Legal

Privacy Policy

1. Data Controller

Zahnkompetenzzentrum Dr. med. dent. M.Sc. Sandro Strößner
Leopold-Kell-Straße 25, 06667 Weißenfels
Phone: 03443 339 65 54
Email: kontakt@zahnarzt-weissenfels.com

For questions about data protection, you can reach us at datenschutz@zahnarzt-weissenfels.com.

2. General Information

The following notice explains what happens to personal data when you visit this website. Personal data means any data that can be used to identify you personally. It is based in particular on Articles 13 and 14 of the General Data Protection Regulation (DSGVO/GDPR). This notice applies to all our practice's websites that link to it in the footer; certain services (see sections 4 and 5) are only used on some of these websites.

3. Hosting and Server Log Files

Hosting: Our websites are hosted by ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. The hosting provider processes the data generated when the site is accessed on our behalf (data processing under Art. 28 GDPR), exclusively on servers located in Germany.

When the pages are accessed, our hosting provider automatically collects and stores information in what are known as server log files, which your browser transmits automatically:

This data is not combined with other data sources and is deleted after 7 days at the latest. The processing serves to ensure a smooth connection setup, system security, and defence against attacks. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and trouble-free operation).

4. Cookies and Local Storage

We use cookies, or entries in your browser's local storage, in two categories:

Necessary

Optional (only with consent)

You can withdraw your consent at any time with effect for the future: .

5. Third-Party Services

Dr. Flex GmbH (appointment booking and online reception)

Provider: Dr. Flex GmbH, Stresemannstraße 21, 10963 Berlin. Dr. Flex provides our online appointment booking and our online reception (chat assistant for appointment requests and enquiries) and acts as a processor on our behalf (contract under Art. 28 DSGVO). The integration loads after the page has built; in doing so, your IP address is transmitted to Dr. Flex (Art. 6(1)(f) DSGVO – provision of the appointment and contact function). The appointment calendar and chat assistant only open once you click on them. Details you provide there (e.g. name, contact information, your enquiry) are passed on to Dr. Flex and to our practice for processing (Art. 6(1)(b) DSGVO; for health information, Art. 9(2)(h) DSGVO in conjunction with Section 22 BDSG (German Federal Data Protection Act)).

Notice on the use of artificial intelligence (Art. 50 AI Act): The online reception is an AI-powered chat assistant (Dr. Flex “Web AI”). Your entries are evaluated automatically in order to forward your enquiry to the practice; the AI does not make any treatment decisions – every medical assessment is made exclusively by our practice team. Please do not send any clinical findings or sensitive health data via the chat, and only enter the information there that is necessary for your enquiry. Details and the provider's privacy policy: dr-flex.de/datenschutz.

Google Tag Manager and Google Analytics 4 (only on a small number of websites, only after consent)

On some of our websites, we use – only after you have given consent via our cookie notice – the Google Tag Manager and, through it, Google Analytics 4. Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (parent company: Google LLC, USA). Google Tag Manager is used to manage statistics and marketing services; Google Analytics 4 evaluates use of the website (e.g. pages visited, time spent on the site, approximate origin, device used). In doing so, the cookies _ga and _ga_* are set with a lifetime of up to 2 years; your IP address is processed by Google in truncated form and is not stored. Usage data in Google Analytics is deleted after 14 months. As part of this processing, data may be transferred to Google LLC in the USA; the basis for this is the European Commission's adequacy decision on the EU-US Data Privacy Framework, under which Google LLC is certified.

Neither Google Tag Manager nor Google Analytics is loaded without your consent; no cookies are set and no data is transferred to Google. In addition, Google Consent Mode v2 is active, with the default setting "rejected". Legal basis: Art. 6(1)(a) DSGVO and Section 25(1) TDDDG (Telecommunications and Digital Services Data Protection Act, consent). You can withdraw your consent at any time, with effect for the future, via the "cookie settings" link in the page footer. Further information: policies.google.com/privacy.

