Data protection declaration

1 introduction

With these instructions, we inform visitors and users of the website about the nature, extent and purpose of the processing of personal data when visiting the website or using the services provided thereon. We also provide information about the rights that data subjects have to their rights. Visiting our website is possible without personal data being collected. However, the use of some services offered on the website may require the processing of personal data. The processing is carried out either on the basis of a statutory permission standard, or, in the case that a legal permission standard does not exist, on the basis of a consent that has been previously obtained by the person concerned.
Technical and organizational measures have been implemented to protect the personal data of visitors and users of the website. Nevertheless, security vulnerabilities can not be completely ruled out when using the internet.

2 definitions

The present information and explanations are based on the terms of the General Data Protection Regulation (DS-GVO):

2.1 personal data

Personal data is any information relating to an identified or identifiable natural person (hereinafter the “data subject”). A natural person is considered to be identifiable who, directly or indirectly, in particular by association with an identifier such as a name, an identification number, location data, an online identifier or one or more special features, expresses the physical, physiological, genetic, mental, economic, cultural or social identity of this natural person can be identified.

2.2 person concerned

Affected person is any identified or identifiable natural person whose personal data is processed by the controller.

2.3 Processing

Processing means any process or series of operations related to personal data, such as collecting, collecting, organizing, organizing, storing, adapting or modifying, reading, querying, using, with or without the aid of automated procedures; disclosure by submission, dissemination or other form of provision, reconciliation or association, restriction, erasure or destruction.

2.4 Restriction of processing

Restriction of the processing is the marking of stored personal data with the aim to limit their future processing.

2.5 Profiling

Profiling is any kind of automated processing of personal data that consists in using that personal information to evaluate certain personal aspects relating to a natural person, in particular aspects relating to job performance, economic situation, health, personal To analyze or predict preferences, interests, reliability, behavior, whereabouts or relocation of that natural person.

2.6 Pseudonymization

Pseudonymisation is the processing of personal data in such a way that personal data can no longer be attributed to a specific data subject without the need for additional information, provided that such additional information is kept separate and subject to technical and organizational measures to ensure that the personal data not assigned to an identified or identifiable natural person.

2.7 Responsible or the controller

The controller or controller is the natural or legal person, public authority, body or body that, alone or in concert with others, decides on the purposes and means of processing personal data. Where the purposes and means of such processing are determined by Union law or the law of the Member States, the controller or the specific criteria for his designation may be provided for under Union or national law.

2.8 Processors

The processor is a natural or legal person, public authority, agency or other body that processes personal data on behalf of the controller.

2.9 Receiver

Recipient is a natural or legal person, agency, agency or other entity to whom Personal Data is disclosed, whether or not it is a third party. However, authorities which may receive personal data under Union or national law in connection with a particular mission are not considered as beneficiaries.

2.10 Third

Third is a natural or legal person, public authority, body or body other than the data subject, the controller, the processor and the persons authorized under the direct responsibility of the controller or the processor to process the personal data.

2.11 Consent

Consent is any voluntarily given and unambiguously expressed in the form of a statement or other unambiguous confirmatory act by the data subject for the particular case, by which the data subject indicates that they consent to the processing of the personal data concerning him / her is.

3 For the data protection person

TLI Steuerberatungsgesellschaft
Dobner GmbH & Co. KG
Promenadeplatz 12
80333 München
Germany

Registered office: München
Register court: Amtsgericht München
Register number: HRA 109776

Represented by:

TLI Steuerberatungsgesellschaft
Dobner Management & Treuhand GmbH
Promenadeplatz 12
80333 München

Registered office: München
Register court: Amtsgericht München
Register number: HRB 244561

Managing Director:

Christian Dobner, LL.M. (Com.)
Diplom-Finanzwirt (FH)
Steuerberater

Contact:

phone: +49 (0)89 2153737 – 0
fax: +49 (0)89 2153737 – 37
email: tax@tlitax.com
web: www.tlitax.com

