Data protection regulations in the version valid as of 25.05.18
Data protection declaration
Responsible person:
Attorney Dominik Fischer
Lise-Meitner-Straße 1-3
42219 Wuppertal
Germany
Phone 0202-69577900
Fax 0202-69577901
Contact e-mail: info@direktkanzlei.de
Data Protection Officer:
Data Protection Officer E-Mail: datenschutz@direktkanzlei.de
(hereinafter referred to as provider)
Scope of application
to the users of the direktkanzlei.de.website.
With the following declaration we inform you about the nature, the extent and the purposes of the collection, processing and use of your data in connection with the visit of our website.
I. Overview
The provider stores and processes your personal data in compliance with the relevant data protection regulations, in particular the Basic Data Protection Ordinance (GDPR), Federal Data Protection Act (BDSG) and the Telemedia Act (TMG).
The provider observes the principle of data minimization. This means that data will be processed only to the extent necessary for the purposes of processing, as is appropriate and necessary to provide a functional website and with regard to the content and services offered. The processing is carried out either on the basis of prior consent or if this is permitted by legal regulations.
When you access the provider's website, the provider processes certain usage data in order to enable you to use his offer.
All processed personal data will be deleted by the provider after expiry of the storage period.
You have a right of access to your data or to correction, deletion and restriction of the processing of your data, a right of objection to the processing, a right of data transferability and a right of appeal to a supervisory authority.
Further information can be found below.
II. Data protection information according to Art. 13, 14 GDPR and §§ 32 ff. BDSG 2018
1 Definitions
a. Personal Information
Personal data is any information relating to an identified or identifiable natural person (hereinafter referred to as "data subject"); an identifiable natural person is one who can be identified directly or indirectly, in particular by assignment to an identifier such as a name, an identification number, location data, an online identifier or to one or more special features that express the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person.
b. Inventory data
Inventory data means personal data of a user which are necessary for the establishment, content design or change of a contractual relationship between the service provider and the user about the use of telemedia.
c. usage data
Usage data are personal data of a user, which are necessary to enable and invoice the use of telemedia. This includes in particular features to identify the user, information about the beginning and end as well as the extent of the respective use and information about the telemedia used by the user.
d. Processing
Processing means any operation or series of operations carried out with or without the aid of automated procedures in relation to personal data, such as the collection, recording, organisation, sorting, storage, adaptation or alteration, reading, retrieval, use, disclosure by transmission, dissemination or any other form of provision, alignment or combination, restriction, erasure or destruction.
e. Pseudonymisation
Pseudonymisation is the processing of personal data in such a way that the personal data can no longer be assigned to a specific data subject without the use of additional information, provided that this additional information is kept separately and is subject to technical and organisational measures which ensure that the personal data are not assigned to an identified or identifiable natural person;
f. Cookies
Cookies are small text files that are stored on your computer. Cookies always have a validity period, which can be limited to the end of the user session (so-called session cookies) or also exist for a longer period of time (so-called permanent cookies). These permanent cookies remain on your computer and enable the provider or his partner companies (so-called third party cookies) to recognize your computer during your next visit. You can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or refuse the setting of cookies in certain cases or in general. If cookies are not accepted, the functionality of the website may be restricted.
g. Website
A website, also a web presence, is the presence of a private or corporate provider of telemedia on the worldwide web (World Wide Web) - summarized under a certain Internet address. The website includes websites and/or sub-pages and optionally available downloadable documents as well as other downloadable audiovisual media services.
2. description and scope of the processing of your data
In this section we inform you about the purposes for which the personal data are to be processed and the legal basis for the processing.
The provider publishes information about his association, the association services such as his offers for child day care, the events and informs about his educational and advisory concepts via the websites.
a. Processing affecting the entire website
The provider processes the data provided by you in order to enable you to use this website. More detailed explanations can be found in the following remarks.
b. Processing in case of sending e-mails
You can contact the provider via the e-mail addresses provided on the website. The provider processes the data provided by you to answer your contact request.
Data collection (inventory data)
- First and last name
- Company
- Street
- ZIP
- City
- Country
- Phone
- Telefax
- E-Mail
In the case of sending an e-mail, only the aforementioned inventory data will be processed if you inform the provider of this.
The legal basis for processing the data is Art. 6 para. 1 lit. a GDPR, if you have given your consent to the provider, and also Art. 6 para. 1 lit. f GDPR. If the purpose of the establishment of contact is the initiation of a contract, Art. 6 para. 1 lit. b GDPR is also a legal basis for data processing.
Data provided by you will be deleted immediately after your request has been dealt with, in the event that it has not been dealt with within 12 months of the last contact at the latest. The request is settled when the circumstances indicate that the facts in question have been finally clarified.
You have the possibility at any time to revoke your consent to the processing of personal data or to object to the processing of data which is not based on a consent. The exercise of the revocation or objection can take place in particular by e-mail to the above-mentioned contact e-mail address. All personal data that the provider has stored in the course of contacting you will be deleted in this case.
