The controller within the meaning of Art. 4 No. 7 GDPR is:
Rocket Dental GmbH
Bahnhofstrasse 24
79798 Jestetten
Germany
Phone: +49 7745 7211
Email: privacy@rocket.dental
Scope of the processing of personal data
As a matter of principle, we process personal data of our users only to the extent necessary to provide a functional website as well as our content and services. Processing regularly takes place on the basis of consent or in fulfilment of legal requirements.
Legal bases for processing
Data erasure and storage period
Personal data is erased as soon as the purpose of its storage ceases to apply, unless a longer storage period is required by law (in particular retention periods under commercial and tax law, generally 6 or 10 years).
Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing device. The following data is collected:
Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest lies in ensuring the stable and secure operation of the website and in safeguarding the functionality of our information technology systems.
Storage period: 7 days, followed by automatic deletion.
Kinsta (hosting)
Our website is hosted by:
Kinsta Inc., 8605 Santa Monica Blvd 82144, Los Angeles, CA 90069, USA, represented in Europe by Kinsta UK Limited.
The server location is within the European Union.
Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest lies in the reliable and high-performance provision of our website. We have concluded a data processing agreement (DPA) with Kinsta in accordance with Art. 28 GDPR. In the event of transfers to third countries, the standard contractual clauses (SCCs) of the EU Commission serve as safeguards pursuant to Art. 46(2)(c) GDPR. In addition, Kinsta is certified under the EU-U.S. Data Privacy Framework (DPF).
Kinsta privacy policy: https://kinsta.com/legal/privacy-policy/
Cloudflare (CDN and security)
We use the Cloudflare service to deliver content and to protect against attacks.
Provider: Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA.
Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest lies in the efficient, fast and secure delivery of our website content and in protection against cyberattacks (e.g. DDoS attacks).
Data transfers to the USA take place on the basis of the standard contractual clauses. Cloudflare is certified under the EU-U.S. Data Privacy Framework.
Cloudflare privacy policy: https://www.cloudflare.com/privacypolicy/
Cookies are small text files that your browser stores on your device when you visit our website. The cookie contains a characteristic string of characters that enables your browser to be recognised when you visit our website again.
This website uses cookies and similar technologies. For the use of cookies that are not strictly necessary, we obtain your consent via our cookie consent tool Complianz (see cookie settings).
Necessary cookies: to provide basic functions (shopping cart, language setting). Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest lies in providing a functional and user-friendly website.
Optional cookies: for analytics, marketing and third-party content. Legal basis: Art. 6(1)(a) GDPR (consent). You can withdraw your consent at any time via the cookie settings.
Stripe (payment processing)
When you place an order, we transmit the payment data required for payment processing to Stripe.
Provider in Europe: Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland.
Data processed: name, address, bank details or credit card information, IP address, order details.
The legal basis is Art. 6(1)(b) GDPR (performance of a contract). The subsequent processing by Stripe as an independent controller takes place on the basis of the legal bases stated by Stripe; further information can be found in Stripe’s privacy policy.
Stripe privacy policy: https://stripe.com/privacy
Billie (B2B purchase on invoice via Stripe)
For purchase on invoice, we use the Billie service, integrated via Stripe.
Provider: Billie GmbH, Charlottenstrasse 4, 10969 Berlin, Germany.
Data processed: company name, address, contact person, VAT ID, email, phone number, order data, creditworthiness data.
The legal basis for the transmission of data to Billie is Art. 6(1)(b) GDPR (performance of a contract) as well as Art. 6(1)(f) GDPR. Our legitimate interest lies in protecting ourselves against payment defaults by means of a credit check before granting purchase on invoice. The subsequent processing by Billie as an independent controller takes place on the basis of the legal bases stated by Billie; further information can be found in Billie’s privacy policy.
Billie privacy policy: https://www.billie.io/privacy
Billbee (shipping back end)
We use Billbee to manage and process orders and shipping.
Provider: Billbee GmbH, Arolser Str. 10, 34477 Twistetal, Germany.
Data processed: name, delivery address, order data, tracking information.
Legal basis: Art. 6(1)(b) GDPR. A data processing agreement is in place.
Billbee privacy policy: https://www.billbee.io/datenschutzerklaerung/
AccountOne (accounting interface)
We use AccountOne to transfer order, payment, and invoice data from our systems (in particular Billbee and Stripe) into our financial accounting.
Provider: AccountOne GmbH, Schiffbrücke 66, 24939 Flensburg, Germany.
Data processed: name, billing address, order and invoice data, payment information.
Legal basis: Art. 6(1)(c) GDPR (statutory accounting and retention obligations) and Art. 6(1)(f) GDPR. Our legitimate interest lies in the proper and efficient handling of our accounting. A data processing agreement is in place.
