For questions about data protection and to exercise your rights, please use the contact details in section 1. We have not appointed a data protection officer; our practice is not legally required to do so.

Our website is operated in a data centre in Germany by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The connection to our website is encrypted (TLS).

When you visit our website, the server processes technically necessary data: your IP address, date and time of the request, the requested address, the status code, the amount of data transferred, the previously visited page (referrer) and information about your browser and operating system. This data is needed to deliver the page. It is also stored in log files to detect errors and defend against attacks.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is to provide the website securely and reliably. Log files are deleted after seven days.

We have commissioned the agency bevis – Agentur für digitale Präsenz, Markt Schwaben, Germany, with operating and maintaining the website. It uses Hetzner Online GmbH as a sub-processor. Both process data exclusively on our behalf on the basis of data processing agreements under Art. 28 GDPR. No data is transferred outside the European Union for hosting.

On your first visit, a banner asks whether you allow the interactive map (section 5), Google Analytics (section 7) and Google Ads (section 8). You can accept all services, decline all, or choose individually. For this we use the open-source tool Klaro, operated on our own server; it does not transmit any data to third parties.

Until you give consent, these services are completely switched off: no scripts are loaded from Google or OpenFreeMap, no cookies are set and no anonymous signals are sent.

Only when you make a choice in the banner does Klaro store your decision in a cookie named “klaro”. It only contains which services you allowed or declined and no identifier by which you could be recognised. The cookie is deleted after 120 days.

This storage is strictly necessary so that we can respect your decision on every page view without asking again (Section 25(2) no. 2 of the German Telecommunications Digital Services Data Protection Act, TDDDG). Insofar as personal data is processed, the legal basis is Art. 6(1)(f) GDPR; our legitimate interest is to respect your decision. Insofar as we document consents given, the legal basis is Art. 6(1)(c) in conjunction with Art. 7(1) GDPR.

You can change or withdraw your choice at any time via the “Privacy settings” link in the footer. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

By default we show our location as a map image that we serve ourselves. No data is transmitted to third parties. If you wish, you can activate an interactive map for zooming and panning – via the “Load interactive map” button or via “Privacy settings”.

Only after your consent does your browser load map data (map style, tiles and symbols) from the map service OpenFreeMap (tiles.openfreemap.org). The operator is Hyperknot Software Kft., Hungary, email: privacy@openfreemap.org. Your IP address, the requested map sections and technical information about your browser are transmitted to the provider. According to the provider, OpenFreeMap does not store IP addresses in its access logs; error logs that may contain an IP address are deleted after seven days, and in the event of security incidents after 30 days at the latest. The map library may cache map data in your browser.

OpenFreeMap may deliver the data via the network of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Your IP address may therefore be transferred to the USA. Cloudflare is certified under the EU-US Data Privacy Framework; the transfer is therefore based on the European Commission’s adequacy decision (Art. 45 GDPR). As the map is only loaded at your explicit request, the transfer additionally takes place only with your explicit consent (Art. 49(1)(a) GDPR), on which we rely should the adequacy decision cease to apply. Please note: the USA does not provide a level of data protection comparable to the EU; US authorities may be able to access data without you being informed or having effective legal remedies.

The legal basis for loading the map is your consent (Art. 6(1)(a) GDPR and Section 25(1) TDDDG). Further information: OpenFreeMap privacy policy (external link, opens in a new tab) and Cloudflare privacy policy (external link, opens in a new tab).

If you consent to Google Analytics or Google Ads, we load Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Tag Manager is a tool we use to integrate the services described in sections 7 and 8 and to control them according to your choice. It does not set cookies itself and does not create user profiles. When it loads, your IP address is transmitted to Google; a transfer to the USA may take place (section 9).

The legal basis is your consent (Art. 6(1)(a) GDPR and Section 25(1) TDDDG). Without consent, Tag Manager is not loaded.

With your consent we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, to understand how our website is used – for example which pages are viewed, how long visitors stay and how they find us. We use these insights to improve our website.

Google Analytics stores a randomly generated identifier for your browser in the cookies “_ga” and “_ga_…” (lifetime two years) and records page views, time on page, clicks (for example on our phone number), device and browser information, the source of the visit and your approximate location. The location is derived from your IP address; the IP address itself is not stored by Google Analytics. We have disabled Google Signals (cross-device analysis and demographic characteristics) and do not link the data to you personally. Data is deleted at Google after 14 months.

Google processes the data on our behalf on the basis of a data processing agreement (Art. 28 GDPR). A transfer to the USA may take place (section 9).

The legal basis is your consent (Art. 6(1)(a) GDPR and Section 25(1) TDDDG). Insofar as visiting individual treatment pages could allow conclusions about your health, processing is based on your explicit consent (Art. 9(2)(a) GDPR). You can withdraw your consent at any time via “Privacy settings”. You can additionally prevent collection by Google Analytics with the browser opt-out add-on (external link, opens in a new tab). Further information: How Google uses data from sites (external link, opens in a new tab) and Google privacy policy (external link, opens in a new tab).

