Privacy Policy of the Zahnärztliche Praxis Dr. Pantas

Privacy Policy

We are pleased that you are interested in our practice. Data protection is of particularly high importance to us. Below you will find information about the collection of personal data when you use our website. Personal data includes all data that can be related to you personally (e.g. name, address, e-mail addresses, user behaviour, IP address).

1. Who is responsible for data protection in our practice?

The controller responsible for data protection in our practice, who is available to answer your questions, is:

Practice owner:

Dr. med. dent. Efthymios Pantas

Legal form of the practice:

Gesellschaft mit beschränkter Haftung (German limited liability company)
Managing director: Dr. med. dent. Efthymios Pantas

Practice address:

Medizinisches Versorgungszentrum (medical care centre)
Zahnärztliche Praxis Dr. Pantas GmbH
Heinrich-Heine-Allee 37
40213 Düsseldorf, Germany

Phone: 0211 – 497 67 69
Fax: 0211 – 497 63 79
E-mail: info@dr-pantas.de

2. What personal data do we collect and store? How and for what purposes is it used?

a. When you visit the website www.dr-pantas.de

When you visit our website www.dr-pantas.de, the browser used on your device (e.g. mobile phone, tablet, PC) automatically sends information to the server of our website. This information is stored for a certain period of time in a so-called "log file".

The following information is collected without any action on your part and stored until it is automatically deleted:

• the IP address of the requesting computer,
• the date and time of access,
• the name and URL of the file retrieved,
• the website from which the access was made,
• the browser used and, where applicable, the operating system of your computer as well as the name of your internet service provider.

We process this data for the following purposes:

• to ensure that a connection to the website can be established smoothly,
• to ensure convenient use of our website,
• to evaluate system security and stability, and
• for further administrative purposes.

The legal basis for this data processing is Art. 6(1) sentence 1 point (f) GDPR. Our necessary legitimate interest in the data processing follows from the purposes of data collection listed above.

Under no circumstances do we use the collected data for the purpose of drawing conclusions about your identity.

When you visit our website, we use cookies and analytics services. Further details can be found in section 4 of this privacy policy.

b. When you use our contact form

You are welcome to send us a message via the contact form we provide. A valid e-mail address is required so that we know who the enquiry comes from and can reply to it. You may provide further contact details on a voluntary basis.

We process the data transmitted in this context exclusively to handle your enquiry and, if you so wish, to get in touch with you.

The legal basis for this data processing is Art. 6(1) sentence 1 point (a) GDPR: by providing the data and sending it to us, you give your voluntary consent to the data processing.

The personal data collected for the use of the contact form is automatically deleted once your enquiry has been dealt with.

We expressly point out that data transmission over the internet (e.g. communication by e-mail) may have security gaps. Complete protection of data against access by third parties is not possible. By sending personal data by e-mail, you therefore accept a risk. If you wish to avoid this risk entirely, please do not contact us via the internet.

3. Who may receive your personal data?

As a matter of principle, we do not transfer your personal data to third parties, unless:

• you have given your express consent pursuant to Art. 6(1) sentence 1 point (a) GDPR,
• the disclosure is necessary pursuant to Art. 6(1) sentence 1 point (f) GDPR for the establishment, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in your data not being disclosed,
• there is a legal obligation to disclose the data pursuant to Art. 6(1) sentence 1 point (c) GDPR, or the disclosure is legally permissible and necessary pursuant to Art. 6(1) sentence 1 point (b) GDPR for the performance of contractual relationships with you.

Processors

We use the following service providers as processors:

• MailerSend (MailerSend, UAB, J. Jasinskio g. 16C, 03163 Vilnius, Lithuania) — sending of e-mails from the contact form. Only the data you enter in the contact form (name, e-mail, phone number if provided, message) is transmitted. Legal basis: Art. 6(1)(b) GDPR. Further information: MailerSend privacy policy.
• Dr. Flex GmbH (Neumarkt 2a, 59320 Ennigerloh, Germany) — online appointment booking on an external booking page. Personal data is only processed once you actively open the booking link and enter information there. Further information: Dr. Flex privacy notice.

