Data protection declaration
With these instructions, we inform visitors and users of the website about the nature, extent and purpose of the processing of personal data when visiting the website or using the services provided thereon. We also provide information about the rights that data subjects have to their rights. Visiting our website is possible without personal data being collected. However, the use of some services offered on the website may require the processing of personal data. The processing is carried out either on the basis of a statutory permission standard, or, in the case that a legal permission standard does not exist, on the basis of a consent that has been previously obtained by the person concerned.
Technical and organizational measures have been implemented to protect the personal data of visitors and users of the website. Nevertheless, security vulnerabilities can not be completely ruled out when using the internet.
The present information and explanations are based on the terms of the General Data Protection Regulation (DS-GVO):
2.1 personal data
Personal data is any information relating to an identified or identifiable natural person (hereinafter the “data subject”). A natural person is considered to be identifiable who, directly or indirectly, in particular by association with an identifier such as a name, an identification number, location data, an online identifier or one or more special features, expresses the physical, physiological, genetic, mental, economic, cultural or social identity of this natural person can be identified.
2.2 person concerned
Affected person is any identified or identifiable natural person whose personal data is processed by the controller.
Processing means any process or series of operations related to personal data, such as collecting, collecting, organizing, organizing, storing, adapting or modifying, reading, querying, using, with or without the aid of automated procedures; disclosure by submission, dissemination or other form of provision, reconciliation or association, restriction, erasure or destruction.
2.4 Restriction of processing
Restriction of the processing is the marking of stored personal data with the aim to limit their future processing.
Profiling is any kind of automated processing of personal data that consists in using that personal information to evaluate certain personal aspects relating to a natural person, in particular aspects relating to job performance, economic situation, health, personal To analyze or predict preferences, interests, reliability, behavior, whereabouts or relocation of that natural person.
Pseudonymisation is the processing of personal data in such a way that personal data can no longer be attributed to a specific data subject without the need for additional information, provided that such additional information is kept separate and subject to technical and organizational measures to ensure that the personal data not assigned to an identified or identifiable natural person.
2.7 Responsible or the controller
The controller or controller is the natural or legal person, public authority, body or body that, alone or in concert with others, decides on the purposes and means of processing personal data. Where the purposes and means of such processing are determined by Union law or the law of the Member States, the controller or the specific criteria for his designation may be provided for under Union or national law.
The processor is a natural or legal person, public authority, agency or other body that processes personal data on behalf of the controller.
Recipient is a natural or legal person, agency, agency or other entity to whom Personal Data is disclosed, whether or not it is a third party. However, authorities which may receive personal data under Union or national law in connection with a particular mission are not considered as beneficiaries.
Third is a natural or legal person, public authority, body or body other than the data subject, the controller, the processor and the persons authorized under the direct responsibility of the controller or the processor to process the personal data.
Consent is any voluntarily given and unambiguously expressed in the form of a statement or other unambiguous confirmatory act by the data subject for the particular case, by which the data subject indicates that they consent to the processing of the personal data concerning him / her is.
3 For the data protection person
Dobner GmbH & Co. KG
Registered office: München
Register court: Amtsgericht München
Register number: HRA 109776
Dobner Management & Treuhand GmbH
Registered office: München
Register court: Amtsgericht München
Register number: HRB 244561
Christian Dobner, LL.M. (Com.)
Fachberater für Internationales Steuerrecht
Third party cookies are not used.
5 Collection of data and information
When accessing the website, general data and information are collected, which are stored in log files on the server. The data on the type of browser used and the version of the browser, the operating system used to access the website, the website from which the visitor accesses the website, the pages to which the visitor calls, the date and time of the visitor Access, to the IP address, to the Internet Service Provider and other similar data and information that serve to provide security in the event of attacks on the IT systems. In no case conclusions are drawn on the person of the visitor. Rather, the information is needed so that the contents of the website can be displayed correctly. The collection of data is also done in order to have available in the event of a cyber attack, the information needed for law enforcement by the relevant law enforcement agencies.
