Privacy Policy

1 | Responsible body

Kottident Zahnarztpraxis
Anna Wittkopf
Adalbertstr. 94
DE-10999 Berlin-Kreuzberg

Telefon: +49-30-3911155
Fax: +49-30-39903555

E-Mail: info@kottident.de

2 | Purposes and Legal Bases

3 | Hosting with Netlify

Our website is hosted by Netlify Inc., 2325 3rd Street, Suite 296, San Francisco, CA 94107, USA. Netlify operates servers at various locations, including within the European Union, e.g., in Frankfurt am Main (Germany).

As part of hosting, Netlify processes technically necessary server log data, such as:

These data serve to ensure the operational stability and reliability of the service.

The transfer of personal data to the USA is based on standard contractual clauses pursuant to Art. 46 GDPR as well as Netlify’s certification under the EU-U.S. Data Privacy Framework (DPF).

The legal basis for processing the server log data is Art. 6(1)(f) GDPR (legitimate interest in the technical stability of the website).

4 | Contact Form & Email

When you contact us via form or email, we store your details to process the request and follow up. Unencrypted emails may have security vulnerabilities.

5 | Cookies and Consent Management

We set technically necessary cookies based on our legitimate interest according to Art. 6(1)(f) GDPR, as they are required for the operation and security of the website.

Statistics and marketing cookies (see below) are only set after active consent via our consent banner “JustGoodCookies.” You may withdraw your consent at any time by clicking on “Cookie Settings.”

6 | Google Tag Manager (GTM)

Our site uses Google Tag Manager from Google LLC (1600 Amphitheatre Parkway, Mountain View CA 94043, USA). GTM centrally manages website tags and loads them only after your consent (category “Analytics & Advertising”). Legal basis: consent.

7 | Google Tag (gtag.js)

Google Tag is a library that activates Google’s marketing and analytics functions (Ads Conversion, Remarketing, GA4). It uses Consent Mode v2, which means that without consent, only anonymized pings are sent and no advertising-relevant cookies are set.

8 | Google Ads (Conversion Tracking & Remarketing)

With consent, Google Tag sets cookies such as “_gcl_au” (storage period ≈ 90 days) to measure conversions and assign visitors to audiences. Data may be merged into Google Ads accounts in the USA.

9 | Meta Ads (Facebook & Instagram Ads)

This website uses marketing technologies from Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Meta”) to include visitors in audiences (“Custom Audiences”) for personalized advertising (e.g., Facebook/Instagram Ads).

Data collection takes place via the Meta Pixel (optionally supplemented by the Conversion API), which is activated after consent via our consent banner. This allows us, for example, to see whether a person has performed a specific action (conversion) after clicking an ad.

As part of this service, personal data (e.g., IP address, cookie IDs, browser information, usage behavior) may be transmitted to Meta and linked to existing Meta accounts. Processing may also take place in the USA.

For more information, see the Meta Data Policy

10 | GrowthBook (A/B-Testing & Feature Flags)

This website uses the open-source service GrowthBook from GrowthBook Inc., 228 Park Ave S, PMB 29974, New York, NY 10003, USA.

GrowthBook processes pseudonymized usage data (e.g., interactions with the website, page views, session data) to assign variants and evaluate test results.

Data processing takes place after your consent via our consent banner (category: “Analytics & Optimization”).

Data is processed via GrowthBook’s hosted solution or, alternatively, via our own infrastructure. When using the cloud version, data may be transferred to the USA.

Further information: https://www.growthbook.io/privacy

11 | Further External Services

12 | Storage Period & Deletion

Server log files: max. 7 days.
Patient records must be stored for 10 years in accordance with statutory retention obligations in Germany; deletion requests are therefore only possible to a limited extent.

13 | Your Rights

You have the right to access, rectify, delete, restrict processing, data portability, and object.
In Switzerland, there is no right to data portability unless there is an EU context / GDPR applicability.

14 | Complaint to a Supervisory Authority

Federal Commissioner for Data Protection and Freedom of Information (BfDI) or your competent state supervisory authority.

15 | Changes to this Declaration

We will update this privacy policy as soon as technical or legal changes require it. Last updated: 10/13/2025

Book appointment now