Privacy Policy
1. Data Controller (hereinafter: “we”)
IDS online GmbH
Aachener Straße 1053-1055
50858 Cologne
represented by the managing director, Mr. Michael Mollath; contact information as above
Phone: 0221-950141-80
Email: hello@ids.online
You can find more details about us in our provider information.
2. Personal Data, Purposes of Processing, and Legal Bases
You can generally use our website without having to provide any personal information. Providing personal information is voluntary.
Personal data refers to any information relating to an identified or identifiable natural person (hereinafter referred to as the “data subject”). A natural person is considered identifiable if they can be identified, directly or indirectly, in particular by association with an identifier such as a name, an identification number, location data, an online identifier, or one or more specific characteristics that reflect the identity of that natural person.
The purpose of processing this data is to operate this website, which provides information about our range of services, as well as contact information and online application options.
Personal data is collected on our website only if
• for the use of the website (legal basis: Art. 6(1), first sentence, subparagraph (a) and/or Art. 6(1), first sentence, subparagraph (b) of the General Data Protection Regulation (GDPR),
• to protect our interest in improving the user experience and maintaining the security of use (legal basis: Art. 6(1), first sentence, subparagraph (f) of the GDPR),4
• for the use of the services offered on the website as well as pre-contractual measures, in particular for entering data into forms (legal basis: Art. 6(1), first sentence, subparagraph (a) and/or Art. 6(1), first sentence, subparagraph (b) of the GDPR) or
• is necessary for entering into a contract and for the performance of the contract (legal basis: Art. 6(1), first sentence, subparagraphs (a) and (b) of the GDPR).
Further details on data processing can be found below under the relevant headings:
3. Access Data/Server Log Files
When you visit our website, our servers automatically store the information that your browser sends—known as server log files. This information includes
• Name of the webpage accessed,
• File,
• Date and time of access,
• Notification of successful access,
• Browser type and version,
• User’s operating system,
• Referrer URL,
• IP address (anonymized),
• Internet service provider.
This data is not combined with data from other sources. In accordance with Article 6(1), sentence 1, subparagraph (f) of the GDPR, the information is used exclusively for the analysis and maintenance of the technical operation of the servers and the network.
4. Cookies
Our website uses cookies. Cookies are small files that allow specific, device-related information to be stored on the user’s device (PC, smartphone, etc.). On the one hand, they serve to enhance the user-friendliness of websites and thus benefit users (e.g., by storing login information). Second, they are used to collect statistical data on website usage and to analyze this data in order to improve our services. You can find more detailed information in the following sections of our Privacy Policy. To the extent that you provide consent for non-essential cookies, the legal basis is Section 25(1) of the TDDDG and Article 6(1)(a) of the GDPR (consent). You can find further information on this and on the cookies and services used in our consent management tool, and you may revoke your consent at any time, freely and without disadvantage, with future effect. As a user, you can control the use of cookies. Most browsers have an option to restrict or completely prevent the storage of cookies. However, please note that the use of the website—and in particular the user experience—will be limited without cookies.
5. Contact via email
If you send us inquiries via email, we will store the information contained in the email—including the contact information you provide—for the purpose of processing your inquiry and in case of follow-up questions, in accordance with Article 6(1)(b) of the GDPR. We will never disclose this data without your consent. We will treat the data you voluntarily provide as strictly confidential. We will store and use the personal data you voluntarily provide to the extent necessary for further correspondence with you.
6. Contact Form
If you submit inquiries to us via the contact form, we will store the information you provide in the inquiry form—including the contact information you provide there—for the purpose of processing your inquiry and in case of follow-up questions, in accordance with Article 6(1), first sentence, letter b) of the GDPR. We will not disclose this data without your consent.
7. Newsletter
If you would like to subscribe to the newsletter offered on the website, we need your email address as well as information that allows us to verify that you are the owner of the provided email address and that you consent to receiving the newsletter. No other data is collected, or is collected only on a voluntary basis. We use this data exclusively to send you the requested information and do not share it with third parties. The processing of data entered into the newsletter subscription form is based solely on your consent in accordance with Article 6(1)(a) of the GDPR. You may revoke your consent to the storage of your data and email address, as well as their use for sending the newsletter, at any time—for example, via the “Unsubscribe” link in the newsletter or by emailing hello@ids.online. The lawfulness of data processing operations that have already taken place remains unaffected by this revocation. After you unsubscribe from the newsletter distribution list, your email address will be stored on our blacklist if this is necessary to prevent future mailings. The data from the blacklist is used solely for this purpose and is not combined with other data. This serves to fulfill our legal obligation as well as both your and our interest in complying with legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6(1)(f) of the GDPR). There is no time limit on storage in the blacklist. You may object to this storage if your interests outweigh our legitimate interest.