4 Cookies

Cookies are used on the website. Cookies are text files that are stored on the computer system. Many cookies contain a unique identifier that consists of a string that allows users to be recognized by the system. This serves to adapt the Internet offer individually and user-friendly to the respective visitor. There are different types of cookies. Most cookies are deleted from the hard drive after the end of the browser session (so-called session cookies). Other cookies remain on the computer and make it possible to recognize the computer the next time you visit it (so-called persistent cookies). These cookies are used, for example, to greet you with the individual user name and, for example, you do not need to re-enter user names and passwords or fill out forms. If the use of cookies is not desired, the visitor can prevent the use of cookies by preventing the setting and storage of cookies in the settings of his browser. In the settings, already existing cookies can be deleted at any time. This is possible in all common internet browsers. In the event that the visitor to the website has blocked the setting of cookies in the settings, not all functions of the website may be fully usable.
Third party cookies are not used.

5 Collection of data and information

When accessing the website, general data and information are collected, which are stored in log files on the server. The data on the type of browser used and the version of the browser, the operating system used to access the website, the website from which the visitor accesses the website, the pages to which the visitor calls, the date and time of the visitor Access, to the IP address, to the Internet Service Provider and other similar data and information that serve to provide security in the event of attacks on the IT systems. In no case conclusions are drawn on the person of the visitor. Rather, the information is needed so that the contents of the website can be displayed correctly. The collection of data is also done in order to have available in the event of a cyber attack, the information needed for law enforcement by the relevant law enforcement agencies.

6 Contact via the website

Due to legal regulations, the website contains information that enables fast electronic contact or direct communication with the operator of the website. In case of contact z. For example, by email or via a contact form, the transmitted personal data is automatically stored. In any case, the data will only be processed for the purpose resulting from the contact and, in principle, will not be disclosed to third parties, unless the disclosure is required to process the contact.

7 Routine deletion and blocking of personal data

Personal data is only stored for the period as long as this is necessary for the respective purpose of the processing or due to legal requirements. After the purpose of the provision or expiry of the statutory retention period, the personal data will be routinely and in accordance with the statutory provisions deleted. Insofar as the intended purpose of processing has been achieved, but the data may not yet be deleted due to legal requirements, the data will be blocked.

8 Legal basis of processing

8.1 The data processing is based on Art. 6 para. 1 DS-GVO. Thereafter, the data processing is allowed if this with the consent of the person concerned:

  • necessary for the performance of any contract to which the data subject is a party or for the performance of any precontractual action taken at the request of the data subject;
  • required to fulfill a legal obligation;
  • necessary to protect the vital interests of the data subject or another natural person;
  • is necessary to safeguard the legitimate interests of the controller or a third party, unless the interests or fundamental rights and freedoms of the data subject requiring personal data protection prevail, in particular where the data subject is a child.

Insofar as the data processing can not be based on any other legal basis, the data processing is in principle only with the consent of the data subject, which is obtained and documented by him before the start of processing.

8.2 As far as the data processing is based on a legitimate interest, before the start of the processing additionally a weighing with the interests of the data subject is necessary, which nevertheless can exclude a data processing, even if the data processing seems to be appropriate for entrepreneurial purposes. Expediency is not enough in this case regularly. Rather, it is necessary that significant interests of the company, its employees or shareholders or holders of data processing are directly affected.

9 Right to information, rectification and cancellation

Persons whose data are processed by us are legally entitled to information, correction and deletion of their data. The rights can be claimed at any time by the person concerned making a corresponding request to the person responsible for data protection or the management. In the case of a request for information, the following information must be provided:

  • processing purposes;
  • Categories of personal data being processed;
  • recipients or categories of recipients to whom the personal data have been disclosed or are still being disclosed, in particular to recipients in third countries or to international organizations;
  • if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining that duration;
  • existence of a right to rectification or erasure of personal data concerning them, or of processing by the person responsible or a right to object to such processing;
  • existence of a right of appeal to a supervisory authority;
  • if the personal data are not collected from the data subject: all available information about the origin of the data;
  • existence of automated decision-making including profiling in accordance with Article 22 (1) and (4) of the GDPR and – at least in these cases – meaningful information about the logic involved, and the scope and intended impact of such processing on the data subject; Transfer of data to a third country or an international organization, as well as the appropriate guarantees related to the transfer.

