Source: https://www.gleisslutz.com/en/data-protection-statement
Timestamp: 2019-04-18 14:28:16+00:00

Document:
you have applied for a position at Gleiss Lutz on the career portal of Gleiss Lutz or have otherwise expressed interest in a career at Gleiss Lutz (section F).
Gleiss Lutz will process your data in accordance with the data protection provisions of the Federal Data Protection Act ("BDSG") in the version that took effect on May 25, 2018 and Regulation (EU) 2016/679 (hereinafter the "GDPR").
A. Who is responsible for processing my personal data?
The party responsible for processing your personal data, the so-called “controller” within the meaning of Art. 4 no. 7 of the GDPR, is Gleiss Lutz Hootz Hirsch PartmbB Rechtsanwälte, Steuerberater, Lautenschlagerstr. 21, 70173 Stuttgart (hereinafter "Gleiss Lutz").
I. What data will be processed by Gleiss Lutz when I visit its website?
When you visit the website of Gleiss Lutz, the servers of Gleiss Lutz will automatically store various data about your system, such as the type and version of your browser, your operating system, the website from which you arrive at the website of Gleiss Lutz, the pages of the website of Gleiss Lutz you access, the date and time of your access, your IP address, your Internet service provider, and other, similar data. Gleiss Lutz uses such data to be able to make the website accessible, to detect and resolve any technical problems, and to prevent and, if necessary, prosecute any misuse of the website of Gleiss Lutz. In addition, Gleiss Lutz uses such data in anonymous form (i.e., so that users cannot be identified), for statistical purposes and to improve the website. The legal basis for processing personal user data is Article 6 para. 1 subpara. 1 (f) of the GDPR.
II. How are cookies used?
Cookies can be blocked or restricted by changing the settings of your browser. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies for the website of Gleiss Lutz are blocked, then you may no longer be able to fully use all functions of the website.
III. How is Google Analytics used?
The website of Gleiss Lutz uses Google Analytics with the extension "Anonymize IP." This means that your IP address collected by the Google Analytics cookie will be masked within member states of the European Union or other signatory states to the Agreement on the European Economic Area before it is transferred to the United States. Only in exceptional cases will the full IP address be transferred to a Google server in the United States and masked there. Google is certified under the EU-US Privacy Shield program. For further details, please see https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active#other-covered-entities.
You may also prevent Google from tracking and processing your personal data that are generated by the Google Analytic cookie about your use of the website by downloading and installing the browser plugin available at the following link (http://tools.google.com/dlpage/gaoptout?hl=de). Note, however, that in such case, you may no longer be able to fully use all functions of the website. You may also prevent tracking by Google Analytics by accessing the following link. If you do so, an opt-out cookie will be placed that will prevent tracking of your data during future visits of the website of Gleiss Lutz: Deactivate Google Analytics. You may also block or restrict cookies by changing the settings of your browser. Cookies that have already been stored may be deleted at any time. This can also be done automatically. If cookies for the website of Gleiss Lutz are blocked, then you may no longer be able to fully use all functions of the website. If you want to accept cookies only from Gleiss Lutz, but not from service providers and partners of Gleiss Lutz, then you can select the browser setting "block cookies of third-party providers" (or comparable).
IV. How will data that I enter into the contact form be processed?
The website of Gleiss Lutz allows you to contact Gleiss Lutz by using the contact form. To do so, you must provide your title (Mrs./Mr.), first name and last name, and email address, as well as the text of your inquiry and the purpose of your inquiry (career/media/events/general). In addition, you may provide your professional title, address, and telephone number, if you wish. Personal data transmitted to Gleiss Lutz in this connection will be used exclusively to process your inquiry. The legal basis for processing data is Article 6 para. 1 subpara. 1 (f) of the GDPR.
V. What happens if I subscribe to a newsletter?
1. On the website of Gleiss Lutz you may subscribe to our newsletter on subject areas selected by the user as well as on current legal developments and events and consent to processing of your personal data to the extent necessary for this purpose. To subscribe to the newsletter, you must provide your email address, first name and the last name, professional title, position in the company if applicable, the name of your company, and the topics on which your wish to receive information via the newsletter. Additional information may be provided on a voluntary basis. This information will be used exclusively to send out the newsletter and will not be transferred to any third parties. The legal basis for data processing is Article 6 para. 1 subpara. 1 (a) of the GDPR. You have the right to revoke your consent at any time, without thereby affecting the lawfulness of data processing that has occurred up until consent is revoked. If consent is revoked, then you will no longer receive the newsletter.
2. When you subscribe to our newsletter, your IP address and the date and time of subscription and email verification will be collected. These data will be processed exclusively for the purpose of allowing us to reconstruct any possible misuse of your email address. The legal basis for processing of the aforementioned data is Article 6 para. 1 subpara. 1 (f) of the GDPR.
