Privacy Policy

General information and responsible person

This Privacy Policy clarifies users about the nature, scope and purpose of the collection and use of personal data by:

Brita Schwanke | Transvaalstr. 14 | 13351 Berlin

Phone: +49.30.27 01 28 04 | Fax: +49.30.37 71 93 07

on this website.

The legal foundations of data protection can be found in the General Data Protection Regulation (GDPR) as well as supplementary in the Federal Data Protection Act (FDPA-2018) and the Telemedia Act (TMA).

Data collection on this website

a) Server log files

When this website is accessed www.schwanke-steuerberatung.de, the Internet browser used by the visitor automatically sends data to the server of this website and stores it for a limited time in a log file. Until the automatic deletion, the following data is stored without further input by the visitor:

IP address of the visitor's terminal,
date and time of access by the visitor,
Name and URL of the page accessed by the visitor,
Website from which the visitor arrives at the firm's website (so-called referrer URL),
Browser and operating system of the visitor's terminal and the name of the access provider used by the visitor.

A merge of this data with other data sources will not be done.

The basis for data processing is Article 6 (1) sentence 1 letter f GDPR, which allows the processing of data for the performance of a contract or precontractual measures.

Data processing is solely for the purpose of

building up the connection to the website of the law firm quickly,
to enable a user-friendly application of the Website,
to identify and ensure the safety and stability of the systems and
to facilitate and improve the administration of the Website.

The processing is expressly not for the purpose of gaining knowledge about the person of the visitor of the Website.

b) Request form

If you contact us via the request form, your details will be saved from the request form, including the contact details you provided to process the request and in case of follow-up questions. These data will not be shared without your consent.

The processing of the data entered into the inquiry form is therefore exclusively based on your consent (Article 6 (1) sentence 1 letter a GDPR). You can revoke this consent at any time. An informal message by e-mail to us is sufficient. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.

The information you provide in the inquiry form will remain with us until you ask us to delete it, revoke your consent to storage, or delete the data storage purpose (for example, after your request has been processed). Mandatory statutory provisions - especially retention periods - remain unaffected.

Integration of services and contents of third parties

It may happen that content from third parties, such as maps from Google Maps, RSS feeds or graphics from other websites are included in this online offer. This always presupposes that the providers of this content (hereinafter referred to as "third party provider") perceive the IP address of the users. Because without the IP address, they could not send the content to the browser of each user. The IP address is therefore required for the presentation of this content. We endeavor to use only content whose respective providers use the IP address solely for the delivery of the content. However, we do not have any influence on this if the third parties save the provided IP address e.g. for statistical purposes. As far as we know, we will inform users about it.

Disclosure of data

Personal data will be transmitted to third parties, if

was expressly consented to by the data subject under Article 6 (1) sentence 1 letter a GDPR,
disclosure pursuant to Article 6 (1) sentence 1 letter f GDPR is required to assert, exercise or defend legal claims and there is no reason to believe that the data subject has an overriding legitimate interest in not disclosing their data,
for the transmission of data according to Article 6 (1) sentence 1 letter c GDPR a legal obligation exists, and / or
this is required by Article 6 (1) sentence 1 letter b of the GDPR to fulfill a contractual relationship with the data subject.

In other cases, personal data will not be disclosed to third parties.

Cookies

Cookies are used on the website. These are data packets that are exchanged between the server of the firm's website and the visitor's browser. These are stored by the used devices (PC, notebook, tablet, smartphone, etc.) when visiting the website. Cookies can cause no damage on the devices used. In particular, they contain no viruses or other malicious software. In the cookies, information is stored, each resulting in connection with the specific terminal used. The law firm can by no means immediately gain knowledge of the identity of the visitor to the Website.

Cookies are largely accepted according to the basic settings of the browser. The browser settings can be set up so that cookies are either not accepted on the devices used, or that a special notice is given before a new cookie is created. It should be noted, however, that the deactivation of cookies may result that not all the features of the website can be used in the best possible way.

The use of cookies serves to make the use of the website of the law firm more comfortable. For example, session cookies can be used to track whether the visitor has already visited individual pages on the website. After leaving the website, these session cookies are automatically deleted.

To improve usability, temporary cookies are used. They are stored on the visitor's device for a temporary period. When the website is visited again, it automatically recognizes that the visitor has already visited the site at an earlier point in time and what inputs and settings have been made so that they don´t have to be repeated.

Cookies are also used to analyze website views for statistical purposes and for the purpose of improving the offer. These cookies make it possible to automatically recognize for a new visit that the website has already been accessed by the visitor. An automatic deletion of cookies in this case takes place after a specified time.

The data processed by cookies are justified under Article 6 (1) sentence 1 letter f GDPR for the purposes of safeguarding the legitimate interests of the law firm.

Google web fonts

This site uses so-called web fonts, provided by Google, for the uniform representation of fonts. When you call up a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly.

For this reason, the browser you use need to connect to Google's servers. As a result, Google gets the information that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a consistent and attractive presentation of our offer. This constitutes a legitimate interest within the meaning of Article 6 (1) sentence 1 letter f GDPR.

If your browser does not support web fonts, a default font will be used by your computer.

More information about Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's Privacy Policy: https://www.google.com/policies/privacy/.

