PRIVACY POLICY


1.1 Thank you for your interest in the KANZLEI 441 website. Below you will find information about how your personal data is handled when you visit this website. Personal data here means all information that can be used to identify you personally.


1.2 The data controller responsible for processing personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data. KANZLEI 441 Rechtsanwalts-GmbH (hereinafter “KANZLEI 441”), Nimrodstr. 10, 90441 Nürnberg, Germany, is the controller for the processing of data on this website within the meaning of the General Data Protection Regulation (GDPR). You can contact the firm by telephone on +4991195329030 or by email at datenschutz@kanzlei441.de. If your matter is particularly sensitive, please contact us by post, as email communications may always have security vulnerabilities.


1.3 This website uses SSL or TLS encryption to ensure the security and protection of the transfer of personal data and other confidential content (e.g. when using the contact form or contacting the data controller). You can identify an encrypted connection by the “https://” in the address bar and the padlock symbol in your browser.


2. Information collected while visiting this website


2.1 Log Data

If you use this website solely for informational purposes—that is, in particular, if you do not submit information by other means, for example via the contact form—only the data your browser sends to the website server (so-called “server log files”) is collected. When you visit this website, the following technically necessary data is collected so that we can display the website’s content to you:


  • Website visited
  • Date and time of access
  • Data transferred in bytes
  • Referrer URL
  • Web Browser Used
  • Operating system used
  • IP address used (may be anonymised)


This information is processed pursuant to Article 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of this website. This data is not disclosed or otherwise used. However, we reserve the right to review server log files retrospectively if there are specific indications of unlawful use (e.g. a hacking attack).


2.2 External service providers are used to host this website, as set out below:

 

2.2.1 Domain Hosting

KANZLEI 441 uses STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin, as its domain hosting provider. A domain is the public name of a website under which it can be accessed—for example, in this case, https://kanzlei441.de. This is used to provide you with a secure and fast online service under the country-specific top-level domain of the Federal Republic of Germany, .de. In this context, personal data may be transmitted to STRATO AG. In accordance with Art. 13(1) GDPR, you will find information below on the following points:

 

  • Purpose of the data transfer: Data is transferred to STRATO AG to provide hosting services and ensure the smooth operation of this website.
  • Type of data transmitted: The data transmitted may include personal data collected by our clients and stored on the servers of STRATO AG. This may include sensitive data that you have provided via the contact form.
  • Data retention: STRATO AG stores the data submitted in accordance with applicable legal requirements and the data processing agreements in place with us.
  • Legal basis: The data is transferred on the basis of legitimate interests pursuant to Article 6(1)(f) GDPR, in order to provide you with a functioning website.
  • Data Processing Agreement: The website operator has concluded a data processing agreement with STRATO AG to ensure that your data is processed in accordance with applicable data protection regulations.
  • Right to object: You have the right to object to the collection and processing of data by STRATO AG. Please note, however, that this may affect the functionality of this website.

 

To provide you with a deeper insight into data processing by STRATO AG, please refer to the hosting provider’s privacy policy and terms of use. These are available at https://strato.de/datenschutz/,. Please take the time to read this information to learn about data processing by STRATO AG. Please note that the website operator cannot accept responsibility for the privacy practices of STRATO AG or other third-party providers.

 

2.2.2 Web hosting

This website is also hosted using Amazon Web Services (AWS), a provider of services including web hosting. The service provider is the US company Amazon Web Services, Inc., P.O. Box 81226, Seattle, WA 98108-1226, USA. We use AWS pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate economic interest in making this website available without having to maintain our own servers. Amazon processes your data in the USA, among other places. In 2020, the Court of Justice of the European Union (CJEU) ruled that personal data could no longer be transferred to the USA on the basis of the then-valid so-called Privacy Shield, as it did not ensure an adequate level of protection for data transfers to the USA. This could pose various risks to the lawfulness and security of data processing. To address this issue, on June 4, 2021, the European Commission published the final version of new so-called Standard Contractual Clauses for transfers of personal data to third countries (“SCCs”), on the basis of an implementing decision. These clauses are model provisions drawn up by the European Commission to ensure that your data continues to receive European-level data protection when transferred to and stored in third countries such as the USA. They therefore enable the implementation of the additional organizational and contractual measures required by the CJEU. Amazon uses these Standard Contractual Clauses (SCCs) pursuant to Art. 46(2) and (3) of the General Data Protection Regulation (GDPR) to ensure that your data complies with European data protection requirements even when processed by recipients in the USA or transferred there. Under these clauses, Amazon undertakes to process your relevant data in accordance with European data protection standards, even if the data is stored, processed and managed in the USA. You can view both the implementing decision mentioned above and the Standard Contractual Clauses at the following link: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de. The data processing addendum used by Amazon (AWS GDPR DATA PROCESSING) complies with the above-mentioned Standard Contractual Clauses and can be viewed at the following link: https://d1.awsstatic.com/legal/aws-gdpr/AWS_GDPR_DPA.pdf.For more information about the data processed in connection with the use of Amazon Web Services (AWS) to provide this website, please see the Privacy Policy at https://aws.amazon.com/de/privacy/.

