PRIVACY POLICY


1.1 Thank you for your interest in the KANZLEI 441 website. Below you will find information about how your personal data is handled when you visit this website. Personal data means any information that can be used to identify you personally.


1.2 The data controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data. For the purposes of the General Data Protection Regulation (GDPR), KANZLEI 441 Rechtsanwalts-GmbH (hereinafter “KANZLEI 441”), Nimrodstr. 10, 90441 Nürnberg, Germany, is the data controller for the processing of data on this website. You can contact the firm by telephone on +4991195329030 or by email at datenschutz@kanzlei441.de. If your matter is particularly sensitive, please contact us by post, as email communication may always involve security vulnerabilities.


1.3 This website uses SSL/TLS encryption to ensure the security and protection of the transfer of personal data and other confidential content (e.g. when using the contact form or contacting the data controller). You can identify an encrypted connection by the “https://” prefix and the padlock symbol in your browser’s address bar.


2. Collecting information when you visit this website


2.1 Log Data

If you use this website for information purposes only—that is, if you do not submit information by other means, for example via the contact form—only the data your internet browser sends to the website server (so-called “server log files”) is collected. When you visit this website, the following data required for technical purposes is collected so that the website content can be displayed to you:


  • Website visited
  • Date and time of access
  • Data transferred (bytes)
  • Referrer URL
  • Browser used
  • Operating System Used
  • IP address used (possibly anonymised)


This information is processed pursuant to Article 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of this website. This data is not shared or otherwise used. However, we reserve the right to review the server log files retrospectively if there are specific indications of unlawful use (e.g. a hacking attack).


2.2 External service providers are used to host this website, as outlined below:

 

2.2.1 Domain Hosting

KANZLEI 441 uses STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin, as its domain hosting provider. A domain is the public name of a website under which it can be accessed—for example, in this case, https://kanzlei441.de. This is used to provide you with a secure and fast online service with the country-specific top-level domain of the Federal Republic of Germany, .de. Personal data may be transferred to STRATO AG in this context. In accordance with Art. 13(1) GDPR, the following information is provided:

 

  • Purpose of data transmission: Data is transmitted to STRATO AG to provide hosting services and ensure this website operates smoothly.
  • Types of data transmitted: The data transmitted may include personal data collected by our clients and stored on STRATO AG’s servers. This may include sensitive data that you have provided via the contact form.
  • Retention period: STRATO AG stores the data transmitted in accordance with applicable legal requirements and the data processing agreements concluded with us.
  • Legal basis: The data is transferred on the basis of legitimate interests pursuant to Article 6(1)(f) GDPR, in order to provide you with a functioning website.
  • Data processing agreement: The website operator has entered into a data processing agreement with STRATO AG to ensure that your data is processed in accordance with applicable data protection regulations.
  • Right to object: You have the right to object to the collection and processing of your data by STRATO AG. Please note, however, that this may affect the functionality of this website.

 

To give you a more detailed insight into how STRATO AG processes data, please refer to the hosting provider’s privacy policy and terms of use. These are available at https://strato.de/datenschutz/,. Please take the time to read this information to learn about how STRATO AG processes data. Please note that the website operator cannot be held responsible for the data protection practices of STRATO AG or other third-party providers.

 

2.2.2 Web Hosting

This website is also hosted using Amazon Web Services (AWS), a provider of, among other things, web hosting services. The service provider in this case is the US company Amazon Web Services, Inc., P.O. Box 81226, Seattle, WA 98108-1226, USA. We use AWS pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate economic interest in making this website available without having to maintain our own servers. Amazon processes your data, among other places, in the USA. In 2020, the European Court of Justice (ECJ) ruled that personal data could no longer be transferred to the USA under the then-current so-called Privacy Shield, as it did not ensure an adequate level of protection for data transfers to the USA, potentially creating risks to the lawfulness and security of data processing. To address this issue, on 4 June 2021 the European Commission published the final version of new so-called Standard Contractual Clauses for transfers of personal data to third countries (“SCCs”), based on an implementing decision. These clauses are model provisions drawn up by the European Commission to ensure that your data continues to receive the level of data protection afforded in Europe, even when transferred to and stored in third countries such as the USA. These data protection clauses therefore enable the implementation of the additional organizational and contractual measures required by the ECJ. Amazon uses these Standard Contractual Clauses (SCCs) pursuant to Art. 46(2) and (3) of the General Data Protection Regulation (GDPR) to ensure that your data complies with European data protection requirements even when it is held by recipients in the USA or transferred there. Under these clauses, Amazon undertakes to process your relevant data in accordance with European data protection standards, even if the data is stored, processed and managed in the USA. You can view both the implementing decision mentioned above and the Standard Contractual Clauses at the following link: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de. The data processing addendum used by Amazon (AWS GDPR DATA PROCESSING) complies with the above-mentioned Standard Contractual Clauses and can be viewed at the following link: https://d1.awsstatic.com/legal/aws-gdpr/AWS_GDPR_DPA.pdf.For more information about data processed in connection with the use of Amazon Web Services (AWS) to provide this website, please see the Privacy Policy at https://aws.amazon.com/de/privacy/.

