Privacy Policy

LEGAL

Privacy at a Glance

We take the protection of your personal data seriously. Personal data is any information that can be used to personally identify you or that relates to an identifiable person.

This website can generally be visited without actively entering personal data. Personal data is processed in particular when you contact us, submit a form, use technical services of this website, or consent to optional analytics and marketing services.

Privacy Settings

You can decide for yourself whether, in addition to technically necessary services, optional services such as statistics, marketing, Meta Pixel, or LinkedIn Insight Tag may also be activated.

[Accept all] [Use only necessary services] [Open privacy settings]

Optional analytics and marketing services are only activated once you have given your explicit consent. You can revoke or change your consent at any time with effect for the future.

Controller

The party responsible for data processing on this website is:

Dr. B.-Digitec GmbH Max-Planck-Straße 10 50858 Cologne Germany

Represented by: Dr. Markus Beckers

Phone: +49 221 292 423 80 Mobile: +49 155 6102 77 00 Email: info@dr-b-digitec.com Website: https://dr-b-digitec.com

General Information on Data Processing

We process personal data only to the extent necessary for providing this website, handling inquiries, communicating with interested parties and customers, fulfilling contracts, ensuring technical security, or complying with a legal obligation.

Where we obtain your consent for individual processing operations, the processing is based on Art. 6(1)(a) GDPR. You may revoke any consent given at any time with effect for the future.

Where processing is necessary for the performance of a contract or for the implementation of pre-contractual measures, it is based on Art. 6(1)(b) GDPR.

Where processing is necessary for compliance with a legal obligation, it is based on Art. 6(1)(c) GDPR.

Where processing is necessary to protect our legitimate interests, it is based on Art. 6(1)(f) GDPR. Our legitimate interests lie in particular in the secure, stable, and user-friendly provision of this website, the handling of inquiries, the improvement of our offerings, and protection against misuse.

Hosting and Server Log Files

This website is operated on a server administered by us. When this website is accessed, technical access data is automatically processed by the web server. This may include in particular:

IP address of the requesting device Date and time of the request Page or file accessed Amount of data transferred Notification of successful retrieval Browser type and version Operating system Referrer URL Hostname of the accessing computer

This data is processed in order to provide the website technically, ensure stability and security, analyze errors, and detect misuse or attacks. The legal basis is Art. 6(1)(f) GDPR.

Server log files are only stored for as long as necessary to ensure technical operation, error analysis, and security. These data are not merged with other data sources.

Contact via Email, Phone, or Form

If you contact us by email, phone, or via a form, we process the information you provide in order to handle your inquiry and any follow-up questions.

This may include in particular:

Name Practice or company name Email address Phone number Content of your message Details regarding your inquiry Technical metadata of the submission

The legal basis is Art. 6(1)(b) GDPR if your inquiry is directed at the conclusion or performance of a contract. In all other cases, processing is based on our legitimate interest in responding to inquiries pursuant to Art. 6(1)(f) GDPR. Where you give explicit consent, Art. 6(1)(a) GDPR is the legal basis.

The data you submit will remain with us until the purpose of processing no longer applies, you request deletion, revoke a consent, or statutory retention obligations preclude deletion.

Please do not submit patient data, scan data, health data, or other particularly sensitive information via general contact forms. This website is not intended for the transmission of medical patient data. If you nevertheless transmit special categories of personal data within the meaning of Art. 9 GDPR to us, we will process these only to the extent necessary to handle your inquiry or where explicit consent or another legal basis exists.

Practice Check and Quote Requests

If you submit a practice check, a quote request, or a comparable inquiry via this website, we process the information entered there in order to review your inquiry, get in touch with you, and prepare a suitable offer.

The following data may be processed in particular:

Name Practice or company name Contact details Information about technical equipment Information about existing digital workflows Information about the desired scope of services Message content

The legal basis is Art. 6(1)(b) GDPR insofar as the inquiry is directed at pre-contractual measures or a contractual relationship. Additionally, Art. 6(1)(f) GDPR may apply insofar as we have a legitimate interest in the structured handling of your inquiry.