Your rights as a concerned person

As far as your personal data are processed during the visit of our website, you have the following rights as "concerned person" within the meaning of the GDPR:

a) Information

You can ask us for information about whether personal data is processed by us. No right of access exists if the granting of the coveted information would violate the duty of confidentiality acc. § 57 StBerG or the information for other reasons, in particular because of a predominant legitimate interest of a third party, must be kept secret. Deviating from this, there may be an obligation to provide the information if your interests outweigh the interests of secrecy, in particular taking into account any imminent damage. The right of access is also excluded if the data is stored only because it may not be deleted due to statutory or statutory retention periods or serve exclusively for data protection or data protection control, if the disclosure would require a disproportionate effort and processing for other purposes is excluded by appropriate technical and organizational measures. If in your case the right to information is not excluded and your personal data are processed by us, you can ask us about the following Information:

purposes of processing,
categories of personal data that we process about you,
recipients or categories of recipients to whom your personal data are disclosed, particularly recipients in third countries,
if possible, the planned duration for which your personal data will be stored or, if this is not possible, the criteria for determining the duration of storage,
the right to rectify or delete or restrict the processing of personal data concerning you or a right to object to such processing,
the existence of a right of appeal to a data protection supervisory authority,
if the personal data have not been collected from you as the data subject, the information available on the origin of the data,
the existence of automated decision-making, including profiling and meaningful information on the logic involved, as well as the scope and intended impact of automated decision-making,
if applicable, in the case of transmission to recipients in third countries, if no decision of the European Commission on the appropriateness of the protection level according to Article 45 (3) GDPR exists, information about which suitable guarantees are given pursuant to Article 46 (2) GDPR for the protection of your personal data.

b) Correction and completion

If you discover that we have inaccurate personal information, you may require us to promptly correct this incorrect information. In case of incomplete personal data concerning you, you can request the completion.

c) Deletion

You have the right to deletion ("right to be forgotten"), unless the processing is necessary for the exercise of the right to freedom of expression, the right to information or to fulfill a legal obligation or to perform a task of public interest and one of the following is true:

The personal data are no longer necessary for the purposes for which they were processed.
The justification for processing was only your consent, which you have revoked.
You have objected to the processing of your personal data that we have made public.
You have objected to the processing of personal data not disclosed by us and there are no legitimate reasons for the processing.
Your personal data has been processed unlawfully.
The deletion of personal data is required to fulfill a legal obligation to which we are subject.

There is no claim for deletion if, in the case of legitimate non-automated data processing, deletion is not possible or only possible with disproportionately high outlay due to the special nature of the storage and your interest in deletion is low. In this case, the deletion is replaced by the restriction of processing.

d) Restriction of processing

You may require us to restrict processing if any of the following reasons applies:

You contradict the accuracy of your personal data. The restriction may be required in this case for the duration that allows us to verify the accuracy of the data.
The processing is unlawful and you require instead of deletion the restriction of the use of your personal data.
We no longer need your personal information for the purposes of processing, but you need it to assert, exercise or defend your rights.
You have submitted an objection regarding Article 21 (1) GDPR. The limitation of processing may be required as long as it is not certain that our legitimate reasons outweigh your reasons.

Restriction of processing means that the personal data will be processed only with your consent or to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of important public interest. Before we lift the restriction, we have a duty to inform you.

e) Data transferability

You have the right of data transferability if the processing is based on your consent (Article 6 (1) sentence 1 letter a or Article 9 (2) letter a GDPR) or on a contract to which you are a party and the processing is done using automated procedures. The right to data portability in this case includes the following rights, provided that this does not affect the rights and freedoms of others: You may require us to provide you with the personal information you provided us with in a structured, common and machine-readable format. You have the right to transfer this data to another person without hindrance on our part. If technically feasible, you may require us to transfer your personal information directly to another person in Charge.

f) Objection

Insofar as the processing is based on Article 6 (1) sentence 1 letter e of the GDPR (exercise of a task in the public interest or in the exercise of official authority) or on Article 6 (1) sentence 1 letter f GDPR (legitimate interest of the responsible person or a third party), you have the right, at any time, to object to the processing of the personal data concerning you for reasons of your particular situation. This also applies to a profiling based on Article 6 (1) sentence 1 letter e or letter f of the GDPR. After exercising your right to object, we will no longer process your personal information unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing serves the purposes of asserting, exercising or defending legal claims.

You may at any time object to the processing of your personal data for direct marketing purposes. This also applies to a profiling associated with such direct mails. After exercising this right of objection, we will no longer use the personal data concerned for direct marketing purposes.

You have the option to file your objection by telephone, by e-mail, by fax or to our postal address listed at the beginning of this privacy policy.

g) Revocation of consent

You have the right to revoke your consent at any time with effect for the future. The revocation of the consent can be communicated by phone, by e-mail, by fax or to our postal address informal. The revocation does not affect the lawfulness of the data processing which has taken place on the basis of the consent until receipt of the revocation. Upon receipt of the revocation, the data processing, which was based solely on your consent, will be discontinued.

h) Complaint

If you believe that the processing of your personal information is unlawful, you may lodge a complaint with a data protection supervisory authority that has jurisdiction over your place of residence or employment or the location of the alleged breach.

Status and update of this Privacy Policy

This Privacy Policy is dated 25^th of May 2018. We reserve the right to update our privacy policy in due course to improve privacy and / or adapt it to changes in regulatory practice or jurisdiction.