1. Name and address of the Data Controller

The Data Controller within the meaning of the GDPR is

Ivoclar Vivadent Marketing (India) Pvt. Ltd.
503/504 Raheja Plaza
15 B Shah Industrial Estate
Veera Desai Road, Andheri (West)
Mumbai 400 053
India
Phone: +91 22 2673 0302
E-mail: customercare.in@ivoclar.com 

2. Data Protection Officer

The Data Protection Officer of the Data Controller can be reached at:

Ivoclar Vivadent Marketing (India) Pvt. Ltd.
attn. Data Protection Officer
503/504 Raheja Plaza
15 B Shah Industrial Estate
Veera Desai Road, Andheri (West)
Mumbai 400 053
India
Phone: +91 22 2673 0302
E-Mail: dataprotection.mumbai@ivoclar.com

3. Introduction

The protection of your personal data and of your private life are very important to us as Data Controller in terms of data protection. You need to know what information about you is collected through our website www.ivoclar.com and related services (our “Service” for short) and how your information is used. This privacy policy gives you this information.

Therefore, we obviously comply with the provisions of the EU General Data Protection Regulation (GDPR) and all other locally applicable data protection regulations. It is important to us to inform you about what personal data is collected and processed and what options you have. This privacy policy gives you answers to the most important questions.

Your data will be stored, processed and used in accordance with this privacy policy and the relevant statutory data protection regulations.

Our employees and agents who process your enquiries are obliged to maintain confidentiality.

4. Your Rights:

If your personal data is processed, you are a data subject within the meaning of the GDPR. You have the following rights against us as the Data Controller:

(1) You have a right to obtain confirmation as to whether and which personal data we process in relation to you.

(2) You have a right to rectification and erasure of this personal data.

(3) You have a right to restriction of processing of your personal data.

(4) You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you. This does not apply if a legal provision obliges or entitles us to collect, process or use this data.

(5) Furthermore, you may withdraw any consent you have previously given to the collection, processing and use of your personal data at any time with effect for the future. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of such consent until the withdrawal.

(6) You also have a right to data portability.

(7) To exercise your rights or for information and/or explanations of your rights, please contact our data protection officer by e-mail or by post (for contact details, see under “Data Protection Officer"). We will be happy to provide you with access to your personal data in our database upon request. The information is free of charge.

(8) In addition, you have the right to lodge a complaint to a data protection supervisory authority about our processing of your personal data.

5. Definitions

(1) “Customer Portal” means the online tool accessible via www.ivoclar.com through which you can access the following “Services”.

(2) “Services” means all the services we offer through our “Customer Portal”. Depending on whether the service is available in the respective country, the following services can be currently used on this platform:

a. “Customer enquiries” about our products and services: This Service allows our customers to provide their contact details and request information about our products and Services.

b. “Webshop”: The Webshop allows our registered customers to order online the products available online in the respective country and have them delivered to the desired address.

c. “Order Manager”: The Order Manager allows our registered customers to order custom-made dental prothesis online according to their specifications. This service is basically similar to the Webshop.

d. “Customer Academy”: The Customer Academy enables customers to book online and onsite courses and seminars available in the respective country, both for a fee and free of charge.

e. “Event Registration”: This service allows customers to register for marketing events available in their country, such as roadshows, trade fairs, product demonstrations, competitions/prize draws and request free product samples.

f. “Device Registration”: This service allows our customers to enter their address in our customer system or to register as a customer (depending on the options offered, comparable to the registration in the Webshop) and to record the purchased devices with serial number.

g. “Ivoclar Cloud”: This service enables our registered customers to temporarily store data (e.g. 3D models of dental restorations) in the Ivoclar Cloud and to securely transfer them to third parties selected by them (e.g. dental technicians).

h. “Ivoclar Dashboard”: This service allows registered customers to visualise data collected and also data already collected by other sources (e.g. from their IoT-enabled Ivoclar or Ivoclar-compatible devices).

i. “eIFU”: The eIfU functionality delivers the instructions for use for each product. By subscribing to changes, we send a notification whenever a document has been updated.