Email Dispatch and Technical Service Providers

For handling inquiries and technical operations, we may use service providers who process data on our behalf. Where required, we conclude data processing agreements with such service providers in accordance with Art. 28 GDPR.

If an external email service is used for sending system emails or form notifications, the data required for delivery will be transmitted to that service provider. This may include email address, name, subject, message content, time of sending, and technical delivery data.

Transfer to third countries only takes place where an appropriate legal basis exists, in particular an adequacy decision, standard contractual clauses, or your consent.

Cookies and Similar Technologies

This website may use cookies, local storage, or similar technologies. Technically necessary cookies and storage technologies are used to provide the website, ensure security, save language settings, enable logins, or store your privacy settings.

Technically necessary services are used on the basis of Section 25(2) TDDDG and Art. 6(1)(f) GDPR.

Optional cookies and similar technologies, in particular for statistics, marketing, remarketing, or external media, are only used after your explicit consent. The legal basis is Section 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR.

You can revoke or change your consent at any time with effect for the future.

[Open privacy settings]

Consent Management

To manage your consents, we use a consent function on this website. Your decisions are saved so that optional services are only loaded in accordance with your selection.

The following data is processed in particular:

Selected consent categories Time of selection Consent version Technical identifier for recognizing your selection Language setting where applicable

The legal basis is Art. 6(1)(c) GDPR insofar as storage is required to fulfill legal documentation obligations, and Art. 6(1)(f) GDPR with regard to legally secure and user-friendly management of your privacy settings.

Meta Pixel and Meta Services

If you explicitly consent, Meta Pixel or a comparable Meta Business technology may be used on this website.

The provider is:

Meta Platforms Ireland Limited Merrion Road Dublin 4 D04 X2K5 Ireland

Using Meta Pixel, we can understand whether visitors access our website or perform certain actions after clicking on an advertisement, such as initiating a contact request. This allows us to measure the effectiveness of our advertising and display ads more relevantly.

The following data may be processed in particular:

IP address Browser and device information Pages visited Time of page visit Referrer information Interactions on the website Cookie and pixel IDs Technical event data where applicable Submitted form events without sensitive content where applicable

This data may be linked by Meta to your Facebook, Instagram, or Meta account if you are logged into Meta or Meta recognizes you by other means. Meta may process the data for its own purposes, in particular for analysis, advertising, profiling, and improvement of its own services.

Processing takes place exclusively on the basis of your consent pursuant to Section 25(1) TDDDG and Art. 6(1)(a) GDPR. Meta Pixel is only loaded once you have consented to the "Marketing" category or explicitly to the use of Meta Pixel.

You can revoke your consent at any time with effect for the future.

[Open privacy settings]

Further information on data processing by Meta can be found in Meta's privacy policy.

Advanced Matching with Meta

If technically enabled and consented to by you, advanced matching may be used with Meta Pixel. In this case, certain details such as an email address or phone number may be hashed before being transmitted to Meta. Even hashed data may constitute personal data if it can be attributed to a person.

Advanced matching is only used where valid consent exists.

LinkedIn Insight Tag, LinkedIn Ads, and Conversion Tracking

If you explicitly consent, the LinkedIn Insight Tag may be used on this website. The LinkedIn Insight Tag is a JavaScript code that can be used to evaluate website visits, conversions, audiences, and the effectiveness of LinkedIn advertisements.

The provider is:

LinkedIn Ireland Unlimited Company Wilton Plaza Wilton Place Dublin 2 Ireland

Using the LinkedIn Insight Tag, we can understand whether visitors visit our website or perform certain actions after clicking on a LinkedIn ad, such as initiating a contact request. In addition, LinkedIn can provide us with aggregated information about website audiences, for example regarding industry, position, company size, career level, or location, insofar as LinkedIn can attribute this data to its member accounts.

