placing your order as a guest, meaning without creating an account or logging in. If you sign up or log in, you are subject to the terms defined in Section 4. The following data is processed when you place an order in this online store:

Title
First name
Last name
Phone number
Language of correspondence
Company name
Address
E-mail address

You can also provide additional information on a voluntary basis; however, it is not required for completing the online registration process.

We use the personal data you provide during online registration to process and complete the registration and payment transactions in the Training Course area. If you pay by direct debit, your bank details (name of your bank, IBAN and BIC) are collected for this purpose. If you pay by credit card, the card number, expiration date, the card holder name and the security code are collected.

The applicable legal basis for these data processing operations is Article 6 (1) (b) of the GDPR. In order to process payment transactions, we may pass on your payment data to our payment service provider, who will process this data on our behalf for purposes of payment processing.

We will delete the information you provide in an order as soon as the purpose for collection ceases, unless we are required to retain the data for complete performance of contract (e.g. during ongoing statutory limitation periods) and subject to ongoing commercial or fiscal filing requirements (see Section 12 for further details) ).

6. Newsletter

We use the double opt-in procedure for sending newsletters, meaning we will only send you a newsletter by e-mail if you have previously explicitly permitted us to activate the newsletter service. We will then send you a notification e-mail asking you to confirm that you wish to receive our newsletter by clicking on a link in this e-mail. You are consenting to receive the newsletter by completing this separate double opt-in procedure.

We only send newsletters after you have signed up, meaning you have given your consent in accordance with Article 6 (1) (a) of the GDPR. We explicitly reserve the right to apply other legal bases. Where the contents of a newsletter are concretely defined when you subscribe to the newsletter, such contents are definitive for the scope of consent. Our newsletters also contain information about our products, offers, promotions and our company.

If you subscribe to the newsletter from the MyVITA area, we do not have to use the double-opt-in procedure because your email address was already confirmed via the verification link when you logged in to the members area for the first time. In this case, a single opt-in in the MyVITA area is sufficient (you simply click a checkbox).

If you no longer want to receive newsletters from us, you can withdraw your consent at any time. To do this, simply send a message (e.g., e-mail, letter) to the above contact address or datenschutz@vita-zahnfabrik.com. You can also use the unsubscribe link included included in each newsletter.

7. Cookies

The website uses cookies and similar technologies, such as HTML5 storage (hereafter referred to as "cookies"), in order to optimize the website. Among other things, cookies help us to make the website easy to navigate and more user-friendly.

Cookies are small identifiers that our web server sends to your browser and stores on your device, provided your default settings are configured accordingly. Cookies are small identifiers that our web server sends to your browser and stores on your device, provided your default settings are configured accordingly. Cookies can be used to determine if your device has already communicated with us. In this way, they serve to improve the user experience for you and optimize our website. We distinguish between cookies that are technically strictly necessary, and those that are stored by our website or by third parties. Please refer to the policies below for further details on the type, function, purposes of, legal basis for, and opt-out options for data processing in relation to cookies.

When you use our website, we will inform you about the use of cookies and you can consent to the use and storage of cookies on your device. You can object to the storage of cookies at any time by disabling the cookie settings of this website, described below, or by selecting "Do not accept cookies" in your browser settings. Please refer to your browser's help feature for information about managing and deleting cookies in your browser settings. You can also disable all cookies by using free browser extensions such as "Adblock Plus (adblockplus.org/de) in combination with the "EasyPrivacy List (easylist.to). However, if you do not accept cookies, the features of the website may be restricted.

a) Strictly necessary cookies

Our website uses the following strictly necessary cookies for which we have a legitimate interest in storing and without which we would not be able to offer certain basic features on our website (for example, you would have to log in every time you open a new page):

Designation	Function/purpose	Duration of storage
PHPSESSID	Initializes the user session for use of the website.	Session

vita-zahnfabrik.com	Saves the user's cookie acceptance status in the current domain.	Session

This data is processed to safeguard our legitimate interests on the basis of Article 6 (1), sentence 1 (f) of the GDPR. Therefore, our legitimate interest is based on the processing purposes described above.

b) Additional first party cookies

Additional first party cookies, which are not absolutely necessary to use the website, fulfill important tasks. They make it easier to use our website, for example by prepopulating forms. They also allow us to uniquely tailor offers to your interests. We use the following additional first party cookies on our website:

Designation	Function/purpose	Duration of storage
CyconAccessType	Recognizes logged-in VITA employees or users with access to the admin area.	1 year

c) Third party cookies

In order to integrate third-party content and features (see following sections), we use third-party cookies that allow third parties to be notified that you have viewed this website. Please visit the third-party website for more information on their use of cookies. We use the following third party cookies:

Designation	Function/purpose	Third party	Duration of storage
_gat_UA-8061667-1	Anonymized user analysis of downloads, video views, booking of services	Google Inc.	Session
_ga	Anonymized user analysis of website views	Google Inc.	Session
_gid	Registers a unique ID that is used to generate statistical information about how the visitor uses the site.	Google Inc.	Session

For further details and opt-out options for use of cookies by third-party providers, please refer to the following descriptions of the individual functions, which are based on the use of such cookies or cookie-like technologies.

