data protection
Privacy policy
Information on data processing on the website according to Art. 13, 14 GDPR:
I. CONTACT AND RESPONSIBLE PERSON
Contact:
2. COLLECTION AND STORAGE OF PERSONAL DATA, TYPE AND PURPOSE OF USE
a. Information on data security
b. Legal basis
c. Accessing the website
3. INFORMATION ABOUT SPECIFIC DATA PROCESSING ON THE WEBSITE a. Google Maps: b. Contact form / initial consultation form: c. Use of cookies and comparable technologies for usage analysis and online advertising d. Functions of social networks
4. SHARING DATA
5. RIGHTS AS A DATA SUBJECT
a. Right to information
b. Right to rectification
c. Right to erasure
(Right to be forgotten)
d. Right to restriction of processing
e. Right to data portability
f. Assertion
g. Right to complain
h. Right to withdraw consent
i. Right to object
9. Current status and changes to the privacy policy
Thank you for your interest in my law firm's online presence. Below I will inform you about which data is collected and processed by kp.law&privacy law firm | data protection consulting (hereinafter also: "the law firm") due to the use of this website and for what purposes and on what legal basis this happens. Contact person and person responsible within the meaning of the EU General Data Protection Regulation (GDPR) for the processing of your personal data when you visit this website: kp.law&privacy law firm | data protection consulting Berliner Allee 172 13088 Berlin You can contact the contact details provided at any time with your data protection concerns (keyword: "data protection"). .... The following information applies to data processing on our website in general. If there are exceptions or additions to this information, these are described in detail in the respective sections. In connection with data processing, suitable technical and organizational security measures are implemented to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. We have also implemented SSL encryption (SHA256) on our website to protect your data. Despite regular checks, complete protection against all risks is not possible. The security measures are continuously improved in line with technological developments. We process personal data in accordance with the requirements of the GDPR, depending on the type and purpose of processing as follows: Permission required by the GDPR: Informed consent Art. 6 Para. 1 aPerformance of a contract Art. 6 Para. 1 bImplementation of pre-contractual measures Art. 6 Para. 1 bFulfillment of legal obligations Art. 6 Para. 1 cProtection of vital interests Art. 6 Para. 1 dProtection of our legitimate interests Art. 6 Para. 1 f Our legitimate interest defined in accordance with Article 6 Para. 1 f GDPR is based on the performance of our business activities and on maintaining our operational capability. When you access the website https://www.kp.lawprivacy.com, the access data is collected and automatically transmitted to the website server by the browser used on your device. The access data includes in particular: Date and time of access to the websiteName and URL of the requested fileWebsite from which the file/access was requested (referrer URL)Access status (e.g. file transferred, file not found)The web browser you use and, if applicable, the operating system of your deviceThe IP address of the requesting deviceOnline identifiers (e.g. device identifiers, session IDs). The processing of this access data is necessary to enable you to visit the website and to ensure the long-term functionality and security of the systems. The data mentioned is therefore processed for the following purposes: Ensuring a smooth connection to the website Ensuring comfortable use of our website The long-term functionality of our IT systems (to operate the website and prevent misuse) Evaluation of system security and stability and for other administrative purposes (provision of relevant information for law enforcement authorities in the event of a cyber attack. This information is temporarily stored in a so-called log file. Permanent storage or analysis of the log files is excluded. The legal basis for data processing is Art. 6 Para. 1 S. 1 lit. b and f GDPR. The legitimate interest follows from the purposes for data collection listed above. Under no circumstances will the data collected be used to draw conclusions about you personally. .... If necessary, deviating from or in addition to the general information mentioned above, you will find details of the individual data processing on our website below. The contact page uses the Google Maps map service from Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This is a web mapping service. In order for the Google map material used on the website to be integrated and displayed in your web browser, your web browser must establish a connection to a Google server when you access the contact page. Google thus receives the information that the contact page of our website was accessed from the IP address of your device. The legal basis is Art. 6 Paragraph 1 Clause 1 Letter f of GDPR, based on the legitimate interest in integrating a map service to display the law firm’s location. If you access the Google Maps service on the website while you are logged into your Google profile, Google can also link this event to your Google profile. If you do not want the data to be assigned to your Google profile, you must log out of Google before accessing the contact page. Google stores your data and uses it