Privacy Policy

As the controller responsible for the data processing, we provide this privacy policy following the requirements of the regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) to inform you how, in which scope and for which purposes your personal data are being processed if you use our website.

I. Definitions

„personal data” means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;

“processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;

“controller” means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;

“recipient” means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing;

II. General Information

1. Controller

Kurz Pfitzer Wolf & Partner Rechtsanwälte mbB
Königstr. 40
70173 Stuttgart
Tel. +49 711 410 190 30
Fax +49 711 410 190 59
E-Mail info@kpw-law.de

2. Contact information for the data processing officer

Obsecom GmbH
Königstr. 40
70173 Stuttgart
Tel. +49 711 460 502 540
E-Mail: datenschutz@obsecom.de

3. Information about processing operations

We will inform you about the legal basis of each processing operation. We will also inform you if we intent to transfer personal data in certain countries outside the European Union (EU) or the European Economic Area (EEA).

4. Rights of the data subject

These are your rights as a data subject:

  • pursuant to Art. 15 GDPR you have the right to request information about your personal data processed by us; you may also request information regarding the purposes for processing your personal data , the categories of personal data processed, the recipients or categories of recipients to whom your information has been or will be disclosed, the planned safeguarding period or the criteria for determining the safeguarding period, the provenance of your personal data if your personal data was not collected from you, the existence of automated decision-making, including profiling, and, where appropriate, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you, your right to rectification or deletion of your personal data, your right to limit such a processing or your right to object to such processing, the existence of a right to appeal to such processing in front of the supervisory authority; Finally, you have a right to know whether personal data has been transmitted to a country outside the EU or to an international organization and, if this is the case, the right to receive information about the measures taken for appropriate data security associated with such a transfer;
  • pursuant to Art. 16 GDPR, you have the right to obtain the rectification of inaccurate personal data stored with us without undue delay;
  • pursuant to Art. 17 GDPR, you may request the deletion of your personal data stored with us, unless the processing of personal data is justified by the right of freedom of expression and information, for compliance with a legal obligation or for reasons of public interest or for the establishment, exercise or defense of legal claims;
  • pursuant to Art. 18 GDPR you can demand the limitation of the processing of your personal data, if and as far as the accuracy of the data is disputed by you, the processing is unlawful and you are opposed to the erasure of your personal data and request the restriction of the use of such data instead; and we no longer need the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defense of legal claims; or you have objected to the processing in accordance with Art. 21 GDPR, but it has not yet been determined whether our legitimate reasons for the data processing outweigh your interest.
  • pursuant to Art. 20 GDPR you may request the transfer of the personal data you have provided us with in a structured, commonly used and machine-readable format and have the right to transmit this personal data to another controller;
  • pursuant to Art. 21 GDPR you have the right to object to the processing of your personal data at any time to, on grounds relating to your particular situation, or personal data is processed for direct marketing purposes and the legal basis for the processing of the personal data are the protection of our legitimate interests or those legitimate interests of a third party according to Art. 6 Para. 1 S. 1 lit. f GDPR;
  • pursuant to Art. 7 Para. 3 GDPR, you may at any time revoke your once given consent for processing your personal data to us. As a result of such a withdrawal, we are not allowed to continue processing your personal data in the future;
  • pursuant to Art. 77 GDPR you have the right to lodge a complaint with a supervisory authority, in particular you can contact the supervisory authority of your usual place of residence, your place of work or our place of office.

Please contact us or our data processing officer at any time using the contact details above if you want to exercise one of these rights.

5. Erasure and restriction of processing of personal data

Except if stipulated otherwise for individual processing operations in this privacy information, personal data that are not needed anymore for the purposes such data was collected or processed for will be deleted except if such data are subject to statutory retention periods. For example, this is the case for personal data we need to comply with tax law or bookkeeping regulations. Documentation subject to § 257 Abs. 1 Nr. 2 and 3 HGB as well as § 147 Abs. 1 Nr. 2, 3, 5 AO needs to be retained for six years. Documentation subject to § 257 Abs. 1 Nr. 1 and 4 HGB as well as § 147 Abs. 1 Nr. 1, 4, 4a AO needs to be retained for 10 years.

8. Cookies

Cookies are small text files placed on your device when you use our services. A cookie stores information in relation to your specific device or browser. We mainly use cookies to provide our services in a more user-friendly, effective and secure manner.

Our services set a session cookie when you log in to our website. The cookie will be deleted again when you log out.

Most devices or browsers automatically accept cookies. If you do not want to accept cookies, you may configure your device or browser so that no cookies will be accepted. You may opt out from a lot of cookies placed for online marketing purposes at http://www.youronlinechoices.com or http://optout.networkadvertising.org. If you deactivate cookies for your device, you may not be able to fully use our services.

a) Essential Cookies

We use some essential cookies on our website. Certain functions that we require to provide our services use these cookies, especially if you have expressively requested a certain service as a user of our website and/or other services. This means that you cannot use our website and other services without accepting these cookies on your device.