3. Our newsletter contains a so-called “tracking pixel”. A tracking pixel is a miniature image file that is embedded in emails in HTML format. The embedded tracking pixel allows Gleiss Lutz to recognize whether and, if so, when you open the newsletter and on which of the links in the newsletter you click. Data collected via tracking pixels in our newsletters are stored and processed in anonymous form for statistical purposes to optimize distribution of our newsletter and to tailor the content of future newsletters even more to the interests of the recipient.
VI. How long will my personal data be stored?
Gleiss Lutz will process personal data insofar as this is necessary for the establishment of client relationships and the handling of client matters.
I. Who are the data subjects?
II. What personal data will be processed?
other personal data that are necessary for the determination and legal assessment of the facts of the matter and the provision of appropriate legal advice and representation of the client in connection with the matter.
In individual cases, the data processed by Gleiss Lutz may also include special categories of personal data within the meaning of Art. 9 of the GDPR (e.g. data concerning health) and data on criminal convictions and offences within the meaning of Art. 10 of the GDPR.
III. Where do the data processed by Gleiss Lutz come from?
IV. For what purposes will the data be processed?
to process and assert other claims arising from the client relationship.
The legal basis for these processing activities is, insofar as personal data of the client is processed, Art. 6 para. 1 subpara. 1 (b) of the GDPR; otherwise, Art. 6 para. 1 subpara. 1 (f) of the GDPR applies. The legal basis for the processing of special categories of personal data is Art. 9 para. 2 (f) of the GDPR.
V. To whom is personal data transferred?
In individual cases, data will also be transferred to recipients in third countries outside the European Union or the European Economic Area for which the European Commission has not formally established the existence of an adequate level of data protection in accordance with Art. 46 of the GDPR. Insofar as the transfer is not necessary for the establishment, exercise or defence of legal claims (Art. 49 para.1 subpara. 1 (e) of the GDPR) and there is no other reason for the transfer pursuant to Art. 49 para. 1 of the GDPR, appropriate safeguards for the protection of the personal data at the recipient are provided for, generally in the form of data protection agreements on the basis of so-called standard data protection clauses pursuant to Art. 46 para. 2 (c) of the GDPR. Further information on these safeguards can be obtained from Gleiss Lutz’s data protection officer at datenschutz@gleisslutz.com.
VI. How long will the personal data be stored?
Personal data will be stored for as long as it is necessary to process these for the purposes described in IV., unless statutory provisions prescribe a longer storage period.
Gleiss Lutz processes personal data in the course of its cooperation with service providers, suppliers and other business partners (together: “business partners”).
Gleiss Lutz processes personal data of its business partners and their employees.
If Gleiss Lutz does not receive personal data directly from the data subjects (e.g. when corresponding with contact persons at the business partner), the data usually come from the business partner as the employer of the data subject.
Gleiss Lutz will process the personal data referred to in II. in order to establish, implement and execute the contractual relationship with its business partner. The legal basis for these processing activities is, insofar as personal data of the business partner is processed, Art. 6 para. 1 subpara. 1 (b) of the GDPR; otherwise, Art. 6 para. 1 subpara. 1 (f) of the GDPR applies.
V. How long will the personal data be stored?
If you have consented to receive information about current legal developments and events of Gleiss Lutz, then we will use your contact information (title, first name and last name, professional title, business address and position, and email address) to send you requested information (generally by email). The legal basis for this processing is Art. 6 para. 1 subpara. 1 (a) of the GDPR. You may revoke your consent at any time with effect for the future. If you revoke your consent, we will no longer send you information and delete your contact information. The same applies, whether or not you revoke your consent, if we have had no contact with you for more than two years. Your contact information will not be deleted if we have a right or obligation to continue to store your information for other legal reasons (e.g., in connection with working on a client matter).
If we invite you to an event based on your consent, we will process the aforementioned data in order to provide you with a registration form that has already been filled out. If you register for the event, we will process your name as well as what company or entity you work for and in what position, so that we can provide you and the other attendees with a list of all those who will be attending. The legal basis for this processing is Art. 6 para. 1 subpara. 1 (f) of the GDPR.
will attend or have attended an event for lawyers-in-training which is organized by a third party and at which Gleiss Lutz is present as an exhibitor.
I. What personal data will be processed?
1.4 information about any (planned or desired) future steps in your education or career and about your professional focuses and interests.
2. Generally, Gleiss Lutz will collect such data directly from you. In some cases, Gleiss Lutz will receive data about you from third parties who independently organize events for lawyers-in-training and to whom you have made your data available for sharing with potential employers. Depending on the event, such third parties may be universities, career portals (such as e-fellows.net), student organizations (such as ELSA), or trade fair organizers (such as myjobfair.de).
II. For what purposes and on what legal basis will my personal data be processed?
If you avail yourself of the opportunity to apply for a position at Gleiss Lutz online using our career portal, then Gleiss Lutz will process the data referenced in section D. I. above to the extent necessary for processing your application. The legal basis for such processing is § 26 of the Federal Data Protection Act in conjunction with Art. 88 of the GDPR.
