Privacy Policy

Welcome to the Henry Schein website for the Practice Green Initiative. The protection of your personal data is particularly important to us. Below we would like to inform you in detail about how we deal with them. Of course, all legal provisions of the EU General Data Protection Regulation (“GDPR”) are observed.

1.Responsible for the Data Processing and Contact for Data Protection Questions

a) Controller for this website is Henry Schein Services GmbH, Monzastr. 2a, 63225 Langen, Germany (“Henry Schein”).

b) If you have any questions or concerns regarding the protection of your data at Henry Schein you may contact the Data Protection Officer via the following contact details:

• Via letter:
  An den Datenschutzbeauftragten
  c/o Henry Schein Services GmbH,
  Monzastrasse 2a, 63225 Langen, Germany
• Via E-mail: Datenschutzbeauftragter@henryschein.de

2. Data Henry Schein Collects and Processes

a) Information we collect about you when you visit our website

To visit and use our website, it is generally not necessary to provide personal data. Only access data without direct personal reference, such as the name of your internet service provider, the page from which you are visiting us, the names of the requested files and their access date are being processed. This data is only evaluated to improve our website and does not allow any direct conclusions to be drawn about you personally.

b) Information that you voluntarily give us

Personal data is collected if you voluntarily provide it to us. This can be done, for example, when registering for an offer, ordering goods, opening a customer account, filling out forms on our website, e.g. when you register for our newsletter, participate in surveys or request that we contact you directly, or if you correspond with us by phone, email or in any other way.

In accordance with our values, we treat all personal data that we receive in accordance with the data protection principles from Art. 5 GDPR, i.e. 1) lawful, transparent processing in good faith, 2) purpose limitation, 3) data minimization, 4) accuracy and data quality, 5) memory limitation, 6) integrity and confidentiality and 7) accountability.

3. Use of Personal Data and Legal Basis

We only use your personal data to the extent permitted by law. This mostly happens in the following situations:

a) To fulfil a contract or if we are about to conclude a contract with you or if we take certain measures or steps at your request. If you e.g. register for an event, buy goods from us or instruct us to provide a service, your personal data, limited to the minimum necessary, will be used to provide the service or to carry out the purchase contract. This includes in particular the transfer of your data to transport companies, financial companies or to other service providers used to provide the service or to process the contract.

b) For the necessary pursuit of our legitimate interests or those of a third party and insofar as your interests and rights do not take precedence. E.g. if responding to your inquiries, notifying you of changes to our terms and conditions, this privacy policy or other documents, or when we demonstrate our products or services to you or send information that we can reasonably assume to be of interest to you in order to conclude a contract with us.

c) To fulfil legal or regulatory obligations. If we e.g. share your information with a manufacturer in connection with a product recall, or as part of our effort to keep our services safe and secure, or when the health or safety of individuals is at risk.

As part of legal requirements we are subject to, we have or will conclude written agreements with third-party recipients that are in accordance with this data protection declaration. We require all third-party recipients to respect the security of your personal data and to treat them in accordance with the law, in particular the applicable data protection regulations. Your data will only be passed on to third parties outside the Henry Schein Group to the extent necessary and to the extent permitted by law.

d) For some processing we have engaged or may engage third party data processors (e.g. IT service providers). With these the required data processor agreements will be or are concluded.

e) In order to support you in your company, we will send you information on products and services that we and other companies of the Henry Schein Inc. Group offer, as far as you have consented or which are, in our view, understandably of interest to you within the framework of the applicable legal provisions.

This applies in particular to our exclusive specialist events, product and industry innovations as well as current discount campaigns and top offers. You will receive this information in accordance with your consent or if you have purchased products or services from us or after weighing up legitimate interests through different channels, e.g. by post, by phone, by fax or by email; the latter e.g. if you have registered using our double-opt-in procedure to receive our newsletter, stating your name and email address. 

You can withdraw your given consent at any time with future effect. You can unsubscribe from any service or functionality by unsubscribing through the link provided in every e-mail communication.

We will implement our request as soon as possible. Please note, however, that the processing can take some time. As a result, you may still receive marketing and advertising information even after the request has been made, because the corresponding measure was already in the expiry phase when we received your request.

Even if you have effectively objected to the receipt of marketing and advertising information, this objection does not apply to your personal data which we legitimately process on the basis of other legal grounds, e.g. based on your purchase of our products or services.