Name of the cookie Purpose Cookie lifetime Access to personal data by third parties
wp-rest-enabled-ping We use this cookie for our Hosting to check if the REST-API for our services is responding one hour No personal data are stored.
reCAPTCHA

legal basis for the data processing is
Using cookies to collect and process personal data for the purposes mentioned above is necessary to observe our legitimate interest and the legitimate interest of third parties according to Art. 6 Para. 1 p. 1 lit. f GDPR.

b) Further Cookies

We are using further cookies for varying purposes in our website and/or other services if you have given your consent. We use a cookie banner to ask for your consent on the landing page when you use our website and/or other services for the first time. You can always change your settings later.

For example, such further cookies help us to improve your user experience when you are browsing our website and/or other services. We further use cookies evaluate statistically the usage of our website and/or other services. If you visit our website repeatedly, cookies allow us to recognize automatically that you visited us before and store your preferences and input from earlier visits.

Name of the cookie Purpose Cookie lifetime Access to personal data by third parties
_gid _gid Cookie is set by Google Analytics for our process to count and track pageviews one hour Google
_ga -ga Cookie is set by Google Analytics
to store a unique user ID
one hour Google

 

III. Individual processing operations

1. Hosting

To make our services available to the public, we are using services provided by hosting providers, such as web servers, disk space, database services, security and maintenance services. We, respectively or our hosting provider on our behalf, are processing personal data of our users to provide our website and our services safely and efficiently to our users.

2. Access data and log files

When you connect to our website and services, the browser on your device is automatically sending information to the server delivering our website.
The following information is stored:

  • IP address of the device requesting access to our website,
  • Date and time of the access,
  • Name and URL of the retrieved file,
  • Website from which our website is accessed (referrer URL),
  • The browser used and, if applicable, the operating system of your device as well as the name of your access provider.

This data is processed for the following purposes:

  • provision of our website and services including all functions and contents
  • improving the user experience for our website and services
  • Ensuring system security and stability
  • Anonymized statistical evaluation of users accessing our website and services
  • Website optimization
  • Disclosure to law enforcement authorities in the event of unlawful interference / attack on our systems
  • Other administrative purposes.

This data is stored in log files and deleted at the latest after 6 months, except it is needed for other purposes, for example for the establishment, exercise or defence of legal claims. The legal basis for the data processing is Art. 6 Para. 1 p. 1 lit. f GDPR. Our legitimate interest is based on the purposes of data processing as listed above.

3. Getting into contact with us

If you use the contact form or contact us by email, you need to provide your name and email address or other contact information so that we can get in personal contact with you. Further information can be provided voluntarily in case you want us to answer a specific question we need that information for. The processing of personal data for the purpose of getting into contact with you is based on your consent according to Art. 6 Para. 1 p. 1 lit. a GDPR. All personal data collected from you will be deleted after we answered your inquiry unless we need to store and process the data for further purposes (for example the subsequent conclusion of a contract or for the establishment, exercise or defence of legal claims).

4. Direct marketing to clients via e-mail

If we have obtained your email address in connection with the establishment of a client relationship with our firm, we may use your email address for direct advertising of our own similar goods or services. This is only applicable, if you have not objected to this use of your email address and we have clearly and unequivocally advised when the email address was collected and each time it is used that you can object to such use at any time. The legal basis for the data processing is Art. 6 Para. 1 p. 1 lit. f GDPR. Our legitimate interest is based on our interest in direct marketing.

IV. Statistics and Analysis

1. VG Wort

Our website uses the „Skalierbare Zentrale Messverfahren“ (SZM) [scalable centralized measurement process] provided by INFOnline GmbH, Brühler Str. 9, D-53119 Bonn (in the following „INFOnline“).
The purpose of the data processing is the determination of statistical values to ascertain the probability of our texts being copied. The legal basis for the data processing is our legitimate interest according to Art. 6 Para. 1 p. 1 lit. f GDPR to participate in the payouts by VG Wort [copyright collecting society for writings]. In this process, anonymous metrics are being collected. The measurement of access numbers either uses a session cookie are a signature made up of various information automatically transferred by your browser or device to recognize computer systems. IP addresses are only processed after prior anonymization.
You can opt out of the collection of your personal data for the aforementioned purposes at https://optout.ioam.de. The INFOnline privacy policy provide further information about how your personal data is used: https://www.infonline.de/datenschutz/benutzer.

V. Google Services

The provider of the services listed below is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4 (in the following „Google“).
The legal basis for the data processing using the Google services listed below is Art. 6 Para. 1 p. 1 lit. f GDPR.

Google has joined the EU/US Privacy-Shield and has made the public commitment to observe European data protection standards. Therefore the EU requirements for a legitimate transfer of personal data to the USA have been fulfilled.

