Source: https://notos.de/en/privacy/
Timestamp: 2020-08-07 04:11:24
Document Index: 540006798

Matched Legal Cases: ['Art. 6', 'Art. 28', 'Art. 4', 'Art. 15', 'Art. 6', 'Art. 6']

NOTOS | Privacy Information
Commercial/contract law
Julia Voegeli-Wenzl
Ines Homburg
Privacy disclaimer of NOTOS Partnerschaft von Rechtsanwälten mbB
The controller in the sense of the General Data Protection Regulation (GDPR), of the data protection regulations applicable in the member states of European Union and of other regulations with provision relating to the protection of personal data is:
NOTOS Partnerschaft von Rechtsanwälten mbB
Frankfurt am Main (Head Office)
Kettenhofweg 25
Phone: + 49 (0)69 / 6677804-0
Fax: + 49 (0)69 / 6677804-99
Darmstadt (Subsidiary):
Phone: +49 (0)6151 / 15369 0
Fax: +49 (0)6151 / 15369 99
Berlin (Subsidiary)
Phone: +49 (0)30 / 23456 910
Fax: +49 (0)30 / 23456 920
E-Mail: anwalt@notos.de
With regard to the present legal situation, according to Sec. 38 Para. 1 German Data Protection Act (BDSG) we are not obliged to appoint a data protection officer.
If you have any questions regarding this Privacy Disclaimer or data protection related issues in general please contact our partners Prof. Sven Kolja Braune, Jens Engelhardt, Eckart Haag or Daniel Hoevel.
The data protection information of NOTOS Partnerschaft von Rechtsanwälten mbB (hereinafter also termed NOTOS) is based on the definitions which have been used by the European directive and order issuing office in formulating the General Data Protection Regulation (GDPR). The data protection information of NOTOS should be easily read and understood not only by the general public but also by our customers and business partners. In order to ensure this, we would like to clarify in advance the definitions used.
In this data protection information and on our website, we use – amongst others – the following terms:
Personal data is any information relating to an identified or identifiable natural person (hereafter “data subject”). Defined as identifiable is a natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Processing means any operation or set of operations which is carried out in connection with personal data – whether or not by automated means – such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
3.7 Controller or party responsible for the processing
3.8 Processor
Third party is a natural person or legal entity, authority, institution or other post with the exception of the data subject, the controller, the order processor and those persons which are authorized under the direct responsibility of the controller or of the order processor to process the personal data.
Data protection, data security and data secrecy hold high priority for NOTOS. The durable protection of your personal data, of your company data and of your business secrets is especially important for us.
The processing of your personal data is carried out in conformity with the requirements of the General Data Protection Regulation and in conformity with the country-specific data protection regulations holding good for NOTOS. With the aid of this data protection information we wish to inform you on the nature, scope and purpose of the personal data processed by ourselves. In addition, we clarify for you with the aid of this data protection information the rights to which you are entitled.
NOTOS has realized technical and organizational measures in order to ensure an appropriate level of protection of the personal data processed via this website. Nevertheless, fundamentally Internet-based data transmissions can have security loopholes so that absolute protection cannot be guaranteed.
5. Legal fundamentals, purposes of the processing and duration of the storage
5.1 General statements on the legal fundamentals
5.2 General statements on deletion of data and duration of storing
6. Collecting of general data and information
The website of NOTOS collects a range of general data and information each time the website is called by a data subject or an automated system. This general data and information is stored in the log files of the server. Able to be collected are: (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website, from which an accessing system reaches our website (so-called referrer), (4) the sub-websites, which are steered to on our website via an accessing system, (5) the date and time of an access to the website, (6) an Internet-protocol-address (IP-address), (7) the Internet service provider of the accessing system and (8) other similar data and information, which serve the warding off of hazards in the case of attacks to our IT systems.
In using this general data and information NOTOS draws no conclusions about the data subject. Much more is this information needed (1) to be able to deliver out the content of our website correctly, (2) to permit the optimization of the content of our website and of the advertising for this, (3) to ensure the durable functionality of our IT systems and of the technology of our website and (4) to be able to make available to the law enforcement authorities the information necessary for criminal prosecution in the case of a cyber attack. This anonymously collected data and information is evaluated by NOTOS on the one hand statistically and on the other hand with the objective of increasing the data protection and the data security in our company in order finally to ensure an optimal level of protection for the personal data processed by ourselves. The anonymous data of the server-logfiles are stored separately from all the personal data stated by a data subject.