 

3. Cookies

This website uses cookies. These are small files that your browser automatically creates and stores on your device (laptop, tablet, smartphone, etc.) when you visit this website. Cookies do not harm your device and do not contain viruses, Trojans or other malware. Cookies store information related to the specific device being used. However, this does not mean that they can be used to identify you directly. Cookies are used, among other things, to make this website more convenient for you to use. For example, session cookies are used to recognize when you have already visited individual pages of this website. These are automatically deleted when you leave the website. Temporary cookies are also used to improve usability and are stored on your device for a specified period. If you revisit this website to use its services, it will automatically recognize that you have been here before and remember the information you entered and the settings you selected, so you do not have to enter them again. These cookies are automatically deleted after a defined period. The data processed through cookies is necessary for the purposes described above and to protect the legitimate interests of KANZLEI 441 and third parties pursuant to Art. 6(1)(f) GDPR. Most browsers accept cookies automatically. However, you can configure your browser to prevent cookies from being stored on your computer or to display a notification each time a new cookie is created. Completely disabling cookies may prevent you from using all the features of this website.


3.1 Google Ads conversion tracking privacy noticeThis website uses the “Google Ads” online advertising program as part of its online marketing to promote the services of KANZLEI 441, and in this context uses Google Ireland Limited’s (“Google”) conversion tracking. Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, is the service provider (parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).


Purpose & data processing:If you access this website via an ad served by Google, a conversion tracking cookie is stored on your device. These cookies are not used to identify you personally. If you visit certain pages on this website while the cookie is still valid, Google and the website operator can tell that you clicked on the ad and were redirected to this page. The information collected through the conversion cookie is used to compile statistics. This records the total number of users who clicked on an ad and were redirected to a page with a conversion tracking tag. No information that could personally identify users is transmitted. The information collected is used to compile conversion statistics (e.g. the number of contact enquiries or clicks on phone numbers). We do not receive information that could identify you personally. The following information is collected, among other things:


  • Click ID (GCLID)
  • Website events (e.g. submitting a form)
  • Ad relevance


Legal basis: This service is used based on your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. You may withdraw your consent at any time, with effect for the future, via this website’s cookie settings. You can disable the cookie in your browser.


Transfers to third countries: When using Google services, data may be transferred to Google LLC in the USA. Google is certified under the EU-U.S. Data Privacy Framework, ensuring an adequate level of protection for this data transfer under the GDPR.


Retention period & withdrawal: “Conversion cookies” generally expire after 30 to 90 days. You can opt out of tracking by changing your browser settings to disable cookies or withdrawing your consent in the website’s consent tool. You can also disable personalised advertising in Google’s ad settings. Further information about Google’s use of data can be found in Google’s Privacy Policy and the Google Ads conversion tracking information.


4. Contact

When you contact KANZLEI 441 (for example, via a contact form or email), personal data is collected. The types of data collected when you use the contact form are shown on the form itself. This data is stored and used solely to respond to your enquiry, contact you and administer the process technically. The legal basis for processing this data is our legitimate interest in responding to your enquiry under Art. 6(1)(f) of the General Data Protection Regulation (GDPR). If your enquiry concerns entering into a contract, Art. 6(1)(b) GDPR also provides a legal basis for processing. Your data will be deleted once your enquiry has been fully dealt with. This is the case when the circumstances indicate that the matter has been conclusively resolved and no statutory retention obligations apply.