AccountOne privacy policy: https://www.accountone.de/en/datenschutzerklaerung/
Miller & Becker GmbH & Co. KG (logistics)
For the storage and shipping of our products, we use the logistics service provider Miller & Becker GmbH & Co. KG, Splieterstrasse 67, 48231 Warendorf, Germany.
Data processed: name, delivery address, order data, batch number.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract) as well as Art. 6(1)(c) GDPR (traceability in accordance with Art. 25 MDR).
Brevo (newsletter)
We use the Brevo service to send newsletters.
Provider: Brevo SAS, 106 boulevard Haussmann, 75008 Paris, France.
Data processed: email address, name and salutation where applicable, registration date, IP address.
Legal basis: Art. 6(1)(a) GDPR (consent via the double opt-in procedure). You can unsubscribe from the newsletter at any time via the unsubscribe link in each email or by sending an email to privacy@rocket.dental.
Brevo privacy policy: https://www.brevo.com/legal/privacypolicy/
Google Analytics 4
We use Google Analytics 4 for the statistical analysis of the use of our website.
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Data processed: anonymised IP address, device and browser information, pages visited, time spent on the site.
Legal basis: Art. 6(1)(a) GDPR (consent). Activation takes place only with your express consent via the cookie consent tool.
In the event of data transfers to the USA, the standard contractual clauses and the EU-U.S. Data Privacy Framework serve as safeguards.
Google privacy policy: https://policies.google.com/privacy
Google Ads (incl. conversion tracking)
We use Google Ads for online advertising. Conversion tracking takes place in this context.
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Legal basis: Art. 6(1)(a) GDPR (consent). Activation only after your consent via the cookie consent tool.
Meta Pixel (Facebook and Instagram)
We use the so-called Meta Pixel (formerly Facebook Pixel) on our website. It serves to measure conversions and makes it possible to track the behaviour of site visitors after they have been redirected to our website by clicking on an advertisement on Facebook or Instagram. This allows the effectiveness of the advertisements to be evaluated for statistical and market research purposes and future advertising measures to be optimised. The data collected is anonymous to us as the operator of this website; we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Meta, so that a connection to the respective user profile is possible and Meta can use the data for its own advertising purposes in accordance with Meta’s privacy policy.
Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Insofar as personal data is collected on our website with the help of the Meta Pixel described here and forwarded to Meta, we and Meta Platforms Ireland Limited are jointly responsible for this data processing (Art. 26 GDPR). The joint responsibility is limited exclusively to the collection of the data and its transfer to Meta. The obligations incumbent on us jointly have been set out in a joint processing agreement. The text of the agreement can be found at: https://www.facebook.com/legal/controller_addendum.
Legal basis: Art. 6(1)(a) GDPR (consent). Activation takes place only after your express consent via the cookie consent tool.
Data transfers to third countries: The data collected may also be transferred by Meta to the USA. Any data transfer to the USA is based by Meta on the standard contractual clauses of the EU Commission. In addition, Meta Platforms Inc. holds a certification under the EU-U.S. Data Privacy Framework (DPF). Further information: https://www.dataprivacyframework.gov/participant/4452. Meta privacy policy: https://www.facebook.com/privacy/policy
If you contact us by email, the information you provide will be stored for the purpose of processing your enquiry.
Legal basis: Art. 6(1)(b) GDPR (insofar as the enquiry is aimed at the conclusion or performance of a contract) or Art. 6(1)(f) GDPR. Our legitimate interest lies in processing your enquiry and maintaining effective communication with our users and customers.
Storage period: until the matter has been conclusively resolved. For enquiries relevant to a contract, in accordance with statutory retention periods.
You have the right:
Competent supervisory authority for Baden-Wuerttemberg: Der Landesbeauftragte fuer den Datenschutz und die Informationsfreiheit Baden-Wuerttemberg (State Commissioner for Data Protection and Freedom of Information of Baden-Wuerttemberg), Koenigstrasse 10a, 70173 Stuttgart, Germany.
To exercise your rights, please contact privacy@rocket.dental.
Provision of personal data
The provision of your personal data is in part required by law (e.g. tax regulations) or may result from contractual provisions. For the conclusion of a contract (order in the online shop), it is necessary that you provide us with the personal data required for this purpose. Without this data, we cannot conclude the contract with you. Otherwise, the provision of personal data is neither legally nor contractually required; however, failure to provide it may mean that certain functions of our website cannot be used.
Date of this privacy policy: August 2026.
We reserve the right to amend this privacy policy if new legal requirements or changes to our services make this necessary.
