Shopping cart (0)
-Your shopping cart is empty!-
-Your shopping cart is empty!-
Data protection is of particularly high importance in our company and when using our website. Use of our website www.konzept-weiss.de is generally possible without providing personal data. We process users’ personal data only insofar as this is necessary to provide a functional website and to provide and perform our services.
As a rule, personal data is processed only with the user’s consent. An exception to obtaining the user’s consent in advance exists only if obtaining prior consent is technically and practically impossible and the processing of the data is permitted by statutory provisions.
On our website www.konzept-weiss.de, we present our range of products in the field of teeth whitening. You have the simple and non-binding opportunity to obtain an overview of our product range. You have the opportunity to purchase the products shown via the shop software integrated into our website www.konzept-weiss.de and to arrange appointments via the location-based subdomains, for example berlin.konzept-weiss.de. Personal data is processed for these activities; further details are set out in the following sections. You can also find information about the Konzept Weiss stores on site via our website www.konzept-weiss.de and the respective subdomain, and contact them if necessary.
(1) Scope
This Privacy Policy applies to the collection and processing of personal data on the website www.konzept-weiss.de and to all location-based subdomains operating under the main domain (“…konzept-weiss.de”), for example berlin.konzept-weiss.de.
(2) Legal bases
Where we have obtained the data subject’s consent for the processing of personal data, or obtain it from the data subject, Article 6(1)(a) GDPR constitutes the legal basis for the data processing.
If we have a contractual relationship with the data subject and the processing of personal data is necessary to fulfill our contractual obligations, the data processing is carried out on the basis of Article 6(1)(b) GDPR. This also applies to processing operations that are necessary in the context of initiating contractual relationships.
Where the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Article 6(1)(c) GDPR serves as the legal basis.
If processing is necessary to safeguard the legitimate interests of our company or a third party, and the interests, fundamental rights, and freedoms of the data subject do not override those interests, the data will be processed on the basis of Art. 6 para. 1 lit. f GDPR.
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies under the stated legal bases. Data may continue to be stored if this is provided for by the legislature through regulations to which we are subject. The stored data will also be blocked or deleted when the retention period prescribed by the applicable standards expires, unless continued storage is necessary to fulfill contractual purposes.
(3) Controller within the meaning of the GDPR
The controller within the meaning of the General Data Protection Regulation and other national data protection laws, as well as other data protection provisions, is:
Jack Papen
KONZEPT WEISS Zahnaufhellung GmbH
Siemesdyk 60
47807 Krefeld
Email: info@konzept-weiss.de
Website: www.konzept-weiss.de
(4) Operation of an online shop
We have set up an online shop on our website that enables you to order our goods. To process the order, the customer enters personal data, which we store. This includes:
- Last name, first name
- Address (billing and delivery address)
- Payment details
- Email address
The data is strictly necessary to process your order and deliver the goods. Data processing is strictly necessary to fulfill our contractual obligations under the purchase agreement; the legal basis is Art. 6 para. 1 lit. b GDPR.
To process the order, your data must also be disclosed to third parties. These are primarily service providers in the areas of order processing, payment processing, and transport. The personal data collected for processing the order will be deleted after the order has been completed. For more information about your rights, please refer to the last paragraph of this privacy policy.
(5) Newsletter
You have the option of subscribing to a free newsletter via our website. When registering for the newsletter, the data from the input form is transmitted to us. You will then receive an email from us asking you to confirm your subscription to our newsletter. Your email address is collected during the registration process. Your consent to the processing of the data is obtained during the registration process, and reference is made to this privacy policy. The legal basis for processing your data is Art. 6 para. 1 lit. a GDPR.
If you request and/or purchase goods or services from us and provide your email address in the process, we may subsequently use it to send you a newsletter. In such a case, the newsletter will contain exclusively direct advertising for our own similar goods or services. The legal basis for sending the newsletter in this case is § 7 (3) UWG.
No data is disclosed to third parties in connection with data processing for sending newsletters. The data is used exclusively to send the newsletter. The collection of the user's email address serves to deliver the newsletter. The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. Accordingly, the user's email address will be stored for as long as the newsletter subscription is active. The newsletter subscription may be canceled by the data subject at any time. For this purpose, each newsletter contains a corresponding link. Cancellation simultaneously revokes consent to the storage of the personal data collected during the registration process.