for the purposes of advertising, market research and personalized display of Google Maps. You can object to Google collecting this data. You can find more information about this in Google's privacy policy and the additional terms of use for Google Maps: http://www.google.com/intl/de/policies/privacy/Opt-Out Link: https://safety.google/privacy/privacy-controls/Processor's cookie policy: https://policies.google.com/technologies/cookies?hl=en The retention period is the period of time during which the collected data is stored for processing. The data is deleted as soon as it is no longer required for the processing purposes. ... A contact form / initial consultation form is made available to you on this website. The data transmitted by the inquirer himself is processed solely for the purpose of establishing contact with you based on the inquiry and answering your request or that of the form sender. The contact form is for general enquiries; the initial consultation form is available to you if you are interested in legal advice and the other services offered on the website and/or are looking for an initial orientation meeting. A change of purpose does not generally take place and is not planned. There is no obligation to transmit your data to the law firm. In this case, however, you cannot use the contact form. The data entered in the contact form is processed on the basis of your consent (Art. 6 Para. 1 lit. a GDPR) and to protect our legitimate interest (Art. 6 Para. 1 lit. f GDPR) in establishing contact to prepare a contractual relationship or to carry out pre-contractual measures (Art. 6 Para. 1 lit. b GDPR), e.g. a consulting agreement. You can revoke your consent at any time. To revoke your consent, an informal message by email to kanzlei@kp-lawprivacy.com is sufficient. The legality of the data processing operations carried out up to the time of revocation remains unaffected by the revocation Data transmitted via the contact form will remain stored by us until you request us to delete it, revoke your consent to storage or there is no longer any need to store the data. Mandatory legal provisions - in particular retention periods - remain unaffected. Your data will not be passed on to third parties. .... Cookies are used on this website. These are small text files that are stored on your computer via your Internet browser (e.g. Google Chrome, Safari, Firefox, Edge). This cookie may contain a so-called cookie ID - a unique identifier consisting of a character string that enables Internet pages and servers to be assigned to the storing browser. At the same time, we receive information via these cookies that enables us to optimize our websites to the needs of our visitors. We sometimes only use cookies for the duration of your stay on the website. All cookies on our websites contain purely technical information, no personal data. Our offers can be used without cookies (although possibly not to their full extent). If you have not adjusted your browser settings, cookies are usually accepted automatically according to the default settings. However, you can deactivate the storage of cookies or set your browser so that it notifies you as soon as cookies are sent. The detailed cookie declaration and further information on how you can change or revoke your declaration of consent can be found here. .... Social plug-ins from social networks are integrated into this website: LinkedIn (LinkedIn Corporation, 2029 Stierlin Ct. Ste. 200 Mountain View, California 94043, USA), privacy policy Xing (XING AG, Dammtorstraße 30, 20354 Hamburg, Germany), privacy policy You can recognise social plug-ins by the respective logos of the individual providers. If you use the functions of the respective social networks on this website, a direct connection will be established with the servers of the respective social networks. The functions of the social networks have been embedded in such a way that the networks only learn of the information that you have accessed the website when you interact with the respective social plug-ins and not when you access the website page. If you are logged into the respective social network with your user name and password when interacting with the respective social plug-ins, the information that you are visiting the law firm's website will be transmitted there, and the respective provider can assign this information to your user account. If you are not a member of the respective social networks or have logged out of the providers before visiting this website, there is still the possibility that at least your IP address will be transmitted and stored there if you interact with the respective social plug-ins. I would like to point out that the content and scope of the data collected directly by the social networks via the social plug-ins and transmitted there, as well as the storage period of up to 250 days and the purposes of use are determined exclusively by the respective providers. The law firm has no influence on the content of the plug-ins and the transmission of information. For more information, please refer to the providers' data protection notices linked above. The legal basis for the integration is Art. 6 Paragraph 1 Clause 1 Letter f of GDPR based on the legitimate interest in providing the social network functions mentioned above. The law firm will be happy to support you in asserting your rights as far as possible and will forward your enquiries to the respective