6 Contact via the website
Due to legal regulations, the website contains information that enables fast electronic contact or direct communication with the operator of the website. In case of contact z. For example, by email or via a contact form, the transmitted personal data is automatically stored. In any case, the data will only be processed for the purpose resulting from the contact and, in principle, will not be disclosed to third parties, unless the disclosure is required to process the contact.
7 Routine deletion and blocking of personal data
Personal data is only stored for the period as long as this is necessary for the respective purpose of the processing or due to legal requirements. After the purpose of the provision or expiry of the statutory retention period, the personal data will be routinely and in accordance with the statutory provisions deleted. Insofar as the intended purpose of processing has been achieved, but the data may not yet be deleted due to legal requirements, the data will be blocked.
8 Legal basis of processing
8.1 The data processing is based on Art. 6 para. 1 DS-GVO. Thereafter, the data processing is allowed if this with the consent of the person concerned:
- necessary for the performance of any contract to which the data subject is a party or for the performance of any precontractual action taken at the request of the data subject;
- required to fulfill a legal obligation;
- necessary to protect the vital interests of the data subject or another natural person;
- is necessary to safeguard the legitimate interests of the controller or a third party, unless the interests or fundamental rights and freedoms of the data subject requiring personal data protection prevail, in particular where the data subject is a child.
Insofar as the data processing can not be based on any other legal basis, the data processing is in principle only with the consent of the data subject, which is obtained and documented by him before the start of processing.
8.2 As far as the data processing is based on a legitimate interest, before the start of the processing additionally a weighing with the interests of the data subject is necessary, which nevertheless can exclude a data processing, even if the data processing seems to be appropriate for entrepreneurial purposes. Expediency is not enough in this case regularly. Rather, it is necessary that significant interests of the company, its employees or shareholders or holders of data processing are directly affected.
9 Right to information, rectification and cancellation
Persons whose data are processed by us are legally entitled to information, correction and deletion of their data. The rights can be claimed at any time by the person concerned making a corresponding request to the person responsible for data protection or the management. In the case of a request for information, the following information must be provided:
- processing purposes;
- Categories of personal data being processed;
- recipients or categories of recipients to whom the personal data have been disclosed or are still being disclosed, in particular to recipients in third countries or to international organizations;
- if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining that duration;
- existence of a right to rectification or erasure of personal data concerning them, or of processing by the person responsible or a right to object to such processing;
- existence of a right of appeal to a supervisory authority;
- if the personal data are not collected from the data subject: all available information about the origin of the data;
- existence of automated decision-making including profiling in accordance with Article 22 (1) and (4) of the GDPR and – at least in these cases – meaningful information about the logic involved, and the scope and intended impact of such processing on the data subject; Transfer of data to a third country or an international organization, as well as the appropriate guarantees related to the transfer.
In the case of a request for correction, incorrect data must be corrected or completed. In the case of a request for cancellation, the relevant personal data must be deleted immediately,
- if personal information has been collected or otherwise processed for purposes for which it is no longer needed;
- the data were collected solely on the basis of the consent of the person concerned, which the person concerned revoked;
- the person concerned files an objection against the processing in accordance with Art. 21 DS-GVO and, in the case of a revocation pursuant to Art. 21 (1) DS-GVO, no legitimate reasons for the processing exist;
- the personal data have been processed unlawfully;
- the deletion is required by law.
In the event that the data to be deleted has been made public, in accordance with Art. 17 (1) DS-BER, taking into account the available technology and the implementation costs, appropriate measures will be provided to third parties processing the published personal data about the request for cancellation to put.
10 Right to restriction of processing
Affected parties have a legal claim to demand the restriction of the processing of their data, if he denies the accuracy of the personal data or has filed an objection under Art. 21 para. 1 DS-GVO. In this case, processing must be restricted for a period of time necessary to verify the accuracy of the personal data or to determine whether there are grounds for processing that outweigh the interests of the person concerned. If the processing is subsequently unlawful and the person concerned refuses to delete his data, he may instead demand the restriction of the processing of his data. The processing of the data must be restricted even if it has been omitted for the purpose for which the data was collected, but the data must still be available for asserting, exercising or defending legal claims. The above rights may be invoked at any time by the person concerned making a request to the person responsible for data protection or management.