The following data may be processed in particular:

IP address URL of the visited page Referrer URL Time of visit Device and browser information Cookie or pixel identifiers LinkedIn member pseudonym Interactions on the website Conversion events Truncated or hashed technical identifiers where applicable

LinkedIn may link this data to your LinkedIn account if you are logged into LinkedIn or LinkedIn recognizes you by other means. LinkedIn may process the data for its own purposes, in particular for the provision, measurement, and improvement of LinkedIn services, for analysis, advertising, retargeting, audience building, and cross-device tracking.

Processing takes place exclusively on the basis of your consent pursuant to Section 25(1) TDDDG and Art. 6(1)(a) GDPR. The LinkedIn Insight Tag is only loaded once you have consented to the "Marketing" category or explicitly to the use of the LinkedIn Insight Tag.

You can revoke your consent at any time with effect for the future.

[Open privacy settings]

Further information on data processing by LinkedIn can be found in LinkedIn's privacy policy.

LinkedIn Retargeting and Audience Building

If you explicitly consent, the LinkedIn Insight Tag may be used to create audiences for LinkedIn advertisements. This allows people who have visited our website to be addressed again with relevant ads on LinkedIn.

The data required for this purpose is only processed after your consent. The legal basis is Section 25(1) TDDDG and Art. 6(1)(a) GDPR.

You can revoke your consent at any time with effect for the future.

LinkedIn Matched Audiences

If we use LinkedIn Matched Audiences, LinkedIn may be used to create defined audiences for advertisements or to exclude existing audiences. This can be done, for example, on the basis of website visits via the LinkedIn Insight Tag or, if used separately, on the basis of uploaded contact lists.

Uploading contact lists to LinkedIn only takes place where an appropriate legal basis exists. Where consent is required for this purpose, processing only takes place after explicit consent.

If contact lists are used, the following data may be processed in particular:

Email address Name Company Position Country Other professional details Hashed identifiers

Processing takes place, where required, on the basis of your consent pursuant to Art. 6(1)(a) GDPR or on the basis of legitimate interests pursuant to Art. 6(1)(f) GDPR, provided the legal requirements are met. The use of website retargeting via the LinkedIn Insight Tag only takes place after consent.

LinkedIn Company Page and Page Insights

We may operate a company page on LinkedIn. When you visit our LinkedIn company page, interact with it, comment on, share, or like posts, or contact us via LinkedIn, LinkedIn processes personal data under its own responsibility. In addition, LinkedIn may provide us with statistical evaluations regarding the use of our company page, known as Page Insights.

For certain Page Insights processing operations, LinkedIn and we may be jointly responsible within the meaning of Art. 26 GDPR. LinkedIn provides the key information on this in its Page Insights terms.

When visiting our LinkedIn company page, the following data may be processed in particular:

Profile information Interactions with posts Message content Comments and reactions Technical access data Statistical usage data

We use this information to evaluate our corporate communications, improve content, and communicate with interested parties, customers, and business partners. The legal basis for our processing is Art. 6(1)(f) GDPR. Where you actively communicate with us via LinkedIn, Art. 6(1)(b) GDPR may also apply.

We have only limited influence over data processing by LinkedIn. Please also refer to LinkedIn's privacy policy.

Social Media Links

This website may contain links to our profiles on social networks such as LinkedIn, Instagram, Facebook, or other platforms. When you click on these links, you leave our website and the privacy policy of the respective provider applies.

As long as you do not click on the links, no data is transmitted to the respective social networks by mere text or icon links.

Embedded Content and External Media

This website may embed external content, for example videos, maps, fonts, social media content, or other media. Such content may result in data being transmitted to third-party providers.

External media that are not technically required are only loaded after your consent. The legal basis is Section 25(1) TDDDG and Art. 6(1)(a) GDPR.

Fonts

If fonts are provided locally on our server, no data is transmitted to external font providers.

If external font providers are used, technical data such as IP address, browser information, and time of retrieval may be transmitted to the respective provider when fonts are loaded. External font providers are only used where this is technically necessary or covered by consent.