 

3. Cookies

This website uses cookies. These are small files that your browser automatically creates and stores on your device (laptop, tablet, smartphone, etc.) when you visit this website. Cookies do not damage your device and do not contain viruses, Trojans or other malware. Cookies store information related to the specific device being used. However, this does not mean that they can directly identify you. Cookies are used, in part, to make this website easier for you to use. For example, session cookies are used to recognize when you have already visited individual pages on this website. They are automatically deleted when you leave the website. Temporary cookies are also used to improve usability and are stored on your device for a set period. If you return to this website to use its services, it will automatically recognize that you have visited before and remember the information you entered and settings you selected, so you do not have to enter them again. These cookies are automatically deleted after a defined period. The data processed through cookies is necessary for the purposes stated above to protect the legitimate interests of KANZLEI 441 and third parties pursuant to Art. 6(1)(f) GDPR. Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or so that you are always notified before a new cookie is created. Completely disabling cookies may prevent you from using all the features of this website.


 3.1 Google Ads Conversion Tracking Privacy PolicyThis website uses the online advertising program “Google Ads” to promote KANZLEI 441’s services as part of its online marketing, and in this context uses Google Ireland Limited’s (“Google”) conversion tracking. Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, is the service provider (parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).


 Purpose and data processing: If you access this website through an ad placed by Google, a cookie for conversion tracking is stored on your device. These cookies are not used to identify you personally. If you visit certain pages on this website while the cookie is still valid, Google and the website operator can tell that you clicked on the ad and were redirected to this page. The information collected using the conversion cookie is used to compile statistics. This records the total number of users who clicked on an ad and were redirected to a page with a conversion tracking tag. No information that could personally identify users is transmitted. The information collected in this way is used to create conversion statistics (e.g., the number of contact requests or clicks on phone numbers). We do not receive any information that can personally identify you. The following information is collected, among other things:


  • Click ID (GCLID)
  • Web events (e.g., form submission)
  • Ad relevance


 Legal basis:This service is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You may withdraw your consent at any time with future effect via this website’s cookie settings. You can disable the cookie in your browser.


Transfers to third countries: When using Google services, data may be transferred to Google LLC in the USA. Google is certified under the EU-U.S. Data Privacy Framework, which ensures an adequate level of protection for this data transfer within the meaning of the GDPR.


Storage Period & Withdrawal: “Conversion cookies” generally expire after 30 to 90 days. You can prevent tracking by changing your browser settings to disable cookies or by withdrawing your consent using the website’s consent tool. You can also disable personalised advertising in Google Ads Settings. For more information about Google’s use of data, see Google’s Privacy Policy and information about Google Conversion Tracking.


4. Contact

When you contact KANZLEI 441 (for example, via a contact form or email), personal data is collected. The types of data collected when you use the contact form are shown on the form itself. This data is stored and used solely to respond to your inquiry or contact you, and for the related technical administration. The legal basis for processing this data is our legitimate interest in responding to your inquiry pursuant to Art. 6(1)(f) of the General Data Protection Regulation (GDPR). If your inquiry is aimed at entering into a contract, Art. 6(1)(b) GDPR also serves as a legal basis for processing. Your data will be deleted once your inquiry has been fully handled. This is the case when the circumstances indicate that the matter has been conclusively resolved and there are no statutory retention obligations.