11 Right to data portability
Persons whose data are processed by us have a legal claim against us that their data is transmitted in a structured, common and machine-readable format or transmitted to a third party without hindrance, if the processing is based on the consent pursuant to Art. 6 para. 1 letter a DS-GVO or Article 9 paragraph 2 letter a DS-GVO or based on a contract pursuant to Article 6 paragraph 1 letter b DS-GVO and the processing is carried out by automated means, unless the processing for the perception a task which is in the public interest or in the exercise of public authority, which has been entrusted to the controller. The rights can be claimed at any time by the person concerned making a corresponding request to the person responsible for data protection or the management.
12 Right to objection
Affected parties have a legal claim to contradict the data processing at any time. In the event of an objection, the data will no longer be processed unless there are evidently compelling legitimate reasons for continued data processing that outweigh the interests, rights and freedoms of the data subject, or the processing of the assertion, exercise or defense of legal claims. In the case of opposition to the processing for advertising purposes, the objection in principle has priority. The data will then no longer be used for advertising purposes. The rights can be claimed at any time by the person concerned making a corresponding request to the person responsible for data protection or the management.
13 Automated decisions in individual cases including profiling
Affected parties have a legal claim that a decision affecting them, which has legal effect, is not exclusively based on automated processing, or similarly significantly affected. This shall not apply to decisions required for the conclusion or performance of a contract with the person concerned, or as permitted by law, or as expressly provided for in order to safeguard the rights and freedoms and legitimate interests of the data subject Consent of the data subject takes place. If the decision to conclude or execute a contract is required or if the automated decision is made with the express consent of the person concerned, appropriate measures will be taken to safeguard the rights and freedoms and legitimate interests of the data subject, such as: B. Measures allowing the person concerned to act and intervene in the proceedings and to present his point of view. If the data subject wishes to enforce automated decision-making rights, they may contact our data protection officer or other data controller at any time. The rights can be claimed at any time by the person concerned making a corresponding request to the person responsible for data protection or the management.
14 Right to revoke a data protection consent
Affected parties can revoke a given consent to data processing at any time. The rights can be claimed at any time by the person concerned making a corresponding request to the person responsible for data protection or the management.
Personal data that can be sent by post or electronically, eg. For example, by e-mail, will be stored exclusively for the purpose of processing the application. In the event that no contract of employment with the applicant is concluded, the candidate will be informed of the alternative allocation of the position and the application documents will be kept for a further two months. The temporary storage takes place on the basis of a legitimate interest, in particular in order to be able to fulfill a required burden of proof in the case of a procedure under the General Equal Treatment Act (AGG).
16 Use of analysis tools
16.1 General Information
The website can use components from various third-party companies, with which information about the visitors to the website and their surfing behavior can be recorded and analyzed in part in real time. Here are u. a. Customer interactions are statistically and visually presented and prepared to provide an overview of the online activities of visitors and users of the website. The use of these components serves, on the one hand, to tailor the marketing for the Internet offer to the visitors and users and thus to increase the advertising effectiveness of the Internet pages. On the other hand, this serves to detect and remedy errors of a technical or other nature. The components are third-party software components. Insofar as such components are used, the nature, content, scope and purpose of the data processing are explained below and pointed out:
The controller has integrated on this website the component Google Analytics (with anonymization function). Google Analytics is a web analytics service. Web analysis is the collection, collection and analysis of data about the behavior of visitors to websites. Among other things, a web analysis service collects data on which website an affected person has come to a website (so-called referrers), which subpages of the website were accessed or how often and for which length of stay a subpage was viewed. A web analysis is mainly used to optimize a website and cost-benefit analysis of Internet advertising. The operating company of the Google Analytics component is Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA. The controller uses the addition “_gat._anonymizeIp” for web analytics via Google Analytics. By means of this addendum, the IP address of the Internet access of the data subject will be shortened and anonymised by Google if the access to our website is from a Member State of the European Union or from another state party to the Agreement on the European Economic Area. The purpose of the Google Analytics component is to analyze visitor flows on our website. Among other things, Google uses the data and information obtained to evaluate the use of our website, to compile for us online reports showing the activities on our websites, and to provide other services related to the use of our website. Google Analytics uses a cookie on the information technology system of the person concerned. What cookies are, has already been explained above. By using this cookie Google is enabled to analyze the usage of our website. Each time one of the pages of this website is accessed by the controller and a Google Analytics component has been integrated, the Internet browser on the information technology system of the person concerned is automatically initiated by the respective Google Analytics component To submit data to Google for online analysis purposes. As part of this technical process, Google will be aware of personal data, such as the IP address of the person concerned, which serve, among other things, Google to track the origin of the visitors and clicks, and subsequently make commission settlements possible.
