C. Scope of processing of personal data, purpose of processing
1. Visiting our website and creating log files
a) Description of processing activities, storage
Whenever our website is visited, our system automatically collects data and information from the computer system of the accessing computer. The following data is thereby collected:
· Information about the browser type and version used
· the user's operating system
· the IP address of the user
· Date and time of access
· Websites from which the user's system accesses our website (referrer URL)
· the subpages of our homepage accessed by the user,
· Name of the retrieved file
· Notification whether the retrieval was successful
This data is deleted from the log files of the system after 7 days, unless its further processing is exceptionally necessary to protect our legitimate interests (e.g. to induce the blocking of IT addresses, to file a criminal complaint). If such an exceptional case exists, the data will be deleted as soon as they are no longer required for this purpose. This data is not stored and/or merged with other personal data of the user.
b) Purpose and legal basis of the processing
The data listed under a) are collected
· to enable the website to be delivered to the user's computer. The legal basis for this is Article 6 paragraph 1 sentence 1 lit. f GDPR. The temporary recording of the IP address to display the pages called up by the user is technically necessary for this purpose and represents a legitimate interest on our part within the meaning of Article 6 paragraph 1 sentence 1 lit. f GDPR, which is not opposed by any overriding interests of the user.
· in order to ensure the security of our web server and the trouble-free operation of our website, e.g. monitoring to prevent or detect hacker attacks; the aforementioned purposes represent a legitimate interest on our part within the meaning of Article 6 paragraph 1 sentence 1 lit. f GDPR, which is not opposed by any overriding interests of the user.
c) Transfer of personal data, recipient of the data
The collected data will be stored by our web hosting provider. This provider acts on our behalf and provides us with storage space for our website. In addition, our web hosting provider provides other related services, e.g. saves the data processing procedures involved and ensures that the website is accessible on the Internet. The service provider is based in the European Union or in a country of the European Economic Area. The data collected in accordance with a) will not be transferred to third parties, unless this is necessary in the event of attacks on our IT, see above under b), for example in the context of filing a criminal complaint with the law enforcement authorities.
d) Right to object
The collection of the IP address is necessary for the provision of the website and the storage of the data in log files is mandatory for the operation of the website. There is therefore no possibility of objection on the part of the user. With regard to the other personal data processed in accordance with 1 a), you have the right to object to the processing at any time for reasons arising from your specific situation, see further information in section D.
2. Contacting via e-mail by the website visitor
a) Description of processing, storage
It is possible to contact our law firm via the e-mail addresses mentioned in the imprint and on the sub-pages "Lawyers". We then record the personal data of the author transmitted with the e-mail. The data will be used to answer the inquiry. The data will be deleted as soon as they are no longer required for the purpose of their collection. If the inquiry relates to a mandate that has been given or is currently being negotiated, the communication contents and dates are stored until legal retention obligations have expired. In addition, the personal data of the author collected by us on the basis of the sent email will be restricted for further processing and will only be used to defend against possible legal claims once the respective conversation with the user has ended. The conversation is terminated when it can be concluded from the circumstances that the inquiry has been finally clarified without giving any mandate. The data will be deleted after the regular period of limitation.
b) Purpose and legal basis of the processing
Your e-mail address and any other data you provide will be stored in order to answer your request. The legal basis for this is Article 6 paragraph 1 sentence 1 lit. f GDPR. If the purpose of the contact is to conclude a mandate, an additional legal basis for processing is Article 6 paragraph 1 sentence 1 lit. b GDPR.
c) Transfer of personal data, recipient
In this context, there is no transfer of the data to third parties. The data will be used exclusively for processing and answering the inquiry. The collected data is stored with our web hosting provider and on our local IT system. The web hosting provider works on our behalf and provides us with storage space for our website and stores the data processing procedures associated with this. This service provider has been carefully selected and commissioned by us, is bound by our instructions and is checked regularly. The service provider is based in the European Union or in a country of the European Economic Area.
d) Right to object
The user can object to the use of his personal data at any time. In such a case the conversation cannot be continued. In addition, section D applies.
3. Applications
a) Description of processing activities, storage, purpose
You can apply by mail or e-mail. When the subpage "Job Advertisements" is called up, we process the data collected by the call, see the information under C 1) of this data protection declaration. In addition, we process the data you send us with your application in order to check your suitability for the position to be filled and to carry out the application procedure. In the event of a rejection, we will delete the data you send us within 6 months after the rejection has been sent. If you have previously given us your consent to further storage in order to use your data for checking other vacancies to be filled in the future, we will store the data in accordance with the consent given until you revoke it. If you are awarded the position as part of the application process, the data will be transferred from the applicant data system to our personnel information system.