Security of Data Processing

We take technical and organizational measures to protect personal data against loss, misuse, unauthorized access, alteration, or disclosure. These measures are adapted in line with technological developments.

This website uses an encrypted connection via HTTPS. As a result, data that you transmit generally cannot be read by third parties without further effort.

Retention Period

We store personal data only for as long as necessary for the respective purposes or as required by statutory retention obligations.

Inquiry data is generally deleted once the inquiry has been fully processed and no statutory retention obligations apply.

Business communications may be stored for up to six or ten years due to commercial and tax law retention obligations.

Server log files are only stored for as long as necessary for technical security and error analysis.

Consent data is stored for as long as necessary to manage and document your consents.

Meta and LinkedIn marketing data is processed in accordance with the settings, retention periods, and deletion policies of the respective providers. We have only limited influence over these retention periods.

Recipients of Personal Data

Personal data may, where necessary, be transmitted to the following recipients or categories of recipients:

Technical hosting and IT service providers Email and communications service providers Maintenance and support service providers Tax advisors, legal advisors, or authorities where required by law Marketing and analytics service providers only after consent Meta Platforms Ireland Limited only after consent to Meta Pixel or marketing services LinkedIn Ireland Unlimited Company only after consent to LinkedIn Insight Tag or LinkedIn marketing services

Personal data is only shared where a legal basis exists, you have given consent, or sharing is necessary for the performance of a contract or to handle your inquiry.

Transfer of Data to Third Countries

Some service providers may transfer personal data to countries outside the European Union or the European Economic Area. This may be the case in particular with internationally operating technology and marketing providers such as Meta or LinkedIn.

Such transfers only take place where an appropriate legal basis exists, in particular an adequacy decision by the European Commission, standard contractual clauses, additional safeguards, or your explicit consent.

In the event of a data transfer to the USA, there may be a risk, despite appropriate safeguards, that US authorities access data without you having the same legal remedies available as within the European Union.

Your Rights

Within the framework of applicable law, you have the following rights:

Right of access to the personal data stored about you Right to rectification of inaccurate data Right to erasure of your data Right to restriction of processing Right to data portability Right to object to certain processing operations Right to withdraw consents given Right to lodge a complaint with a data protection supervisory authority

If you withdraw a consent, the lawfulness of the processing carried out prior to the withdrawal remains unaffected.

Right to Object under Art. 21 GDPR

If we process personal data on the basis of Art. 6(1)(f) GDPR, you have the right to object at any time to such processing on grounds relating to your particular situation.

If personal data is processed for the purposes of direct marketing, you have the right at any time to object to the processing of personal data for the purposes of such marketing. Following an objection, your personal data will no longer be processed for direct marketing purposes.

Withdrawal of Consents

You may withdraw a consent given at any time with effect for the future. To do so, use the privacy settings on this website or contact us using the contact details provided above.

[Open privacy settings]

Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority if you consider that the processing of your personal data infringes data protection law.

Competent supervisory authority for North Rhine-Westphalia:

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia Kavalleriestraße 2–4 40213 Düsseldorf Germany

Obligation to Provide Data

The provision of personal data is neither legally nor contractually required, unless otherwise indicated on this website.

However, for the handling of contact or quote inquiries, we require certain information, in particular contact details and the content of your inquiry. Without this data, we may not be able to process your inquiry at all or only to a limited extent.

Automated Decision-Making

We do not carry out automated decision-making including profiling within the meaning of Art. 22 GDPR.

Insofar as Meta Pixel, LinkedIn Insight Tag, or other marketing services are used following your consent, profiling, audience building, conversion tracking, or interest-based ad attribution may be carried out by the respective providers. We have only limited influence over this.

Currency and Amendment of this Privacy Policy

This privacy policy is currently valid and was last updated: June 2026.

We reserve the right to update this privacy policy if legal, technical, or organizational changes arise.