Privacy Policy
2026. 11. 01
The operator of the Zahnplant website (the “Site”) processes personal data received through product inquiries and partnership requests in accordance with applicable law. This policy takes into account the GDPR, which applies to users in Germany and the rest of the European Union, and the Personal Information Protection Law of China (PIPL).
Operator and contact details
| Operator / 运营主体 | 四川迪耀科技有限公司 (Sichuan DIO Technology Co., Ltd.) |
| Location / 所在地 | Chengdu, Sichuan, People's Republic of China (中国四川省成都市) |
| ICP Filing / 备案号 | 蜀ICP备2026041047号-1 |
| Contact / 联系方式 | Contact Us |
Personal data we collect
| Category | Collected Items (Data minimization: phone numbers are not collected) |
|---|---|
| General Inquiry (Required) | Inquiry type, Name, Company/Clinic name, Country, Email address, Message |
| General Inquiry (Optional) | Product of interest |
| Dealer Partnership (Required) | Primary sales countries, Distribution channel, Expected sales/supply scope |
| Dealer Partnership (Optional) | Company website, Current brands carried, Company introduction attachment (max 10 MB) |
| Automatically Generated | IP address, access timestamp, requested URI (security logs) |
Purposes and legal bases
| Purpose | Data processed | Legal basis |
|---|---|---|
| Reviewing and answering inquiries | Inquiry form data | Consent (Art. 6(1)(a) GDPR, Art. 13(1) PIPL) and steps prior to entering into a contract (Art. 6(1)(b) GDPR) |
| Reviewing dealer partnerships | Additional dealer data, attachments | Consent and steps prior to entering into a contract (Art. 6(1)(a) and (b) GDPR, Art. 13(1) and (2) PIPL) |
| Site security and incident response | Access logs | Legitimate interests (Art. 6(1)(f) GDPR) and compliance with legal obligations (Art. 13(3) PIPL) |
Data received through inquiries is not used for marketing without separate consent. We do not carry out automated decision-making or profiling.
Retention periods
| Inquiry & Dealer Partnership Records / 客户与经销商咨询信息 | 3 years from inquiry completion or until consent withdrawal (상담 완료 후 3년 또는 동의 철회 시 지체 없이 파기, 삭제된 첨부파일은 30일 유예 후 디스크 물리 영구 삭제) |
| Security & Access Logs / 网络安全日志 | At least 6 months per PRC Cybersecurity Law (중국 네트워크안전법에 따라 최소 6개월 이상 보관) |
Disclosure to third parties and processors
| Cloud Hosting / 云服务器托管 | Tencent Cloud (腾讯云计算 / Chengdu Region, China) |
| Global HQ Support / 跨国集团技术与商务支持 | DIO Corporation (Republic of Korea) — for clinical/technical review & global dealer partnership evaluation |
International transfers
Primary storage server location: People's Republic of China (Tencent Cloud Chengdu Region). For global dealer partnership and technical inquiries requiring headquarters review, authorized administrators at DIO Corporation (Republic of Korea) may access the inquiry record via encrypted HTTPS channels in accordance with PRC PIPL Articles 38–39 and EU GDPR Chapter V safeguards.
Cookies and external services
The Site currently does not use analytics, advertising or social media tracking cookies. It may use only session cookies that are strictly necessary to provide the Site, such as for security and keeping your language setting. These are deleted when you close your browser.
Fonts and scripts are served from the Site’s own server, so your data is not sent to external providers for this purpose. If analytics or advertising tools are introduced, we will obtain prior consent and update this policy.
External sites such as the authenticity check site (cert.zahnplant.com) are governed by their own policies.
Your rights
Under applicable law you may exercise the following rights.
- Access to your data and a copy of it
- Correction and completion of inaccurate data
- Deletion of your data
- Restriction of or objection to processing
- Transfer of your data to another controller
- Withdrawal of consent
- An explanation of our processing rules
You can exercise these rights using the contact details in section 1, and we will respond within the period set by law. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
EU users may lodge a complaint with the data protection authority where they live or work. Users in China may report to the authorities responsible for personal information protection.
Security measures
The operator applies technical and organizational measures to protect personal data, including encrypted transmission, restricted access rights, logging of administrator logins and actions, and access control for attachments.
Children’s data
This Site is intended for dental professionals and business partners. We do not knowingly collect personal data of children under 14 (China) or under 16 (European Union) and will delete such data once identified.
Changes to this policy
Any changes to this policy will be announced on the Site. Where required by law, we will ask for your consent again.