deen
LawyersNotariesCareer

data protection notice


1. general information

BROCK MÜLLER ZIEGENBEIN, Rechtsanwälte Partnerschaft mbB - Notare, Schwedenkai 1, 24103 Kiel, Germany, is the controller within the meaning of the European General Data Protection Regulation (GDPR) for data processing on this website. We respect your personal rights. We recognise the importance of the personal data that we receive from you as a user of our website. We respect the protection of your personal data and will collect, store or process all data obtained exclusively in accordance with the relevant data protection regulations within the scope of our business purpose.

2. definitions

Personal data means any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

3. legal bases of the processing

Insofar as we obtain your consent for the processing of personal data, Art. 6 para. 1 sentence 1 lit. a of the European General Data Protection Regulation (GDPR) serves as the legal basis.

The processing of personal data required for the fulfilment of a contract with you is based on Art. 6 para. 1 sentence 1 lit. b GDPR. This also applies to processing operations that are necessary for the performance of pre-contractual measures.

Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, this is done within the framework of Art. 6 para. 1 sentence 1 lit. c GDPR.

If the processing is necessary to safeguard a legitimate interest of us or a third party and if your interests, fundamental rights and freedoms do not outweigh the legitimate interest, Art. 6 para. 1 sentence 1 lit. f GDPR serves as the legal basis for the processing. The legitimate interest of our company generally lies in the provision of our owed services and/or ongoing optimisation of our services and presentations.

4 Data erasure and storage duration

Your personal data will be deleted or blocked as soon as the purpose of storage no longer applies. Data may also be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.

5. collection of personal data

In principle, we do not collect or use any personal data when you visit our website. This is only done to the extent necessary to provide a functional website and our content and services. The collection and use of our users' personal data only takes place regularly with their consent. This does not apply in cases where prior consent cannot be obtained for factual reasons and the processing of the data is permitted by law. 
In the following, we would like to inform you about the type, scope and purpose of our data handling on this website:

5.1 Server log files

Each time our website is accessed, the user's access data required for utilisation and billing of the use is stored on our server in a log file, which your browser automatically transmits to us.

These are

  • Browser type/browser version
  • Operating system used
  • Protocol used by the client to access the website
  • Date and time of the server request
  • IP address of the computer requesting the website
  • Website from which the access was made (referrer URL)
  • Files accessed;

The log file is stored for the following purposes:

  • Analysing file retrieval for statistical purposes;
  • System security and stability of the website
  • Checking for use in breach of contract or otherwise unlawful use, if there are actual indications of this.

The legal basis for this data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest follows from the above-mentioned purposes for data collection. Under no circumstances do we use the data collected for the purpose of drawing conclusions about your person. We do not merge this data with other data sources.

5.2 Necessary cookies

When our website is accessed, so-called "cookies" are stored on the user's computer. Cookies are small text files in a designated file directory on the computer. This file is used to identify the user's computer for the duration of the session. These cookies cannot be manipulated on the user's end device and can be deleted manually at any time - most easily in the browser.

You can customise the handling of cookies in your Internet browser so that cookies are rejected or only accepted after confirmation. Cookies, in this case so-called "session cookies", serve the purpose of extending the functionality of our website and making it as convenient as possible for you to use it. Please note that if you reject cookies, not all components of our application may function properly.

The processing of data by cookies is necessary for the purposes mentioned to protect our legitimate interests and, if applicable, those of third parties in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.

5.3 Usage data

We collect and use personal data from you on the basis of Art. 6 para. 1 sentence 1 b) GDPR, insofar as this is necessary to enable you to use our website (usage data).

5.4 Data in connection with your contacting us

If you send us enquiries via the contact form, your details from the form or via the e-mail address provided for contacting us, including the contact details you provide there, will be stored by us solely for the purpose of processing the respective enquiry and in the event of follow-up questions. We will not pass this data on to third parties without your consent. The corresponding data is used on the basis of Art. 6 para. 1 sentence 1 b) GDPR in the context of processing your request.

5.5 Tracking procedure

Tracking tools are used on the basis of Art. 6 para. 1 sentence 1 lit. a GDPR with your consent, which can be revoked at any time. In this way, we want to ensure a needs-based design and the ongoing optimisation of our website (through statistical evaluations).