(6) Contact Form and Email Contact
We offer a contact form that can be used for electronic contact. If a user takes advantage of this offer, the data entered in the input form will be transmitted to us and stored. The following data may be entered: name, address, telephone number, email address.
Your consent to the processing of the data will be obtained during the submission process, and reference will be made to this privacy policy.
Alternatively, contact can be made via the provided email address. In this case, the user's personal data transmitted with the email will be stored.
The legal basis for processing the data in this respect is Art. 6 (1) (b) GDPR. In other cases, the legal basis for data processing is the user's consent pursuant to Art. 6 (1) (a) GDPR.
The processing of personal data from the contact form and an email serves to handle the contact request in accordance with the user's inquiry and instructions. Other personal data processed during the submission process serves to prevent misuse and ensure the security of our information technology systems.
The data submitted by the user is deleted once the purpose of its transmission has been achieved. For data submitted via the contact form and email, this is when the respective conversation with the user has ended.
The user may withdraw consent to the processing of personal data at any time and object to the storage of their personal data at any time. It is sufficient for the user to notify us informally, orally or in writing; no particular means of communication is required. We recommend notifying us by email. In this case, all personal data stored by us in the course of contacting us will be deleted.
(7) Provision of the website and creation of log files
Whenever our website is accessed, our system automatically collects general information from the computer system of the accessing computer.
The following data is collected:
The data is also stored in our system's log files. The collected data is not stored in connection with other personal data of the user.
The legal basis for the temporary storage of data and log files is Article 6(1)(f) GDPR. The temporary storage of the IP address by the system is necessary to enable delivery of our website to the user's computer. The user's IP address must remain stored for the duration of the session. Log files are stored to ensure the website's functionality. The data also helps us optimize the website and ensure the security of our information technology systems. The data is not evaluated for other purposes, such as marketing.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of data collected to provide the website, this is when the respective session ends. Generated log files are deleted after 7 days at the latest. If storage beyond this period occurs, the collected IP addresses are deleted or anonymized so that the requesting client can no longer be identified.
The collection of data for providing our website and storing the data in log files is absolutely necessary for operating the website; in this respect, the user has no option to object.
(8) Use of cookies
Our website uses cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user's computer system. When a user accesses a website, a cookie may be stored on the operating system of the user. This cookie contains a characteristic string of characters that enables unique identification of the browser when the website is accessed again.
We use cookies on our website to ensure the smooth functioning of the shop and inquiry form. The user data collected in this way is pseudonymized through technical measures, so it is not possible to assign the data to a user. The data is not stored together with other personal data of the user.
When users access our website, an information banner informs them about the use of cookies for analytics purposes and refers them to our privacy policy. The storage of cookies can be prevented in the browser settings.
The legal basis for processing personal data using cookies is Article 6(1)(f) GDPR. Cookies are used to ensure the smooth functioning of the shop and our website.
Cookies are stored on the user's computer and transmitted from it to us. In this respect, the user has full control over the use of cookies and can disable or restrict their use through their internet browser settings. Cookies that have already been stored can be deleted by the user at any time. However, if cookies are disabled for our website, the functionality of our website may be limited.
(9) Web analytics through Google Analytics
We use Google Analytics on our website, a web analytics service provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). This makes it possible to assign data, sessions, and interactions to a pseudonymous user ID and thus analyze a user's activities.
Google Analytics uses cookies (see above) that are stored on your computer and analyze how you use the website. The information generated by the cookie about your use of this website is generally transmitted to and stored on a Google server in the USA. However, if IP anonymization is activated on this website, Google truncates your IP address beforehand within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there. The IP address transmitted by your browser as part of Google Analytics is not combined with other Google data.
On behalf of the website operator, Google uses this information to evaluate your use of our website, compile reports on website activity, and provide the website operator with other services related to website and internet usage. Our legitimate interest in data processing lies in providing these services; the legal basis for using Google Analytics is therefore Art. 6 (1) lit. f GDPR. The data we send and link to cookies, user IDs (e.g. user ID), or advertising IDs is automatically deleted after 14 months. Data whose retention period has been reached is automatically deleted once a month. Google provides you with more detailed information about the terms of use and privacy of Google Analytics at the link https://www.google.com/analytics/terms/de available.