If your application does not result in a job offer right away, then we would like to continue processing your data after the application process has been completed in order to notify you of future job openings and events at Gleiss Lutz that match your profile, and to send you information about current developments at Gleiss Lutz three to four times a year. We will process your data after the application process has been completed only with your express consent (Art. 6 para. 1 subpara. 1 (a) of the GDPR). You may revoke your consent at any time with effect for the future. Your refusal or revocation of consent will have no impact on the processing of your application. However, without your consent, we will unfortunately not be able to contact you with regard to future job openings or events or to send you information about current developments at Gleiss Lutz.
We would like to stay in touch with lawyers-in-training who have worked for us even after they leave Gleiss Lutz. As a former intern, research assistant, or articled clerk, you may therefore become a member of our "Gleiss Lutz Fellows Club." Club members will receive information about job openings and invitations to events of Gleiss Lutz that match their profiles. In addition, they will receive information about current events at Gleiss Lutz by email three to four times a year.
We may process your personal data referenced in section D. I. for the aforementioned purposes after you have left our firm and may send you the aforementioned information, but only with your express consent (Art. 6 para. 1 subpara. 1 (a) of the GDPR). You may revoke your consent at any time with effect for the future. If you do so, however, we will unfortunately no longer be able to stay in touch with you.
If you apply for attendance of an event for lawyers-in-training which is organized by Gleiss Lutz or at which Gleiss Lutz is present as an exhibitor, then we will process your data referenced in section D. I. to hold the event and to facilitate your attendance. For events organized by Gleiss Lutz, we may also include your name and current professional position in an index of attendees that will be made available to other attendees of the event (possibly also in electronic form). The legal basis for such data processing is Art. 6 para. 1 subpara. 1 sent. 1 (b) of the GDPR.
Even after the events have ended, we would like to continue processing your data in order to send you information about future job openings and events at Gleiss Lutz that match your profile and would like to send you information about current developments at Gleiss Lutz once or twice a year. We will process your personal data for this purpose only with your express consent (Art. 6 para. 1 sentence 1 (a) of the GDPR). You may revoke your consent at any time with effect for the future. If you do so, however, we will unfortunately no longer be able to stay in touch with you.
III. How long will my personal data be stored?
1. If an application does not result in employment at Gleiss Lutz, personal data collected on the career portal or otherwise for purposes of a job application will be further processed for evidentiary purposes for a maximum time period of three years after the application process has ended and thereafter will be erased or rendered anonymous.
2. Personal data of attendees of events for lawyers-in-training will be erased or rendered anonymous within 3 months following the end of the event, unless you consent to further processing of such data (see section 3 below).
3. If you have consented to the processing of your personal data so we can stay in touch with you and send you information, then your personal data that are stored for these purposes will be erased after a maximum time period of five years.
G. Will my personal data be share with any third parties?
1. For certain technical data processing tasks, Gleiss Lutz is assisted by third-party service providers who will receive access to your personal data to provide such services. Those service providers have been carefully selected and meet high data privacy and data security standards. They are subject to strict duties of confidentiality and process data only on behalf and in accordance with the instructions of Gleiss Lutz.
2. Gleiss Lutz works with companies and other entities with particular expertise in individual areas or certain specialised subjects (e.g. tax auditors, lawyers, consulting firms, logistics service providers). These are either subject to a duty of professional confidentiality or have been obliged by Gleiss Lutz to maintain confidentiality. Should it be necessary to forward personal data to them, the legal basis for this is Art. 6 para. 1 sent. 1 (b) or (f) of the GDPR, depending on what the respective cooperation involves.
H. Which rights do I have with respect to my personal data?
1. You have the right to be provided with information about your personal data that are stored by Gleiss Lutz and, if certain legal requirements are satisfied, rights to rectification, erasure, and restricted processing, as well as the right to object to data processing. In addition, you have the right to receive personal data that you have made available to us in a structured, standard, and machine-legible format. This includes the right to transfer such data to another controller. If technically feasible, you may also demand that Gleiss Lutz transfer your personal data directly to other controllers.
2. If the processing of your personal data is based on a weighing of interests within the meaning of Art. 6 para. 1 subpara. 1 (f) of the GDPR, you have the right to object to this processing under the conditions described in Art. 21 of the GDPR.
3. You may also lodge complaints with the competent regulatory authority, the State Representative for Data Protection of the State of Baden-Württemberg.

References: Art. 4

V. 
 Art. 9
 Art. 10
 Art. 6
 Art. 6
 Art. 9

V. 
 Art. 46
 Art. 49
 Art. 46
 Art. 6
 Art. 6

V. 
 Art. 6
 Art. 6
 § 26
 Art. 88
 Art. 6
 Art. 6
 Art. 6
 Art. 21