Legal

Privacy­Policy

1. General Information

The protection of your personal data is of particular concern to us. We treat your personal data confidentially and in accordance with statutory data protection regulations (GDPR, BDSG) and this privacy policy.

2. Controller

The controller for data processing on this website is:

Practice Dr. Stephan Jansen
Berliner Str. 35
63571 Gelnhausen

Phone: 06051 / 29 72
Contact: Contact form on this website

3. Collection and Storage of Personal Data, and the Nature and Purpose of its Use

a) When visiting the website
When you access our website, the browser installed on your device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is collected without any action on your part and stored until automated deletion: IP address, date and time of the request, name and URL of the retrieved file, the website from which access is made (referrer URL), the browser used and, if applicable, the operating system of your computer as well as the name of your access provider. Processing is carried out pursuant to Art. 6(1)(f) GDPR to ensure a smooth connection and system security.

b) Data processing in the context of medical treatment (Art. 9 GDPR)
If you visit our practice as a patient, we collect health data. The collection of health data is a prerequisite for your treatment. The legal basis for processing your data is Art. 9(2)(h) GDPR in conjunction with § 22(1)(1)(b) of the German Federal Data Protection Act (BDSG). Due to statutory requirements, we are obliged to retain this data for a minimum of 10 years after completion of treatment.

4. Data Sharing

Your personal data will not be transferred to third parties for purposes other than those listed below. We only pass on your personal data (e.g. to dental laboratories, billing centres or co-treating physicians) to third parties if: you have given your explicit consent to do so, or it is legally permissible and necessary under Art. 6(1)(b) GDPR for the fulfilment of treatment contracts with you.

5. Digital Appointment Assistant (AI)

To arrange appointments, this website uses a digital assistant based on artificial intelligence. It is available through the chat window. At the start of every conversation you are told that you are talking to an AI and not to a human.

Which data is processed. We process the information you give in the conversation yourself – usually your name, telephone number and/or e-mail address, your preferred appointment and the treatment you would like. Please do not share health information with the assistant beyond naming the treatment you would like; for anything else our practice team is available to you in person.

Purpose and legal basis. The processing serves to arrange, change and cancel treatment appointments. The legal basis is Art. 6(1)(b) GDPR (steps prior to entering into a contract and performance of the treatment contract).

Storage period. Conversation content is deleted automatically after 90 days. Your appointment data is stored in line with the retention periods that apply to the practice.

No automated decision within the meaning of Art. 22 GDPR. The assistant makes no decision about your treatment. It takes appointment requests and gives information about opening hours and services.

You can reach a person at any time. If you do not want to talk to the assistant, you can reach our practice team by telephone on 06051 2972 during normal opening hours or by e-mail at PraxisDr.Jansen@t-online.de. This puts you at no disadvantage.

Processors. To operate the assistant we use the following service providers, who act for us as processors under Art. 28 GDPR; data processing agreements are in place:

  • AVA Digital (Mickaël Farina), Marbella, Spain – operation and maintenance of the assistant
  • Hetzner Online GmbH, Gunzenhausen, Germany – operation of the server the system runs on; server location: Helsinki data centre, Finland (European Union)
  • Google Ireland Limited / Google LLC – the language model used and the practice calendar in which appointments are kept
  • Resend, Inc. – sending appointment confirmations and reminders by e-mail
  • Cloudflare, Inc. – secure delivery of the chat window
  • Backblaze, Inc. – encrypted data backup

With some of these providers, processing may also take place outside the European Union. In those cases the transfer is protected by appropriate safeguards under Chapter V GDPR (standard contractual clauses of the EU Commission or an adequacy decision).

This is a translation; the German version of this privacy policy is authoritative.

6. External Services

This website loads fonts from Google Fonts (fonts.googleapis.com). Your IP address is transmitted to Google servers in the process. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a uniform presentation of the website).

7. Cookies

This website sets a cookie to store your cookie consent (jansen_cookie_consent). This cookie does not contain any personal data and is deleted after 12 months.

8. Your Rights

You have the right:

  • pursuant to Art. 15 GDPR, to request information about your personal data processed by us.
  • pursuant to Art. 16 GDPR, to immediately request the correction of incorrect or completion of your personal data stored by us.
  • pursuant to Art. 17 GDPR, to request the deletion of your personal data stored by us, insofar as the processing is not necessary for exercising the right of freedom of expression or for fulfilling a legal obligation (e.g. statutory retention periods for medical records).
  • pursuant to Art. 77 GDPR, to lodge a complaint with a supervisory authority — generally the Hessian Commissioner for Data Protection and Freedom of Information.

9. Contact

If you contact us by phone or email, your details will be stored for the purpose of processing the enquiry and in the event of follow-up questions. We will not pass on this data without your consent. Legal basis: Art. 6(1)(b) GDPR.