5. Tools and Other Services

5.1 OpenStreetMap

This website uses an online mapping service provided by the OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, UK. The online mapping service is a tool for visually displaying geographical information in the form of interactive maps. Using this service displays the location of the law firm and facilitates geolocation. When you visit subpages that include the provider’s map, information about your use of our website (e.g. your IP address) is transmitted to and stored on the provider’s servers. This data is collected, stored and analysed in accordance with Art. 6(1)(f) GDPR, on the basis of a legitimate interest in the optimal design of the website. If you do not consent to the future transfer of your data to the provider, you can completely disable the provider’s online mapping service by turning off JavaScript in your browser. In this case, the online mapping service can no longer be used on this website. Please note that without the online mapping service, the map can no longer be displayed on this website either. Where required by law, your consent to the processing of your data as described above has been obtained in accordance with Art. 6(1)(a) GDPR. You have the right to withdraw your consent at any time with effect for the future. To withdraw your consent, please follow the instructions for objecting set out below. If data is transferred to the provider’s location, an adequate level of data protection is ensured by an adequacy decision of the European Commission.


5.2 Google Analytics

This website may also use the “Google Analytics” tool to collect data about how you use the website. For example, Google Analytics records how often the website is visited and which pages are viewed during a visit. Google Analytics data is used solely to improve this website and its services. Google Analytics collects the IP address assigned to you on the day you visit the website, but not your name or other identifying information. KANZLEI 441 does not combine the Google Analytics data collected with personal data. Google’s ability to use and share data collected by Google Analytics about your visits to this website is governed by the Google Analytics Terms of Service and Google’s Privacy Policy. The Google Analytics Terms of Service are available at https://google.com/analytics/terms/de.html. For full details, visit https://google.com/intl/de/policies/.


5.3 anwalt.de

This website uses interactive elements (so-called "widgets) on this website from anwalt.de services AG, Rollnerstr. 8, D-90408 Nürnberg (hereinafter: "anwalt.de"). The "Reviews", "Legal tips" and "Law firm profile" widgets are used. The widgets are embedded in the website footer. When you visit the site, your browser establishes a direct connection to anwalt.de’s servers. Anwalt.de sends the displayed content to your browser via the interactive element. By establishing this connection, anwalt.de is informed that your browser has accessed this website, regardless of whether you are registered with or logged in to anwalt.de. The information transmitted also includes your IP address, which your browser sends to their servers. Anwalt.de stores your IP address. If you are registered with and logged in to anwalt.de, anwalt.de may associate your visit to this website with your user profile. If you interact with the interactive elements (e.g. click "Submit a review" or "All legal tips"), this information is sent directly to anwalt.de’s servers and stored there. Visitor numbers are displayed on anwalt.de. anwalt.de may use this information for advertising, market research and to optimise its website. If you do not agree to this, log out of anwalt.de before visiting our website. You can find further information about the collection and processing of your data in anwalt.de’s privacy policy. You have the right to withdraw your consent at any time with future effect if a particular situation within the meaning of Art. 21 GDPR applies. To withdraw your consent, please follow the objection procedure described below.


5.4 juraforum.de

This website uses interactive elements (so-called "widgets) from Einbock GmbH, Prinzenstraße 1, 30159 Hannover (hereinafter: "juraforum.de") on this website. The widgets are embedded in the website footer. When you access the page, your browser establishes a direct connection to the juraforum.de servers. Juraforum.de sends the displayed content to your browser via the interactive element. When the connection is established, juraforum.de is informed that your browser has accessed this website, regardless of whether you are registered or logged in to juraforum.de. The information transmitted also includes your IP address, which your browser sends to their servers. Juraforum.de stores your IP address. If you are registered and logged in to juraforum.de, juraforum.de may associate your visit to this website with your user profile. If you interact with the interactive elements by clicking on them, this information is sent directly to and stored on juraforum.de’s servers. Visitor numbers are displayed on juraforum.de. Juraforum.de may use this information for advertising, market research and to optimise its website. If you do not agree, log out of juraforum.de before visiting our website. You can find more information about the collection and processing of your data in juraforum.de’s privacy notice. You have the right to withdraw your consent for the future at any time if a particular situation applies within the meaning of Art. 21 GDPR. To exercise your right to object, please follow the procedure described below.


