Call us Book appointment

Privacy Policy

Last updated: September 2026

1. Overview

This is a static website. It has no database, no login and no contact form. Simply visiting the pages does not collect any personal data beyond the technically necessary server log files.

Cookies are only set if you explicitly agree in the privacy prompt. Your choice itself is stored locally in your browser and is never transmitted to us.

2. Controller

The controller responsible for data processing on this website is:

Dr. Lothar Linus Huber
Specialist dentist for orthodontics
Schwertberger Straße 16
53177 Bonn, Germany
Phone: +49 228 3773 9595
E-mail: huber@kfo-dr-huber.de

3. Hosting

We host this website with Raidboxes GmbH, Hafenstraße 32, 48153 Münster, Germany. The servers are located in Germany. When you visit the website, the provider automatically records server log files. See the section „Server log files" for details.

The legal basis is Art. 6(1)(f) GDPR. We have a legitimate interest in the reliable and secure presentation of our website. A data processing agreement pursuant to Art. 28 GDPR is in place.

4. Server log files

The provider automatically collects and stores information that your browser transmits: browser type and version, operating system, referrer URL, host name of the accessing device, time of the request and IP address.

This data is not combined with other data sources. It is processed on the basis of Art. 6(1)(f) GDPR for the technically correct presentation and optimisation of the website, and deleted automatically after a short period.

5. Contacting us by e-mail, phone or fax

If you contact us by e-mail, telephone or fax, your enquiry and all personal data arising from it will be stored and processed by us for the purpose of handling your request. We do not pass this data on without your consent.

Processing is based on Art. 6(1)(b) GDPR where your enquiry relates to the performance of a contract or pre-contractual measures, otherwise on our legitimate interest under Art. 6(1)(f) GDPR or on your consent under Art. 6(1)(a) GDPR.

Please note that unencrypted e-mail is not secure. Please do not send health data by e-mail. Call us instead in such cases.

6. Online appointment booking with Dr. Flex

We use Dr. Flex for online appointment booking. The provider is Dr. Flex GmbH, Stresemannstraße 21, 10963 Berlin, Germany.

When you click „Request an appointment", a booking window from Dr. Flex opens. Only at that moment is a connection to the Dr. Flex servers established and your IP address transmitted. The data you enter during booking, such as name, contact details and reason for the visit, is processed by Dr. Flex and made available to us.

Because a booking may include information about your treatment, this constitutes health data within the meaning of Art. 9 GDPR. Processing is based on your explicit consent under Art. 6(1)(a) in conjunction with Art. 9(2)(a) GDPR, given when you submit the booking, and on pre-contractual measures under Art. 6(1)(b) GDPR. You can always call us to make an appointment instead.

A data processing agreement pursuant to Art. 28 GDPR is in place with Dr. Flex.

7. Google Analytics

This website uses Google Analytics. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics allows us to analyse visitor behaviour. We receive usage data such as pages viewed, time on page, operating system and the source of the visit. This data is assigned to the device or a user identifier. We do not assign it to a specific person.

Google Analytics is only loaded after you have consented in the privacy prompt. Before your consent, no Google script is loaded and no connection to Google is established.

Storage is based solely on your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG. Consent can be withdrawn at any time via „Privacy settings" in the footer. On withdrawal, the Analytics cookies are deleted.

The following cookies are set after your consent:

  • _ga – distinguishes users – 2 years
  • _ga_0GD9VRE7TR – stores session state – 2 years

Transfer to the USA

Data may be transferred to the USA. The transfer is based on the European Commission's standard contractual clauses: privacy.google.com/businesses/controllerterms/mccs/

Processing agreement and retention

A data processing agreement pursuant to Art. 28 GDPR is in place with Google. User- and event-level data linked to cookies or user identifiers is deleted automatically after 14 months.

8. Google Maps

On the „Directions" page we show a static map image served from our own server. No data is transmitted to Google when you open the page.

Only when you click the map or the accompanying link does Google Maps open in a new window. From that point Google's privacy policy applies: policies.google.com/privacy

9. Your privacy settings

Your choice in the privacy prompt is stored in your browser's local storage. It never leaves your device and is not transmitted to us. It only records which services you consented to and when. You can clear local storage at any time through your browser settings.

10. Your rights

You have the right to information about your stored personal data, its origin, recipients and the purpose of processing, and the right to rectification or erasure. You have the right to request restriction of processing and the right to data portability. You may withdraw consent at any time with effect for the future. Where processing is based on Art. 6(1)(e) or (f) GDPR, you have the right to object on grounds relating to your particular situation.

You also have the right to lodge a complaint with a supervisory authority. The authority responsible for us is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestraße 2–4
40213 Düsseldorf, Germany
www.ldi.nrw.de

11. SSL / TLS encryption

This site uses SSL or TLS encryption for security reasons. You can recognise an encrypted connection by the „https://" in the address bar and the padlock symbol in your browser.

12. Objection to advertising e-mails

We hereby object to the use of contact data published as part of our legal notice for sending unsolicited advertising and information material. We reserve the right to take legal action in the event of unsolicited advertising.