8. Online Portal: Dental Manufacturers Directory
On our website, you have the option to maintain and edit a listing for dental manufacturers that we have pre-filled with publicly available information, and to use it to communicate with customers. If you wish to edit your listing, you will first be asked to register with us once and create a password. You will then have access to our secure partner area. For more information, please refer to our Terms of Use. We process the data you provide solely to keep your listing accessible on our website. If you have entered personal data beyond the publicly available information about your company, the provider will collect, process, and use your data exclusively for the purposes arising from this agreement and to fulfill this agreement, in compliance with the legal provisions of the Federal Data Protection Act and the General Data Protection Regulation. The legal basis is your consent pursuant to Art. 6(1)(a) of the GDPR, and the processing also serves the purpose of fulfilling the contract pursuant to Art. 6(1)(b) of the GDPR.
9. Sample Order
On our website, dental practices, laboratories, and other companies in the dental sector can place sample orders for samples provided for this purpose by the dental manufacturers registered on our online portal. To do so, users are asked to provide their company type, contact person, a valid email address, field of activity, and mailing address. We process this data to forward it to the manufacturer and supplier of the sample for the purpose of order processing and shipping the sample order. The legal basis is Article 6(1)(b) of the GDPR, and this processing is necessary for the performance of the contract.
10. Scheduling an On-Site Appointment
Before submitting your request, if you are interested, you also have the option to schedule an on-site demo appointment with one of the manufacturer’s dental consultants for a live demonstration of the sample. We will then process the information you provide when ordering the sample in order to forward it to the appropriate dental consultant so that they can contact you to schedule an appointment. The legal basis is Article 6(1)(b) of the GDPR, and this processing is necessary for the preparation and conduct of the on-site appointment.
11. SalesViewer
On our website, we use SalesViewer, a service provided by SalesViewer GmbH (Nikolaistraße 2, 44866 Bochum, Germany), to optimize our offerings. The transmission and processing of personal data take place exclusively on servers located in the European Union. SalesViewer processes the referrer, name, location, and industry of the visiting company, as well as keywords and visitor behavior (e.g., subpages visited, time of visit, duration of visit) by embedding a JavaScript-based code. The data collected using this technology is encrypted using a one-way function that cannot be reversed (known as hashing). The data is immediately pseudonymized and is not used to personally identify visitors to this website. The legal basis for this is Art. 6(1), sentence 1, lit. f) of the GDPR; or, if you have given your consent to the use of cookies based on a notice (“cookie banner”) provided by us on our website, the lawfulness of the use is governed by Art. 6(1), sentence 1, lit. a) of the GDPR, § 25(1) TDDDG. For further information, please see the SalesViewer Privacy Policy: https://www.salesviewer.com/datenschutz.
12. Google Analytics
Our website uses Google Analytics. The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, to analyze our website and its usage in order to make it more user-friendly and effective, as well as to better promote and offer our services.7 For users whose habitual residence is in the European Economic Area or Switzerland, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, EU, is the data controller responsible for Google services (hereinafter: “Google”). Google Ireland Limited is an affiliate of Google LLC; we integrate its services, and it is also required to comply with the General Data Protection Regulation. On July 10, 2023, the European Commission published the Adequacy Decision for the new EU-U.S. Data Privacy Framework (DPF). U.S. companies can join the Data Privacy Framework by committing to comply with detailed data protection requirements. Google LLC is already participating in this framework and is certified accordingly. Google Analytics uses cookies—text files stored on your computer—that enable an analysis of your use of the website. The information generated by cookies regarding your use of this website is generally transmitted to a Google server in the United States and stored there. However, the IP address transmitted by your browser as part of Google Analytics is not merged with other Google data. IP anonymization is enabled on our website. This means that Google will truncate your IP address beforehand within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the United States and truncated there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide us with other services related to website and internet usage. The legal basis for the use of Analytics is Art. 6(1)(f) of the GDPR; or, if you have given your consent to the use of cookies based on a notice (“cookie banner”) provided by us on our website, the lawfulness of the use is governed by Art. 6(1)(a) of the GDPR, § 25(1) TDDDG. Further information on Google’s terms of use and privacy policy can be found here.