provider. .... Your data will not be passed on to a third country. There is no intention to do so in the future. The data collected by the law firm will generally only be passed on to third parties if: you have given your express consent in accordance with Art. 6 Paragraph 1 Clause 1 Letter a of GDPR, the transfer in accordance with Art. 6 Paragraph 1 Clause 1 Letter f of GDPR is necessary to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding legitimate interest in not passing on your data, the law firm is legally obliged to pass on the data in accordance with Art. 6 Paragraph 1 Clause 1 Letter c of GDPR or this is legally permissible and necessary in accordance with Art. 6 Paragraph 1 Clause 1 Letter b of GDPR for the execution of contractual relationships with you or for the implementation of pre-contractual measures that are carried out at your request. Some of the data processing may also be carried out by service providers who have been commissioned by the law firm to process the data. In addition to the service providers mentioned in this data protection declaration, this may include in particular data centers that store the website and databases, IT service providers who maintain the systems, and consulting companies. If data is passed on to these service providers, they may only use the data to fulfill the contractually agreed tasks. In addition, data may be passed on in connection with official inquiries, court orders and legal proceedings if it is necessary for legal prosecution or enforcement. .... The EU General Data Protection Regulation (GDPR) provides extensive rights for data subjects, which we explain to you below with regard to the processing of your personal data: As a data subject, you have the right at any time to request information about the processing of your personal data by the law firm in accordance with Art. 15 GDPR. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to complain, the origin of your data if it was not collected from us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details; As part of the information provided, the law firm will explain the data processing to you and provide an overview of the data stored about you. If data stored by the law firm is incorrect or no longer up to date, you have the right to have this data corrected or completed immediately in accordance with Art. 16 GDPR. You can also request that your data be deleted in accordance with Art. 17 GDPR, unless processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims. If deletion is not possible in exceptional cases due to legal provisions, the data will be blocked so that it is only available for this legal purpose. You can also have the processing of your data restricted (Art. 18 GDPR), e.g. if you believe that the data stored by the law firm is incorrect or the processing is unlawful. According to Art. 20 GDPR, you also have the right to data portability, i.e. the law firm can send you a digital copy of the personal data you have provided or, if you wish, transmit it to another responsible party. To exercise your rights described here, you can contact the contact details given in section 1 above at any time. Finally, you have the right to complain to the data protection supervisory authority responsible for the law firm in accordance with Art. 77 GDPR. You can assert this right with a supervisory authority in the member state of your residence, your place of work or the place of the alleged infringement. In Berlin, the responsible supervisory authority is: Berlin Commissioner for Data Protection and Freedom of Information, Friedrichstr. 219, 10969 Berlin. According to Art. 7 Para. 3 GDPR, you have the right to revoke your consent to us processing personal data concerning you for one or more specific purposes in accordance with Art. 6 Para. 1 lit. a GDPR at any time. This means that the data processing based on this consent will no longer be continued in the future. The revocation of the consent does not affect the legality of the processing carried out on the basis of the consent up to the time of revocation. Insofar as the law firm processes your data on the basis of legitimate interests in accordance with Art. 6 Paragraph 1 Letter f or Art. 9 Paragraph 2a GDPR, you have the right under Art. 21 GDPR to object to the processing of your data at any time (with effect for the future) and to provide the law firm with reasons arising from your particular situation which, in your opinion, indicate that your interests worthy of protection outweigh those worthy of protection. In exceptional cases, the objection may be ineffective, e.g. if we can demonstrate compelling legitimate interests for the processing which outweigh your interests or if the processing serves to assert, exercise or defend legal claims. If you object to data processing for direct marketing purposes, you have a general right of objection, which is implemented even without giving reasons (Article 21 paragraph 3 GDPR). If you would like to exercise your right of withdrawal or objection, an informal message to the contact details above is sufficient. .... Due to the further development of this website and offers on it or due to changed legal or official requirements, it may become necessary to change this data protection declaration. You can access and print out the current data protection declaration on the website at any time. This data protection declaration is currently valid and is dated April 2024.