This data protection notice provides you (hereinafter also referred to as the "user" or "data subject") with general information about data processing in our law firm and in particular about data processing when you visit our website and contact us by email or telephone. In addition, we inform you about our presence on social networks (LinkedIn.com) and about your rights with regard to the processing of your data. Data processing always refers to the processing of personal data.
You will no doubt often read the same texts and information here. For us, however, data protection is a matter of honor and part of our identity.
Controller in the sense of the data protection laws
CARLSWERK Attorneys at Law Partnership mbB
(CARLSWERK Rechtsanwälte Partnerschaft mbB)
Carlsplatz 24
40213 Düsseldorf
Phone +49 211 942 588 - 0
Fax + 49 211 942 588 - 29
Mail datenschutz@carlswerk.com
General information on data processing
Categories of personal data
We process the following categories of personal data:
- Master data (e.g. names, addresses, functions, organizational affiliation, etc.);
- Contact details (e.g. e-mail, telephone/fax numbers etc.);
- Content data (e.g. text entries, image files, videos, etc.);
- Usage data (e.g. access data);
- Meta/communication data (e.g. IP addresses).
Recipients or categories of recipients of personal data
If we disclose data to other persons and companies such as web hosts, processors or third parties as part of our processing, transfer it to them or otherwise grant them access to the data, this is done on the basis of legal permission (e.g. if the transfer of data to third parties is necessary for the performance of a contract pursuant to Art. 6 para. 1 lit. b) GDPR), if the data subjects have given their consent or if a legal obligation provides for this.
Duration of storage of personal data
The criterion for the duration of the storage of personal data is the respective statutory retention period. After this period has expired, the corresponding data is deleted if it is no longer required to achieve the purpose, fulfill the contract or initiate a contract.
Transfers to third countries
If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or if this is done in the context of the use of third-party services or the disclosure or transfer of data to third parties, this will only take place if it is done to fulfill our (pre-)contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we process or have the data processed in a third country only if the special requirements of Art. 44 et seq. GDPR, i.e. the processing is carried out, for example, on the basis of special guarantees, such as the officially recognized determination of a level of data protection corresponding to the EU or compliance with officially recognized special contractual obligations (so-called "standard contractual clauses").
Data processed for the provision of the website and the creation of log files
Each time you access content on the website, data is temporarily stored that may allow you to be identified. The following data is collected:
- Date and time of access
- IP address
- Host name of the accessing computer
- Website from which the website was accessed
- Websites that are accessed via the website
- Visited page on our website
- Message as to whether the retrieval was successful
- Amount of data transferred
- Information about the browser type and version used
- Operating system
The temporary storage of the data is necessary for the course of a website visit in order to enable the website to be delivered. Further storage in log files takes place in order to ensure the functionality of the website and the security of the information technology systems. Our legitimate interest in data processing also lies in these purposes.
The data is processed on the basis of Art. 6 para. 1 lit. f) GDPR.
The website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, info@hetzner.com. The host receives the above-mentioned data as a processor within the meaning of Art. 28 GDPR.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the provision of the website, this is the case when the respective session has ended. The log files are stored directly for a maximum of 24 hours and are only accessible to administrators. After that, they are only indirectly available via the reconstruction of backups and are permanently deleted after a maximum of four weeks.
E-mail contact and contact form
We can be contacted via the e-mail address provided and named by us. In this case, the personal data of the sender, i.e. the user, transmitted with the request will be stored.
The legal basis for the processing of this data, which is transmitted in the course of sending an inquiry, is Art. 6 para. 1 lit. f) GDPR (legitimate interests of us as the controller). If the request is aimed at the conclusion of a lawyer's contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b) GDPR (fulfillment of a contract).
In addition, we have provided our client information on data protection here on the Internet: Data protection information (PDF, 121 kb).
Purpose of data processing
The processing of this personal data serves us solely to process the contact.
Duration of storage
The above-mentioned data will be deleted as soon as it is no longer required for the purpose for which it was collected. For personal data sent to us by email, this is the case when the conversation or contact has ended. We assume that the conversation has ended when it is clear from the circumstances that the matter in question has been conclusively clarified.
Possibility of objection
The user has the option to object to data processing at any time. The objection should be sent to the following e-mail address: datenschutz@carlswerk.com.
All personal data stored in the course of contacting us will be deleted in this case.
Online presence in social media
We maintain an online presence on the social network LinkedIn.com to inform users active there about our services and to communicate via the platforms if they are interested. Our social media channel can only be accessed via an external link. As soon as you access our social media profile in the respective network, the terms and conditions and data processing guidelines of the respective operators apply.
We have no influence on the collection of data and its further use by the social networks. We have no knowledge of the extent to which, where and for how long the data is stored, the extent to which the networks comply with existing deletion obligations, which evaluations and links are made with the data and to whom the data is passed on. We therefore expressly draw your attention to the fact that your data (e.g. personal information, IP address) will be stored by the operators of the networks in accordance with their data usage guidelines and used for business purposes.
We process data with regard to social media presences insofar as, for example, comments or direct messages are sent to us via these. The legal basis for the processing of data following the user's consent is Art. 6 para. 1 lit. a) GDPR.
Rights of data subjects
Right to information
You can request information in accordance with Art. 15 GDPR about your personal data that we process.
Right to object
You have the right to object for specific reasons (see below in detail).
Right to rectification
If the information concerning you is not (or no longer) correct, you can request a correction in accordance with Art. 16 GDPR. If your data is incomplete, you can request that it be completed.
Right to erasure
You can request the deletion of your personal data in accordance with Art. 17 GDPR.
Right to restriction of processing
In accordance with Art. 18 GDPR, you have the right to request that the processing of your personal data be restricted.
Right to complain
If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with a data protection supervisory authority of your choice in accordance with Art. 77 para. 1 GDPR. This also includes the data protection supervisory authority responsible for the controller State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia, https://www.ldi.nrw.de/kontakt/ihre-beschwerde.
Right to data portability
In the event that the requirements of Art. 20 para. 1 GDPR are met, you have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to third parties. The collection of data for the provision of the website and the storage of log files are absolutely necessary for the operation of the website. They are therefore not based on consent in accordance with Art. 6 para. 1 lit. a) GDPR or on a contract in accordance with Art. 6 para. 1 lit. b) GDPR, but are justified in accordance with Art. 6 para. 1 lit. f) GDPR. The requirements of Art. 20 para. 1 GDPR are therefore not met in this respect.
Right to object pursuant to Art. 21 (1) GDPR
You have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data which is based on point (f) of Article 6(1) GDPR. The controller will then no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims. The collection of data for the provision of the website and the storage of log files are absolutely necessary for the operation of the website.