In the case of a request for correction, incorrect data must be corrected or completed. In the case of a request for cancellation, the relevant personal data must be deleted immediately,

  • if personal information has been collected or otherwise processed for purposes for which it is no longer needed;
  • the data were collected solely on the basis of the consent of the person concerned, which the person concerned revoked;
  • the person concerned files an objection against the processing in accordance with Art. 21 DS-GVO and, in the case of a revocation pursuant to Art. 21 (1) DS-GVO, no legitimate reasons for the processing exist;
  • the personal data have been processed unlawfully;
  • the deletion is required by law.

In the event that the data to be deleted has been made public, in accordance with Art. 17 (1) DS-BER, taking into account the available technology and the implementation costs, appropriate measures will be provided to third parties processing the published personal data about the request for cancellation to put.

10 Right to restriction of processing

Affected parties have a legal claim to demand the restriction of the processing of their data, if he denies the accuracy of the personal data or has filed an objection under Art. 21 para. 1 DS-GVO. In this case, processing must be restricted for a period of time necessary to verify the accuracy of the personal data or to determine whether there are grounds for processing that outweigh the interests of the person concerned. If the processing is subsequently unlawful and the person concerned refuses to delete his data, he may instead demand the restriction of the processing of his data. The processing of the data must be restricted even if it has been omitted for the purpose for which the data was collected, but the data must still be available for asserting, exercising or defending legal claims. The above rights may be invoked at any time by the person concerned making a request to the person responsible for data protection or management.

11 Right to data portability

Persons whose data are processed by us have a legal claim against us that their data is transmitted in a structured, common and machine-readable format or transmitted to a third party without hindrance, if the processing is based on the consent pursuant to Art. 6 para. 1 letter a DS-GVO or Article 9 paragraph 2 letter a DS-GVO or based on a contract pursuant to Article 6 paragraph 1 letter b DS-GVO and the processing is carried out by automated means, unless the processing for the perception a task which is in the public interest or in the exercise of public authority, which has been entrusted to the controller. The rights can be claimed at any time by the person concerned making a corresponding request to the person responsible for data protection or the management.

12 Right to objection

Affected parties have a legal claim to contradict the data processing at any time. In the event of an objection, the data will no longer be processed unless there are evidently compelling legitimate reasons for continued data processing that outweigh the interests, rights and freedoms of the data subject, or the processing of the assertion, exercise or defense of legal claims. In the case of opposition to the processing for advertising purposes, the objection in principle has priority. The data will then no longer be used for advertising purposes. The rights can be claimed at any time by the person concerned making a corresponding request to the person responsible for data protection or the management.

13 Automated decisions in individual cases including profiling

Affected parties have a legal claim that a decision affecting them, which has legal effect, is not exclusively based on automated processing, or similarly significantly affected. This shall not apply to decisions required for the conclusion or performance of a contract with the person concerned, or as permitted by law, or as expressly provided for in order to safeguard the rights and freedoms and legitimate interests of the data subject Consent of the data subject takes place. If the decision to conclude or execute a contract is required or if the automated decision is made with the express consent of the person concerned, appropriate measures will be taken to safeguard the rights and freedoms and legitimate interests of the data subject, such as: B. Measures allowing the person concerned to act and intervene in the proceedings and to present his point of view. If the data subject wishes to enforce automated decision-making rights, they may contact our data protection officer or other data controller at any time. The rights can be claimed at any time by the person concerned making a corresponding request to the person responsible for data protection or the management.

14 Right to revoke a data protection consent

Affected parties can revoke a given consent to data processing at any time. The rights can be claimed at any time by the person concerned making a corresponding request to the person responsible for data protection or the management.

15 Applications

Personal data that can be sent by post or electronically, eg. For example, by e-mail, will be stored exclusively for the purpose of processing the application. In the event that no contract of employment with the applicant is concluded, the candidate will be informed of the alternative allocation of the position and the application documents will be kept for a further two months. The temporary storage takes place on the basis of a legitimate interest, in particular in order to be able to fulfill a required burden of proof in the case of a procedure under the General Equal Treatment Act (AGG).