b) Legal basis of the processing
The legal basis for processing your personal data in this application procedure is § 26 of the German Federal Data Protection Act ( Bundesdatenschutzgesetz – BDSG). According to this law, the processing of the data required in connection with the decision to establish an employment relationship is permissible. Should the data be required for legal prosecution after the application procedure has been completed, data processing may be carried out on the basis of the requirements of Article 6 GDPR, in particular to safeguard legitimate interests in accordance with Article 6 paragraph 1 sentence 1 lit. f GDPR. Our interest then consists in the assertion or defense of claims.
c) Transfer of personal data, recipient
The data collected in accordance with a) will be stored on our e-mail server in case of e-mail transmission and, if necessary, processed on our local IT system. Your application data will be reviewed by our human resources manager after receipt of your application. Suitable applications will then be forwarded internally to the department managers responsible for the respective open position. The further procedure is then coordinated. Within the company, only those persons who need access to your data for the proper processing of our application procedure have access to your data.
d) Right to object
You may at any time object to the storage of data that may be required for legal prosecution, processed on the basis of Article 6 paragraph 1 sentence 1 lit. f GDPR, see Section D.
4. Postal advertising (letter post)
a) Description of the processing activities, storage, purpose, transfer, recipient
If you provide us with your name and postal address, we will store it for possible future sending of postal advertising (letter post) about our services, our law firm and for sending Christmas mail. The data may be made available to an external service provider in the case of franking and dispatch, which may be carried out by an external service provider. This service provider acts according to our instructions and on our behalf. This service provider has its headquarters in the European Union. The data will not be passed on to third parties in any other way. The data will be deleted as soon as they are no longer required for the purpose of their collection or as soon as you have objected to their processing.
b) Legal basis of the processing, right to object
The legal basis for the data processing mentioned under a) is Article 6 paragraph 1 sentence 1 lit. f GDPR. The sending of product information by letter post is a legitimate interest of our firm. You can object to this use of your personal data at any time. In such a case, we will stop sending postal advertising. In addition, section D applies.
5. Download of forms, newsletters or similar
You can download forms, newsletters or other information documents from our website, view them afterwards and/or save them on your end device. In doing so, we only temporarily record the data mentioned under C 1 (log files). In all other respects, the information mentioned under C 1 also applies here.
6. Newsletter
a) Description of data processing, storage
You can subscribe to a free newsletter on our website which will then be sent to you by e-mail. For this purpose, we need your consent.
To obtain your consent, we use the so-called double opt-in procedure. This serves as a verification that the request originates from the owner of the specified e-mail account. Therefore, after requesting the newsletter, we will send you an e-mail to the provided e-mail address in which we ask you to confirm that you wish to receive it. If you do not confirm your subscription within 24 hours, your data will be blocked and deleted within four days. Your request will be transmitted to us with the data you have provided and stored in our IT system.
The specification of the e-mail address on our website is a mandatory field. In addition, we record and store in each case:
- Your IP address when you register on our website
- Date and time of registration and transmission of the confirmation e-mail
- Storage of the texts used for registration and confirmation as the content of the declarations of consent
After receiving your confirmation, we store your e-mail address for the purpose of sending you the newsletter.
The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. If you unsubscribe from the newsletter, the aforementioned data will be restricted for further processing and will only be used for the defense against possible legal claims. After the expiration of the statute of limitations, the data will be deleted, unless the contents constitute a business letter within the meaning of § 257 HGB.
b) Purpose & legal basis of data processing
Your e-mail address and any other data you may have provided will be stored in order to send you the newsletter. The legal basis for this is Art. 6 para. 1 lit. a GDPR.
The storage of the IP address as well as the time of subscription to the newsletter/transmission of the confirmation e-mail has the purpose of proving your subscription and, if necessary, to be able to clarify a possible abuse of your personal data. The legal basis for the processing of this data is Art. 6 para. 1 lit. a and f) and Art. 7 para.1 GDPR.
We also record when and which newsletter you have received. This is done on the legal basis of Art. 6 para.1 lit. f) GDPR. Our legitimate interest is to record this for our legal defense, e.g. to check the accusation of unauthorized transmission after revocation, as well as for marketing reasons. According to our estimation, there are no conflicting overriding interests on your part.
c) Transfer/recipient of the data
When sending the newsletter, we use our standard e-mail system together with the software "Outlook".
The data you provide on our website is made available to our web hosting service provider. The data is temporarily stored before it is automatically sent to us by e-mail. The web hosting service provider works on our behalf, is located in the European Union, provides us with storage space for our website and stores the associated data processing operations.
d) Right to object and possibility of removal
You can unsubscribe from the newsletter at any time. For this purpose, you will find a corresponding link in each newsletter (unsubscribe from newsletter). This simultaneously revokes the consent granted for the collection/storage/use of the personal data collected during the registration process and for sending the newsletter by e-mail.