Legal foundation Storage purpose Storage duration Objection / opportunity for elimination
(legitimate interest) The temporary storing of the IP-address by the system is necessary to permit the delivery of the website to the computer of the user. For this the IP-address of the user must remain stored for the duration of the session. The data is deleted as soon as it is no longer necessary for achieving the purpose of their collection. This is the case when the particular session has ended in situations where the data is collected for making the website available.
It is only possible to contact us via the e-mail address provided. In this case, the personal data of the user transmitted with the e-mail will be stored.
(legitimate interest). The processing of the personal data from the input mask / e-mail serves us solely for the processing of the contact. This is also the necessary legitimate interest in the processing of the data.
The other personal data processed during the sending-off process serve to prevent misuse of the contact form and to ensure the security of our IT systems. The data is deleted as soon as it is no longer needed for achieving the purpose of their collection. This is the case for the personal data from the input mask of the contact form and those which are sent by e-mail when the particular conversation with the user has ended.
8. Passing of information
8.1 Passing of information (if applicable, advertising in the legal sense)
In an existing attorney-client relationship, we reserve the right to store your personal data and to use it for our own information purposes, e.g. to send information with changes in the law or relevant court decisions by letter post or with your consent also by e-mail.
8.2 No passing on of data
8.3 Right of objection and right of withdrawal
We draw explicit attention to your right of withdrawal (newsletter) and your right of objection (advertising) in accordance with sections 12.7 and 12.8 of this data protection information.
9. Data protection with job applications and job application processes
We collect and process the personal data of job applicants for the purpose of progressing the application process. The processing can also be carried out electronically. This is in particular the case when a job applicant sends to us relevant application documents by an electronic route, e.g. per e-mail. If we conclude a contract of employment with yourself as applicant, the data transmitted will be stored for purposes of progressing the employment relationship subject to observation of the legal regulations. If a contract of employment is not concluded by the party responsible for the processing with the applicant, then the application documents will be automatically deleted six months after notification of the rejection in so far as there is no other legitimate interest of the party responsible for the processing against deletion. Another legitimate interest in this sense is, for example, an obligation of proof in a process in accordance with the German General Equal Treatment Act.
A legitimate interest in this connection could be – for example – a proof obligation in a process in accordance with the German General Equal Treatment Act). Only general objection and elimination opportunities.
You can set your browser so that you are informed about the usage of cookies and decide individually whether to accept them or whether to exclude the acceptance of cookies in certain cases or in general. If cookies are not accepted, the functionality of our website may be restricted.
(consent) The purpose behind the use of strictly technically essential cookies is that of making use of the website easier for the user. Certain functions of our website cannot be offered without the use of cookies. For these functions it is necessary that the browser is recognized even after a page change.
Analysis cookies are used for the purpose of improving the quality of our website and its content. Through the analysis cookies we learn how the website is used and in this way, we can continually optimize our offer. These purposes also include our legitimate interest in the processing of the personal data in accordance with Article 6 Para. 1 lit. f GDPR. Cookies are stored on the user’s computer and are transmitted from this to our website. Accordingly, you as user have full control over the use of cookies. By carrying out a change to the settings of your browser you can deactivate cookies or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be carried out automatically. However, if cookies for our website are deactivated, it may no longer be possible to use all the functions of the website in full.
11. Use and application of other tools
11.1 Data protection regulations for the use and application of Google Analytics (with anonymization function)
We have integrated on this website the Google Analytics component (with anonymization function). Google Analytics is a web-analysis service. Web-analysis is the collecting, compilation and evaluating of data concerning the behaviour of the visitors to websites. A web-analysis service collects – amongst other things – data on from which website (the so-called referrer) a data subject has come to a website, which subsites of the website were accessed or how often and for what period a subsite was watched.
Web-analysis is used primarily for optimization of a website and for cost-benefit analysis of Internet advertising. Such processing of personal data takes place on the basis of Art. 6 para. 1 lit. f GDPR. We, as website operators, have a legitimate interest in analysing user behaviour in order to optimise our website as well as our advertising offer.