Fonts, scripts & web assets (from the practice's own servers)

All fonts (including Fraunces, Inter, JetBrains Mono), JavaScript libraries (e.g. GSAP, Lenis), and other design elements are delivered exclusively from the practice's own servers. This page also loads fonts and an explainer video from our server, zahnkompetenzzentrum.de, which is operated by the same practice (data controller, see above). No connections are established to third-party providers such as Google Fonts, Google CDN, Cloudflare, or jsDelivr for this purpose. When these elements load, your IP address is transmitted to this practice-owned server; no data is passed on to uninvolved third parties as a result (for the integration of Dr. Flex, see above).

6. Reach Measurement (Our Own Statistics)

For the statistical evaluation of how our pages are used, we use a self-hosted, cookieless analytics system. The script used for this is delivered exclusively from our own server; no cookies are set, no local storage is used, and no data is transferred to third parties. Only the following details are recorded, none of which can be linked back to you personally:

Your IP address is not stored in this process; to avoid duplicate counting, it is only processed together with the current date into a non-reversible hash value that changes daily, and is then discarded. There is no recognition beyond the day in question, nor any identification of individual visitors. If your browser sends a “Do Not Track” or “Global Privacy Control” signal, no measurement takes place at all. The legal basis is our legitimate interest in privacy-friendly traffic measurement (Art. 6(1)(f) DSGVO); as no non-essential access to information on your device takes place, this measurement does not require consent under Section 25(2) No. 2 TDDDG (German Telecommunications and Telemedia Data Protection Act). We retain the aggregated statistics without any personal reference.

7. Push Notifications

If your browser supports it, you can optionally subscribe to push notifications (for example about emergency services or appointment reminders). Activation takes place only at your explicit request, via the relevant button and the subsequent prompt from your browser. In doing so, your browser creates an anonymous push subscription (the endpoint address of your browser's push service, together with cryptographic keys), which is transmitted to our server and stored there, along with the topics and language you have chosen, so that we can send you notifications. To manage the subscription, a technically necessary entry is set in your browser's local storage and a service worker is registered. The subscription does not contain any data that directly identifies you. The legal basis is your consent (Art. 6(1)(a) DSGVO, Section 25(1) TDDDG). You can withdraw your consent to notifications at any time — via your browser's notification settings for this website, or by deactivating the subscription again on the page.

8. Getting in Touch by Email or Phone

If you contact us by email or telephone, we process your details (name, contact information, content of the enquiry) solely to deal with your request. The legal basis is Art. 6(1)(b) DSGVO, insofar as the enquiry relates to a treatment contract or its initiation, and otherwise Art. 6(1)(f) DSGVO (legitimate interest in responding to enquiries); if you share health data with us, processing is based on Art. 9(2)(h) DSGVO in conjunction with Section 22 BDSG (German Federal Data Protection Act). Please note that unencrypted emails are not protected against access by third parties; we therefore recommend sending findings or other sensitive health data by phone or in person instead. We delete email enquiries no later than 6 months after they have been finally dealt with, unless statutory retention obligations apply; data transferred into the patient record is subject to the retention periods that apply there (generally 10 years after the end of treatment, Section 630f BGB (German Civil Code)).

9. Rights of the Data Subject

Under Art. 15 to 22 DSGVO (GDPR), you have the following rights:

To exercise these rights, please contact: datenschutz@zahnarzt-weissenfels.com.

10. Right to Lodge a Complaint with the Supervisory Authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority. Responsible for us:
Landesbeauftragte für den Datenschutz Sachsen-Anhalt (Saxony-Anhalt State Commissioner for Data Protection)
Otto-von-Guericke-Straße 34a, 39104 Magdeburg
Postfach 1947, 39009 Magdeburg
datenschutz.sachsen-anhalt.de

11. Currency of this Policy

This privacy policy was last updated: 21 August 2026. We reserve the right to amend this statement so that it always meets current legal requirements.

← Back to Homepage