General information on data protection at GLNS

Subject of this data protection information

The subject of this data protection information is to explain the processing of personal data in connection with the use and access of our website "glns.de."

Responsibility and data protection officer

The law firm GLNS Steuerberater Partnerschaft mit beschränkter Berufshaftung (hereinafter: GLNS) is responsible for processing personal data. Please refer to the legal notice for our address and contact details. If you have any questions about data protection, you can contact us at any time by email at datenschutz@glns.de. You can also reach our data protection officer at this address.

Location of data processing

We store all personal data collected or processed via the website on our own web servers. Insofar as we use the infrastructure of external service providers, we have ensured that this is always done on the basis of the necessary agreements on order processing.

Changes to the data protection information

In the context of the further development of data protection law and technological or organizational changes, our data protection information is regularly reviewed for the need for adjustments or additions and updated as necessary.

General data processing when visiting our website

Log files

When you visit our website, a log file (known as a server log file) is stored on our web server, which includes the IP address of the website visitor. The data within these server log files is required, among other things, to display the content of our web pages correctly and to ensure the security of our IT infrastructure (Art. 6 (1) (f) GDPR). The log files are deleted regularly and automatically by our host. If you would like further information on this, please feel free to contact us at any time using the contact details provided above.

Tools and cookies

Apart from log files, no cookies are currently used when you visit our websites.

Matomo - Piwik Pro

We use the open source software tool Matomo (formerly PIWIK) on our website to better understand user behavior and to optimize our offering based on the information collected. We use a version of the software hosted by Piwik PRO Sp. z o.o., ul. Św. Antoniego 2/4, 50-073 Wrocław, Poland. It is always ensured that these tools are only used or process data if you have given your prior consent (Art. 6 (1) (a) GDPR; § 25 (1) TTDSG). If these providers have access to personal data or the tools are hosted by these providers, the necessary data processing agreements have been concluded. If you have any questions about the providers or require further information on any storage and deletion processes, please feel free to contact us at any time using the contact details provided above.

Cloudflare (content delivery network)

Our website uses functions from CloudFlare (CloudFlare, Inc. 665 3rd St. #200, San Francisco, CA 94107, USA). CloudFlare acts as a content delivery network (CDN) on our website and thus helps to provide content from our online offering, in particular files such as graphics or scripts, more quickly with the help of regionally or internationally distributed servers. Technically, the transfer of information between your browser and our website is routed via the CloudFlare network. CloudFlare is thus also able to analyze data traffic between users and our websites in order, for example, to detect and ward off attacks on our services. When using this tool, it is possible that personal data (e.g., IP address) may be transferred to third countries outside the European Economic Area, in particular the USA. Data is transferred to the USA in accordance with Art. 45 (1) GDPR on the basis of the adequacy decision of the European Commission. The US company mentioned here and/or its US subcontractors are certified under the EU-U.S. Data Privacy Framework (EU-U.S. DPF). The legal basis for the associated data processing is Art. 6 (1) lit. f) GDPR; § 25 (2) No. 2 TTDSG. For more information about CloudFlare, please visit: https://www.cloudflare.com/privacypolicy/.

Data protection on this website: We collect and process your data on this website in order to better understand how it is used. You can opt out at any time.

Opting out of data collection and use

Other special data processing

Contact form

We offer a contact form on our website to answer questions from interested parties and to communicate with them. We only process the inquiries and information sent to us in this context to process your inquiry and to contact you (Art. 6 (1) lit. f) GDPR). We store your data for no longer than the duration of any resulting client relationship with you (Art. 6 (1) (b) GDPR). If no such client relationship arises as a result of the inquiry, we will delete your data no later than twelve (12) months after the last contact with you. The right to object to processing in advance or to request deletion remains unaffected, of course.

Newsletter

If you subscribe to our email newsletter, we only process your email address. The data will be used exclusively to send you information about our law firm and/or current court decisions at regular intervals. Data processing is based on your consent (Art. 6 (1) (a) GDPR). You can revoke this consent at any time by unsubscribing from the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.

