DATA PRIVACY INFORMATION
This Online Privacy Notice (“Notice”) provides you with important information about how we process your personal data, particularly in relation to Regulation (EU) 2017/679 (“GDPR”).
I. Controller and Data Protection Officer
Zuhorn und Partner Rechtsanwälte mbB
0201-84 29 40
Data Protection Officer
ATTN: Data Protection Officer
0201-84 29 40
II. Purpose and Legal Basis
When you visit our website, your Internet browser automatically transmits information to our web server (log data). Some of this information is stored in log files, e.g.
- Date of access
- Time of access
- URL of the referring website
- Retrieved file
- Amount of transferred data
- Browser type and version
- Operating system
- IP address
We generally only evaluate log data further in order to remedy malfunctions in the operation of our website or to clarify security incidents. For troubleshooting or to secure evidence in case of security incidents, it may be necessary for us to collect additional personal data. In these instances we do so on the basis of statutory permission.
This processing is based on Article 6(1)(f) of the GDPR. Our legitimate interest is in the technical provision, security and optimisation of our site.
You are welcome to make contact with us. Personal data will be processed in this context in order to facilitate such communication, and to respond to your request or handle it further.
This processing is based on Article 6(1)(b) of the GDPR.
Suppliers, Service Providers & Business Partners
We use contact and communication data and other relevant personal data from our suppliers, service providers and business partners, insofar as this relates to individuals and/or their employees who are natural persons. We process this data for the purpose of carrying out the business relationship and communication.
This processing is based on Article 6(1)(f) of the GDPR. Our legitimate interest is carrying out the business relationship and facilitating and maintaining contact.
In the context of our client base, we process various personal data of our clients, insofar as this relates to individuals and/or their employees who are natural persons, and so far as the far as the processing is required for the contractual arrangement. This includes for communication, legal or notarial activity, legal defense, as well as the execution, completion or completion of the assigned request/responsibility. In relation to our clients, we are subject to legal and/or notarial confidentiality obligations.
This processing is based on Article 6(1)(b) of the GDPR.
You can apply for open positions by sending us your application via Email. We will process your personal data exclusively for processing and assessing your application. The processing is necessary to initiate an employment relationship, as well as to facilitate communication.
These processing operations are based on Article 6(1)(b) of the GDPR together with Section 26(1) BDSG.
In the scope of our processing activities, we work with various service providers, partners, government agencies and other third parties who may receive personal information:
• Service provider for hosting services
• ICT service provider
• Logistics and delivery service providers
• Service provider for file storage and disposal
• Authorities and institutions
• Parties to a legal dispute and their representatives
• Sub-authorized representatives
We only transfer your data to these recipients to the extent necessary to fulfill the contract with you, or where we have a legitimate interest in sharing your information.
IV. Transfer to recipients outside the EEA
In principle, we do not pass personal data on to recipients who are based outside the EEA/third countries. Please note, however, the information that we have provided on Google Analytics.
V. Obligation to provide
Insofar as the personal data are required for the commencement and execution of the business / client relationship and the associated contractual or legal obligations, such data must be provided by you so that we can fulfill our service and/or legal obligations. Without the provision of the personal data, we may not be able to perform the service properly and/or fully. For merely visiting the website, such personal data is not provided by contract or by law, but the presentation and ease of use may be limited.
If we store your personal information, it will only be for a limited period of time and no longer than necessary. In principle, we will delete your data if it is no longer necessary for the purpose for which it was collected, or if there are other legal reasons that require deletion. Insofar as we are subject to statutory retention requirements - which require a longer storage period - we store the data for this period, in particular for the fulfilment of commercial and tax retention periods, which are between 2 and 10 years.
Other legal grounds for retention may include the provision of evidence for the duration of the applicable statute of limitations. These periods are usually between 2 and 30 years. In addition, lawyers and notaries are subject to special professional retention regulations which prescribe a retention obligation of up to 100 years, in particular for notaries (for example, documents, lists of inheritance contracts). If you have further questions, please contact our Data Protection Officer.
VII. You rights in relation to your personal data
You have the following legal rights over your personal data. As the nature of these rights can be complex and based on individual circumstances, we have provided you with an overview of important information. Please inform us as to what form you would like to receive the information. Where you do not specify this, we will share your information with you via the medium through which you made the request. You can contact our Data Protection Officer if you would like to exercise these rights, or if you would like further information. You will receive a response from us within one month. For complex or excessive requests, we can extend this time or refuse your request.
Access to your data - Article 15 GDPR
You have the right to request information as to whether we process your personal data, and access to this personal data.
Rectification of your data - Article 16 GDPR
You have the right to the rectification of your personal data that is inaccurate or incomplete, this includes by means of a supplementary statement.
Erasure of your data - Article 17 GDPR
You have the right to ask us for the erasure of your personal data, where no exemption for retaining the personal data applies.
Restriction of our processing of your data - Article 18 GDPR
You have the right to request a restriction on the processing of your personal data in particular circumstances;
Data Portability - Article 20 GDPR
In some circumstances, you may be entitled to request that your personal data be provided to you in machine readable format. This is applicable where the processing of your personal data is based on consent (Article 6(1)(a)), where special categories of personal data are being processed based on consent (Article 9(2)(a)), or where your personal data is processed on the basis of Article 6(1)(b). This right to data portability includes the right to have your personal data transferred directly to another controller.
Objection - Article 21 GDPR
Where your personal data is processed for the purpose of performing tasks carried out in the public interest (Article 6(1)(e)), for the purpose of legitimate interests of the controller (Article 6(1)(f)), or for the purpose of direct marketing and profiling related to this (Article 21(2)), you are able, based on the grounds relating to your particular situation, to object to the processing of your personal data.
Withdrawal of consent
If you have given us consent for the processing of your personal data, you can revoke it at any time and without stating reasons, with future effect. Please contact the contact point at which you gave your consent or the Data Protection Officer directly.
You have the right to file a complaint with the competent supervisory authority pursuant to Article 77 GDPR. The competent authority in relation to our processing is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia, Ms. Block, Kavalleriestr. 2-4, 40213 Dusseldorf, Germany.