We place ads in Google Search. With your consent we use Google Ads conversion tracking (Google Ireland Limited) to measure whether visitors who reached us via one of our ads subsequently take a specific action – such as clicking our phone number or email address or opening the contact page. This helps us assess whether our ads are useful.

If you reach us via a Google ad, Google stores a click identifier in the cookie “_gcl_au” (lifetime 90 days). If you perform one of the actions mentioned, this is transmitted to Google together with the click identifier. We only receive aggregate figures from Google, for example how many ad clicks led to a call; we cannot identify you personally from this. We do not use remarketing or personalised advertising based on your visit.

Google is itself responsible for processing within its advertising network; the Google Ads Controller-Controller Data Protection Terms (external link, opens in a new tab) apply. A transfer to the USA may take place (section 9).

The legal basis is your consent (Art. 6(1)(a) GDPR and Section 25(1) TDDDG). You can withdraw your consent at any time via “Privacy settings” and disable personalised advertising from Google in your Google ads settings (external link, opens in a new tab).

Google Ireland Limited may transfer data to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google LLC is certified under the EU-US Data Privacy Framework; the transfer is based on the European Commission’s adequacy decision (Art. 45 GDPR). In addition, our agreements with Google include the European Commission’s standard contractual clauses (Art. 46(2)(c) GDPR). Please note: the USA does not provide a level of data protection comparable to the EU; US authorities may be able to access data without you being informed or having effective legal remedies.

Fonts, photos and the images on the home page are served from our own server. No fonts or media are loaded from third parties and no videos from external platforms are embedded.

You can reach us by phone on +49 89 53 24 30 and by email at praxis@zahnarztpraxismuenchen.de. The email link on our website opens your own email program. There is no contact form on this website.

We process the information you provide – such as your name, contact details and your request – to answer your enquiry and, where applicable, to arrange an appointment. If your enquiry concerns treatment or an appointment, the legal basis is Art. 6(1)(b) GDPR. For other enquiries it is Art. 6(1)(f) GDPR; our legitimate interest is responding to enquiries. Health information is processed under Art. 9(2)(h) GDPR in conjunction with Section 22(1) no. 1(b) of the German Federal Data Protection Act (BDSG), subject to professional confidentiality. This also applies to health information you provide on your own initiative; we use it solely to deal with your request.

Emails are received and stored on our behalf by our email provider: STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany, on servers in Germany (Art. 28 GDPR). Your email is encrypted in transit according to the state of the art (TLS), but its content is not end-to-end encrypted.

We delete your enquiry once it has been dealt with and no statutory retention obligations apply. If the communication relates to treatment, it may become part of your patient record, which must be retained for ten years after completion of treatment under Section 630f(3) of the German Civil Code (BGB).

Please do not send us health data by email. Please do not send findings, X-rays or other information about your health this way. For questions about your treatment, call us on +49 89 53 24 30. You can also send documents by post or bring them to your appointment.

We accept applications, including unsolicited applications, by email to praxis@zahnarztpraxismuenchen.de or by post. We process your application documents and information from interviews to decide on employment. The legal basis is Art. 6(1)(b) GDPR (steps prior to entering into a contract). Health information, such as a severe disability, is processed only if you provide it and only insofar as required for the application process under employment law (Art. 9(2)(b) GDPR in conjunction with Section 26(3) BDSG).

Only the people in our practice involved in the selection have access. Emails are additionally processed by our email provider (section 11).

If you are hired, your documents become part of your personnel file. Otherwise we delete or destroy them six months after the end of the process so that we can respond to possible claims under the German General Equal Treatment Act (AGG).

Our website links to other providers, for example the dental emergency service of the Kassenzahnärztliche Vereinigung Bayerns (kzvb.de), OpenStreetMap for directions (openstreetmap.org), our Instagram profile (instagram.com) and THE MUNICH DOCs (themunichdocs.com). These are links only; we do not embed plugins or content from these providers. As long as you do not click a link, no data is transmitted to the respective provider. From the click onwards, the respective provider is responsible for data processing.

You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR). You can withdraw any consent given at any time with effect for the future (Art. 7(3) GDPR) – for the map, Google Analytics and Google Ads via the “Privacy settings” link in the footer, otherwise via the contact details in section 1.

Right to object: Where we process your data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation (Art. 21 GDPR). We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:

You are not obliged to provide us with personal data. However, the website cannot be displayed without the technically necessary connection data. Without contact details we cannot reply to you, and without application documents we cannot consider your application. The website can be used in full without consenting to the map, Google Analytics or Google Ads.

No automated decision-making, including profiling (Art. 22 GDPR), takes place.

We update this privacy policy when processing on our website or the legal situation changes. The version published here applies.

Last updated: November 2026