You can prevent cookies from being stored by selecting the appropriate setting in your browser software; in this case, you may not be able to use all the functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address), as well as Google’s processing of this data, by using the browser add-on https://tools.google.com/dlpage/gaoptout?hl=de download and install. Opt-out cookies prevent the future collection of your data when visiting this website.
(10) Use of Google AdWords
To statistically record the use of our website and evaluate it for the purpose of optimizing our website for you, we use Google Conversion Tracking. Google AdWords places a cookie (see above) on your computer if you reached our website via a Google advertisement. These cookies expire after 30 days and are not used for personal identification. If the user visits certain pages of the AdWords customer's website and the cookie has not yet expired, Google and the customer can recognize that the user clicked on the advertisement and was redirected to this page. Each AdWords customer receives a different cookie. Cookies therefore cannot be tracked across the websites of AdWords customers.
The information collected using the conversion cookie is used to create conversion statistics for Adwords customers who have opted for conversion tracking. Adwords customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion-tracking tag. However, you do not receive any information that can be used to personally identify users.
If you do not wish to participate in the tracking process, you can also refuse to allow the required cookie to be set - for example, by changing your browser settings to generally disable the automatic setting of cookies. You can also disable cookies for conversion tracking by configuring your browser to block cookies from the domain "www.googleadservices.com". You can find Google's privacy notice on conversion tracking here (https://services.google.com/sitestats/de.html).
(11) Meta Pixel (formerly Facebook Pixel)
Based on your consent, we collect data on our pages using "Meta Pixel", a service provided by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. This allows us to track users' actions after they have been redirected to a provider's website by clicking on a Facebook advertisement. This enables us to record the effectiveness of Facebook advertisements for statistical purposes.
The data collected remains anonymous to us. This means that we cannot view the personal data of individual users. However, the data collected is stored and processed by Meta. We inform
You regarding this matter, in accordance with our current information. Meta may link the data to the data in your Facebook account and uses the data for its own advertising purposes, according to its data policy https://www.facebook.com/about/privacy/.
Conversion tracking also allows Meta and its partners to display advertising to you on and outside Facebook. In addition, a cookie is stored on your computer for these purposes. Information on the purpose and scope of data collection and the further processing and use of data by Meta, as well as your related rights and privacy protection settings, can be found in Meta's privacy notices: https://www.facebook.com/about/privacy/ or at https://www.facebook.com/help/568137493302217.
If we transmit data to Meta for matching purposes, it is encrypted and only then sent via a secure HTTPS connection. There, it is matched with data that has likewise been encrypted by Meta.
Meta Conversions API (formerly Facebook Conversion)
With your consent, we also use Meta’s Conversions API. The Conversions API provides a
Establishes a connection between the advertiser’s marketing data and the Meta systems. This enables us to measure the ad
Optimize targeting and measure results. This takes place via a secure connection between our server and Meta’s systems. In addition to Meta Pixel, server events are matched here to measure, report on, and optimize our offers.
With both methods, Meta Pixel and Conversions API, personal data may be transferred to Meta Platforms, Inc., One Hacker Way, Menlo Park, CA 94025, USA. You also consent to this transfer by giving your consent. There is a risk that US security authorities may process your data without informing you or providing you with legal remedies.
For “event data” collected on our website, such as visits, we are and
Meta and we are joint controllers within the meaning of the General Data Protection Regulation (Art. 26 GDPR). The joint responsibility applies to the collection of data and its transfer to Meta. We have concluded an agreement for this purpose, which you can view at the following link: https://www.facebook.com/legal/controller_addendum. To exercise your data protection rights set out in Section 1 of this privacy policy, you can contact us or Meta Platforms.
The kfzankauf-24.de GmbH is the controller responsible for the aggregated “analytics data” provided to us by Meta. Meta processes this data on our behalf. For this purpose, we have concluded a data processing agreement: https://www.facebook.com/legal/terms/dataprocessing.
We delete personal data that we collect as part of the Meta services when you request us to do so. For information on the retention period applied by Meta Platforms Ltd., please refer to its data policies or contact the company directly.
You can withdraw your consent to Meta Platforms’ services for the future by resetting your selection in our consent management system. You can also send us a withdrawal using the contact details provided in this document.
The use of the service is based on Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the purpose described above.
(12 )TikTok Ads
Based on your consent, we collect data on our website through “TikTok Ads”, a service provided by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin DO2 T380, Ireland. This allows us to track users’ actions after they have been redirected to a provider’s website by clicking on a TikTok advertisement. This enables us to record the effectiveness of TikTok advertisements for statistical purposes.
