Privacy Policy

GENERAL

We, the law firm “Stock + Partner Rechtsanwälte mbB” and the notary Dr Eva Diederichsen, as professional confidentiality holders, attach great importance to the protection of your personal data and the protection of your privacy. You can find out which personal data we process in detail as part of our operations, as well as which rights you have in this context as a data subject affected by data processing, in our data protection information below.

We would like to point out that in the processing procedures we carry out, data may also be processed outside the European Union (EU) (so-called “third countries”) and thus outside the scope of the General Data Protection Regulation (GDPR) (reference: European Court of Justice (ECJ) in the “Schrems II” case (C-311/18)) if essentially equivalent protection is guaranteed in the third country as in the EU. This may result in data protection risks for you as it may, for example, be more difficult to enforce your rights on the basis of the GDPR. Of course, we always aim to ensure the best possible level of data protection for you. If you have any questions or comments regarding this privacy policy, please use the contact details provided in the legal notice.

SCOPE OF APPLICATION

This data protection information informs you, a visitor or user of our online and communication services, about the type, scope and purpose of the processing of your personal data. It applies to data processing by:

Us, the law firm “Stock + Partner Rechtsanwälte mbB” and the notary Dr Eva Diederichsen

MUNICH LOCATION: Rablstr. 26, 81669 Munich, phone: +49 (0) 89 99831-0, e-mail: münchen@stock-partner.eu,

HANOVER LOCATION: Bödekerstr. 74, 30161 Hanover, phone: +49 (511) 1 2271-12, e-mail: hannover@stock-partner.eu (official residence of the notary Dr. Diederichsen),

and our internet service provider, “sumner groh + compagnie Kommunikationsgesellschaft mbH & Co. KG”.

DEFINITIONS

With regard to the terminology used in the context of this data protection notice, such as “personal data” or its “processing”, please refer to the definitions in Art. 4 GDPR.

DATA PROTECTION OFFICER

Due to legal requirements, we have appointed a data protection officer for both the law firm and notary Dr Diederichsen as an official authority, who can be reached at

Dr. Frank Tykwer
Cäcilienhöhe 173
45657 Recklinghausen
rechtsanwalt@dr-tykwer.de

BASIC INFORMATION ON DATA PROTECTION

Data protection generally serves to protect (personal) data, regardless of whether it is collected, stored and processed online or offline. Personal data is information that can be used to identify a user, i.e. information that can be traced back to a specific person. This includes, for example, the name, e-mail address or telephone number, but also data about preferences, hobbies, memberships, or which internet presentations have been viewed.

LEGAL BASIS FOR DATA PROCESSING

The legal basis for data processing can be found in the General Data Protection Regulation (GDPR) and the new German Federal Data Protection Act (BDSG-Neu). If the legal basis is not explicitly stated in this data protection information, the following applies:

The legal basis:

  • for obtaining consent is Art. 6 para. 1 a. GDPR and Art. 7 GDPR,
  • for processing to answer enquiries, to carry out pre-contractual/contractual measures and to fulfil services is Art. 6 para. 1 b. GDPR,
  • for processing for the fulfilment of legal obligations is Art. 6 para. 1 c. GDPR,
  • for processing to safeguard legitimate interests is Art. 6 para. 1 f. GDPR.

Our legitimate interest stems from the data collection purposes listed below. In the event that vital interests of the user require the processing of personal data, Art. 6 para. 1 d. GDPR serves as the legal basis. Under no circumstances do we use the data collected for the purpose of drawing conclusions about your person.

We also use analysis services when you visit our website. You will find more detailed explanations on this below in this privacy policy.

INFORMATION ON PROCESSING ACTIVITIES AND SECURITY MEASURES

The processing of the personal data of a user of this website is carried out exclusively in accordance with the relevant data protection regulations. This means that this data is only processed if there is legal authorisation or if the user concerned has given their consent.

In principle, organisational, contractual and technical security measures are taken to ensure that the provisions of the relevant data protection regulations are complied with and that personal data is protected against manipulation, loss, destruction or access by unauthorised persons. This includes ensuring the confidentiality, integrity and availability of personal data by controlling physical access to the personal data. The provider shall take appropriate technical and organisational measures to ensure a level of protection appropriate to the risk. Data processing agreements are concluded with third parties who process personal data on our behalf.

ENCRYPTION OF DATA TRAFFIC

For security reasons, this site uses SSL or TLS encryption. For this purpose, the provider provides a certificate, which can be recognised by the “s” in the protocol specification of the Internet address and the lock symbol in the browser line of the Internet browser. If encryption is activated, the data traffic transmitted between the user, the Internet service provider and us as the provider cannot be read by third parties.

COLLECTION AND STORAGE OF PERSONAL DATA

When you visit our website, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is collected without any action on your part and stored until it is automatically deleted:

  • IP address of the requesting computer,
  • Date and time of access,
  • Name and URL of the retrieved file,
  • the website from which access was made (referrer URL),
  • browser used and, if applicable, the operating system of your computer and the name of your access provider.