We use the addition “_gat._anonymizeIp” for the web analysis via Google Analytics. This is a function to shorten the IP address. Accordingly, your IP address will be anonymized before it is transmitted from a member state or another state member to the Agreement on the European Economic Area to the United States. In exceptional cases, the IP address will only be anonymized in the USA.
Processing in accordance with Article 28 GDPR
The purpose of the Google Analytics component is the analysis of the visitor flows to our website. Google uses the data and information obtained in order to – amongst other things – evaluate the use of our website, to prepare for us online reports which show the activities on our website and to provide further services linked with the use of our website.
Google Analytics sets a cookie on the IT system of the data subject. What cookies are has been explained above. The setting of cookies enables Google to analyze the use of our website. With each call of an individual page of this website, which is operated by the controller for the processing and on which a Google Analytics component has been integrated, the Internet browser on the IT-system of the data subject is automatically caused by the particular Google Analytics component to transmit data to Google for the purpose of online analysis. Within the framework of this technical process, Google obtains knowledge of personal data such as the IP-address of the data subject, which data enables Google to – amongst other things – trace the origin of the visitor and clicks and as a consequence to make possible the issuing of commission invoices.
The cookie is used to store personal data, such as the access time, the location from which an access originated and the frequency of visits to our website by the data subject. With each visit to our website this personal data including the IP-address of the Internet connection used by the data subject is transmitted to the United States of America. This personal data is stored by Google in the U.S.A. In certain circumstances Google passes on this personal data as collected via the technical process to third parties.
We have signed a processing agreement in accordance with Art. 28 GDPR with Google in this regard and comply with the legal requirements of the GDPR as well as the requirements of the German data protection authorities regarding the use of Google Analytics.
As has already been described above, the data subject can prevent the setting of cookies by our website at any time by making an appropriate setting on his/her Internet browser as used and thereby permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a cookie on the IT system of the data subject. In addition, a cookie that has already been set by Google Analytics can be deleted at any time via the Internet browser or another software program.
Objection using browser add-on
Furthermore, the data subject has the opportunity to object to collection of the data relating to use of this website generated by Google Analytics and to the processing of this data by Google and to prevent such collection. For this the data subject must download and install a browser add-on under the link https://tools.google.com/dlpage/gaoptout?hl=en. This browser add-on informs Google Analytics via JavaScript that no personal data and no information on the visiting of websites may be transmitted to Google Analytics. The installation of the browser add-on is evaluated by Google as an objection. If the IT system of the data subject is deleted, formatted or installed anew at a later point in time, then the data subject must carry out the installation of the browser add-on again in order to deactivate Google Analytics. In so far as the browser add-on is deinstalled or deactivated by the data subject or by another person, who can be considered to belong to the area of control of the data subject, then the browser add-on can be installed or activated again.
Further information and the valid and applicable data protection regulations of Google can be called under https://policies.google.com/privacy?hl=en&gl=en as well as under https://marketingplatform.google.com/about/analytics/terms/us/. Google Analytics is explained in more detail under this link: https://marketingplatform.google.com/intl/en/about/analytics/
12. Use and application of other tools
12.1 Data protection regulations for the use and application of Google Maps
By visiting the website, Google receives the information that you have called up the corresponding subpage of our website. In addition, only the technically necessary data is transmitted. This is regardless of whether Google provides a user account that you are logged in with or whether no user account exists. If you are logged in to Google, your information will be directly associated with your account. If you do not wish to be associated with your profile on Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for purposes of advertising, market research and/or demand-oriented design of its website. Such evaluation takes place in particular (even for unlogged-in users) to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.
Our legitimate interest arises from improving and optimizing our offering and providing a function that makes it easier to locate places and our business. The purpose of the storage is the improvement of our offer, the visual and functional optimization of the website as well as the provision of a function, which facilitates the location of places and our business. The data will be deleted as soon as our legitimate interest no longer exists or we are obliged by law or legal orders to delete the data. Right of objection in accordance with clause 12.7
12.2. Information about data processing on our Facebook-Fanpage
12.2.1 Basic principles
We, NOTOS, operate our own Facebook fan page at https://de-de.facebook.com/Notos.Lawyers/. As the operator of this Facebook page, we, together with the provider of the social network Facebook (Facebook Ireland Ltd.), are responsible within the meaning of Art. 4 No. 7 of the General Data Protection Regulation (GDPR). When visiting our Facebook page, personal data of the page visitors are processed by both controllers.