13. Google Tag Manager
Our website also uses Google Tag Manager from Google LLC. Google Tag Manager is a solution that allows website operators to manage so-called “tags” via a user interface in order to make the website more appealing and to track visitor behavior. Google Tag Manager collects your IP address. However, IP anonymization is enabled on our website. Your IP address is therefore truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the United States and truncated there. For more information, please visit: https://www.google.com/intl/de/tagmanager/use-policy.html. The legal basis for this use is Art. 6(1)(f) of the GDPR; or, if you have given your consent to the use of cookies based on a notice (“cookie banner”) displayed by us on our website, the lawfulness of the use is governed by Art. 6(1)(a) of the GDPR, § 25(1) TDDDG.
14. Hotjar
Our website also uses Hotjar. The provider is Hotjar Ltd., Level 2, St. Julians Business Center, 3 Elia Zammit Street, St. Julians STJ 1000, Malta, Europe. Hotjar is a tool for analyzing your user behavior on our website for marketing purposes and to optimize our offerings. With Hotjar, we can, among other things, record your mouse and scroll movements as well as your clicks. Hotjar can also determine how long you hovered your mouse pointer over a specific area. Hotjar uses this information to create so-called heatmaps, which help identify which areas of the website visitors tend to view most frequently. Furthermore, we can determine how long you stayed on a page and when you left it. We can also determine at which point you abandoned your entries in a contact form (so-called conversion funnels). In addition, Hotjar can be used to gather direct feedback from website visitors. This feature serves to improve the website operator’s online offerings. The legal basis for the use of Hotjar is Art. 6(1)(f) of the GDPR; or, if you have given your consent to the use of cookies based on a notice (“cookie banner”) displayed by us on our website, the lawfulness of the use is governed by Art. 6(1)(a) of the GDPR, § 25(1) TDDDG. For more information about Hotjar and the data collected, please refer to Hotjar’s privacy policy at https://www.hotjar.com/privacy.
15. HubSpot
Our website uses the HubSpot service. The provider is HubSpot, Inc., 25 1ST St Ste 200, Cambridge, MA 02141. HubSpot, however, is operated exclusively through a European data center located at HubSpot, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland. As part of optimizing our marketing efforts, the following data may be collected and processed via HubSpot: geographic location, browser type, navigation information, referrer URL, performance data, information on how often the application is used, login credentials for the HubSpot 9 subscription service, files viewed on the site, domain names, pages viewed, aggregated usage, operating system version, internet service provider, IP address, device identifier, duration of visit, where the application was downloaded from, operating system, events occurring within the application, access times, clickstream data, device model and version. In addition, we also use HubSpot to provide contact forms. The legal basis for the use of HubSpot is Art. 6(1)(f) of the GDPR; or, if you have given your consent to the use of cookies based on a notice (“cookie banner”) provided by us on our website, the lawfulness of the use is governed by Art. 6(1)(a) of the GDPR, § 25(1) TDDDG. You can find more information about HubSpot’s privacy policy here:
https://legal.hubspot.com/de/privacy-policy.
16. Bubble
We use Bubble to create web applications and thereby ensure the usability of our services, in particular our online dental manufacturer directory. The provider is Bubble Group, Inc., 900 Broadway, Suite 504, New York, NY 10003, USA (hereinafter: “Bubble”). Bubble stores this website and data on its servers (hosting). Providing a website requires the use of a web hosting service. In connection with this hosting, Bubble stores personal data collected on this website on its servers on our behalf. This may include, among other things, IP addresses, contact requests, metadata and communication data, contractual data, contact information, names, website visits, and other data generated during use. Bubble Group, Inc. is also certified under the EU-U.S. Data Privacy Framework. The legal basis for the use of Bubble is Article 6(1)(f) of the GDPR; or, if you have consented to the use of cookies based on a notice (“cookie banner”) provided by us on our website, the lawfulness of the use is governed by Article 6(1)(a) of the GDPR, § 25(1) TDDDG. For more information, please visit: https://bubble.io/privacy and https://bubble.io/dpa.