8. Google Analytics

This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses third-party cookies to identify the frequency of use of certain areas of our website as well as preferences. The information generated by the cookie regarding how you use our website (including your truncated IP address) is transferred to a Google server in the United States where it is saved. This data is processed on the basis of our legitimate interests pursuant to Article 6 (1) (f) of the GDPR, namely our interest in the analysis, optimization and efficient operation of our website. Google complies with the Privacy Shield Framework, which guarantees compliance with European data protection laws.

Google uses this information on our behalf and on the basis of a contract for order processing to analyze your use of our website, to compile reports on website activities for us, and to provide other services relating to the use of the website and Internet usage.

IP anonymization is always enabled when we use Google Analytics. This means that the IP address of the users is truncated by Google within member states of the European Union (EU) or in other contracting states of the Agreement on the European Economic Area (EEA). Only in exceptional cases will the full IP address be sent to a Google server in the US and truncated. The IP address transmitted by your browser will not be merged with other data provided by Google.

The data is deleted as soon as it is no longer needed for our collection purposes. In our case, data is usually deleted after 14 months.

You can prevent the storage of cookies by disabling "third-party cookies" (see section 7) or by configuring your browser settings accordingly or by using browser extensions. However, please be advised that you may not be able to use all the features of our website in that case. You can also prevent the collection of the data generated by cookies and of data related to your usage of the website (including your IP address), and the transfer of this data to Google as well as the processing of this data by Google, by downloading and installing the browser plugin available here:https://tools.google.com/dlpage/gaoptout?hl=de.

For more information about how Google uses data as well as settings and opt-out options, visit Google's websites here:

https://www.google.com/intl/de/policies/privacy/partners ("How Google uses information from sites or apps that use our services“),
https://www.google.com/policies/technologies/ads ("Use of information for advertising purposes")
https://www.google.de/settings/ads ("Managing information that Google uses to show you ads")

9. Embedded videos

This website features embedded YouTube videos. This service is

operated by YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA ("YouTube"), which is a subsidiary of Google Inc., Amphitheater Parkway, Mountain View, CA 94043, USA.

When you play the videos, you are connected to YouTube's servers in the US. This means that certain information (such as your IP address) is sent to YouTube. In addition, if you have consented to the use and storage of third-party cookies, YouTube may store cookies on your device. We do not receive information about the nature and extent of the data collected by YouTube and have no influence on its use. Where videos are embedded, it also means that YouTube may be informed that your browser has accessed the page of this website containing the video, even if you do not have a YouTube account or are not logged in to YouTube. Your data is processed to enable you to use the aforementioned features and certain content on our website pursuant to Article 6 (1) (f) of the GDPR. In addition, we have a legitimate interest in using the content and services of third parties for efficient operation and optimization of our website.

Please refer to YouTube's privacy policy for more information regarding the purpose and scope of data collection, processing and use by YouTube as well as your rights and the available settings for protecting your privacy.

If you do not want these providers to associate your visit to this website to their local user account, you must log out of the provider's service before visiting this website. Even if you do not have an account with these providers, websites with enabled plug-ins can use cookies to send data to the providers, allowing them to create a pseudonymized user profile, for example.

The YouTube videos included on this website, which are stored at http://www.youtube.com and can be played directly from this website, are embedded in "enhanced privacy mode." According to YouTube, this means that if you do not play the videos, you will not be transferring any information about you as a user to YouTube.

You can prevent the storage of cookies by disabling "third-party cookies" (see Section 7) or by configuring your browser settings accordingly or by using browser extensions such as "Adblock Plus" (https://adblockplus.org/de/) in in combination with "EasyPrivacy" list (https://easylist.to/). However, please be advised that you may not be able to use all the features of our website in that case.

Recipients of personal data

We will only share your personal data with external recipients where it is necessary for fulfilling or processing your request, where you have given us your consent to do so, or where another form of legal permission applies.