4. Cookies, analytics, marketing and external services

a. Cookies

In addition to the data mentioned above, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive and assigned to the browser you are using, and through which certain information flows to the party that sets the cookie (in this case, us). Cookies cannot run programs or transfer viruses to your computer. They serve to make the website as a whole more user-friendly and effective. The data processed by cookies is necessary for the stated purposes to safeguard our legitimate interests and those of third parties pursuant to Art. 6(1) sentence 1 point (f) GDPR.

Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or so that a notice always appears before a new cookie is created. Please note, however, that completely deactivating cookies may mean that you cannot use all functions of our website.

b. Web analytics with Matomo (self-hosted)

We use Matomo, a self-operated open-source web analytics solution, to statistically evaluate the use of our website. Matomo is operated on our own infrastructure at matomo.omedas.de. No personal data is transferred to third parties.

Cookieless tracking (without consent): Matomo records basic visit data such as pages viewed, time spent on the site, referrer, device and browser information as well as interactions (phone clicks, e-mail clicks, appointment booking clicks, contact form submissions). In doing so, no cookies are set and your IP address is fully anonymised (2 bytes). Recognition across multiple sessions is not possible in this mode.

Since all data is processed exclusively on our own infrastructure, no cookies are set and no data is passed on to third parties, this tracking is, in the assessment of the German data protection supervisory authorities, permissible without consent. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the statistical analysis of website usage).

Extended tracking (with consent): If you consent to the "Analytics" category in the cookie banner, Matomo additionally sets cookies to recognise you as a returning visitor. The following cookies may be set:

• _pk_id.* — recognition of unique visitors (expiry: 13 months)
• _pk_ses.* — active session (expiry: 30 minutes)

The legal basis for cookie-based tracking is your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG). You can withdraw your consent at any time via our cookie settings.

c. Google Analytics 4 (subject to consent)

With your consent, we use Google Analytics 4 (measurement ID: G-73L6VHSGL6), a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics helps us to statistically evaluate the use of our website and to improve our services. In particular, information about pages viewed, time spent on the site, interactions, technical characteristics of the browser and device used, as well as referrer information may be processed.

In addition, we use Google Analytics 4 to record the following custom events in order to better understand how our website is used:

• clicks on phone numbers (event: phone_click)
• clicks on e-mail addresses (event: email_click)
• clicks on appointment booking links (event: booking_click)
• successful contact form submissions (event: contact_form_submit)

We use Google Consent Mode v2. This means: as long as you have not consented to the "Analytics" category, the Google Analytics script is not loaded and no analytics cookies are set. Google Analytics is only activated after your express consent via our cookie banner.

The following cookies may be set upon consent:

• _ga — distinguishing unique users (expiry: 2 years)
• _gid — distinguishing unique users (expiry: 24 hours)

The legal basis is your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. A transfer of personal data to Google LLC in the USA cannot be ruled out. You can withdraw your consent at any time via our cookie settings. Further information can be found at https://support.google.com/analytics/answer/6004245?hl=de.

d. Session replay (OpenReplay)

With your consent to the "Analytics" category, we use OpenReplay, a self-operated session replay solution. OpenReplay records anonymised session data in order to improve the usability of our website. Mouse movements, clicks and page navigation are recorded. Text entries (e.g. in forms), e-mail addresses and phone numbers are automatically masked and are not stored in plain text.

The data is processed and stored exclusively on our own infrastructure (openreplay.omedas.de). No data is transferred to third parties.

The legal basis is your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. You can withdraw your consent at any time via our cookie settings.

e. Google Ads conversion tracking

With your consent to the "Marketing" category, we use Google Ads conversion tracking (conversion ID: AW-859686806), a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This allows us to determine whether users have reached our website via a Google ad and subsequently perform certain actions, in particular clicks on "Book appointment" and the successful submission of the contact form.

For this purpose, cookies or similar identifiers such as _gcl_au or _gcl_aw may be set or read in order to attribute ad clicks and conversions.

Please note: Google Ads conversion tracking is only activated after your express consent to the "Marketing" category. We use Google Consent Mode v2, so that without consent no advertising-related cookies are set and no data is transmitted.