5. Tools and Other

5.1 OpenStreetMap

This website uses an online mapping service provided by the OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, UK. The online mapping service is a tool for visually displaying geographic information in the form of interactive maps. Using this service displays the law firm’s location and facilitates geolocation. When you visit subpages that contain the provider’s map, information about your use of our website (e.g. your IP address) is transmitted to the provider’s servers and stored there. This data is collected, stored and analysed pursuant to Art. 6(1)(f) GDPR, on the basis of our legitimate interest in optimally designing the website. If you do not consent to the future transmission of your data to the provider, you can disable the provider’s online mapping service completely by turning off JavaScript in your browser. In this case, the online mapping service can no longer be used on this website. Please note that without the online mapping service, the map can no longer be displayed on this website. Where required by law, your consent to the processing of your data described above has been obtained pursuant to Art. 6(1)(a) GDPR. You have the right to withdraw your consent at any time, with effect for the future. To withdraw your consent, please follow the objection procedure described below. If data is transferred to the provider’s location, an adequate level of data protection is ensured by an adequacy decision of the European Commission.


5.2 Google Analytics

This website may also use the “Google Analytics” tool to collect data about how you use the website. For example, Google Analytics records how often the website is visited and which pages are viewed during a visit. Google Analytics data is used only to improve this website and its services. Google Analytics records the IP address assigned to you on the day you visit the website, but not your name or other identifying information. KANZLEI 441 does not combine the Google Analytics data collected with personal data. Google’s ability to use and share data collected by Google Analytics about your visits to this website is subject to the Google Analytics Terms of Service and Google’s Privacy Policy. You can find the Google Analytics Terms of Service at https://google.com/analytics/terms/de.html. For full details, please visit https://google.com/intl/de/policies/.


5.3 anwalt.de

This website uses interactive elements (so-called "widgets) from anwalt.de services AG, Rollnerstr. 8, D-90408 Nürnberg (hereinafter: "anwalt.de") on this website. The "Reviews", "Legal Tips" and "Law Firm Profile" widgets are used. The widgets are embedded in the website footer. When you visit the website, your browser establishes a direct connection to anwalt.de’s servers. Anwalt.de uses the interactive element to send the displayed content to your browser. By establishing this connection, anwalt.de is informed that your browser has accessed this website, regardless of whether you are registered or logged in with anwalt.de. The information transmitted also includes your IP address, which your browser sends to their servers. Anwalt.de stores your IP address. If you are registered and logged in with anwalt.de, anwalt.de will/may be able to associate your visit to this website with your user profile. If you interact with the interactive elements (e.g. click on "Submit a review" or "All legal tips"), this information is transmitted directly to anwalt.de’s servers and stored there. Visitor numbers are displayed on anwalt.de. anwalt.de may use this information for advertising, market research and to optimise its website. If you do not agree to this, log out of anwalt.de before visiting our website. You can find further information about the collection and processing of your data in anwalt.de’s privacy notice. You have the right to withdraw your consent at any time with future effect if a particular situation arises within the meaning of Art. 21 GDPR. To exercise your right to object, please follow the procedure described below.


5.4 juraforum.de

This website uses interactive elements (so-called "widgets) from Einbock GmbH, Prinzenstraße 1, 30159 Hannover (hereinafter: "juraforum.de") on this website. The widgets are embedded in the website footer. When you access the page, your browser establishes a direct connection to the juraforum.de servers. Juraforum.de sends the displayed content to your browser through the interactive element. When the connection is established, juraforum.de is informed that your browser has accessed this website, regardless of whether you are registered or logged in at juraforum.de. The information transmitted also includes your IP address, which your browser sends to their servers. Juraforum.de stores your IP address. If you are registered and logged in at juraforum.de, juraforum.de may associate your visit to this website with your user profile. If you interact with the interactive elements by clicking on them, this information is transmitted directly to juraforum.de’s servers and stored there. Visit statistics are displayed at juraforum.de. Juraforum.de may use this information for advertising, market research and to optimize its website. If you do not agree, log out of juraforum.de before visiting our website. For more information about the collection and processing of your data, please see the Privacy Policy of juraforum.de.You have the right to withdraw your consent for the future at any time if there is a particular situation within the meaning of Art. 21 GDPR. To exercise your right to object, please follow the instructions below.


