Source: https://www.annerton.com/en/data-protection-policy
Timestamp: 2020-07-10 12:37:58
Document Index: 527663313

Matched Legal Cases: ['Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', '§ 26', 'Art. 6', 'Art. 22', 'Art. 6', 'Art. 9', 'Art. 8', 'Art. 6']

Investment supervisory law
Crypto & digitisation
Payment services supervisory law
We, Annerton Rechtsanwaltsgesellschaft mbH (hereinafter referred to as “Annerton” or alternatively, “us/we”) thank you for visiting our website annerton.com (hereinafter referred to as “website”). We are responsible for the content on this website. To find out who is responsible for the website under press law, please see the imprint.
For other websites operated by us, e.g. www.paytechlaw.com, other data protection regulations apply. Please inform yourself there.
Fone: +49 89 306 683 -0
Fax: +49 89 306 683 -212
www.annerton.com
hellonoSpam@annerton.com
„PayTechLaw“ is the name identification used by Annerton Rechtsanwaltsgesellschaft mbH for the blog published under www.paytechlaw.com.
E-Mail: datenschutznoSpam@annerton.com
The competent supervisory authority for Annerton Rechtsanwaltsgesellschaft mbH (Munich office) is:
Fone: +49 981 53 1300
E-Mail: poststellenoSpam@lda.bayern.de.
Insofar as we obtain consent for the processing of personal data, Art. 6 par. 1 sentence 1 lit. a GDPR serves as the legal basis for the processing of personal data. The legal basis for the processing of personal data required for the performance, implementation of pre-contractual measures, or for the initiation of a contract, is Art. 6 para 1 sentence 1 lit. b GDPR.
To the extent the processing of personal data is necessary for compliance with a legal obligation to which we are subject, Art. 6 para 1 sentence 1 lit. c GDPR is the legal basis.
If the processing is required to protect our legitimate interests or the legitimate interests of a third party, and if your interests, fundamental rights and freedoms, which require the protection of your personal data, do not outweigh such legitimate interest, the legal basis is Art. 6 para 1 sentence 1 lit. f GDPR.
As a general rule, we obtain any consent under Art. 6 para 1 sentence 1 lit. a GDPR electronically. Consent is typically provided by ticking the relevant box to document your consent, or having you click on the relevant selection field.
If the information transferred also includes personal data, we ensure that, prior to any such transfer, there are guarantees for an appropriate level of data protection in the respective third country or at the relevant recipient in the third country. This may be assumed from a so-called “adequacy decision” of the European Commission, or be ensured by using the so-called “EU standard contract terms”. In the case of recipients in the USA, their compliance with the principles of the so-called “EU-US privacy shield” can also ensure an appropriate level of data protection. Upon request, we will be happy to provide you with further information on the suitable and appropriate guarantees that we require in order to ensure an adequate level of data protection. Please refer to section 1 for the relevant contact details. Information on the participants of the EU-US privacy shield can also be found here: www.privacyshield.gov/list
Log data, in particular, the IP address, is collected and processed for the purpose of providing the content contained on our website. This requires temporary storage of your IP address. This is required to address data traffic between your computer system and our web- and/or online-offers, or is needed to use our web- and/or online-offers. Any further processing and storage of your IP address in log files is carried out for the purpose of ensuring the functionality of our web- and online-offers, to optimise the same, and to ensure the security of our IT systems.
The legal basis for the collection and processing of the log data, to the extent they constitute personal data, is Art. 6 para 1 lit. b GDPR (performance and initiation of contracts). The legal basis for storing the IP address for purposes beyond the communication process is Art. 6 para 1 lit. f GDPR (protection of legitimate interests).
The law allows us to store cookies on your device if they are absolutely necessary for the operation of this site. For all other types of cookies we need your consent. You can change or withdraw your consent at any time from the cookie declaration on our website. Your consent is obtained separately for our websites by means of a tool.
The purpose of using Necessary cookies is to simplify the use of websites. Some functions of our website cannot be offered without the use of such cookies. For these it is necessary that the browser is recognized even after a page change. Preference cookies are used to enable you to set the language preference The user data collected through technically necessary cookies is not used to create user profiles. Marketing cookies and statistics cookies are used for the purpose of improving the quality of our website and its contents. In this way we learn how the website is used and can thus constantly optimise our offer. For these purposes, we also use third-party systems that set third-party cookies.