Use of Google Maps

On this website, we use the map function Google Maps from Google LLC ("Google"), 1600 Amphitheater Parkway, Mountainview, California 94043, USA. This allows us to show you interactive maps directly on the website and enables you to use them conveniently.

When you visit the website, Google receives the information that you have accessed the corresponding subpage of our website. In addition, the above-mentioned data (5.1) is transmitted. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your data to be associated with your Google profile, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or customising its website. Such an analysis is carried out in particular (even for users who are not logged in) to provide customised advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.

Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the provider's privacy policy. There you will also find further information on your rights in this regard and setting options to protect your privacy: https: //policies.google.com/privacy?hl=de.

Fonts
Google Web Fonts

This website uses so-called web fonts provided by Google for the standardised display of fonts. When you access a website, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.

For this purpose, the browser you are using must connect to Google's servers. This informs Google that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a uniform and appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. a GDPR.

If your browser does not support web fonts, a standard font will be used by your computer.

Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https: //www.google.com/policies/privacy/.

5.7 Use of cookiebot

Our website uses the cookie banner "Cookiebot", a web service from Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark (hereinafter Cybot).

We use this data to ensure the full functionality of our website and to inform the user about the use of cookies on our website and to obtain and record the user's consent.

The following data is automatically transmitted to Cybot

  • Anonymised IP address of the user;
  • Date, time of consent;
  • User agent of the end user's browser;
  • Website from which the access was made (referrer URL);
  • Anonymous, randomised and encrypted key;
  • The cookies authorised by the user (cookie status), which serves as proof of consent.

A key automatically generated by Cybot for the management/proof of consent granted and the consent status are also stored in the end user's browser in the "CookieConsent" cookie. This allows the website to automatically read and follow the end user's consent for all subsequent page requests and future end user sessions for up to 12 months.

The legal basis for data processing is Art. 6 para. 1 lit. c GDPR. We can only comply with the legal requirements with an appropriate mechanism for granting and managing consent.

You can prevent the collection and processing of your data by Cybot by deactivating the execution of script codes in your browser settings or by installing a script blocker in your browser.

Further information on the handling of data processing by Cybot can be found in the privacy policy at: https: //www.cookiebot.com/en/privacy-policy/

6. your rights

If we process your personal data on our website, you are a "data subject" within the meaning of the GDPR. You have the following rights vis-à-vis us

6.1 Right to information

You can request confirmation from us as to whether we are processing your personal data. If such processing is taking place, you can request the following information from us

  • The purposes for which the personal data is processed;
  • the categories of personal data being processed
  • the recipients or categories of recipients to whom your personal data have been or will be disclosed
  • the planned duration of the storage of your personal data or, if specific information on this is not possible, criteria for determining the storage period
  • the existence of a right to lodge a complaint with a supervisory authority
  • all available information about the origin of the data if the personal data is not collected from you
  • the existence of automated decision-making including profiling in accordance with Art. 22 para. 1 and 4 GDPR and - at least in these cases - meaningful information on the logic involved and the scope and intended effects of such processing for you.

Furthermore, you have the right to request information as to whether your personal data is transferred to a third country or to an international organisation. In this context, you may request to be informed of the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.

6.2 Right to rectification

You have the right to obtain from us the rectification and/or completion of your personal data if your processed data is incorrect or incomplete. If this is the case, we will make the correction immediately.

6.3 Right to restriction of processing

Under the following conditions, you have the right to request the restriction of the processing of your personal data if

  • you contest the accuracy of your personal data for a period enabling us to verify the accuracy of the data;
  • the processing is unlawful and you oppose the erasure of your personal data and request the restriction of their use instead;
  • we no longer need your personal data for the purposes of the processing, but you require it for the establishment, exercise or defence of legal claims, or
  • you have objected to the processing pursuant to Art. 21 para. 1 GDPR and it is not yet certain whether our legitimate reasons outweigh your reasons.

If you have requested the restriction of the processing of your personal data, this data - apart from its storage - may only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. You will be informed by us before the restriction is lifted.

