We hereby inform you about our processing of personal data. Controller for the described processing of personal data is rutow-law, M.-Sch.-Lihotzky-Str. 12 D, 80807 Munich, Geramny (hereinafter: "rutow-law").
Please find below the most important information about typical data processing sorted by groups of data subjects. For certain data processing activities, which relate only to specific groups, the duties to provide information are met separately.
Where the term "data" is used in the text, in each case it refers only to personal data as defined in the EU General Data Protection Regulation (hereinafter: "GDPR").
1. Visitors to our Website; Server Log Data
(i) We process the data mentioned below for the purpose of providing the website content you have accessed, to ensure the security of the IT infrastructure used, for troubleshooting, to enable and simplify searching on the website and to manage cookies.
(ii) The data processed is HTTP data: HTTP data is protocol data that is technically generated when the website is accessed via the Hypertext Transfer Protocol (Secure) (HTTP(S)): This includes IP address, type and version of your internet browser, operating system used, the page accessed, the page previously visited (referrer URL), date and time of access. HTTP(S) data also accrue on servers of service providers (e.g. when retrieving third-party content).
(iii) The legal basis for the processing is our legitimate interest in operating an Internet presence and exchanging information with communication partners pursuant to Article 6 (1) (f) GDPR.
(iv) The data is automatically provided by the browser of the website visitor.
(v) Recipients of the personal data are IT service providers, which we use within the framework of an order processing agreement.
(vi) IP addresses are anonymised after 24 hours at the latest. Pseudonymous usage data is deleted after six months.
(vii) It is not possible to use the website without disclosing personal data such as the IP address. It is not technically possible to communicate via the website without disclosing data.
2 Clients and their Employees
2.2 The legal basis for processing is Article 6(1)(b) GDPR (preparation and execution of the contract) in the case of mandate contracts with natural persons, Article 6(1)(f) GDPR (legitimate interest, namely communication with contacts relevant to the mandate) in the case of contracts with legal persons, and always Article 6(1)(c) GDPR (legal obligations, in particular tax and commercial law requirements). In the case of the examination, enforcement or dismissal of claims, the legal basis is Article 6(1)(f) GDPR (legitimate interest, namely enforcement of claims or defence against claims). The legal basis for processing data for information and invitations by e-mail is Article 6 (1) (f) GDPR (legitimate interest, namely information on current topics and invitation to events).
2.3 Recipients of data may be banks for the processing of payments. Authorities and offices may be recipients within the scope of their duties, insofar as we are obliged or entitled to transmit data. This applies in particular to courts. We also use service providers by way of commissioned processing in the provision of services, in particular for the provision, maintenance and care of IT systems.
2.4 All data relevant to contracts and bookings are stored in accordance with tax and commercial law retention periods for a period of ten calendar years after the end of the mandate. Court titles are stored for 30 years unless the titled claim has been settled beforehand. Enquiries and other communication are automatically deleted after ten calendar years.
2.5 The provision of data is mandatory for business partners and employees of business partners both by law and by contract. The business relationship cannot be established and carried out without providing data. The provision of data is required for interested parties and communication partners. Communication is not possible without providing data.
3. General Information and Rights of the Data Subjects
a) You have the right to request information at any time about all your personal data that we process.
b) If your personal data are inaccurate or incomplete, you have the right to correction and amendment.
c) You may request the deletion of your personal data at any time, unless we are legally obligated or entitled to process your data further.
d) In case of legal requirements, you may request a limitation on the processing of your personal data
e) You have the right to object to processing if the data processing is performed for the purposes of direct advertising or profiling. If processing is performed as a result of the balancing of interests, you may object to the processing stating reasons arising from your particular situation.
f) Where data processing is performed on the basis of your consent or as part of a contract, you have the right to transfer the data provided by you, unless the rights and freedoms of other persons are impaired.
g) Where we process your data on the basis of a declaration of consent, you have the right to revoke this consent at any time with effect for the future. Any processing performed prior to revocation will remain unaffected by the revocation.
h) In addition, you have the right to file a complaint to a data protection supervisory authority at any time if you are of the opinion that data processing has occurred in breach of an applicable law.
Last updated December 23, 2020 |