You can find more detailed information about Google’s commitment and certification here:
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.

The Google privacy policy provides further information about how Google uses your personal data: https://www.google.com/intl/de/policies/privacy/.

On the following websites, you can find further information about how Google uses personal data for advertising purposes, how you can apply personal settings for Google advertising and how you can object against this use of your personal data:
https://policies.google.com/technologies/partner-sites?hl=en
https://policies.google.com/technologies/ads?hl=en
https://adssettings.google.com/

1. Google Analytics

This website uses Google Analytics. Google Analytics uses cookies. Google collects data about the visitors of our website and their behavior. These data are being used to adapt our website to the needs of our users, to ensure that our website is being continually optimized, to measure the success of marketing measures and for statistical evaluations.

The information collected by the cookie about your usage of this website like

  • the browser used and, if applicable, the operating system of your device,
  • the website from which our website is accessed (referrer URL),
  • IP address of the device requesting access to our website,
  • date and time of the access,

are transferred to and stored on a Google server in the USA. User data and event data are being deleted after 14 months. This data are not transferred to third parties except in cases where it is legally required or third parties are processing data on behalf of Google or on behalf of us.

In no case your IP address is being combined with other Google data. Your IP address is being anonymized so that a combination with other data is not possible.

If you do not want to accept cookies, you may configure your device or browser so that no cookies will be accepted. If you deactivate cookies for your device, you may not be able to fully use our website. You can prevent the collection of the data produced by the Google Analytics cookie about your usage of our website and the processing of these data by Google if you download and install the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

2. Google Maps

We are using Google Maps provided by Google to display location plans, maps, terrain data or geographical maps. This service installs your IP address, which pages of our website you visited and further data eventually required by Google to provide Google Maps (for example location data). The information produced by using Google Maps will be stored on a server in the USA. This data may be transferred to third parties if it is legally required or third parties are processing data on behalf of Google or on behalf of us. the terms of use for Google Maps can be found at https://www.google.com/intl/de_de/help/terms_maps.html

3. reCAPTCHA

We are using Google‘s reCAPTACHA service for the contact form on this website. reCAPTACHA helps us to ensure that the forms made available are being used by humans and not by machines or automated programs.

Google does not specify exactly which personal data or other kind of data are being used by reCAPTACHA. At our knowledge, reCAPTACHA stores and processes the following kinds of data:

  • Information about your usage of this website like the browser used and, if applicable, the operating system of your device and any plug-ins being used in your browser as well as the name of your access provider,
  • Website from which our website is accessed (referrer URL),
  • IP address of the device requesting access to our website,
  • date and time of the access,
  • your movements and your input made on our website through your keyboard, mouse or through the touchscreen of your device,
  • whether you are logged in at Google with a Google account on your device,
  • the cookies placed by Google on your device and
  • further data eventually required by Google for reCAPTCHA.

Google uses this data to evaluate the risk that the user concerned is not a human. If that risk is being evaluated as high, you will have to additionally solve a captcha. We use this information to decide automatically whether we will allow you to send a message through the contact form to us.

The information produced by reCAPTACHA about how you use this website are being stored on a server in the USA. This data may be transferred to third parties if it is legally required or third parties are processing data on behalf of Google or on behalf of us.

We are using reCAPTCHA based on our and your legitimate interest according to Art. 6 Para. 1 p. 1 lit. f GDPR to protect our website against abusive traffic and use machines or automated programs so we can continue to provide the users of our website services like the contact form without prior registration as a user.

IV. Media Content

Partially, we are using third party content directly embedded from the service of the respective providers listed below in detail. The purpose of embedding this content is to make our website more attractive. Our legitimate interest in embedding such third party content is based on the purpose of making our website more attractive. The legal basis for the data processing is Art. 6 Para. 1 p. 1 lit. f GDPR.
1. YouTube
We have integrated media content provided by YouTube into our website. YouTube is a service provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland („Google“). We are using YouTube to provide content that explains our services more convenient and easier accessible to you then we could do by solely using the written content. We are using YouTube based on our legitimate interest according to Art. 6 Para. 1 p. 1 lit. f GDPR to improve our communication with our users.
Google collects your IP address and further personal data eventually required to provide the YouTube services. The information about how you use YouTube are stored on a server in the USA. This data may be transferred to third parties if it is legally required or third parties are processing data on behalf of Google. If you are logged in with your Google account, Google can record your visit on our website in your account. If you do not want Google to do this, you need to log out from your account before you visit our website.
Google has joined the EU/US Privacy-Shield and has made the public commitment to observe European data protection standards. Therefore the EU requirements for a legitimate transfer of personal data to the USA have been fulfilled.
You can find more detailed information about Google’s commitment and certification here: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
The Google privacy policy provide further information about how Google uses your personal data: https://www.google.com/intl/de/policies/privacy/.

> 1500
< 1500
< 1200
< 960
< 640