Google Maps

We use Google Maps (API) on our website. Google Maps is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Maps is a web service for displaying interactive (land) maps to visually represent geographical information. When you visit a page that incorporates Google Maps, your browser loads the web fonts required to display Google Maps into your browser cache. For this purpose, the browser you are using also establishes a connection to Google's servers. This allows Google to know that our website has been accessed via your IP address. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right. These processing operations are carried out exclusively with your express consent in accordance with Art. 6 (1) (a) GDPR. You can view the Google Maps privacy policy at: ("Google Privacy Policy"): https://www.google.de/intl/de/policies/privacy/.

Clients

We will provide you with separate information about the type and scope of data processing in the context of initiating, supporting and managing (potential) clients.

Applications

You will receive information about the type and scope of data processing in the event that you send us your application documents via the email address provided immediately after receipt of your application.

Social media

We operate accounts on online platforms and social networks in order to interact with potential or existing customers, exchange information with interested parties and users, or advertise offers and services. We operate our accounts in so-called joint (data protection) responsibility with the providers. We process data that you share or publish directly via online platforms and networks (e.g., via comment and chat functions) as the responsible party in order to interact with you or exchange information with you. As part of this interaction, we may also receive statistical data from the platform operators on the use of our "channels and fan pages." This includes, for example, information about interactions, likes, comments, or summarized information and statistics (e.g., IP address; origin of followers) that help us learn about interactions with our site. The legal basis for data processing in our area of responsibility is Art. 6 (1) (f) GDPR.

However, the providers also process data on their own responsibility. We have no influence on data that is processed by the provider on its own responsibility in accordance with its own terms of use and data protection conditions. We would like to point out that when you visit the aforementioned providers, further data (e.g., your usage and "surfing behavior") may be collected and, if necessary, transmitted to the provider. Please also note that in the event of interaction via the aforementioned media, data may also be processed outside the European Union. Furthermore, user data is generally processed for market research and advertising purposes. For example, usage profiles can be created from the usage behavior and resulting interests of users. The usage profiles can in turn be used, for example, to place advertisements within and outside the platforms that are presumed to correspond to the interests of the users. You can find more detailed information on this in the data protection information of the respective providers. If we have personal data about you in connection with the use of online platforms and networks, please direct your concerns to us. If you wish to assert further rights against a specific provider, please contact the respective provider.

Your rights

You can assert your rights as a data subject with regard to your processed personal data at any time by contacting us using the contact details provided above. In particular, you have the following rights:

Art. 15 GDPR: Right to information about your data processed by us

This includes, in particular, information about the purposes of processing, the category of data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, deletion, restriction of processing or objection, the existence of a right of appeal, the origin of your data, if it was not collected by us, and the existence of automated decision-making, including profiling and, if applicable, meaningful information about its details.

Art. 16 GDPR: Right to rectification of inaccurate data or completion of your data stored by us.

The right to rectification means, in particular, that you have the right to request that we immediately rectify inaccurate personal data concerning you and complete incomplete personal data.

Art. 17 GDPR: Right to erasure of your data stored by us

The right to erasure means that you have the right to request that we erase personal data concerning you without undue delay, and we are obliged to erase personal data without undue delay. This may be the case, for example, if personal data is no longer necessary for the purposes for which it was collected or otherwise processed.

Art. 18 GDPR: Right to restriction of processing

The right to restriction may become relevant if you dispute the accuracy of the personal data.

Art. 20 GDPR: Right to disclosure of your data ("data portability").

The right to disclosure means that you have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format, and you have the right to transmit this data to another controller without hindrance from us.

Art. 21 GDPR: Right to object to processing, provided that the processing is based on Art. 6 (1) (e) or (f) GDPR.

As a data subject, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Article 6 (1) (e) or (f) GDPR; this also applies to profiling based on these provisions. If personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing purposes; this also applies to profiling insofar as it is related to such direct marketing.

Art. 77 GDPR: Right to lodge a complaint with a supervisory authority.