17. Make.com
In addition, we use Make.com for our web applications and, consequently, to ensure the usability of our services, particularly our online Dental Manufacturer Directory portal. The provider is Celonis SE, Theresienstr. 6, 8033310 Munich, Germany. This enables us to automate processes, integrate various services, and import and export personal and contact data. The legal basis for this use is Art. 6(1)(f) GDPR; or, if you have given your consent to the use of cookies based on a notice (“cookie banner”) provided by us on our website, the lawfulness of such use is governed by Article 6(1), sentence 1, letter a) of the GDPR and Section 25(1) of the TDDDG. For more information, please visit https://www.make.com/en/privacy-notice.
18. Weglot
We use the Weglot translation service for our website to ensure that our content is accessible in multiple languages. The service provider is the French company Weglot SAS, located at 7 Cité Paradis, 75010 Paris, France. Weglot is loaded when you visit the website, allowing you to change the language using the language icon in the website header. This establishes a direct connection between your browser and the Weglot server when you visit this website. As a result, Weglot receives the information that you have visited this website using your IP address. The legal basis for this use is Art. 6(1)(f) of the GDPR; or, if you have given your consent to the use of cookies based on a notice (“cookie banner”) displayed by us on our website, the lawfulness of the use is governed by Art. 6(1)(a) of the GDPR, § 25(1) TDDDG. For more information on this, please see Weglot’s Privacy Policy here: https://weglot.com/privacy/.
19. Cloudflare
On our website, we also use a so-called Content Delivery Network (“CDN”) provided by Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA,
(“Cloudflare”). A Content Delivery Network is an online service that enables the delivery of large media files (such as graphics, page content, or scripts) through a network of regionally distributed servers connected via the Internet. Using Cloudflare’s Content Delivery Network helps us optimize our website’s loading speeds. For the processing itself, the service—or we—collect the following data: IP address. Cloudflare, Inc. is also certified under the U.S.-EU Privacy Shield and is thereby committed to complying with EU data protection requirements.11 The use of Cloudflare is based on Art. 6(1)(f) GDPR; or, if you have given your consent to the use of cookies based on a notice (“cookie banner”) displayed by us on our website, the lawfulness of the use is governed by Article 6(1), first sentence, letter a) of the GDPR and Section 25(1) of the TDDDG. For more information, please see Cloudflare’s Privacy Policy at: https://www.cloudflare.com/privacypolicy/.
20. jsdelivr.com
To ensure that we can deliver our individual web pages to you quickly and flawlessly across all devices, we use the open-source CDN service
from jsdelivr.com, provided by the Polish software company ProspectOne, Królewska 65A/1, 30-081, Kraków, Poland. This is also a Content Delivery Network (CDN) designed to optimize the loading speeds of our website. To achieve this, the browser you are using must establish a connection to the CDN’s servers. As a result, the CDN becomes aware that our website was accessed via your IP address. The use of jsdelivr is based on Art. 6(1)(f) of the GDPR; or, if you have given your consent to the use of cookies based on a notice (“cookie banner”) provided by us on our website, the lawfulness of the use is governed by Art. 6(1)(a) of the GDPR, § 25(1) TDDDG. For more information, please see jsDelivr’s Privacy Policy: https://www.jsdelivr.com/privacy-policy-jsdelivr-com.
21. Recipients of Personal Data
We disclose personal data to the following categories of recipients: our employees and the hosting provider for our website. The hosting provider is Amazon AWS, South Dublin Data Center, Greenhills Road, Tymon North, Dublin, Ireland. Furthermore, your personal data will never be disclosed to third parties without your express consent—for example, when using the online portal for manufacturers, where the purpose is to establish contact with interested customers—unless we are legally obligated to do so under Article 6(1)(c) of the GDPR, or the transfer of data is strictly necessary for the performance of a contractual relationship pursuant to Article 6(1)(b) of the GDPR.12 Please note that data transmission over the Internet (e.g., when communicating via email) may be subject to security vulnerabilities. It is not possible to completely protect data from access by third parties.
