Privacy Policy

In the following, we inform you in accordance with Art. 12 of the General Data Protection Regulation (GDPR) about the processing of your personal data, contact options for questions or problems and the data protection rights to which you are entitled. We only process personal data to the extent necessary to provide a functional website and our content and services.

We reserve the right to adjust this privacy policy at any time. This may occasionally be necessary, in particular due to a change in the legal situation or actual circumstances. Therefore, please check the current status of the privacy policy before using our services. 

 

I. Responsible provider

Responsible within the meaning of Art. 4 no. 7 GDPR:

GRUENDELPARTNER Rechtsanwälte Steuerberater Wirtschaftsprüfer PartGmbB.

Further information on the responsible provider can be found in the legal notice.

If you have any questions regarding data protection, please contact us via datenschutz@gruendelpartner.de.

 

II. Accessing our website

1. Description and scope of the data processing

Each time our website is accessed, our system automatically collects information from the computer system of the accessing computer.

The following data is collected:

  • Information about the browser and operating system used
  • Referrer URL (the website that linked you to us)
  • The IP address of your device
  • Host name of the accessing computer
  • Date and time of the server request

The data is also stored in the log files of our system. This data is not stored together with other personal data of the user.

2. Legal basis for the data processing

The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f GDPR.

3. Purpose of the data processing

The temporary storage of this data by the system is necessary to enable and facilitate the use of the website. For this purpose, the data must remain stored for the duration of the session. The data is stored in log files to ensure the functionality of the website. We also use the data to optimise the website and to ensure the security of our information technology systems. The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. These purposes also constitute our legitimate interest in processing the data in accordance with Art. 6 para. 1 lit. f GDPR.

4. Duration of storage

The personal data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.

If the data is stored in log files, this is the case after one month at the latest.

Storage beyond this is possible in anonymised form. In this case, the IP addresses of the users are deleted or anonymised so that it is no longer possible to identify the accessing client.

 

III. Contact by e-mail

1. Description and scope of the data processing

It is possible to contact us via the e-mail addresses published on our website. In this case, the personal data transmitted by you with the e-mail will be stored by us.

The data will not be passed on to third parties in this context. The data will be used exclusively for processing the enquiry.

2. Legal basis for the data processing

The legal basis for the processing of data transmitted to us by e-mail is Art. 6 para. 1 lit. f GDPR. If the e-mail contact is aimed at the conclusion of a contract, the legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

If your enquiry is an application, whether for an advertised position or on your own initiative, we process the data on the basis of Art. 6 para. 1 lit. b GDPR and Section 26 para. 1 BDSG. If we are legally obliged to process your data, this is based on Art. 6 para. 1 lit. c GDPR.

3. Purpose of the data processing

The processing of personal data serves us to handle the enquiry. This is also the legitimate interest in the processing of the data within the meaning of Art. 6 para. 1 lit. f GDPR.

4. duration of storage

If your data is processed on the basis of Art. 6 para. 1 lit. b GDPR, we store it for the duration of our business relationship with you.

If you contact us by e-mail and we process your data on the basis of Art. 6 para. 1 lit. f GDPR, you can object to the storage of your personal data at any time in accordance with Art. 21 GDPR. We will process your data for the above-mentioned purposes until they no longer apply (e.g. by ending the conversation) or until you object to this and your interests outweigh ours. In such a case, communication by email cannot be continued. To object, please contact us via datenschutz@gruendelpartner.de.

If we have processed your data for the purpose of an application and the application was successful, we will store the necessary data in your personnel file. If the processing is based on a legal obligation (Art. 6 para. 1 lit. c GDPR), we store the data for as long as it is necessary to fulfil the obligation. If the application was unsuccessful, we will delete the relevant data within 6 months after the application has been rejected.

 

IV. Statistical analysis

The open source software Matomo is used for the statistical analysis of traffic on our website. The IP address collected is used in pseudonymised form to analyse the use of the website and to improve it. The processing is therefore carried out on the basis of Art. 6 para. 1 lit. f GDPR. The server-side ‘hash’ is randomly changed every 24 hours. You can prevent data collection by Matomo by activating the ‘Do Not Track’ function in your Internet browser. In most browsers, you will find this function under ‘Settings - Privacy’. We will recognise a ‘Do Not Track’ signal from your browser; processing by Matomo will then not take place.

You can object to the processing at any time in accordance with Art. 21 GDPR. The right to object exists if your interests outweigh our interests. To object, please contact us via datenschutz@gruendelpartner.de.

 

V. Processing of data in countries outside the European Economic Area

If we process data in third countries (countries outside the EU/EEA) or transfer it to companies in third countries, we will only process it if we are authorised to do so by you or by law. If there is no adequacy decision by the Commission pursuant to Art. 45 GDPR for the third country concerned - i.e. no adequate level of data protection in the third country - we will ensure through contractual provisions (EU standard contractual clauses on data protection) or other suitable guarantees within the meaning of Art. 46 GDPR that your privacy and your personal data are also protected in an appropriate and legally provided manner in the company in the third country.

 

VI. Your data protection rights

If the respective requirements are fulfilled, you as the data subject are granted the following data protection rights:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

If we process your personal data on the basis of Art. 6 para. 1 lit. f GDPR, you have the right to object in accordance with Art. 21 GDPR. 

If we process your personal data on the basis of your consent (Art. 6 para. 1 lit. a GDPR), you have the right to withdraw this consent at any time with effect for the future in accordance with Art. 7 para. 3 GDPR.

To assert your rights, please contact us via datenschutz@gruendelpartner.de.