5.5 Social Media Profiles

5.5.1 Facebook

KANZLEI 441 uses the technical platform and services of Meta Platforms Ireland Limited, 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland for the information service provided at https://www.facebook.com/KANZLEI441. Please note that you use this Facebook page and its features at your own risk. This applies in particular to interactive features (e.g. commenting, sharing and rating). Alternatively, you can also access the information provided on this page via our website at https://www.kanzlei441.de. When you visit the Facebook page, Facebook collects, among other things, your IP address and other information stored on your PC in the form of cookies. This information is used to provide KANZLEI 441, as the operator of the Facebook page, with statistical information about its use. Further information is available from Facebook at the following link: View Page Insights on Facebook | Facebook Help Centre. The data collected about you in this context is processed by Facebook Ltd. and may be transferred to countries outside the European Union. Facebook’s data policy describes in general terms what information Facebook receives and how it is used. It also contains information on how to contact Facebook and manage your ad settings. The data policy is available at: http://de-de.facebook.com/about/privacy Facebook’s full data policy is available here: https://de-de.facebook.com/full_data_use_policy Facebook has not clearly and conclusively stated how it uses data from visits to Facebook pages for its own purposes, to what extent activity on a Facebook page is attributed to individual users, how long Facebook stores this data, or whether data from a visit to a Facebook page is shared with third parties. When you access a Facebook page, the IP address assigned to your device is sent to Facebook. According to Facebook, this IP address is anonymised (for “German” IP addresses). Facebook also stores information about its users’ devices (e.g. as part of the “login notifications” feature); this may enable Facebook to associate IP addresses with individual users. If you are currently logged in to Facebook, a cookie containing your Facebook ID is stored on your device. This allows Facebook to see that you visited this page and how you used it. This also applies to all other Facebook pages. Facebook buttons embedded in websites allow Facebook to record your visits to those websites and associate them with your Facebook profile. This data may be used to tailor content or advertising to you. To prevent this, you should log out of Facebook or disable the “stay logged in” feature, delete the cookies stored on your device, and close and restart your browser. This will delete Facebook information that could directly identify you. You can then use our Facebook page without revealing your Facebook ID. If you access interactive features on the page (Like, comment, share, messages, etc.), a Facebook login screen will appear. If you log in, Facebook will once again be able to identify you as a specific user. Information on how to manage or delete information Facebook holds about you is available on the following Facebook support pages: https://de-de.facebook.com/about/privacy# KANZLEI 441, as the provider of this information service, does not collect or process any other data from your use of this service. The current version of this privacy policy is available under “Privacy” on the Facebook page at https://www.facebook.com/KANZLEI441/about_privacy_and_legal_info. For more information about Facebook and other social networks, and how to protect your data, visit www.youngdata.de 


5.5.2 instagram

For the information service provided at  https://www.instagram.com/kanzlei_441, KANZLEI 441 uses the technical platform and services of Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Please note that you use this Instagram page and its features at your own risk. This applies in particular to interactive features (e.g., commenting, sharing, rating). Alternatively, you can access the information provided on this page on the website at  https://www.kanzlei441.de. When you visit the Instagram page, Instagram collects, among other things, your IP address and other information stored on your PC in the form of cookies. This information is used to provide KANZLEI 441, as the operator of the Instagram pages, with statistical information about the use of the Instagram page. Instagram provides further information on this at the following link:  http://help.instagram.com/519522125107875. The data collected about you in this context is processed by Meta Platforms Ireland Limited and may be transferred to countries outside the European Union. Instagram describes in general terms what information it receives and how it is used in its data policy. You will also find information there about how to contact Instagram and the settings available for ads. The data policy is available at the following link:  http://help.instagram.com/519522125107875?__hstc=22439548.9b6a97935f7f052b55ed8f2b7d4a8c57.1609712200069.1626377385803.1626471019995.5&__hssc=22439548.3.1626471019995&__hsfp=2455428842. Instagram’s full data policy can be found here:  https://help.instagram.com/519522125107875. Instagram has not clearly and conclusively stated, and we do not know, how it uses data from visits to Instagram pages for its own purposes, to what extent activity on an Instagram page is attributed to individual users, how long Instagram stores this data, or whether data from a visit to an Instagram page is shared with third parties. When you access an Instagram page, the IP address assigned to your device is transmitted to Instagram. According to Instagram, this IP address is anonymized (for “German” IP addresses). Instagram also stores information about its users’ devices (e.g., as part of the “login notification” feature); Instagram may therefore be able to link IP addresses to individual users. If you are currently logged in to Instagram, your device contains a cookie with your Instagram ID. This enables Instagram to track that you have visited this page and how you used it. This also applies to all other Instagram pages. Instagram buttons embedded in websites allow Instagram to record your visits to those websites and associate them with your Instagram profile. This data can be used to tailor content or advertising to you. If you wish to prevent this, you should log out of Instagram or disable the “stay logged in” feature, delete the cookies stored on your device, and close and restart your browser. This will delete Instagram information that could directly identify you. You can then use our Instagram page without revealing your Instagram ID. If you access interactive features on the page (Like, Comment, Share, Messages, etc.), an Instagram login screen will appear. After logging in, Instagram will again be able to identify you as a specific user. Information on how to manage or delete information Instagram holds about you can be found on the following Instagram support pages:  https://help.instagram.com/519522125107875. As the provider of the information service, KANZLEI 441 does not collect or process any additional data from your use of this service. Further information about Instagram and other social networks, and how you can protect your data, can also be found at  www.youngdata.de


