Data Protection Notice
In the following we inform you about the processing of your personal data.
Personal data
According to Article 4 of the General Data Protection Regulation (“GDPR”), personal data means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Controller
Steger & Pfahler
Partnerschaft von Rechtsanwälten
Nikolaistraße 5
80802 Munich
Germany
Email: kanzlei@stegerpfahler.de
Phone: +49 (0) 89 2459 3892
Your rights
As a data subject, you have the following legal rights under data protection law, about which we would like to inform you:
Right of access (Article 15 GDPR)
You have the right to request information about your personal data processed by us. In order to be able to process your request as quickly as possible, you should formulate your request for information as precisely as possible. We would like to point out that your right to information may be restricted due to legal provisions (in particular if the requirements of Section 34 of the Federal Data Protection Act are met).
Right to rectification (Article 16 GDPR)
You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you also have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
Right to erasure (Article 17 GDPR)
You have the right to request the erasure of personal data concerning you under the conditions of Article 17 GDPR. Your right to erasure depends on whether the processing is necessary for exercising the right of freedom of expression and information or for compliance with a legal obligation which requires processing by Union or Member State law to which we are subject or if the processing is necessary for the establishment, exercise or defense of legal claims.
Right to restriction of processing (Article 18 GDPR)
You have the right to request the restriction of processing under the conditions of Article 18 GDPR.
Right to data portability (Article 20 GDPR)
Under the conditions of Article 20 GDPR, you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from us. Where technically feasible, you have the right to have the personal data transmitted by us to another controller.
Right to lodge a complaint with a supervisory authority (Article 77 GDPR)
We draw your attention to your right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement of the GDPR. A list of supervisory authorities (for the non-public sector) can be found here: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Your right to object pursuant Article 21 GDPR
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR, including profiling based on those provisions. We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.
Where we process personal data for direct marketing purposes, you as the data subject have the right to object at any time to the processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.
Data Processing Activities
Matter Data Management
Purpose and legal basis
We process personal data for the purpose of implementing the matter agreement.
The legal basis is Article 6(1)(1)(b)(1) GDPR, insofar as you as the data subject are the contractual partner.
In all other cases, the legal basis is Article 6(1)(1)(f) GDPR. Our legitimate interest in these cases is to be able to conclude and execute a contract with the contractual partner.
Storage period
The personal data will be deleted upon expiry of the statutory retention periods. Professional regulations oblige us to store personal data for a period of six years. This period begins at the end of the calendar year in which the order was completed.
Recipients
We disclose personal data to our tax advisor, to hosting.de GmbH, Franzstr. 51, 52064 Aachen, to Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, to pro|nodes GmbH, Volkmaroder Straße 8c, 38104 Braunschweig and, if applicable, to public bodies (e.g. authorities, courts) and opposing parties.
Obligation to provide personal data
The provision of the above-mentioned personal data is not required by law, but is contractually required and necessary for the conclusion of a contract. Failure to provide this data would mean that the contract could not be concluded or executed.
Note! To the extent that processing is based on our legitimate interest, you have the right to object in accordance with Article 21 GDPR. You can send us your objection at any time, for example by email or post, using the contact details provided above.
Informational use of the website
Purpose and legal basis
We process personal data for the purpose of delivering and ensuring the stability and security of our website.
The legal basis is Article 6(1)(1)(f) GDPR. Our legitimate interest is to make our website available in a functional manner.
Storage period
The personal data will be stored by us for the duration of your visit to the website and then deleted.
Recipients
We disclose this personal data to our hosting service providers, hosting.de GmbH, Franzstr. 51, 52064 Aachen, Germany and Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany.
Obligation to provide personal data
The provision of personal data is not required by law or contract and is not necessary for the conclusion of a contract. There is also no obligation to provide this personal data. However, failure to provide this data may mean that our website cannot be accessed.
Note! You have a right to object in accordance with Article 21 GDPR. You can send us your objection at any time, for example by email or post, using the contact details provided above.
Contact by telephone, e-mail, post and other means of communication
Purpose and legal basis
We process personal data for the purpose of communication.
The legal basis is Article 6(1)(1)(b)(2) GDPR, insofar as it concerns pre-contractual communication and the data subject is a potential contractual partner.
The legal basis is Article 6(1)(1)(b)(1) GDPR, insofar as the processing is carried out for the performance of the contract and the data subject is a contractual partner.
In all other cases, the legal basis is Article 6(1)(1)(f) GDPR. Our legitimate interest in these cases is to be able to communicate with the data subject.
Storage period
Personal data will be stored for a maximum period of six months after the last contact. Data may be stored for longer than this in individual cases if this is required by law.
Recipients
Insofar as communication takes place by e-mail, we disclose the personal data required for this to hosting.de GmbH, Franzstr. 51, 52064 Aachen and pro|nodes GmbH, Volkmaroder Straße 8c, 38104 Braunschweig. If communication takes place by telephone, we disclose the necessary personal data to Ebüro AG, Hauptstraße 8, 10827 Berlin.
Obligation to provide personal data
The provision of this personal data is not required by law, but – insofar as it concerns the fulfillment of a contract – is contractually required or necessary for the conclusion of a contract. Failure to provide this personal data means that the contract cannot be concluded or performed.
Note! To the extent that processing is based on our legitimate interest, you have the right to object in accordance with Article 21 GDPR. You can send us your objection at any time, for example by email or post, using the contact details provided above.
Fulfillment of legal obligations
Purpose and legal basis
We process personal data for the purpose of fulfilling legal obligations.
The legal basis is Article 6(1)(1)(c) GDPR in conjunction with statutory provisions, e.g. Section 147 AO.
Storage period
The duration of the statutory retention period and the start of the period depend on the respective legal obligation. The personal data will be deleted after the period has expired.
Recipients
We disclose this personal data to our tax advisor and, if necessary, to our lawyers.
Obligation to provide personal data
Whether there is an obligation to provide the data depends on the respective underlying processing, for which the corresponding information can be found in this document.
Hinweis: Eine automatische Entscheidungsfindung besteht nicht.