16 Use of analysis tools

16.1 General Information

The website can use components from various third-party companies, with which information about the visitors to the website and their surfing behavior can be recorded and analyzed in part in real time. Here are u. a. Customer interactions are statistically and visually presented and prepared to provide an overview of the online activities of visitors and users of the website. The use of these components serves, on the one hand, to tailor the marketing for the Internet offer to the visitors and users and thus to increase the advertising effectiveness of the Internet pages. On the other hand, this serves to detect and remedy errors of a technical or other nature. The components are third-party software components. Insofar as such components are used, the nature, content, scope and purpose of the data processing are explained below and pointed out:

16.2 Privacy Policy for use and use of Google Analytics (with anonymization feature)

The controller has integrated on this website the component Google Analytics (with anonymization function). Google Analytics is a web analytics service. Web analysis is the collection, collection and analysis of data about the behavior of visitors to websites. Among other things, a web analysis service collects data on which website an affected person has come to a website (so-called referrers), which subpages of the website were accessed or how often and for which length of stay a subpage was viewed. A web analysis is mainly used to optimize a website and cost-benefit analysis of Internet advertising. The operating company of the Google Analytics component is Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA. The controller uses the addition “_gat._anonymizeIp” for web analytics via Google Analytics. By means of this addendum, the IP address of the Internet access of the data subject will be shortened and anonymised by Google if the access to our website is from a Member State of the European Union or from another state party to the Agreement on the European Economic Area. The purpose of the Google Analytics component is to analyze visitor flows on our website. Among other things, Google uses the data and information obtained to evaluate the use of our website, to compile for us online reports showing the activities on our websites, and to provide other services related to the use of our website. Google Analytics uses a cookie on the information technology system of the person concerned. What cookies are, has already been explained above. By using this cookie Google is enabled to analyze the usage of our website. Each time one of the pages of this website is accessed by the controller and a Google Analytics component has been integrated, the Internet browser on the information technology system of the person concerned is automatically initiated by the respective Google Analytics component To submit data to Google for online analysis purposes. As part of this technical process, Google will be aware of personal data, such as the IP address of the person concerned, which serve, among other things, Google to track the origin of the visitors and clicks, and subsequently make commission settlements possible.

The cookie stores personally identifiable information, such as access time, the location from which access was made, and the frequency of site visits by the data subject. Each time you visit our website, your personal information, including the IP address of the Internet connection used by the data subject, is transferred to Google in the United States of America. This personal information is stored by Google in the United States of America. Google may transfer such personal data collected through the technical process to third parties.

The affected person can prevent the setting of cookies through our website, as shown above, at any time by means of a corresponding setting of the Internet browser used and thus permanently contradict the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a cookie on the information technology system of the person concerned. In addition, a cookie already set by Google Analytics can be deleted at any time via the Internet browser or other software programs.

Furthermore, the data subject has the option of objecting to and preventing the collection of the data generated by Google Analytics for the use of this website and the processing of this data by Google. To do this, the person must download and install a browser add-on at https://tools.google.com/dlpage/gaoptout.
This browser add-on informs Google Analytics via JavaScript that no data and information about website visits may be transmitted to Google Analytics. The installation of the browser add-on is considered by Google as a contradiction. If the data subject’s information technology system is later deleted, formatted or reinstalled, the data subject must re-install the browser add-on to disable Google Analytics. If the browser add-on is uninstalled or disabled by the data subject or any other person within their sphere of control, it is possible to reinstall or reactivate the browser add-on. Additional information and Google’s privacy policy can be found at https://www.google.de/intl/de/policies/privacy/ and http://www.google.com/analytics/terms/de.html. Google Analytics is explained in more detail at https://www.google.com/intl/de_de/analytics/.