External recipients include:

Processors: These are service providers that we use for the provision of services, for example for the technical infrastructure and maintenance of our website. These processors are carefully selected and regularly reviewed by us to ensure that your privacy is safeguarded. These service providers may only use your data for the purposes specified by us and according to our instructions. We are entitled to use such processors according to the provisions of Article 28 of the GDPR.
Public authorities: These include regulators, government institutions and other public-sector entities, such as supervisory authorities, courts, prosecutors or tax authorities. Personal data will only be transferred to such public authorities for legally compelling reasons. The legal basis for such a transfer may be Article 6 (1), sentence 1 (c) of the GDPR.
Private entities: Service providers and assistants, such as accountants or auditors, to whom data is transferred on the basis of a legal obligation or to protect legitimate interests. In this case, the legal basis for transfer is Article 6 (1), sentence 1 (c) and/or (f) DSGVO.

Data processing in third countries

Prior to transferring your data to third countries outside the EU or the EEA as described above, we ensure that, except where permitted by law in exceptional circumstances, the recipient has an adequate level of privacy or that you give consent to the transfer of data. An appropriate level of data protection is ensured, for example, if the recipient has an EU-US Privacy Shield certification, if EU standard contractual clauses have been concluded or binding corporate rules (BCR) exist.

12. Duration of storage

We only store your personal data for as long as necessary to fulfill the purpose or until you withdraw your consent, provided you have given consent. If you withdraw your consent, we will no longer process your personal data, unless its processing is permitted or even strictly required by the relevant statutory provisions (for example, in order to meet commercial and tax-related retention requirements). We also delete your personal data if we are obligated to do so for legal reasons.

In addition, please refer to the details about the duration of storage of your personal data in the individual explanations in the previous sections.

13. Your rights

As a data subject, you have many rights with regard to the processing of your data. These are:

Right of access (Art. 15 GDPR): You have the right to obtain information about the data we have stored concerning you.
Right to rectification and erasure (Articles 16 and 17 GDPR): You may ask us to rectify inaccurate data and, insofar as the legal requirements are met, delete your data.
Right to restriction of processing (Art. 18 GDPR): Provided legal requirements are met, you may request that we restrict the processing of your data.
Right to data portability (Art. 20 GDPR): If you have provided us with data based on a contract or consent, insofar as legal requirements are met, you have the right to receive the data you have provided to us in a structured, commonly used format or ask us to transfer it to another controller.
Right to object to data processing based on legitimate interests (Art. 21 GDPR): You have the right to object, on grounds relating to your particular situation, at any time to the processing of your data by us, insofar as your objection is based on legitimate interests pursuant to Article 6 (1), sentence 1 (f) of the GDPR. If you exercise your right to object, we will cease to process your data, unless we can demonstrate compelling legitimate grounds for further processing that override your rights.
Right to object to cookies: You can also object to the use of cookies at any time. If you want to object to the use of certain cookies, please see our comments in Section 7.
Withdrawal of consent (Art. 7 GDPR): If you have given us consent to process your data, you can withdraw your consent to future processing at any time. This does not affect the lawfulness of the processing of your data up until you withdraw your consent.
Right to lodge a complaint with a supervisory authority (Art. 77 GDPR): You can also lodge a complaint with the competent supervisory authority if you believe that the processing of your data violates applicable law. You may choose to contact either the data protection authority responsible for your location, place of work, or location of the alleged breach; or you may contact our own data protection authority. The data protection supervisory authority responsible for us is the State Data Protection Commissioner for Baden-Württemberg (www.baden-wuerttemberg.datenschutz.de).

If you have any questions about the processing of your personal data, your rights as a data subject or any consent that you have given, please contact our data protection officer using the contact details provided in Section 14. Please also contact our data protection officer directly to exercise your data protection rights.

14. Our data protection officer

We have appointed a company data protection officer. You can reach him or her as follows:

– Data Protection Officer –
VITA Zahnfabrik H. Rauter GmbH & Co. KG
Spitalgasse 3
79713 Bad Säckingen, Germany
Phone: +49 (0) 7761-562-0

Fax: +49 (0) 7761-562-299

E-mail: datenschutz@vita-zahnfabrik.com

15. Security

We take technical and organizational security measures to protect your personal data from accidental or intentional manipulation, loss, destruction or access by unauthorized persons. These security measures are adapted to the latest technologies.

The personal data you provide when you use our website is transferred via a secure, encrypted connection. We use Transport Layer Security (TLS) encryption protocol, which is more widely known by its predecessor's name, Secure Socket Layer (SSL).

Our employees are committed to data secrecy.

16. Changes

Occasionally, it may be necessary to revise the content of this Privacy Policy. We therefore reserve the right to change it at any time. If your consent is required for a change, we will ask for it. We will also publish the amended version of the privacy policy here. You should therefore re-read the privacy policy when you visit our website again.

Date: May 2018

I have read the Privacy Policy*

Fields marked with an * are mandatory.