The data collected remains anonymous to us. This means that we cannot view the personal data of individual users. However, the data collected is stored and processed by TikTok. We inform you
We will inform you about this matter in accordance with our current information. TikTok may link the data to the data in your TikTok account and use the data for its own advertising purposes, according to its data policies: https://www.tiktok.com/legal/page/eea/privacy-policy/de-DE.
Conversion tracking also allows TikTok and its partners to display advertising to you on and outside TikTok. In addition, a cookie is stored on your computer for these purposes. You can find the purpose and scope of data collection and the further processing and use of the data by TikTok, as well as the users' related rights and privacy protection settings, in Meta's privacy notices: https://www.tiktok.com/legal/page/eea/privacy-policy/de-DE.
(13) Use of social media plugins
Our website uses Facebook social plugins operated by Facebook Inc. (1 Hacker Way, Menlo Park, California 94025, USA). The integrations can be recognized by the Facebook logo or by the terms "Like", "Gefällt mir", and "Teilen" in Facebook's colors (blue and white). You can find information about all Facebook plugins at the following link: https://developers.facebook.com/docs/plugins/
The plugins are only activated when you click the corresponding buttons. If they are displayed in grey, the plugins are inactive. You have the option of activating the plugins once or permanently.
The plugins establish a direct connection between your browser and the Facebook servers. This only occurs after the plugin has been activated. We have no influence whatsoever on the nature and scope of the data that the plugin transmits to Facebook Inc.'s servers. You can find information about this here: https://www.facebook.com/help/186325668085084
The plugin informs Facebook Inc. that you, as a user, have visited this website. It is possible that your IP address may be stored in this process. If you are logged into your Facebook account while visiting this website, the information mentioned will be linked to it.
Our website uses social plugins from YouTube LLC, a provider operated by Google (with its registered office at 901 Cherry Avenue, San Bruno, CA 94066, USA). The integrations can be recognized by the YouTube button, which generally consists of the word YouTube and a white triangle on a red background (play symbol).
The plugins are only activated when you click the corresponding buttons. If they are displayed in grey, the plugins are inactive. You have the option of activating the plugins once or permanently.
The plugins establish a direct connection between your browser and the YouTube servers. This only occurs after the plugin has been activated. We have no influence whatsoever on the nature and scope of the data that the plugin transmits to YouTube/Google's servers. You can find more information about the YouTube/Google plugins here: https://policies.google.com/privacy?hl=de&gl=de
The plugin informs YouTube that you, as a user, have visited our website. It is possible that your IP address may be stored. If you are logged into your YouTube account while visiting this website, the aforementioned information will be linked to it.
Our website uses Instagram plugins operated by Instagram Inc. (601 Willow Road, Menlo Park, CA, 94025, USA). The integrations can be recognized by the Instagram button, generally the word "Instagram" combined with a camera pictogram in white on a colorful (yellow, red, purple) background.
The plugins are only activated when you click the corresponding buttons. If they are displayed in grey, the plugins are inactive. You have the option of activating the plugins once or permanently.
The plugins establish a direct connection between your browser and Instagram's servers. This only occurs after the plugin has been activated. We have no influence whatsoever on the nature and extent of the data that the plugin transmits to Instagram's servers. Further information about the Instagram plugin can be found here:
http://instagram.com/about/legal/privacy/.
The plugin informs Instagram that you, as a user, have visited our website. It is possible that your IP address may be stored. If you are logged into your Instagram account while visiting this website, the aforementioned information will be linked to it.
(14) Rights of the data subject
Where personal data concerning you are processed, you have the following rights:
You may request confirmation from the controller as to whether personal data concerning you are being processed by us.
If such processing takes place, you may request the controller to provide you with the following information:
(a) the purposes for which the personal data are processed;
(b) the categories of personal data being processed;
(c) the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;
(d) the planned duration of storage of the personal data concerning you or, if specific information cannot be provided, the criteria for determining the storage period;
(e) the existence of a right to rectification or erasure of the personal data concerning you, a right to restriction of processing by the controller, or a right to object to such processing;
(f) the existence of a right to lodge a complaint with a supervisory authority;
(g) all available information about the origin of the data if the personal data are not collected from the data subject;
(h) the existence of automated decision-making, including profiling, pursuant to Art. 22 paras. 1 and 4 GDPR and - at least in these cases - meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.