16.3 Privacy Policy on Use and Use of Google Remarketing

The controller has integrated Google Remarketing services on this website. Google Remarketing is a feature of Google AdWords that allows a business to show advertisements to such internet users that have previously been on the company’s website. The integration of Google Remarketing therefore allows a company to create user-friendly advertising and thus allow Internet users to display interest-based ads. perating company of the services of GoogleRemarketing ist die Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. The purpose of Google Remarketing is to show interest-based advertising. Google Remarketing allows us to display ads through the Google Network or view them on other websites tailored to the individual needs and interests of Internet users. Google Remarketing places a cookie on the information technology system of the data subject. What cookies are, has already been explained above. By setting the cookie, Google will be able to recognize the visitor to our website, if he subsequently calls websites that are also members of the Google ad network. With each visit to a website on which Google Remarketing’s service has been integrated, the person’s Internet browser automatically identifies with Google. As part of this technical process, Google receives knowledge about personal data, such as the IP address or the surfing behavior of the user, which Google uses among other things to display interest-relevant advertising. The cookie is used to store personal information, such as the websites visited by the data subject. Each time you visit our website, your personal information, including the IP address of the Internet connection used by the data subject, will be transferred to Google in the United States of America. This personal information is stored by Google in the United States of America. Google may transfer such personal data collected through the technical process to third parties. The affected person can prevent the setting of cookies through our website, as shown above, at any time by means of a corresponding setting of the Internet browser used and thus permanently contradict the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a cookie on the information technology system of the person concerned. In addition, a cookie already set by Google Analytics can be deleted at any time via the Internet browser or other software programs. Furthermore, the data subject has the opportunity to object to Google’s interest-based advertising. To do this, the person concerned must access the link www.google.de/settings/ads from each of the Internet browsers they use and make the desired settings there. Additional information and Google’s privacy policy can be found at https://www.google.de/intl/de/policies/privacy/.

16.4 Privacy Policy on Use and Use of Google AdWords

The controller has integrated Google AdWords on this website. Google AdWords is an Internet advertising service that allows advertisers to run both Google and Google Network search engine results. Google AdWords allows an advertiser to pre-set keywords that will display an ad on Google’s search engine results only when the search engine retrieves a keyword-related search result. In the Google Network, ads are distributed on topical web pages using an automated algorithm and according to pre-defined keywords. Operating company of the services of Google AdWords ist die Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. The purpose of Google AdWords is to promote our website by displaying interest-based advertising on third-party websites and in the search engine results of Google’s search engine and by displaying advertisements on our website. If a data subject arrives on our website via a Google ad, a so-called conversion cookie will be stored on Google’s information technology system by Google. What cookies are, has already been explained above. A conversion cookie expires after thirty days and is not used to identify the data subject. About the conversion cookie is, if the cookie has not yet expired, traced whether certain sub-pages, such as the shopping cart from an online shop system, were accessed on our website. The conversion cookie allows both us and Google to understand whether an affected person who came to our website via an AdWords ad generated revenue, ie, completed or canceled a purchase. The data and information collected through the use of the conversion cookie are used by Google to create visitor statistics for our website. These visit statistics are then used by us to determine the total number of users who have been sent to us through AdWords ads, in order to determine the success or failure of each AdWords ad and to optimize our AdWords ads for the future , Neither our company nor any other Google AdWords advertiser receives any information from Google that could identify the data subject.

The conversion cookie stores personally identifiable information, such as the web pages visited by the affected person. Each time you visit our website, your personal information, including the IP address of the Internet connection used by the data subject, will be transferred to Google in the United States of America. This personal information is stored by Google in the United States of America. Google may transfer such personal data collected through the technical process to third parties.

The affected person can prevent the setting of cookies through our website, as shown above, at any time by means of a corresponding setting of the Internet browser used and thus permanently contradict the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a conversion cookie on the information technology system of the person concerned. In addition, a cookie already set by Google AdWords can be deleted at any time via the Internet browser or other software programs. Furthermore, the data subject has the opportunity to object to Google’s interest-based advertising. To do this, the person concerned must access the link www.google.de/settings/ads from each of the Internet browsers they use and make the desired settings there.

Additional information and Google’s privacy policy can be found at https://www.google.de/intl/de/policies/privacy/.