5.5 Social Media Profiles

5.5.1 Facebook

KANZLEI 441 uses the technical platform and services of Meta Platforms Ireland Limited, 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland, for the information service provided at https://www.facebook.com/KANZLEI441. Please note that you use this Facebook page and its features at your own risk. This applies in particular to the use of interactive features (e.g. commenting, sharing, rating). Alternatively, you can access the information provided on this page on our website at https://www.kanzlei441.de. When you visit the Facebook page, Facebook collects, among other things, your IP address and other information stored on your PC in the form of cookies. This information is used to provide KANZLEI 441, as operator of the Facebook page, with statistical information about its use. Further information is available from Facebook at the following link: View Page Insights on Facebook | Facebook Help Center The data collected about you in this context is processed by Facebook Ltd. and may be transferred to countries outside the European Union. Facebook describes in general terms what information it receives and how it is used in its data use policy. You will also find information there about how to contact Facebook and manage your ad settings. The data use policy is available at the following link: http://de-de.facebook.com/about/privacy Facebook’s full data policy is available here: https://de-de.facebook.com/full_data_use_policy Facebook does not provide clear and complete information about how it uses data collected from visits to Facebook pages for its own purposes, the extent to which activity on a Facebook page is linked to individual users, how long Facebook stores this data, or whether data from visits to Facebook pages is shared with third parties. When you access a Facebook page, the IP address assigned to your device is transmitted to Facebook. According to Facebook, this IP address is anonymized (for “German” IP addresses). Facebook also stores information about its users’ devices (e.g. as part of its “login notifications” feature); Facebook may therefore be able to link IP addresses to individual users. If you are currently logged in to Facebook, your device contains a cookie with your Facebook ID. This enables Facebook to determine that you have visited this page and how you have used it. The same applies to all other Facebook pages. Facebook buttons embedded in websites enable Facebook to record your visits to those websites and associate them with your Facebook profile. Facebook may use this data to tailor content or advertising to you. To prevent this, you should log out of Facebook or disable the “stay logged in” feature, delete the cookies stored on your device, and close and restart your browser. This will delete Facebook information that could directly identify you. You can then use our Facebook page without revealing your Facebook ID. If you use interactive page features (Like, Comment, Share, Messages, etc.), a Facebook login screen will appear. Once you log in, Facebook will again be able to identify you as a specific user. Information on how to manage or delete information Facebook holds about you can be found on the following Facebook support pages: https://de-de.facebook.com/about/privacy# KANZLEI 441, as the provider of this information service, does not collect or process any further data from your use of this service. The current version of this privacy policy is available under “Privacy” on the Facebook page at https://www.facebook.com/KANZLEI441/about_privacy_and_legal_info. Further information about Facebook and other social networks, and how to protect your data, is also available at www.youngdata.de 


5.5.2 instagram

KANZLEI 441 uses the technical platform and services of meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, for the information service available at https://www.instagram.com/kanzlei_441. Please note that you use this Instagram page and its features at your own risk. This applies in particular to the use of interactive features (e.g. commenting, sharing, rating). Alternatively, you can access the information offered on this page on the website at https://www.kanzlei441.de. When you visit the Instagram page, Instagram collects, among other things, your IP address and other information stored on your PC in the form of cookies. This information is used to provide KANZLEI 441, as the operator of the Instagram pages, with statistical information about the use of the Instagram page. Instagram provides further information on this at the following link: http://help.instagram.com/519522125107875 The data collected about you in this context is processed by meta Platforms Ireland Limited and may be transferred to countries outside the European Union. Instagram describes in general terms what information it receives and how it is used in its data policy. There you will also find information on how to contact Instagram and on advertising settings. The data policy is available at the following link: http://help.instagram.com/519522125107875?__hstc=22439548.9b6a97935f7f052b55ed8f2b7d4a8c57.1609712200069.1626377385803.1626471019995.5&__hssc=22439548.3.1626471019995&__hsfp=2455428842 You can find Instagram’s full data policy here: https://help.instagram.com/519522125107875 Instagram does not clearly or conclusively state how it uses data from visits to Instagram pages for its own purposes, to what extent activity on the Instagram page is attributed to individual users, how long Instagram stores this data, or whether data from visits to the Instagram page is shared with third parties; this information is not known to us. When you access an Instagram page, the IP address assigned to your device is transmitted to Instagram. According to Instagram, this IP address is anonymised (for “German” IP addresses). Instagram also stores information about users’ devices (e.g. for the “login notification” feature); this may enable Instagram to associate IP addresses with individual users. If you are currently logged in to Instagram as a user, your device contains a cookie with your Instagram ID. This allows Instagram to track that you visited this page and how you used it. The same applies to all other Instagram pages. Instagram buttons embedded in websites allow Instagram to record your visits to those websites and associate them with your Instagram profile. This data may be used to tailor content or advertising to you. To prevent this, you should log out of Instagram or disable the “stay logged in” feature, delete the cookies on your device, and close and restart your browser. This will delete Instagram information that could be used to identify you directly. You can then use our Instagram page without revealing your Instagram ID. If you access interactive features on the page (Like, comment, share, messages, etc.), an Instagram login screen will appear. After logging in, Instagram will again be able to identify you as a specific user. Information on how to manage or delete information about you can be found on the following Instagram support pages: https://help.instagram.com/519522125107875 In addition, KANZLEI 441, as the provider of this information service, does not collect or process any other data from your use of this service.  Further information about Instagram and other social networks, and how to protect your data, can also be found at www.youngdata.de