4.4 Legal bases
4.4 Deletion of data and period of storage
The cookies are stored on your device and are transmitted to our web server. A distinction is made between so-called permanent cookies and session cookies. Session cookies are stored for the duration of a browser session and are deleted when the browser is closed. Permanent cookies are not deleted when the respective browser session is closed, but are stored on the user's end device for a longer period of time.
4.6 Right to object and deletion possibilities
When visiting our website, an information banner informs you about the use of cookies and refers you to this data protection policy. The banner also requests your consent to the processing of personal data used in this context. As a user, you have full control over the use and storage of cookies. You can generally deactivate or restrict the transmission of cookies by changing the settings in your browser. You can delete cookies that have already been saved at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website in full. For more information on the use of cookies, please see http://www.meine-cookies.org or www.youronlinechoices.com.
The legal basis for this processing is Art. 6 para 1 sentence 1 lit. a GDPR (consent), which you have given us when subscribing to the newsletter.
You can unsubscribe from the newsletter at any time by using the unsubscribe link provided at the end of each newsletter (“unsubscribe”). The explanations regarding the right of revocation can be found here and also apply.
We provide the e-mail address hellonoSpam@annerton.com through wich you may contact us electronically. If you make use of this option, the data sent by you along with the email will be transmitted to us and stored. What data is transmitted and collected this way depends partly on your e-mail program, but usually contains the following data of the sender:
The legal basis for the processing of the data is, to the extent the data processing is done for the purpose of the performance or initiation of a contract, Art. 6 para 1 sentence 1 lit. b GDPR.
The legal basis for the collection of additional data during the dispatch process is Art. 6 para 1 Sentence 1 lit. f. GDPR; the legitimate interests here lie in the prevention of abuse and ensuring system security (see above).
7. Job advertisements and applications
Within the scope of the application procedure, only the data provided by you (e.g. application, curriculum vitae, photo if applicable) will be processed. If you expressly give us this option, we also use data that we learn from third parties, e.g. reference persons.
Within our company, only those partners and employees who are involved in the application process receive your personal data. Furthermore, a transfer of the relevant data to third parties on the basis of legal regulations or contractual agreements is possible in each individual case. These can be contract processors, such as DATEV eG, or an IT service provider.
During the application procedure, you only need to provide the data necessary for assessing your suitability for the position to be filled. You cannot participate in the application procedure without providing at least this data. The provision of this information is therefore mandatory.
The processing of your personal data is the basis for participation in the application procedure. Furthermore, the data provided should enable an assessment of the suitability of the person applying for the position to be filled. Without this data we cannot consider the application in the application procedure.
The legal basis for the processing of your personal data to carry out pre-contractual measures is § 26 BDSG (data processing for the purpose of the employment relationship) and Art. 6 para. 1 sentence 1 lit. b DSGVO (contract fulfilment and initiation).
7.4 Data deletion and storage period
The storage period of your data is at least the period for the application procedure. Notwithstanding the above, in the event of a cancellation, we will delete your data no later than six (6) months after the cancellation is sent. If your application is successful, we will save the data in the personnel file for further processing.
8.1 Description and purpose of the web analysis
We use the analysis software Google Analytics, a web analysis service of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, (Google). Google Analytics uses a tracking cookie to recognise a user who already visited our website in the past. The cookie is a small text file which is stored on your computer and which enables an analysis of the visits to our website (so-called usage profiles). The tracking cookie has a lifetime of one week. The information collected by the cookie about your use of our website (including your IP address) is generally transmitted to a Google server in the USA and stored there. Google Analytics has been extended by us by the code “gat._anonymizeIp();” to ensure an anonymous collection of IP addresses (so-called IP masking) before they are transmitted. At our request, your IP address (the number assigned to your computer by your internet access provider) will therefore be shortened by Google beforehand within member states of the European Union or in other states party to the Agreement on the European Economic Area. The user profiles generated by Google Analytics are thus made anonymous, i.e. any inference to a specific person is virtually impossible. Only in exceptional cases, the full IP address will be transmitted to a Google server in the USA and shortened there. The usage profiles contain, e.g., information about the length of the visit, approximate geographical origin, the origin of visitor traffic, exit pages and usage procedures. Google will use this information to evaluate your use of our website, to compile reports on website activities for us and to provide us with further services associated with the use of the website and the internet. We delete the anonymous user profiles collected by Google after twelve months. The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data. A transfer of this data by Google to third parties only takes place on the basis of legal regulations or within the scope of processing on behalf of a controller. By using our website, you consent to the processing of the data collected about you by Google and to the manner of the data processing described above as well as to the named purpose. You may refuse the use of cookies by selecting the appropriate settings on your browser. However, we would like to point out that in this case you may not be able to use all functions of our website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available at https://tools.google.com/dlpage/gaoptout?hl=en. As an alternative to the browser add-on or for browsers on mobile devices, you can prevent Google Analytics from collecting data by clicking the link provided below. An opt-out cookie is set to prevent future collection of your data when you visit this website:
http://www.google.com/intl/de/policies/privacy/index.html.