USE OF PERSONAL DATA

The aforementioned data is processed by us for the following purposes on the basis of Art. 6 para. 1 f. GDPR processed:

  • Ensuring a smooth connection to the website,
  • Ensuring a comfortable use of our website,
  • analysing system security and stability and
  • for other administrative purposes.

Your personal data will not be transferred to third parties for purposes other than those listed below.

We only pass on your personal data to third parties if:

  • you have given your express consent to this per Art. 6 para. 1 sentence 1 lit. a GDPR,
  • the disclosure according to Art. 6 para. 1 sentence 1 lit. f GDPR is necessary for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,
  • if there is a legal obligation for the disclosure under Art. 6 para. 1 sentence 1 lit. c GDPR, and
  • this is legally permissible and necessary for the processing of contractual relationships with you per Art. 6 para. 1 sentence 1 lit. b GDPR.

DELETION OF PERSONAL DATA

Unless expressly stated in this data protection notice, personal data, including data processed by e-mail or via a contact form, will be deleted as soon as it is no longer required for its intended purpose and the deletion does not conflict with any statutory retention obligations (e.g. retention periods under commercial and tax law). If personal data is not deleted because it is required for legally permissible and/or other purposes, its processing will be restricted.

STORAGE OF PERSONAL DATA

Following legal requirements, personal data is stored in particular for 6 years per Section 257 (1) HGB (e.g. for trading books, inventories, opening balance sheets, annual financial statements, commercial letters, and accounting records) and for 10 years under Section 147 (1) AO (e.g. for books, records, management reports, accounting records, commercial letters, business letters, etc.).

ORDER PROCESSING

The provider of this website has signed an order processing contract with its internet service provider (Art. 28 GDPR).

TRANSFERS TO THIRD COUNTRIES

If the provider processes personal data in a third country, i.e. outside the European Union (EU) or the European Economic Area (EEA), or if this occurs in the context of the use of third-party services, it will only take place if it is done to fulfil pre-contractual/contractual obligations, based on the user’s consent, on the basis of a legal obligation or based on legitimate interests.

The processing of personal data in a third country only takes place if the special requirements of Art. 44 et seq. GDPR, i.e. the processing is carried out, for example, on the basis of special guarantees, such as the officially recognised determination of a level of data protection corresponding to the EU or compliance with officially recognised, special contractual obligations.

ANALYSIS TOOLS

Google Analytics:

We use Google Analytics, a web analysis service of Google Inc (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter referred to as “Google”) for the purpose of designing and continuously optimising our pages to meet your needs. In this context, pseudonymised user profiles are created and cookies (see section 4) are used. The information generated by the cookie about your use of this website, such as

  • Browser type/version,
  • operating system used,
  • Referrer URL (the previously visited page),
  • Host name of the accessing computer (IP address),
  • Time of the server request,
Customise cookie settings

are transmitted to a Google server in the USA and stored there. The information is used to analyse the use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage for market research and the needs-based design of this website. This information may also be transferred to third parties if this is required by law or if third parties process this data on our behalf. Under no circumstances will your IP address be merged with other Google data. The IP addresses are anonymised so that they cannot be assigned (IP masking).

You may refuse the use of cookies by selecting the appropriate settings on your browser, however, please note that if you do this you may not be able to use the full functionality of this website.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de).

As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent Google Analytics from collecting data by clicking on the above link. An opt-out cookie will be set to prevent the future collection of your data when you visit this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.

Further information on data protection in connection with Google Analytics can be found in the Google Analytics help centre (https://support.google.com/analytics/answer/6004245?hl=de).

RIGHTS OF DATA SUBJECTS

You have the right to request comprehensive information about your personal data processed by us. You can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed and the planned storage period. You can also request the immediate correction of incorrect data or the completion of your personal data stored by us as well as its deletion or blocking. You have the right to object to data processing and the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transferred to another entity.

WITHDRAWAL OF CONSENT AND RIGHT TO OBJECT

You have the right to withdraw the consent you have given us at any time. As a result, we may no longer continue the data processing that was based on this consent in the future. However, your revocation does not affect the legality of data processed in the past.

If your personal data is processed based on legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for this arising from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right to object, which will be implemented by us without specifying particular circumstances.
If you have any questions regarding our handling of your personal data or would like to exercise your right of cancellation or objection, simply send an email to muenchen@stock-partner.eu.

COMPLAINTS

If you believe that the processing of your personal data by us is not in accordance with this privacy policy or the data protection regulations, you have the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority at your usual place of residence or workplace or at the registered office of our law firm.

UPDATING AND AMENDMENT OF THIS PRIVACY POLICY

This privacy policy is currently valid and was last updated in May 2024.