Data Protection Declaration
Pursuant to Art 13 of the General Data Protection Regulation (GDPR), the following declaration is prescribed by law and shall provide you with an overview as to which type of data is collected when you are visiting this website, the purpose for which your data is collected and to which is extent it is made available to third parties:
Competent authority as defined by the Data Protection Act
HOECK SCHLÜTER VAAGT Rechtsanwälte Partnerschaft mbB
Lise-Meitner-Straße 15, 24941 Flensburg
Tel: +49 (0)461 - 903 600
Fax: +49 (0)461 - 903 6080
Types of data processed
In connection with the use of our website and the user possibly contacting us in future, we process the following information:
– General data (e.g. title, first name, surname).
– Contact data (e.g. email address, postal address, phone number).
– Content data (e.g. text entry, image data).
– Usage data (e.g. websites visited, interest in contents, access times).
– Meta-/Communication data (e.g. device information, IP-addresses).
What is the purpose of processing your data?
We process personal data, which you provide to us via the internet, exclusively for the following purposes:
– Making available the online offer including its functions and contents
– Replying to contact requests and communicating with users
– Security measures
– Reach measurement
What is the lawful basis for processing your data?
In case of contact requests, data will be processed as a result of your request; pursuant to Art 6.1.1(b) GDPR this is required for the purpose stated for the adequate processing of your request.
In addition, the following shall apply: the lawful basis for obtaining consent is Art 6.1(a) and Art 7 GDPR, the lawful basis for processing to fulfil our legal obligations is Art 6.1(c) GDPR, and the lawful basis for processing to protect our justified interests is Art 6.1(f) GDPR.
When will your data be deleted?
Any personal data collected by us will be deleted as soon as it is no longer required for its intended purpose and provided that no obligation to preserve the collected data exists. If a mandate has been realised, data will always be retained until the legal obligation to preserve records for lawyers (6 years after the calendar year, in which the mandate was terminated) has expired; it is subsequently deleted unless we are, pursuant to Art 6.1.1(c) GDPR, obliged due to retention and documentation obligations in terms of tax and commercial law (from HGB (Commercial Code), StGB (Penal Code) or AO (Tax Code)) to retain data beyond this period. In case data will not be deleted, its processing will be restricted by blocking access to it.
Who will have access to your data?
We will not make your personal data available to third parties for other than the following purposes:
In case of mandate communication via the internet, we might involve service providers, who - like us and our employees - are obliged to keep secret any information, which is subject to privileged communication between clients and lawyers.
As far as it is, pursuant to Art 6.1.1(b) GDPR, required for exercising the mandate with you, your personal data will be made available to third parties. This includes in particular the disclosure to opposing parties and their representatives (in particular their lawyers) as well as to courts and other public authorities for the purpose of correspondence and for asserting and defending your rights. The third party may only use the disclosed data for the purposes named. This does not affect the lawyer-client privilege. As far as data is concerned, which is governed by the lawyer-client privilege, any disclosure to third parties will only be carried out with your approval.
The so-called server log files, which are created by our web space provider to record access, automatically save any data your browser transfers to us on its own initiative. These generally include:
- Browser type/version
- Operating system used
- Referrer URL (previously visited website)
- Hostname of the accessing computer (IP Address)
- Time of server request
- Requested URL
- Result of the request (e.g. “Page not found” or “OK”)
- Amount of data transferred in kilobyte (kb)
As a general rule this data cannot be allocated to certain persons. This data will not be combined with other data sources; in addition all data will be deleted once it has been evaluated statistically.
Based on our legitimate interest (i.e. interest in the analysis, optimisation and economic operation of our online offer as defined by Art 6.1(f) GDPR Google Analytics, we use a web analysis service of Google LLC (“Google”). Google Analytics employs so-called “cookies”, text files that are stored to your computer in order to facilitate an analysis of your use of the site. The information generated by these cookies, such as time, place and frequency of your visits to our site, including your IP address, is transmitted to Google’s location in the US and stored there.
Being certified under the Privacy Shield Agreement, Google guarantees that it will comply with the European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
Google uses this information to analyse the use our site, to compile reports for us on internet activity and to provide other services relating to website and internet use. It is possible to use the data processed to create pseudonym user profiles of the users.
In the case of activating the IP anonymization on this website, your IP address will be previously abbreviated within Member States of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases the full IP address is transferred to a Google server in the USA and is abbreviated there. The IP anonymization is active on this website. Google will use this information to analyse your use of the website, to compile reports on website activities and to provide other services related to website and internet usage to the website operator.
The IP address transmitted by your browser within the context of Google Analytics will not be combined with any other data held by Google. By using appropriate settings you can prevent the storage of cookies in your browser. It is also possible to prevent the collection of data generated by the cookie and related to the usage of the website to Google as well as the processing of these data by Google by downloading and installing the browser plugin available clicking on this link: tools.google.com/dlpage/gaoptout.
The personal data of users will be deleted or anonymised after 14 months.
Further information on data usage by Google, setting and objection options is included in Google’s data protection declaration (https://policies.google.com/technologies/ads) as well as in the settings for the depiction of pop-ups by Google (https://adssettings.google.com/authenticated).
jQuery– Content Delivery Network (CDN)
Based on our legitimate interest in optimising the loading speed of the website in accordance with Art 6.1(f) GDPR, we use on our website jQuery technology of JS Foundation Inc., 1 Letterman Drive, San Francisco, CA 94129 (hereinafter: JS Foundation). By using Query-CDNs, programme libraries are downloaded from servers in the USA, provided they were not already downloaded before. With every call your browser checks whether the libraries have been altered. In doing so, your IP address, as well as the visited website is transferred to the server of the JS Foundation in the USA.
Further information on the data protection of the JS Foundation is available under js.foundation.
What are your rights?
The General Data Protection Regulation provides you with a number of rights, which we have listed hereinafter. You have the right
- Pursuant to Art 7.3 GDPR to withdraw your consent given to us at any time
- Pursuant to Art 15 GDPR to request information of any personal data processed by us
- Pursuant to Art 16 GDPR to request the correction or completion of any incorrect or incomplete data stored with us
- Pursuant to Art 17 GDPR to request the deletion of your personal data stored with us
- Pursuant to Art 18 GDPR to request a restriction in processing your personal data
- Pursuant to Art 20 GDPR to request to obtain your personal data, which you made available to us, in structured, common and machine-readable format or its transfer to another responsible party and
- Pursuant to Art 77 GDPR to complain to a supervisory authority. In general, you will be able to contract the supervisory authority of your usual residence or place of work or our law firm office.
Provided your personal data is processed on the basis of legitimate interests pursuant to Art 6.1.1(f) GDPR, you have the right, pursuant to Art. 21 GDPR to lodge and objection against processing your personal data, provided reasons exist, which result from your special situation. Please you the email address above for all your concerns and requests.