22. Duration of Storage
We delete your personal data immediately after the purpose has been fulfilled. For example, we store the data from your emails and the contact form until your inquiry to
has been fully processed and resolved. After that, the information is generally deleted. We delete information from the dental manufacturer directory immediately once you have notified
that you no longer wish to have an entry with us. In addition, we review annually whether the data we have stored about you can be deleted. We automatically delete session cookies after your visit to our website. Access data and server log files are deleted after one week. Please note that certain data is subject to commercial and tax law retention requirements of at least six years (§ 257 HGB) or ten years (§ 147 AO).
23. Rights of Data Subjects
You are not legally required to provide your personal data. However, providing such data may be necessary to enter into a contract or to use certain features of the
website. If you do not provide this data, we may not be able to offer a contract or a specific feature on the website. There is no automated decision-making on the website, and no profiling takes place. The rights of data subjects arise in particular from Articles 15 through 23 and Article 77 of the GDPR, as well as from Sections 32 through 37 of the new Federal Data Protection Act (BDSG). With regard to your personal data, you have the right to
• Right of access, Art. 15 GDPR
• Right to rectification, Art. 16 GDPR
• Right to erasure, Art. 17 GDPR
• Right to restriction of processing, Art. 18 GDPR
• Right to data portability, Art. 20 GDPR.
If you have given your consent to the processing of personal data, you have the right to
• Right of Withdrawal, Art. 7 of the GDPR
effective going forward.
You also have the right to object to the processing of personal data
- Right to Object, Art. 21 of the GDPR
to collect.
1. You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is carried out pursuant to Article 6(1), first sentence, subparagraph (f) of the GDPR (data processing based on a balancing of interests).
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.
2. In certain cases, we process personal data for the purpose of direct marketing. If this applies to you, you have the right to object at any time to the processing of your personal data for such marketing purposes. If you object to the processing for direct marketing purposes, we will no longer process your personal data for those purposes. The objection may be made in any form and should, if possible, be addressed to us; see above under
1. If you believe that the processing of your personal data violates data protection law, you always have the
• Right to lodge a complaint
• with the competent supervisory authority; see Art. 77 of the GDPR. Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority—in particular in the Member State of your habitual residence, place of work, or the place where the alleged infringement occurred—if you believe that the processing of personal data concerning you violates the GDPR. You can find the contact information for data protection officers in the federal states, supervisory authorities for the non-public sector, broadcasting, churches, in Europe and other countries, as well as the Virtual Data Protection Office, here: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
The supervisory authority responsible for us is the State Commissioner for Data Protection of North Rhine-Westphalia, Kavalleriestraße 2-4, 40213 Düsseldorf.15
24. PostHog (website analytics and session recording)
Our website uses the PostHog analytics service. The provider is PostHog, Inc. PostHog is used to analyze the use of our website and to continuously improve its user-friendliness, navigation, and product catalog. In particular, it processes information regarding page views, navigation paths, search queries, and search results, as well as—provided you have expressly consented to this—session recordings. These session recordings may include mouse movements, clicks, and scrolling behavior.
The data is processed exclusively for analysis and optimization purposes. The collected data is not combined with other data sources, nor are users personally identified.
Data processing is carried out exclusively on the basis of your consent in accordance with Article 6(1), sentence 1, letter a) of the GDPR and Section 25(1) of the TDDDG. Data is stored and processed within the European Union via the PostHog EU Cloud in Frankfurt am Main. Event data is stored for a period of 90 days, session recordings for a period of 21 days, and is then automatically deleted.
You may withdraw your consent at any time, effective for the future, by changing your selection via the “Cookie Settings” link at the bottom of each page or by deleting the “ids_consent” cookie from your browser. The lawfulness of the data processing carried out prior to the withdrawal remains unaffected.
25. Smartlook (Session Recording)
On our subdomain catalog.ids.online, we use the Smartlook service for session recording. The provider is Smartlook.com s.r.o., Šumavská 524/31, Veveří, 602 00 Brno, Czech Republic.
If you have given your consent to usage analysis, we use Smartlook to analyze, understand, and continuously improve the use of our product catalog. Interactions and sessions are recorded for this purpose. Data processing takes place exclusively on servers within the European Union (EU hosting). Text entered into forms and sensitive data are automatically masked and are not recorded.
Legal Basis: Processing is carried out exclusively on the basis of your explicit consent in accordance with Art. 6(1), sentence 1, lit. a) of the GDPR and § 25(1) of the TDDDG.
Withdrawal: You may withdraw your consent at any time with future effect via our privacy settings or our consent management tool on the website.