Sample Privacy Notice for a Fictional Dental Practice

Individual technical notes on this page concern the real delivery of this publicly accessible demo website. This applies in particular to server log data, map material, local display functions in the browser, and the behavior of the demo contact form. These sections describe technical processes of this demo website; the details about the dental practice itself remain fictional.

1. Fictional Controller in This Sample

For the fictional sample practice, the controller under the GDPR would be:

Am Stadtgarten 12, 10115 Berlin, Germany
Tel.: 030 23125 018
Email: kontakt@praxis-am-garten.example

These details are fictional and are not the privacy information of the demo operator.

2. Data Protection Officer

If a data protection officer has been appointed or must be appointed by law for the concrete practice, the name and contact details would need to be stated here.

3. Processing When the Demo Website Is Accessed

When this demo website is accessed, technically necessary access data may be processed, for example IP address, date and time of access, requested file, referrer, browser information, HTTP status code, and transferred data volume.

Processing takes place to provide the website securely, stably, and in a technically functional manner. The legal basis is Art. 6(1)(f) GDPR. The legitimate interest lies in the secure and reliable operation of the demo website.

In a real client project, hosting, service providers, retention periods, the scope of log data, and legal bases would need to be checked based on the concrete technical implementation.

4. Demo Contact Form

This publicly accessible demo website includes a contact form for demonstration purposes. The form is not transmitted to a practice or to Zetun Web. After the input check, a demo notice appears on the page. No emails are triggered and the entries are not stored server-side.

In a real client project, a contact form may be used to send appointment requests or general messages to the practice. Depending on the form, name, email address, phone number, and the content of the message may be processed. The legal basis may be Art. 6(1)(b) GDPR if the request relates to treatment or appointment booking; in other cases, Art. 6(1)(f) GDPR may be relevant.

The specific legal basis, retention period, technical implementation, and integration of service providers would need to be checked for the respective practice.

Please note: This sample assumes that no health data should be submitted through the contact form. Medical matters should be discussed confidentially by phone or in person at the practice.

5. Recipients and Processors

In a real client project, personal data may be transferred to technical service providers where this is necessary for operation, security, communication, or handling the request, for example hosting providers or email service providers. Where service providers are used as processors, corresponding data-processing agreements would need to be concluded.

6. Map Material on This Demo Website

This section describes the real technical delivery of the map material on this demo website.

Interactive map material on this website is delivered via maps.zetunweb.com. When the map loads, the map server processes and stores technically necessary access data, in particular IP address, time of access, requested file, browser and header data, HTTP status code, and transferred data volume.

The processing is carried out to provide the map, ensure technical operation, prevent abuse, and protect the stability of the map server. The legal basis is Art. 6(1)(f) GDPR. The legitimate interest lies in the secure and reliable delivery of the map material.

The map server is operated by Zetun Web on server infrastructure of a hosting provider in Germany. No cookies are set. The map does not use localStorage, sessionStorage, IndexedDB, or Service Worker storage. Normal HTTP caching by the browser may occur. No third-party map services are loaded.

Map access logs are stored to ensure technical operation, analyze errors, prevent abuse, and protect the stability of the map server. They are deleted no later than after 14 days. System and service logs may contain access data in individual cases and are retained for up to 14 days. Log files are not included in backups.

Map data: © OpenStreetMap contributors, published under the Open Database License (ODbL).

7. Cookies and Local Storage

This demo website does not set cookies. It uses localStorage for display and comfort features in the browser. Unlike cookies, localStorage entries are not automatically sent to the server.

When you select a color scheme with the switch in the site header, your choice is stored in your browser’s local storage. On blog pages, additional display options for readability may be stored. Further local storage may be used for similar display and interaction functions.

These values only affect the website presentation. They do not contain names, contact details, or message content, are not sent by this demo website to our server or third parties, and can be deleted through the browser settings.

In a real client project, cookies, local storage, consent requirements, and functional storage would need to be checked based on the concrete technical implementation.

8. Your Rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection (Art. 21 GDPR). You may also lodge a complaint with a data protection supervisory authority. For the fictional Berlin sample practice, this would be:

Email: mailbox@datenschutz-berlin.de

For privacy questions about the demo operator Zetun Web, the information in the Zetun Web privacy policy applies.