The legal basis is your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. A transfer of personal data to Google LLC in the USA cannot be ruled out. You can withdraw your consent at any time via our cookie settings. Further information can be found in the Google privacy policy.

f. Online appointment booking via Dr. Flex

For online appointment booking, we use the Dr. Flex service (Dr. Flex GmbH, Neumarkt 2a, 59320 Ennigerloh, Germany). If you have consented to the "External media" category in the cookie banner, a booking widget from Dr. Flex is loaded directly on our website when you click "Book appointment". In doing so, a script (embed.js) is loaded from the servers of Dr. Flex GmbH and data may be transmitted to Dr. Flex.

Without consent to "External media", clicking the booking link will redirect you to the external Dr. Flex page. In that case, no data is transferred to Dr. Flex via our website.

If you book an appointment on the booking page, Dr. Flex processes the data you enter there for the purpose of organising the appointment. The legal basis for embedding the widget is your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. Please refer to the privacy notice of Dr. Flex: https://www.dr-flex.de/info/datenschutz.

g. Google Maps

To display the map on our contact page, we use Google Maps, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The map is only loaded on our website once you have consented to the "External media" category in the cookie banner and activated the Google Maps service. Only then is data transmitted to Google.

The legal basis is your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. Further information can be found in the Google Maps terms of service and in the Google privacy policy.

h. Call tracking (Fonoki)

With your consent to the "Marketing" category, we use Fonoki call tracking, a service provided by Fonoki GmbH. Fonoki dynamically replaces the phone number displayed on our website with a tracking number in order to attribute phone contacts to our online marketing channels in anonymised form. No call content is recorded.

The following data may be processed by Fonoki:

• IP address (truncated),
• referrer information (origin of the website visit),
• time and duration of the call,
• the calling phone number (for attribution purposes, not for disclosure).

The Fonoki script is only loaded after your express consent to the "Marketing" category via our cookie banner. Without consent, the script is not loaded and no data is processed by Fonoki.

The legal basis is your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. You can withdraw your consent at any time via our cookie settings. Further information can be found in the Fonoki privacy policy.

5. Social media

On our website, we link to our profiles on social networks (Facebook, Instagram). These are simple links (no plugins or embedded content). When you click on such a link, you are redirected to the respective platform. Data is only transferred to the social network as a result of your click and your subsequent use of the platform — not when our website is loaded.

The parties responsible for data processing on the respective platforms are:

• Facebook: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland — privacy policy
• Instagram: Meta Platforms Ireland Ltd. — privacy policy

6. Jameda

On our website, we link to our profile on jameda (jameda GmbH, St.-Cajetan-Straße 41, 81669 Munich, Germany). This is a simple external link. Data is therefore only transferred to jameda when you actively click on this link.

Further information on data processing by jameda can be found at https://www.jameda.de/jameda/datenschutz.php.

7. What rights do you have in relation to data protection?

You have the following rights vis-à-vis us regarding the personal data concerning you:

• the right of access (Art. 15 GDPR),
• the right to rectification or erasure (Art. 16, 17 GDPR),
• the right to restriction of processing (Art. 18 GDPR),
• the right to object to processing (Art. 7 GDPR),
• pursuant to Art. 20 GDPR, the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, or to request its transmission to another controller.

8. How can you lodge a complaint?

You have the option of lodging a complaint in connection with data processing with the data protection supervisory authority responsible for us:

Landesbeauftragte für Datenschutz und Informationsfreiheit
Nordrhein-Westfalen
(State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia)
Postfach 20 04 44
40102 Düsseldorf, Germany

Phone: 0211/38424-0
Fax: 0211/38424-10
E-mail: poststelle@ldi.nrw.de

9. Your right to object

Where we process personal data on the basis of legitimate interests pursuant to Art. 6(1) sentence 1 point (f) GDPR, you have the right under Art. 21 GDPR to object to the processing of your personal data, provided that there are grounds relating to your particular situation or the objection is directed against direct marketing. In the latter case, you have a general right to object, which we will implement without you having to state a particular situation.

If you wish to exercise your right of withdrawal or objection, an e-mail to info@dr-pantas.de is sufficient.

10. Changes to this privacy policy

We reserve the right to amend this privacy policy so that it always complies with current legal requirements, or to reflect changes to our services in the privacy policy. The new privacy policy will then apply to your next visit.

Last updated: April 2026