Our website uses components of Twitter Inc, 795 Folsom St., Suite 600, San Francisco, CA 94107, USA ("Twitter"). Twitter is a multilingual publicly accessible microblogging service where users can publish and distribute so-called "tweets", i.e. short messages limited to (at the moment) 280 characters. These short messages are generally accessible to anyone, potentially worldwide, including to people not registered on Twitter. The tweets are also displayed to so-called "followers" of the respective user of a Twitter account. "Followers" are other users of Twitter who follow a certain user and his tweets. Twitter also has functions such as "hashtags", which are keywords, as well as links and the possibility of distributing other people’s tweets (so-called "retweet"), thereby enabling users to address a broad audience.
The integrated components can be recognised by terms such as "Twitter" or "follow", usually associated with the Twitter logo, a stylized blue bird. Using the Twitter buttons it is possible to share a page of our website on Twitter, such as a blog post, or to become a follower of our Twitter account. When you visit one of our websites which contains such a component, your browser establishes a direct connection to Twitter's servers. The content of the Twitter buttons is transmitted directly from Twitter to your browser. We therefore have no influence on the extent of the data Twitter collects with the help of this method and can only inform you according to our level of knowledge: To our knowledge, only your IP address and the URL of the respective website will be transmitted, but not used for any purposes other than the presentation of the button. For more information, please see Twitter's privacy policy at http://twitter.com/privacy.
11. Amendment of this data protection policy
If you have any questions regarding data protection, please contact us. The best way to do this is to use the contact address given in section 1, or the contact details given here​​​​​​​.
The EU GDPR grants you, as a data subject affected by the processing of personal data, certain right, about which we would like to inform you about below (sections 1 - 12). In addition, in section 13 we have explained the essential technical terms used in this data protection policy.
Tel. +49 (89) 306683-0
Fax. +49 (89) 306683-212
You are also entitled to information as to whether your personal data is the subject of an automated individual decision within the meaning of Art. 22 GDPR (so-called "profiling"), and if this is the case, which decision criteria form the basis of such an automated individual decision (logic) or which effects and scope the automated individual decision may have for you.
you have given consent on which the processing was based pursuant to Art. 6 para 1 sentence 1 lit. a GDPR or pursuant to Art. 9 para 2 lit. a GDPR, and you have withdrawn this consent and there is no other legal ground for the processing;
a child's data was collected in relation to information society services pursuant to Art. 8 para. 1 GDPR.
Personal data, the processing of which has been restricted at your request, may - subject to the storage of such data - only be used for the following purposes
As the data subject, you have the right – subject to the following provisions – to demand that we provide to you the data concerning you in a common electronic, machine-readable data format. The right to data portability includes the right to transfer the data to another controller; at your request, we will therefore - as far as this is technically possible - transfer data directly to a party appointed, or yet to be appointed by you, as the controller.
As the data subject, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation, which is based on Art. 6 para 1 sentence 1 lit. e or lit. f GDPR, with future effect. This also applies to profiling based on these provisions.
As the data subject, you have the right to ask us not to be subject to a decision based solely on automated processing - including profiling - which has legal effect against you or which significantly affects you in a similar manner, provided that the decision
a) is not necessary for entering into or performance of a contract between you and us; or
b) is authorised by European Union or member state law to which we are subject and which also lays down suitable measures to safeguard your rights, freedoms and legitimate interests; or
13.1 “Personal data“ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
13.2 “Data subject“ means any identified or identifiable natural person, whose personal data are processed by the controller.
13.3 “Processing“ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
13.4 “Restriction of processing“ means the marking of stored personal data with the aim of limiting their processing in the future.
13.5 “Profiling“ means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.
13.6 “Pseudonymisation“ means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data is not attributed to an identified or identifiable natural person.
13.7 “Controller“ means the natural or legal person, public authority, agency or another body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for nomination may be provided for by Union or Member State law .
13.8 “Processor“ means a natural or legal person, public authority, agency or another body which processes personal data on behalf of the controller.
13.9 “Recipient“ means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing.
13.10 “Third party“ means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.
13.11 “Consent“ of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.