6. What data is collected and stored

Which data is collected and stored depends on which services you use on our platform.

(1) Data or categories of data:

(a) As with any website, our server automatically and temporarily collects and stores the following information in the server log files, which are transmitted by the browser, unless this has been deactivated by you:

- domain name or IP address of the requesting computer
- file requests of the client (file name and the corresponding data of the complete Internet address)
- the HTTP response code
- the Internet page from which you are visiting us (referrer URL)
- date and time of the server request
- browser type and version
- operating system used by the requesting computer
- cookies (see cookie below and our cookie policy for more details) are also used to collect anonymous traffic data from users of our website. This anonymous traffic data may be used for market research purposes and the demand-oriented design of our website.

(b) When using the platform for customer enquiries, the following data are collected from the customer. Mandatory details required for processing are marked separatelywhen entering, further information is voluntary:

- Email
- Academic title
- Gender
- First name & Surname
- Phone
- Fax
- Preferred communication channel
- VAT no.
- E-mail for electronic invoicing
- Control code
- Licence number
- Company name
- Customer number
- Name of the owner
- Sector
- Function
- Street & house number of the company
- Additional company address
- Company postcode
- Company location
- State/province of the company
- Company country

(c) When using the “Webshop” service, the following further data are collected in addition to the personal data already mentioned while using the platform for customer enquiries:

- Invoice and delivery address(es)
- Products and services you order or purchase
- Your feedback (also public) on our products and services in the sense of ratings, customer reviews or customer satisfaction

(d) When using the “Order Manager” service, the following further data are collected in addition to the personal data already mentioned while using the platform for customer enquiries:

- Invoice and delivery address(es)
- Products and services you order or purchase
- Your feedback (also public) on our products and services in the sense of ratings, customer reviews or customer satisfaction

(e) When using the “Customer Academy” service, the following further data are collected in addition to the personal data already mentioned while using the platform for customer enquiries:

- Invoice and delivery address(es)
- Products and services you order or purchase
- Personal licence number
- Your feedback (also public) on our products and services in the sense of ratings, customer reviews or customer satisfaction

(f) When using the “Device Registration” service, in addition to the personal data already collected while using the platform for customer enquiries, the following further data will be collected:

- Serial no. of the device to be registered
- Machine type

(g) When using the “Ivoclar Cloud” service, the following further data are collected over and above the personal data already mentioned while using the “Webshop” service:

- Recipient of the data with his contact details

The customer has the possibility of transmitting data via this service in accordance with the respective applicable terms of use  for this service or storing them there. Here we store and transmit the data that the customer voluntarily places there or wants to pass on to third parties. This can also be personal data for which the customer alone is responsible.

(h) When using the “Dash Board” service, no further data are collected beyond the personal data already mentioned while using the platform for the respective service.

(2)  Data subject groups:

(a) Users of the homepage

(b) Our customers

(c) Employees of our customers

(d) Contractual partners of our customers

(e) Our employees

(3) Tools: 

We are enabling our customers to proceed with registration or log-in, quickly without providing any credentials, by using the OwnID widget embedded in our applicable services. In this framework, we or OwnID (www.ownid.com) do not process personal data related to our customers. The OwnID widget only uses the customer’s device’s verification methods (e.g. Face ID) for authentication purposes. This information is not stored or processed by us or OwnID. The entire verification and authentication process happens within customer’s device. Details concerning data processing by OwnID can be found here (https://ownid.com/privacy.html).

