Privacy Policy

The protection of your personal data is particularly important to us. Below we would like to inform you in detail about how we deal with them. Of course, all legal provisions of the EU General Data Protection Regulation (“GDPR”) are observed.

1.Responsible for the Data Processing and Contact for Data Protection Questions

a) Controller for this website is

Henry Schein Services GmbH
Monzastrasse 2a
63225 Langen
Germany

(“Henry Schein”).

For further information and contact details, see the imprint

b) If you have any questions or concerns regarding the protection of your data at Henry Schein you may contact the Data Protection Officer via the following contact details:

• Via letter:
  Att. to:
  Data Protection Office Europe c/o Henry Schein Services GmbH,
  Monzastrasse 2a, 63225 Langen, Germany

• Via E-mail: DPOE@henryschein.com

2. Data Henry Schein Collects and Processes

To visit and use our website, it is generally not necessary to provide personal data. Only access data without direct personal reference, such as the name of your internet service provider, the page from which you are visiting us, the names of the requested files and their access date are being processed. This data is only evaluated to improve our website and does not allow any direct conclusions to be drawn about you personally.

Personal data is collected if you voluntarily provide it to us. This can be done, for example, when registering for an offer, ordering goods, opening a customer account, filling out forms on our website, e.g. when you register for our newsletter, participate in surveys or request that we contact you directly, or if you correspond with us by phone, email or in any other way.

In accordance with our values, we treat all personal data that we receive in accordance with the data protection principles from Art. 5 GDPR, i.e. 1) lawful, transparent processing in good faith, 2) purpose limitation, 3) data minimization, 4) accuracy and data quality, 5) memory limitation, 6) integrity and confidentiality and 7) accountability.

3. Use of Personal Data and Legal Basis

We only use your personal data to the extent permitted by law. This mostly happens in the following situations:

a) To fulfil a contract or if we are about to conclude a contract with you or if we take certain measures or steps at your request. If you e.g. register for an event, buy goods from us or instruct us to provide a service, your personal data, limited to the minimum necessary, will be used to provide the service or to carry out the purchase contract. This includes in particular the transfer of your data to transport companies, financial companies or to other service providers used to provide the service or to process the contract.

b) For the necessary pursuit of our legitimate interests or those of a third party and insofar as your interests and rights do not take precedence. E.g. if responding to your inquiries, notifying you of changes to our terms and conditions, this privacy policy or other documents, or when we demonstrate our products or services to you or send information that we can reasonably assume to be of interest to you in order to conclude a contract with us.

c) To fulfil legal or regulatory obligations. If we e.g. share your information with a manufacturer in connection with a product recall, or as part of our effort to keep our services safe and secure, or when the health or safety of individuals is at risk.

As part of legal requirements we are subject to, we have or will conclude written agreements with third-party recipients that are in accordance with this data protection declaration. We require all third-party recipients to respect the security of your personal data and to treat them in accordance with the law, in particular the applicable data protection regulations. Your data will only be passed on to third parties outside the Henry Schein Group to the extent necessary and to the extent permitted by law.

d) For some processing we have engaged or may engage third party data processors (e.g. IT service providers). With these the required data processor agreements will be or are concluded.

e) In order to support you in your company, we will send you information on products and services that we and other companies of the Henry Schein Inc. Group offer, as far as you have consented or which are, in our view, understandably of interest to you within the framework of the applicable legal provisions.

This applies in particular to our exclusive specialist events, product and industry innovations as well as current discount campaigns and top offers. You will receive this information in accordance with your consent or if you have purchased products or services from us or after weighing up legitimate interests through different channels, e.g. by post, by phone, by fax or by email; the latter e.g. if you have registered using our double-opt-in procedure to receive our newsletter, stating your name and email address.

You can withdraw your given consent at any time with future effect. You can unsubscribe from any service or functionality by unsubscribing through the link provided in every e-mail communication.