5.6 Google reCAPTCHA

 To protect our website and the services provided through it, we use the “Google reCAPTCHA” service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). reCAPTCHA checks whether an entry is made by a person or through abusive automated, machine-based processing. To do so, reCAPTCHA analyses the website visitor’s behaviour using various indicators (e.g. IP address, time spent on the website or mouse movements). This analysis begins automatically as soon as the user accesses the website. The data collected during the analysis is transmitted to Google. Processing is based onArt. 6(1)(f) GDPR. The website operator has a legitimate interest in protecting its website from abusive automated use and spam. For more information about data processing by Google reCAPTCHA, please see Google’sPrivacy Policy andTerms of Service.


6. Data Subject Rights

6.1 Under applicable data protection law, you have the following data subject rights (rights of access and intervention) against the controller in relation to the processing of your personal data. The legal basis for each right is stated below:

 

  • Right of access under Art. 15 GDPR;
  • Right to rectification under Art. 16 GDPR;
  • Right to erasure pursuant to Art. 17 GDPR;
  • Right to restriction of processing pursuant to Art. 18 GDPR;
  • Right to be informed pursuant to Art. 19 GDPR;
  • Right to data portability under Art. 20 GDPR;
  • Right to withdraw consent pursuant to Art. 7(3) GDPR;
  • Right to lodge a complaint under Art. 77 GDPR.


6.2 RIGHT TO OBJECT

IF KANZLEI 441 PROCESSES YOUR PERSONAL DATA ON THE BASIS OF ITS OVERRIDING LEGITIMATE INTEREST AS PART OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING FOR THE FUTURE ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION. IF YOU EXERCISE YOUR RIGHT TO OBJECT, THE PROCESSING OF THE DATA CONCERNED WILL CEASE. HOWEVER, FURTHER PROCESSING MAY CONTINUE IF COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING CAN BE DEMONSTRATED THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES TO ESTABLISH, EXERCISE OR DEFEND LEGAL CLAIMS. IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING. YOU MAY EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE. IF YOU EXERCISE YOUR RIGHT TO OBJECT, THE PROCESSING OF THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES WILL CEASE.


7. Retention Period for Personal Data

How long personal information is retained depends on the applicable legal basis, the purpose of processing and, where applicable, statutory retention requirements (e.g., retention periods under commercial and tax law). If personal data is processed on the basis of your explicit consent pursuant to Art. 6(1)(a) GDPR, the data concerned will be stored until you withdraw your consent. If statutory retention periods apply to data processed in connection with contractual obligations under Art. 6(1)(b) GDPR, that data will generally be deleted once the retention periods have expired, provided it is no longer required for performance or formation of the contract and/or there is no legitimate interest in retaining it. If personal data is processed on the basis of Art. 6(1)(f) GDPR, it will be stored until you exercise your right to object under Art. 21(1) GDPR, unless compelling legitimate grounds for the processing can be demonstrated that override your interests, rights and freedoms, or the processing is for the establishment, exercise or defense of legal claims. If personal data is processed for direct marketing purposes on the basis of Art. 6(1)(f) GDPR, it will be stored until you exercise your right to object under Art. 21(2) GDPR. Unless otherwise stated in the other sections of this notice regarding specific processing activities, stored personal data will otherwise be deleted when it is no longer required for the purposes for which it was collected or otherwise processed.


8. By using the website, you consent to the use of data described above. Changes to the website or legal requirements may make it necessary to revise this privacy policy from time to time. This means that this privacy policy may be amended at any time.