The purpose of this document is to inform you how we handle your personal data. We adhere to the German data protection laws and regulations, including the German Telemedia Act (TMG) and the Federal Data Protection Act (BDSG).
1. Name and contact details of the controller and the external data protection officer
Data controller: Schmid, v. Buttlar & Partner
Rechtsanwälte Steuerberater mbB
Schloßschmidstr. 3, D-80639 Munich, Germany
Phone: +49 (0)89-55222-0
Fax: +49 (0)89-55222-199
The external data protection officer can be contacted at Wallasch und Witte GmbH, Mr Andreas Witte, Goethestraße 68, 80336 Munich (HRB 92091, Amtsgericht (local court) Munich), or at email@example.com.
2. Type, scope and purpose of the collection, processing and use of personal data
a) When you visit our website
When you visit our website www.colaw.de, the browser on your device automatically sends information to the server on our website. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until it is automatically deleted:
- IP address of the requesting computer,
- Date and time of access,
- Name and URL of the accessed file,
- Website used to access our website (referrer URL),
- Browser used and, if applicable, the operating system of your computer as well as the name of your access provider.
We process this data for the following purposes:
- Ensure a smooth connection to the website,
- Make our website more user-friendly,
- Evaluate the security and stability as well as for other administrative purposes.
The legal basis for data processing is Article 6 (1) lit. (f) of the General Data Protection Regulation (GDPR). The purposes listed above constitute legitimate interests as defined by GDPR. We will not, under any circumstances, use the data collected to identify you.
b) When you use our contact form
If you have any questions, you can use the form provided on our website to contact us. We require a valid email address to respond to your query. Any other information you provide is voluntary.
We process the data you provide in the contact form based on your consent to the processing of personal data in accordance with Article 6 (1) lit. (a) GDPR.
The personal data we collect when you use the contact form will be automatically deleted after we have responded to your query unless you engage our firm based on your query.
3. Disclosure of data
We will not transmit your personal data to third parties for purposes other than those listed below.
We will only disclose your personal data to third parties if:
- You have given your express consent as provided for under Article 6 (1) lit. (a) GDPR,
- The disclosure is necessary in accordance with Article 6 (1) lit. (f) GDPR for the establishment, exercise or defence of legal claims and there is no reason to assume that you have an overriding legitimate interest in non-disclosure of your data,
- The processing is necessary for compliance with a legal obligation as laid down in Article 6 (1) lit. (c) GDPR, and
- It is legally permissible and necessary for the performance of a contract with you in accordance with Article 6 (1) lit. (b) GDPR.
The information stored in the cookie depends on the device used to access the website. However, this does not mean that we can use this information to identify you.
In addition, we also use temporary cookies that are stored on your device for a specified period of time to make our website more user friendly. They help us to recognise you automatically when you return to our website to use our services, and they remember you entries and settings so that you do not have to enter them again.
The data processed by cookies is necessary for the aforementioned purposes of pursuing our and third-party legitimate interests in accordance with Article 6 (1) lit. (f) GDPR.
Most browsers accept cookies by default. You can prevent cookies from being stored on your computer by configuring your browser not to accept cookies or to notify you before websites try to set cookies. Please note that if you disable cookies altogether, you may not be able to use all functions and features of our website.
5. Tracking tools
We use the tracking tools listed below in accordance with Article 6 (1) lit. (f) GDPR. We use tracking tools primarily to customise and optimise our website on a continuous basis. We also use tracking tools for statistical purposes to record the use of our website and evaluate it to optimise its content. These are legitimate interests for purposes of the aforementioned regulation.
The purpose of data processing and the data categories are based on the following tracking tool.
- Browser type/ version,
- Operating system used,
- Referrer URL (previously visited site),
- Hostname of the remote computer (IP address)
- Time of the server request,
will be transmitted to and stored by Google on servers in the United States. Google will use this information to evaluate the use of the website, compile reports on website activity and to provide other services relating to website activity and internet use for market research purposes and to customise the website design. Google may also pass this information on to third parties in so far as this is required by law or if third parties process the data on Google’s behalf. Google will not associate your IP address collected by Google Analytics with any other data held by Google. The IP addresses are anonymised to prevent them from being used to identify any particular individual (IP masking). You can prevent cookies from being installed on your computer by setting your browser not to accept cookies; please note that if you do this, you may not be able to use all the functions and features of this website.
Furthermore, you can prevent the collection of data generated by the cookie about your use of the website (including your IP address) and its processing by Google by downloading and installing a browser add-on: (https://tools.google.com/dlpage/gaoptout?hl=de).
As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent collection of data by Google Analytics by clicking on the following link: Disable Google Analytics. This sets an opt-out cookie, which will tell the website not to collect your data when you next visit the website. The opt-out cookie is only valid for this browser and our website and it is stored on your device. If you delete the cookies in this browser, you will have to set the opt-out cookie again.
For more information on privacy in the context of Google Analytics, please refer to Google Analytics Help (https://support.google.com/analytics/answer/6004245?hl=de).
6. Rights of data subjects
You have the right:
- to obtain information about your personal data we process in accordance with Article 15 GDPR. In particular, you may obtain information about the purposes of processing, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the envisaged period for which the personal data will be stored, the existence of the right to request rectification or erasure of personal data or restriction of processing of personal data or to object to such processing, the right to lodge a complaint, the source of data, where we have not collected the data, and the existence of automated decision-making, including profiling and, where appropriate, meaningful information about the details involved;
- to obtain from us without undue delay the rectification of inaccurate personal data we store on you in accordance with Article 16 GDPR;
- to obtain from us the erasure of personal data we store on you without undue delay in accordance with Article 17 GDPR, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;
- to obtain from us restriction of processing in accordance with Article 18 GDPR if you contest the accuracy of the personal data, the processing is unlawful and you oppose the erasure of the personal data and we no longer need the personal data, but you require the data for establishment, exercise or defence of legal claims or if you have objected to processing pursuant to Article 21 GDPR;
- to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller in accordance with Article 20 GDPR;
- to withdraw your consent at any time in accordance with Article 7 (3) GDPR. As a result, we will no longer be allowed to process data based on this consent going forward and
- in accordance with Article 77 GDPR, you can contact the supervisory authority of your habitual residence or place of work or our firm’s office.
7. Right to object
If your personal data are processed based on legitimate interests pursuant to Article 6 (1) lit. (f) GDPR, you have the right to object to the processing of your personal data in accordance with Article 21 GDPR on grounds relating to your particular situation or for direct marketing purposes. In the latter case, you have a general right of objection, which we will implement without specifying the particular situation.
If you wish to object to the use of your personal data or if you wish to revoke your consent, please send an email to firstname.lastname@example.org.
8. Data security
We use the most common SSL (Secure Socket Layer) method in connection with the highest level of encryption supported by your browser. In most cases, this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. Whether a particular page of our website is transmitted in encrypted form is indicated by showing a locked key or lock symbol in the lower status bar of your browser.
We also use technical and organisational measures to protect your data against accidental or intentional manipulation, full or partial loss, destruction or unauthorised third-party access. Our security measures are revised on a continual basis and brought into line with the latest technology standards.