We will implement our request as soon as possible. Please note, however, that the processing can take some time. As a result, you may still receive marketing and advertising information even after the request has been made, because the corresponding measure was already in the expiry phase when we received your request.

Even if you have effectively objected to the receipt of marketing and advertising information, this objection does not apply to your personal data which we legitimately process on the basis of other legal grounds, e.g. based on your purchase of our products or services.

f) Our services are not directed to consumers or children. If a parent or guardian becomes aware that his or her child has provided us with personal information without their consent, please contact us. If we become aware that a child has registered for a service and has provided us with personal information, we will delete such information from our files.

4. Data Recipients and International Data Transfers

a) If you have consented to it, Henry Schein will forward your information as described in the terms and conditions for the local Henry Schein companies according to your country of origin as described in the following table:

For more information about data protection in the local Henry Schein companies, please see their privacy policies on the websites stated above.

b) Henry Schein can forward your data to service providers working on our behalf within and outside of Henry Schein Group, such as IT Service providers, technical helpdesk, hosting partners, event agencies, payment service providers, financial institutions, call center, translation service, marketing automation platforms and analytics platforms. We have contractually agreed that the service providers may only use your data within the scope of the ordered processing for us and for our services, including relevant data protection agreements.

c) Data recipients can be located within the European Union (EU)/European Economic Area (EEA), countries with adequate data protection level and in Third Countries whose level of Data Protection may not be the same as in the EU / EEA. Where such transfers take place, we undertake all necessary precautions required by the GDPR.

5. Your responsibility and obligations

Where necessary, you must ensure that you have collected or have given all the necessary consents, information and notices that are required in accordance with the applicable data protection regulations in order to allow the lawful processing of personal data (including special categories, for example Health data of your patients) to us and to third parties, so that we and the third parties working on our behalf (data processors) can legally use, process, store and transfer the personal data.

6. Storage Period

We will keep your data only as long as necessary for the fulfilment of the respective purpose for which they were collected. This also includes the fulfilment of legal, in particular commercial, corporate, tax and regulatory requirements. In order to determine the appropriate retention period for personal data we take into account, among other things, the quantity, type and sensitivity of the personal data; the possible risk of damage (e.g. through unauthorized use or disclosure), the purposes for which we process your personal data and whether we can achieve these purposes with other, milder means within the applicable legal requirements. We will take all reasonable steps to destroy or delete any data that is no longer needed from our system.

Transaction-related data will be stored for 10 years according to applicable tax requirements.

7. Security of your Data

We protect your data against accidental or intentional manipulation, destruction or loss as well as against unauthorized access by third parties through the use of suitable technical and organizational security measures. These are continuously checked and improved in line with technological developments.

8. Your rights

According to the regulations of the GDPR you have the following rights:

a) the right to access and correction your personal data: you can e.g. Request a copy of your personal data that we hold about you and check that we process it legally and ask us or - via customer log-in - independently correct incomplete or inaccurate data.

b) the right to have your personal data deleted: Please delete your data if we no longer have a legitimate reason to continue processing it or you have effectively exercised your right to object. Please note that we cannot always comply with your request for deletion for certain legal reasons.

c) the right to object to the processing of your personal data with future effect: e.g. at any time if we process your personal data for direct marketing purposes or if we rely on a legitimate interest or that of a third party, but you have a situation that outweighs your rights and freedoms. In some cases, however, we may be able to demonstrate that we have an overriding legitimate interest or other authorization to process your personal data further.

d) the right to restrict or suspend the processing of your personal data: e.g. to determine the correctness of your data or if you have a right to erasure but do not want to exercise it or if you ask us to only keep your data so that you can justify, exercise or defend claims.

e) the right to transfer your personal data to you or third parties in a commonly used, machine-readable format: Please note that this right only applies to automated data that you have approved for use or that we have used to fulfill a contract with you.

f) the right to withdraw your given consent at any time with future effect, in cases where we rely on your consent to process your personal data: Please note that this does not affect the lawfulness of processing before revocation. If you withdraw your consent, we may not be able to provide certain products or services to you.

g) the right to lodge a complaint: In justified cases, you can lodge a complaint with the responsible data protection authority. However, we would like you to contact us with your concerns in such a case so that we can try to resolve your concerns by mutual agreement. We are happy to be your first point of contact.