The cookie stores personally identifiable information, such as access time, the location from which access was made, and the frequency of site visits by the data subject. Each time you visit our website, your personal information, including the IP address of the Internet connection used by the data subject, is transferred to Google in the United States of America. This personal information is stored by Google in the United States of America. Google may transfer such personal data collected through the technical process to third parties.
The affected person can prevent the setting of cookies through our website, as shown above, at any time by means of a corresponding setting of the Internet browser used and thus permanently contradict the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a cookie on the information technology system of the person concerned. In addition, a cookie already set by Google Analytics can be deleted at any time via the Internet browser or other software programs.
Furthermore, the data subject has the option of objecting to and preventing the collection of the data generated by Google Analytics for the use of this website and the processing of this data by Google. To do this, the person must download and install a browser add-on at https://tools.google.com/dlpage/gaoptout.
The controller has integrated Google AdWords on this website. Google AdWords is an Internet advertising service that allows advertisers to run both Google and Google Network search engine results. Google AdWords allows an advertiser to pre-set keywords that will display an ad on Google’s search engine results only when the search engine retrieves a keyword-related search result. In the Google Network, ads are distributed on topical web pages using an automated algorithm and according to pre-defined keywords. Operating company of the services of Google AdWords ist die Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. The purpose of Google AdWords is to promote our website by displaying interest-based advertising on third-party websites and in the search engine results of Google’s search engine and by displaying advertisements on our website. If a data subject arrives on our website via a Google ad, a so-called conversion cookie will be stored on Google’s information technology system by Google. What cookies are, has already been explained above. A conversion cookie expires after thirty days and is not used to identify the data subject. About the conversion cookie is, if the cookie has not yet expired, traced whether certain sub-pages, such as the shopping cart from an online shop system, were accessed on our website. The conversion cookie allows both us and Google to understand whether an affected person who came to our website via an AdWords ad generated revenue, ie, completed or canceled a purchase. The data and information collected through the use of the conversion cookie are used by Google to create visitor statistics for our website. These visit statistics are then used by us to determine the total number of users who have been sent to us through AdWords ads, in order to determine the success or failure of each AdWords ad and to optimize our AdWords ads for the future , Neither our company nor any other Google AdWords advertiser receives any information from Google that could identify the data subject.
The conversion cookie stores personally identifiable information, such as the web pages visited by the affected person. Each time you visit our website, your personal information, including the IP address of the Internet connection used by the data subject, will be transferred to Google in the United States of America. This personal information is stored by Google in the United States of America. Google may transfer such personal data collected through the technical process to third parties.
The affected person can prevent the setting of cookies through our website, as shown above, at any time by means of a corresponding setting of the Internet browser used and thus permanently contradict the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a conversion cookie on the information technology system of the person concerned. In addition, a cookie already set by Google AdWords can be deleted at any time via the Internet browser or other software programs. Furthermore, the data subject has the opportunity to object to Google’s interest-based advertising. To do this, the person concerned must access the link www.google.de/settings/ads from each of the Internet browsers they use and make the desired settings there.
The controller has integrated components from LinkedIn Corporation on this website. LinkedIn is an Internet-based social network that allows users to connect to existing business contacts and make new business contacts. Over 400 million registered people use LinkedIn in more than 200 countries. This makes LinkedIn currently the largest platform for business contacts and one of the most visited websites in the world.