You can object at any time to the processing of the data, which are based on Article 6 (1) sentence 1 lit. f GDPR, see b), see section D and Art. 21 GDPR.
7. Request for free information
a) Description of data processing, storage
You can request certain information brochures, e.g. an investment guide, free of charge via our website. We will then send you a link to download the information by e-mail. For this purpose, we need your consent.
To obtain your consent, we use the so-called double opt-in procedure. This serves as a verification that the request originates from the owner of the specified e-mail account. Therefore, after requesting the information, we will send you an e-mail to the provided e-mail address in which we ask you to confirm that you wish to receive it. If you do not confirm your subscription within 24 hours, your data will be blocked and deleted within four days. Your request will be transmitted to us with the data you have provided and stored in our IT system.
The specification of the e-mail address on our website is a mandatory field. In addition, we record and store in each case:
- Your IP address when you register on our website
- Date and time of registration and transmission of the confirmation e-mail
- Storage of the texts used for registration and confirmation as the content of the declarations of consent
After receiving your confirmation, we store your e-mail address for the purpose of sending you the requested information.
The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. If you unsubscribe from the newsletter, the aforementioned data will be restricted for further processing and will only be used for the defense against possible legal claims. After the expiration of the statute of limitations, the data will be deleted, unless the contents constitute a business letter within the meaning of § 257 HGB.
b) Purpose & legal basis of data processing
Your e-mail address and any other data you may have provided will be stored in order to send you the information. The legal basis for this is Art. 6 para. 1 lit. a GDPR.
The storage of the IP address as well as the time of request/transmission of the confirmation e-mail has the purpose of proving your request and, if necessary, to be able to clarify a possible abuse of your personal data. The legal basis for the processing of this data is Art. 6 para. 1 lit. a and f) and Art. 7 para.1 GDPR.
We also record when you have received the information or the link to the information. This is done on the legal basis of Art. 6 para.1 lit. f) GDPR. Our legitimate interest is to record this for our legal defense, e.g. to check the accusation of unauthorized transmission after revocation, as well as for marketing reasons. According to our estimation, there are no conflicting overriding interests on your part.
c) Transfer/recipient of the data
When sending the information, we use our standard e-mail system together with the software "Outlook".
The data you provide on our website is made available to our web hosting service provider. The data is temporarily stored before it is automatically sent to us by e-mail. The web hosting service provider works on our behalf, is located in the European Union, provides us with storage space for our website and stores the associated data processing operations.
d) Right to object and possibility of removal
You can revoke your consent to receive the information at any time.
You can object at any time to the processing of the data, which are based on Article 6 (1) sentence 1 lit. f GDPR, see b), see section D and Art. 21 GDPR.
8. Webinar Registration
a) Description of Data Processing, Storage
You can register for free webinars of our law firm via our website. Your name and e-mail address are required fields. With sending we collect and store in each case
- your IP address
- date and time of registration
- webinar details (title, date, time)
Your registration will be transmitted to us and stored in our IT system. We will confirm receipt of your registration by e-mail to the e-mail address provided and store this message including the time of sending.
Shortly before the webinar, we will send you another email with a link to join the webinar. We record the content of this follow-up email and the time it was sent.
Your registration data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. After the webinar has been held, the aforementioned data will be restricted for further processing and will only be used to prove that it was sent lawfully and to defend against possible legal claims. After the expiry of the limitation period, the data will be deleted unless the content constitutes a business letter within the meaning of Section 257 of the German Commercial Code (HGB).
b) Purpose & Legal Basis of the Data Processing
Your e-mail address and any other data you may have provided will be stored in order to process your registration and hold the webinar. The legal basis for this is Art. 6 para. 1 lit. b of the GDPR.
The storage of the IP address and the time of registration/sending of the confirmation email is intended to prove your request and, if necessary, to be able to clarify a possible misuse of your personal data. The legal basis for the processing of this data is Art. 6 para. 1 lit. b and f) GDPR.
We also record when the follow-up email with the link to our webinar was sent to you. This is done on the legal basis of Art. 6 para.1 lit. f) GDPR. Our legitimate interest is to record this for our legal defense, e.g. to check / refute the accusation of unauthorized sending. According to our assessment, there are no conflicting overriding interests on your part.
c) Transmission/Recipient of the Data
When sending the information we use our standard e-mail system together with the software "Outlook".
The data you provide on our website becomes accessible to our web hosting service provider. This provider temporarily stores the data before it is further processed by us. The web hosting service provider works on our behalf, is located in the European Union, provides us with storage space for our website and stores the associated data processing operations.
d) Right to object
You can cancel your registration at any time. To do so, please send us an email to kanzlei@SPAMPROTECTIONkunzrechtsanwaelte.de.
You can object at any time to the processing of data that we base on Article 6 (1) sentence 1 lit. f GDPR, see here under b), cf. section D and Art. 21 GDPR.