4. Data Recipients and International Data Transfers

a) ​Henry Schein can forward your data to service providers working on our behalf within and outside of Henry Schein Group, such as IT Service providers, technical helpdesk, hosting partners, event agencies, payment service providers, financial institutions, call center, translation service, marketing automation platforms and analytics platforms. We have contractually agreed that the service providers may only use your data within the scope of the ordered processing for us and for our services, including relevant data protection agreements.

b) ​Data recipients can be located within the European Union (EU)/European Economic Area (EEA), countries with adequate data protection level and in Third Countries whose level of Data Protection may not be the same as in the EU / EEA. Where such transfers take place, we undertake all necessary precautions required by the GDPR. 

For example, your personal data is recorded in a database of our parent company, Henry Schein Inc., Melville, New York, USA. This is done in order to operate our website and so that you can use all of our products and services to their full extent and is necessary for improving and conducting our business. In particular we e.g. measure the needs of our customers and improve our products and services for you in order to optimize our offers. In addition, other affiliates of the Henry Schein Group can access your data within the scope of the legal provisions.

5. Your responsibility and obligations

Where necessary, you must ensure that you have collected or have given all the necessary consents, information and notices that are required in accordance with the applicable data protection regulations in order to allow the lawful processing of personal data (including special categories, for example Health data of your patients) to us and to third parties, so that we and the third parties working on our behalf (data processors) can legally use, process, store and transfer the personal data.

6. Storage Period

We will keep your data only as long as necessary for the fulfilment of the respective purpose for which they were collected. This also includes the fulfilment of legal, in particular commercial, corporate, tax and regulatory requirements. In order to determine the appropriate retention period for personal data we take into account, among other things, the quantity, type and sensitivity of the personal data; the possible risk of damage (e.g. through unauthorized use or disclosure), the purposes for which we process your personal data and whether we can achieve these purposes with other, milder  means within the applicable legal requirements.

We will take all reasonable steps to destroy or delete any data that is no longer needed from our system.

7. Security of your Data

We protect your data against accidental or intentional manipulation, destruction or loss as well as against unauthorized access by third parties through the use of suitable technical and organizational security measures. These are continuously checked and improved in line with technological developments.

8. Your rights

According to the regulations of the GDPR you have the following rights:

a) the right to access and correction your personal data: you can e.g. Request a copy of your personal data that we hold about you and check that we process it legally and ask us or - via customer log-in - independently correct incomplete or inaccurate data.

b) the right to have your personal data deleted: Please delete your data if we no longer have a legitimate reason to continue processing it or you have effectively exercised your right to object. Please note that we cannot always comply with your request for deletion for certain legal reasons.

c) the right to object to the processing of your personal data with future effect: e.g. at any time if we process your personal data for direct marketing purposes or if we rely on a legitimate interest or that of a third party, but you have a situation that outweighs your rights and freedoms. In some cases, however, we may be able to demonstrate that we have an overriding legitimate interest or other authorization to process your personal data further.

d) the right to restrict or suspend the processing of your personal data: e.g. to determine the correctness of your data or if you have a right to erasure but do not want to exercise it or if you ask us to only keep your data so that you can justify, exercise or defend claims.

e) the right to transfer your personal data to you or third parties in a commonly used, machine-readable format: Please note that this right only applies to automated data that you have approved for use or that we have used to fulfill a contract with you.

f) the right to withdraw your given consent at any time with future effect, in cases where we rely on your consent to process your personal data: Please note that this does not affect the lawfulness of processing before revocation. If you withdraw your consent, we may not be able to provide certain products or services to you.

g) the right to lodge a complaint: In justified cases, you can lodge a complaint with the responsible data protection authority. However, we would like you to contact us with your concerns in such a case so that we can try to resolve your concerns by mutual agreement. We are happy to be your first point of contact.

With regard to your request, we may need to request specific information from you to help us confirm your identity and ensure your rights. This serves your and our security so that your personal data is not passed on to unauthorized third parties. To speed up our response, we can also contact you to provide us with more information related to your request.

We try to respond to all legitimate requests within a reasonable time, if possible within a month. Occasionally, it may take longer, e.g. if we have any questions, your request is complex or you have made several requests. In this case we will notify you and keep you up to date.

In principle, you can exercise all the rights mentioned free of charge. In individual cases, we are entitled by the GDPR to charge a reasonable processing fee if your application is obviously unfounded, repeated or excessive. Alternatively, we can also refuse your request under these circumstances.

We reserve the right to modify this Privacy Statement and related business practices at any time. We will duly inform you of any changes by posting here. 

Last Updated: December 2022