6.4 Right to erasure

You can demand that we erase your personal data without undue delay. We are obliged to delete this data immediately if one of the following reasons applies:

  • Your personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
  • You revoke any existing consent on which the processing was based pursuant to Art. 6 para. 1 sentence 1 lit. a or Art. 9 para. 2 lit. a GDPR and there is no other legal basis for further processing.
  • You object to the processing pursuant to Art. 21 para. 1 GDPR and there are no overriding legitimate grounds for the processing.
  • You object to the processing for direct marketing purposes pursuant to Art. 21 para. 2 GDPR.
  • Your personal data has been processed unlawfully.
  • The deletion of your personal data is necessary to fulfil a legal obligation under Union law or the law of the Member States to which we are subject.
  • Your personal data have been collected in relation to the offer of information society services referred to in Art. 8 para. 1 GDPR.

If we have made your personal data public and we are obliged to erase it pursuant to Art. 17 para. 1 GDPR, we shall take reasonable steps, taking into account the available technology and the cost of implementation, to inform the controller(s) that you have requested the erasure by such controller(s) of any links to, or copy or replication of, those personal data.

Your right to erasure does not apply if the processing is necessary

  • for exercising the right of freedom of expression and information
  • for compliance with a legal obligation which requires processing by Union or Member State law to which we are subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in us;
  • for reasons of public interest in the area of public health in accordance with Art. 9 para. 2 lit. h and i and Art. 9 para. 3 GDPR;
  • for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89 para. 1 GDPR, insofar as the right referred to in para. 1 is likely to render impossible or seriously impair the achievement of the objectives of that processing, or
  • for the establishment, exercise or defence of legal claims.

6.5 Right to information

If you have asserted your right to rectification, erasure or restriction of processing against us, we are obliged to notify all recipients to whom your personal data has been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.

You have the right to request that we inform you about these recipients.

6.6 Right to data portability

You have the right to receive your personal data, which you may have provided to us, in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from us, provided that

  • the processing is based on consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR or on a contract pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR and
  • the processing is carried out by automated means.

Furthermore, you have the right to obtain the transfer of your personal data directly from us to another controller, insofar as this is technically feasible. This must not adversely affect the rights and freedoms of other persons.

The right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

In the context of our website, we do not currently assume that data subject to the right to data portability will be processed.

6.7 Right to object

You have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data which is based on point (e) or (f) of Art. 6 para. 1 sentence 1 GDPR, including profiling based on those provisions.

We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for the purpose of such marketing; this also applies to any associated profiling.

If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

You have the option of exercising your right to object in connection with the use of information society services - notwithstanding Directive 2002/58/EC - by means of automated procedures that use technical specifications.

6.8 Right to revoke the declaration of consent under data protection law

You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Renew or change your cookie consent here

6.9 Automated decision-making in individual cases, including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. We do not carry out such processing.

6.10 Right to lodge a complaint with a supervisory authority

Without prejudice to any other rights of appeal, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of your personal data infringes the GDPR.

7 Responsibility for linked content

We may also use links to websites of other providers on our website. In this respect, this privacy policy does not apply. If personal data is collected, processed or used when using the websites of these other providers, please note the data protection information of the respective providers. We are not responsible for their data protection practices.

8 Disclosure of personal data to third parties

Your personal data is stored exclusively on our servers or on servers used on our behalf. Access to and use of the data is only possible for an authorised group of employees or service providers and is limited to the data required to fulfil the respective task.

Your data will not be transferred to third parties without your consent. Data is not transferred to third countries (countries outside the European Economic Area - EEA), unless otherwise stated in this privacy policy, and is not intended to be transferred in the future.

9 Data security

To protect your personal data, we have taken technical and organisational measures to ensure that your data is protected against accidental or intentional loss, destruction or manipulation and against access by unauthorised persons. Our protective measures are reviewed at regular intervals and adapted to technical progress where necessary.

10. data protection officer

If you have any further questions regarding the processing of your personal data, you can contact our data protection officer by e-mail at info@compolicy.de and by telephone on +49 431 908948-0

11. changes to the privacy policy

We reserve the right to amend this privacy policy at any time if necessary and in consideration of the data protection regulations applicable at the time of the amendment.

Status: September 2020