With regard to your request, we may need to request specific information from you to help us confirm your identity and ensure your rights. This serves your and our security so that your personal data is not passed on to unauthorized third parties. To speed up our response, we can also contact you to provide us with more information related to your request.

We try to respond to all legitimate requests within a reasonable time, if possible within a month. Occasionally, it may take longer, e.g. if we have any questions, your request is complex or you have made several requests. In this case we will notify you and keep you up to date.

In principle, you can exercise all the rights mentioned free of charge. In individual cases, we are entitled by the GDPR to charge a reasonable processing fee if your application is obviously unfounded, repeated or excessive. Alternatively, we can also refuse your request under these circumstances.

We reserve the right to modify this Privacy Statement and related business practices at any time. We will duly inform you of any changes by posting here.

Use of cookies and other information gathering technologies

In addition to the personal data you volunteer, our Web server automatically collects such information as the domain name of the Website providing you with Internet access, the Internet protocol (IP) address used to connect your computer to the Internet, your browser type and version, operating system and platform, the average time spent on our Web site, pages viewed, information searched for, access times and other relevant statistics. Henry Schein uses this information in order to ensure that unauthorized users do not access the information on its Web site, and in the aggregate to measure the use of its Web site and to administer and improve it.

Most browsers used by visitors have options that allow the visitor to control whether the browser will accept cookies, reject cookies, or notify the visitor each time a cookie is sent, but setting a browser to reject cookies will prevent access to our Web site. In addition, you can delete your Henry Schein cookies from your browser program at any time through the "Cookie Settings" link provided in website.

Use of Hubspot

This is a marketing, content management, web analytics and search engine optimization service. 

Data Processing Company

HubSpot, Inc.

25 First Street, 2nd Floor, Cambridge, MA 02141, United States of America 

Data Purposes

This list represents the purposes of the data collection and processing.

• Marketing
• Statistics

Data Collected

This list represents all (personal) data that is collected by or through the use of this service.

• Aggregated usage
• Browser type
• Device identifiers
• Device model
• Device operating system
• Domain name
• Files viewed
• Frequency of use of mobile application
• Geographic location
• Internet service provider
• IP address
• Length of page visit
• Mobile application information
• OS version
• Performance data
• Referrer URL
• Time of access or retrieval
• Where the application was downloaded from
• Clickstream data
• Events occurring within application
• Navigational information
• Pages viewed
• Subscription Service credentials

Legal Basis

In the following the required legal basis for the processing of data is listed.

• Art. 6 para. 1 s. 1 lit. a GDPR

Location of Processing

United States of America

Data Retention Period

The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.

The data will be deleted as soon as they are no longer needed for the processing purposes.

Data Recipients

• Service providers
• Hubspot partners

Data Protection Officer

Below you can find the email address of the data protection officer of the processing company.

privacy@hubspot.com

Distribution to third countries

This service may forward the collected data to a different country. Please note that this service might transfer the data outside of the EU/EEA and to a country without the required data protection standards. If the data is transferred to the US, there is a risk that your data can be processed by US authorities, for control and surveillance measures, possibly without legal remedies. Below you can find a list of countries to which the data is being transferred. This can be for different reasons like storing or processing.

Worldwide

Click here to read the privacy policy of the data processorhttps://legal.hubspot.com/privacy-policy?_ga=2.80487636.2109353776.1547219595-1840724365.1539588495

Storage Information

Below you can see the longest potential duration for storage on a device, as set when using the cookie method of storage and if there are any other methods used.

• Maximum age of cookie storage: 1 Year, 1 Month