7. For what purpose are your data collected and stored and how are they used?

We process your personal data to operate, provide and improve our services. These purposes include:

• Information about our products and services requested by the interested parties and customers. We use your personal data to send you the information you have requested via the desired communication channel.
• Purchase and supply of products and services. We use your personal data to take and process orders, deliver products (whether chargeable or free of charge)  and provide services (whether chargeable or free of charge), develop and assess the need for new products and services, develop, test and launch new products and services, process payments and communicate with you about orders, products and services (e.g. transactional communications or requests for feedback in terms of ratings, customer reviews, customer satisfaction, needs assessment, development, testing and launch of purchased products or services). Furthermore, we use your personal data to fulfil our legal (e.g. warranty) and contractual (e.g. guarantee contract) obligations within the scope of the purchase, guarantee or service contract.
• Providing, troubleshooting and improving our services (e.g. IV Cloud). We use your personal data to provide features, analyse services and products, troubleshoot and improve the usability and effectiveness of our services.
• Recommendations and personalisation. If you have consented to this, we will process your personal data to recommend functionality, products and services that may be of interest to you, to identify your preferences and to personalise your experience of our services.
• Compliance with legal obligations. In certain cases we are subject to legal obligations to collect and process your personal data. For example, we collect data from buyers regarding their registered office, tax number (if required) and their bank account information for identity verification and other purposes.
• Communication with you. If you have consented to this or if another legal basis (e.g. contract or legitimate interest) allows this, then we will use your personal data to communicate with you via various channels (e.g. by phone, email, chat, messenger, SMS, fax, in person, by post or other communication tools such as Showpad) regarding our products and services.
• Advertisements and marketing. If you have consented to this, we will use your personal data already collected and other data such as your interactions with our and other’s services (such as social media platforms), content or services, which we will automatically evaluate to serve interest-based ads for products and services or, if you have consented, to send you information about products and services from us and our affiliates (https://www.ivoclar.com/en_in/tools/group-companies) that may be of interest to you by email or through communications. We use data that personally identifies you to display interest-based advertising.
• Reminder of a shopping basket that has not been completed. If you have agreed to this, you will be informed by e-mail that you have products or services in your shopping basket in our Webshop without having completed the purchase.
• Fraud prevention and credit risks. We process personal data to prevent or detect fraud and abuse to protect the security of our customers, our business and third parties. To assess and deal with credit risks, we also use scoring procedures where appropriate and work with external partners (e.g. dun & bradstreet).
• Review and supplement our data. We process personal data in order to check the accuracy of this data and to supplement them if necessary. To this end, we also collect publicly available data on social media platforms and, where appropriate, we work with external partners that provide us with data.
• Purposes for which we seek your consent. We may ask for your consent to process your personal data for a specific purpose, which we will communicate to you. If you consent to the processing of your personal data for a specific purpose, you may freely withdraw your consent at any time and we will stop processing your data for that purpose.

8. Social networks

On our website you will find links to social networks such as Facebook, Twitter, YouTube, LinkedIn and Instagram. Only when you have clicked on the respective button, data (original page, user name if you are logged into the respective service, IP address) will be transmitted to the platform operator. Please refer to the privacy policy of the respective platform operator for information on its collection and use of data. 

9. What about cookies?

A cookie is a small file containing a string of characters that is transmitted to your computer when you visit a website. If you then visit the website again, the cookie allows this page, for example, to recognise your browser again. Cookies are not usually used to store personal data, but can store user preferences and other information. You can set your browser to reject all cookies or to inform you when a cookie is sent. Please follow the instructions in the help function of your browser regarding the prevention and deletion of cookies.

We use cookies to enable our systems to recognise the terminal device or browser you are using and to provide you with our services. Some functionalities or services of the website may not function properly without cookies and we therefore recommend that you accept cookies so that you can make full use of our website.

For more information about cookies and how we use them, please read our cookies notice (https://www.ivoclar.com/cookies).

10. Recipients of the data or categories of recipients:

We disclose customers’ personal data to the extent described below:

• Departments of Ivoclar Vivadent AG and affiliated companies  (https://www.ivoclar.com/en_in/tools/group-companies) and their employees,
• Technical services, insofar as necessary for the fulfilment of the contractual relationship,
• Data processors and other service providers and contractual partners, to the extent necessary for the fulfilment of the contract