5.6 Google reCAPTCHA

To protect our website and the services provided through it, we use “Google reCAPTCHA”, a service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). reCAPTCHA checks whether an entry is made by a person or through abusive automated processing. To do this, reCAPTCHA analyses the website visitor’s behaviour based on various characteristics (e.g. IP address, time spent on the website or mouse movements). This analysis begins automatically as soon as the user visits the website. The data collected during the analysis is transmitted to Google. Processing is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in protecting its website against abusive automated use and spam. For more information about data processing by Google reCAPTCHA, please see Google’s Privacy Policy and Terms of Service.


6. Data Subject Rights

6.1 Under the applicable data protection law, you have the following rights as a data subject vis-à-vis the controller with regard to the processing of your personal data (rights of access and intervention). The legal basis cited below sets out the conditions for exercising each right:

 

  • Right of access under Art. 15 GDPR;
  • Right to rectification pursuant to Art. 16 GDPR;
  • Right to erasure pursuant to Art. 17 GDPR;
  • Right to restriction of processing pursuant to Art. 18 GDPR;
  • Right to be notified pursuant to Art. 19 GDPR;
  • Right to data portability pursuant to Article 20 GDPR;
  • Right to withdraw consent pursuant to Art. 7(3) GDPR;
  • Right to lodge a complaint pursuant to Art. 77 GDPR.


6.2 RIGHT TO OBJECT

IF KANZLEI 441 PROCESSES YOUR PERSONAL DATA ON THE BASIS OF ITS OVERRIDING LEGITIMATE INTEREST FOLLOWING A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE. IF YOU EXERCISE YOUR RIGHT TO OBJECT, THE PROCESSING OF THE DATA CONCERNED WILL CEASE. HOWEVER, PROCESSING MAY CONTINUE IF COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING CAN BE DEMONSTRATED THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS. IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING. YOU MAY EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE. IF YOU EXERCISE YOUR RIGHT TO OBJECT, THE PROCESSING OF THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES WILL CEASE.


7. Retention Period for Personal Data

The retention period for personal information depends on the applicable legal basis, the purpose of processing and, where applicable, statutory retention requirements (e.g. retention periods under commercial and tax law). If personal data is processed on the basis of your explicit consent under Art. 6(1)(a) GDPR, the data concerned will be stored until you withdraw your consent. If statutory retention periods apply to data processed in connection with contractual obligations under Art. 6(1)(b) GDPR, this data will generally be deleted when those periods expire, provided it is no longer required for the performance or initiation of the contract and/or there is no legitimate interest in retaining it. If personal data is processed on the basis of Art. 6(1)(f) GDPR, it will be stored until you exercise your right to object under Art. 21(1) GDPR, unless compelling legitimate grounds for the processing can be demonstrated that override your interests, rights and freedoms, or the processing is for the establishment, exercise or defence of legal claims. If personal data is processed for direct marketing purposes on the basis of Art. 6(1)(f) GDPR, it will be stored until you exercise your right to object under Art. 21(2) GDPR. Unless otherwise stated in the other sections of this notice regarding specific processing activities, stored personal data will otherwise be deleted when it is no longer required for the purposes for which it was collected or otherwise processed.


8. By using the website, you consent to the use of data as described. Changes to the website or legal requirements may make it necessary to amend this privacy policy from time to time. This means that this privacy policy may be amended at any time.