We have concluded an agreement with Facebook on joint data protection controllership (Page Controller Addendum). With this agreement, Facebook acknowledges its joint responsibility with regard to so-called Insights data and assumes essential data protection obligations to inform data subjects, to ensure data security or to report data protection violations. In addition, the agreement stipulates that Facebook is primarily the point of contact for the exercise of data subjects’ rights (Art. 15 – 22 GDPR). As a provider of the social network, Facebook alone has direct access to the required information and can also immediately take any necessary measures and provide information. Should our support nevertheless be necessary, we can be contacted at any time.
12.2.2 Use of Insights and Cookies
In connection with visiting our and other Facebook Fan pages, Facebook also uses cookies and other similar storage technologies. For more information about Facebook’s use of cookies, please see Facebook’s cookie policy.
12.2.3 Comments and messages; participation in competitions
Legal foundationn Storage purpose Storage duration Objection / opportunity for elimination
We operate this Facebook Page to present, interact and communicate with Facebook users, other interested persons and our customers who visit our Facebook Page. The processing of users’ personal data takes place on the basis of our legitimate interests in an optimized company and product presentation (Art. 6 Para. 1 lit. f GDPR) as well as when participating in competitions or answering product application questions on the basis of a (pre-)contractual relationship pursuant to Art. 6 Para. 1 lit. b) GDPR. The processing of the information generated by Insights is intended to enable us, as the operator of the Facebook fan page, to obtain statistics that Facebook generates on the basis of visits to our Facebook fan page. The purpose of this is to control the marketing of our activities. For example, it allows us to learn about the profiles of visitors who value our Facebook Page or use applications on the Page to provide them with more relevant content and develop features that may be of greater interest to them.
To better understand how our Facebook page can help us better achieve our business goals, we also use the information we collect to create demographic and geographic reports that we provide to us. We may use this information to serve targeted, interest-based advertisements without immediately obtaining knowledge of the visitor’s identity. If visitors use Facebook on several end devices, the recording and evaluation can also be carried out across devices if they are registered visitors logged into their own profile.
12.2.4 Transfer of data
It cannot be ruled out that some of the information collected may also be processed outside the European Union by Facebook Inc. based in the USA. Facebook Inc. is certified under the US-EU data protection agreement “Privacy Shield” and thus undertakes to comply with European data protection regulations.
12.2.5 Information on contact possibilities and other rights as a data subject
13.1 Right of access by the data subject
The planned duration of the storage of the personal data relating to you or – if concrete statements on this are not possible – the criteria for the laying down of duration of storage;
The existence of an automated decision-finding process including profiling in accordance with Article 22 Para. 1 and 4 GDPR and – at least in these cases – meaningful information on the logic involved and its scope and the effects strived for of such a processing for the data subject in question.
13.3 Right to restriction of the processing
If the processing of the personal data relating to yourself has been restricted, then this data – apart from the storing of this – may only be processed with your consent or for the assertion, exercising or defending of legal claims or for the protection of the rights of another natural person or legal entity or for reasons relating to an important public interest of the European Union or of a member state.
13.4.1 Deletion obligation
13.4.2 Information to third parties
If the controller has made the personal data relating to you public and if he/she is obliged to delete this data in accordance with Article 17 Para. 1 GDPR, then he/she shall take reasonable measures including ones of a technical nature – whereby account shall be taken of the available technology and the implementation costs – to inform the responsible parties for the data processing which process the personal data that you as data subject have demanded from them the deletion of all links to this personal data or of copies or replicates of these.
13.4.3 Exceptions
13.5 Right to information
You have the opportunity – in connection with the use of services of the information company and regardless of directive 2002/58/EC – to exercise your right of objection with the aid of automated processes in which technical specifications are used.
13.8 Right to withdraw from the declaration of consent under data protection law
13.9 Automated decision-making in individual cases including profiling
You have the right to not subject yourself to a decision based solely on an automated processing process – including profiling – which unfolds a legal effect vis à vis yourself or which impairs you significantly in a similar way. This does not hold good if the decision
13.10 Right to complain at a supervisory authority
Controller: NOTOS Partnerschaft von Rechtsanwälten mbB