You have the right to request information as to whether personal data concerning you are transferred to a third country or an international organisation. In this context, you may request to be informed about the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.
You have the right to request the rectification and/or completion of personal data concerning you from the controller if the processed personal data are inaccurate or incomplete. The controller must rectify them without undue delay.
You may request the restriction of processing of the personal data concerning you under the following conditions:
(a) if you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data;
(b) the processing is unlawful and you refuse the erasure of the personal data and instead request the restriction of the use of the personal data;
(d) the controller no longer needs the personal data for the purposes of processing, but you need them for the establishment, exercise or defence of legal claims, or
(e) if you have objected to processing pursuant to Art. 21 para. 1 GDPR and it has not yet been established whether the controller's legitimate grounds override your grounds.
If the processing of personal data concerning you has been restricted, such data may - apart from being stored - only be processed with your consent, or for the establishment, exercise or defence of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or a Member State. If the restriction of processing was imposed under the above-mentioned conditions, you will be informed by the controller before the restriction is lifted.
Obligation to erase
You may request that the controller erase the personal data concerning you without undue delay, and the controller is obliged to erase these data without undue delay if one of the following grounds applies:
(a) The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
(b) You withdraw your consent, on which the processing was based pursuant to Art. 6(1)(a) or Art. 9(2)(a) GDPR, and there is no other legal basis for the processing.
(c) You object to the processing pursuant to Art. 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21(2) GDPR.
(d) The personal data concerning you have been unlawfully processed.
(e) The erasure of the personal data concerning you is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject.
(f) The personal data concerning you were collected in relation to information society services offered pursuant to Art. 8(1) GDPR.
Exceptions
The right to erasure shall not apply insofar as processing is necessary
(a) to exercise the right of freedom of expression and information;
(b) to comply with a legal obligation requiring processing under Union or Member State law to which the controller is subject, or to perform a task carried out in the public interest or in the exercise of official authority vested in the controller;
(c) for reasons of public interest in the area of public health pursuant to Art. 9(2)(h) and (i) and Art. 9(3) GDPR;
(d) for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes pursuant to Art. 89(1) GDPR, insofar as the right referred to in section a) is likely to render the achievement of the objectives of this processing impossible or seriously impair it, or
(e) for the establishment, exercise or defense of legal claims.
If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves disproportionate effort. You have the right to be informed by the controller about these recipients.
You have the right to receive the personal data concerning you that you have provided to the controller in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to whom the personal data were provided, provided that
(a) the processing is based on consent pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR or on a contract pursuant to Art. 6 para. 1 lit. b GDPR and
(b) the processing is carried out by automated means.
In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one controller to another, where technically feasible. The freedoms and rights of other persons must not be adversely affected as a result.
The right to data portability does not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you that is based on Art. 6 para. 1 lit. e or lit. f GDPR; this also applies to profiling based on these provisions.
The controller will no longer process the personal data concerning you, unless it can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
Where the personal data concerned are processed for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data concerned for the purposes of such marketing; this also applies to profiling insofar as it is related to such direct marketing.
If you object to processing for the purposes of direct marketing, your personal data concerned will no longer be processed for these purposes.
You have the option, in connection with the use of information society services - notwithstanding Directive 2002/58/EC - to exercise your right to object by automated means using technical specifications.
You have the right to withdraw your consent under data protection law at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
You have the right not to be subject to a decision based solely on automated processing - including profiling - that produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision
(a) is necessary for entering into or performing a contract between you and the controller,
(b) is authorized by Union or Member State law to which the controller is subject, and that law contains appropriate measures to safeguard your rights and freedoms and your legitimate interests, or
(c) with your explicit consent.
However, these decisions must not be based on special categories of personal data pursuant to Art. 9 para. 1 GDPR, unless Art. 9 para. 2 lit. a or lit. g GDPR applies and appropriate measures have been taken to protect your rights and freedoms and your legitimate interests.
With regard to the cases referred to in (a) and (c), the controller shall take appropriate measures to safeguard your rights and freedoms and your legitimate interests, including at least the right to obtain human intervention on the part of the controller, to express your point of view, and to contest the decision.
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or the place of the alleged infringement, if you consider that the processing of your personal data concerning you infringes the GDPR.
The supervisory authority with which the complaint was lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.
As of: November 2021