16.5 Privacy Policy for Use and Use of LinkedIn

The controller has integrated components from LinkedIn Corporation on this website. LinkedIn is an Internet-based social network that allows users to connect to existing business contacts and make new business contacts. Over 400 million registered people use LinkedIn in more than 200 countries. This makes LinkedIn currently the largest platform for business contacts and one of the most visited websites in the world.

Operating company of LinkedIn ist die LinkedIn Corporation, 2029 Stierlin Court Mountain View, CA 94043, USA. Für Privacy matters outside the USA are responsible LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland. Each time you visit our website, which has a LinkedIn component (LinkedIn plug-in), this component causes the browser used by the subject to download a corresponding representation of the LinkedIn component. More information about the LinkedIn plug-ins can be found at https://developer.linkedin.com/plugins. As part of this technical process, LinkedIn learns about the specific bottom of our website visited by the affected person. If the data subject is logged in to LinkedIn at the same time, LinkedIn recognizes with each visit to our website by the data subject and during the entire duration of the respective stay on our website which specific bottom of our website the data subject visits. This information is collected through the LinkedIn component and linked by LinkedIn to the affected LinkedIn’s LinkedIn account. If the affected person activates a LinkedIn button integrated on our website, LinkedIn assigns this information to the personal LinkedIn user account of the person concerned and saves this personal data. LinkedIn always receives information via the LinkedIn component that the person concerned has visited our website if the person concerned is simultaneously logged into LinkedIn at the time of accessing our website; this happens regardless of whether the person clicks on the LinkedIn component or not. If the affected person does not want to transmit this information to LinkedIn, the latter can prevent it from logging out of their LinkedIn account before visiting our website. At https://www.linkedin.com/psettings/guest-controls, LinkedIn offers the ability to opt out of email messages, text messages, and targeted ads, as well as manage ad settings. LinkedIn also uses partners like Quantcast, Google Analytics, BlueKai, DoubleClick, Nielsen, Comscore, Eloqua and Lotame, can set the cookies. Such cookies can be refused at https://www.linkedin.com/legal/cookie-policy. LinkedIn privacy policy is available at https://www.linkedin.com/legal/privacy-policy. LinkedIn cookie policy is available at https://www.linkedin.com/legal/cookie-policy.

16.6 Privacy Policy for Use and Use of Xing

The controller has integrated components from Xing on this website. Xing is an Internet-based social network that allows users to connect to existing business contacts and make new business contacts. The individual users can create a personal profile at Xing. Companies can, for example, create company profiles or publish job offers on Xing. Operating company of Xing ist die XING SE, Dammtorstraße 30, 20354 Hamburg, Deutschland. Each time one of the individual pages on this website is called up by the controller and on which a Xing component (Xing plug-in) has been integrated, the internet browser on the information technology system of the person concerned is automatically identified by the respective Xing Component causes a representation of the corresponding Xing component of Xing to be downloaded. More information about the Xing plug-ins can be found at https://dev.xing.com/plugins. As part of this technical process, Xing is aware of which specific bottom of our website is visited by the person concerned. If the data subject is logged in to Xing at the same time, Xing recognizes with each visit to our website by the data subject and during the entire duration of the respective stay on our website, which specific bottom of our website visited the person concerned. This information is collected by the Xing component and assigned by Xing to the affected Xing account. If the person concerned activates one of the Xing buttons integrated on our website, for example the “Share” button, Xing assigns this information to the personal Xing user account of the person concerned and stores this personal data. Xing always receives information from the Xing component that the data subject has visited our website if the data subject is simultaneously logged in to Xing at the time of accessing our website; this happens regardless of whether or not the affected person clicks on the Xing component. If such a transfer of this information to Xing by the person concerned is not intended, it can prevent the transfer by logging out of your Xing account before calling our website. Xing’s privacy policy, available at https://www.xing.com/privacy, provides information about the collection, processing and use of personal information by Xing. In addition, Xing has posted privacy notices for the XING Share button at https://www.xing.com/app/share?op=data_protection.