Your right of revocation does not refer in principle to such data, which the supplier needs in the context of the fulfilment of a contract or of pre-contractual measures. However, you may have additional rights.
c. Processing in case of use of the contact form
The provider has a contact form ready for you to send an electronic message to the provider.
Data collection (inventory data)
- Name
- E-Mail
The legal basis for processing the data is Art. 6 para. 1 lit. a GDPR, if you have given your consent to the provider, and also Art. 6 para. 1 lit. f GDPR. If the purpose of the establishment of contact is the initiation of a contract, Art. 6 para. 1 lit. b GDPR is also a legal basis for data processing.
Data provided by you will be deleted immediately after your request has been dealt with, in the event that it has not been dealt with within 12 months of the last contact at the latest. The request is settled when the circumstances indicate that the facts in question have been finally clarified.
You have the possibility at any time to revoke your consent to the processing of personal data or to object to the processing of data which is not based on a consent. The exercise of the revocation or objection can take place in particular by e-mail to the above-mentioned contact e-mail address. All personal data that the provider has stored in the course of contacting you will be deleted in this case.
Your right of revocation does not refer in principle to such data, which the supplier needs in the context of the fulfilment of a contract or of pre-contractual measures. You may, however, have further rights which entitle you to the deletion of your data.
d. Log data processing
When accessing the provider's website, your Internet browser automatically transmits certain data to the provider's server for technical reasons. The following data is collected separately from other data that you may transmit to the provider and used by the provider for the aforementioned purposes:
Data collection (usage data)
- Name of the accessed website or the url
- date and time of retrieval
- Access status / Http status code
- the amount of data transferred in each case
- Website through which the request is sent
- Browser software and software version
- Operating system and version
- IP address (anonymized, shortened by the last 3 digits)
- randomly generated key number of the cookie or session.
The legal basis for the storage of data and log files is Art. 6 para. 1 lit. f GDPR.
If the data is stored in log files, the usage data will be deleted after 7 days at the latest.
Further storage is possible in accordance with the provisions of data protection law. In this case, the IP addresses are deleted or alienated so that it is no longer possible to assign the Internet page access to your computer. The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection on the part of the user. However, you can exercise your right of objection by means of automated procedures in which technical specifications are used, e.g. in the case of anonymization of your IP address by VPN providers.
3. Existence of appropriate safeguards
a. Pseudonymisation
If the provider collects usage data, he always stores these under pseudonyms (in the case of cookies, e.g. using a unique session key). The provider does not combine pseudonymous data with data about the bearer of the pseudonym (e.g. inventory data).
b. Use of encryption technologies
When transferring data between your computer or mobile device and the provider's server, the provider uses the SSL security system (Secure Socket Layer). This technology is designed to protect your data from being read by unauthorized third parties and offers a very high security standard. You can tell that your data is transmitted in encrypted form by the closed display of a key or lock symbol in the lower status bar of your browser.
4. Further processing for other purposes
Unless otherwise stated above, your data will not be passed on to third parties and will not be processed for purposes other than those mentioned.
5. rights of the persons concerned
You have a right of access to the personal data concerning you, as well as to correction or deletion or to limitation of the processing or to a right of objection against the processing, the right to data transferability and the right of appeal to a supervisory authority in accordance with the following description. In the cases of §§ 32 ff. BDSG 2018, however, these claims only exist to the extent provided for under BDSG 2018.
a. Your right to information
You have the right to ask the provider to confirm whether personal data concerning you will be processed. If this is the case, you have a right to information about these personal data and to the following information: the processing purposes; the categories of personal data being processed; the recipients or categories of recipients to whom the personal data have been or are still being disclosed, in particular recipients in third countries or international organisations; where possible, the planned duration for which the personal data are stored or, if this is not possible, the criteria for determining that duration; the existence of a right to have the personal data concerning them rectified or erased or to have their processing restricted by the controller or a right of opposition to such processing; the existence of a right of appeal to a supervisory authority; if the personal data are not collected from the data subject, all available information on the origin of the data; the existence of automated decision-making including profiling (in accordance with Article 22(1) and (4) GDPR) and, at least in these cases, meaningful information on the logic involved and the scope and intended effects of such processing for the data subject.
b. Right to correction
You have the right to request the provider to correct any incorrect personal data concerning you without delay. You have the right to request the completion of incomplete personal data - also by means of a supplementary declaration - if this is compatible with the above-mentioned purposes of processing or if there is a factual reason for this.
c. Right to cancellation
You have the right to request the provider to delete personal data concerning you immediately. We are obliged to delete personal data immediately if one of the following reasons applies:
The personal data are no longer necessary for the purposes for which they were collected or otherwise processed; the data subject withdraws his consent on which the processing was based in accordance with Article 6(1)(a) or Article 9(2)(a) GDPR and there is no other legal basis for the processing; the data subject objects to the processing in accordance with Article 21(1) GDPR and there are no overriding legitimate grounds for the processing or the data subject objects to the processing in accordance with Article 21(2) GDPR; the personal data have been processed unlawfully; the deletion of the personal data is necessary to fulfil a legal obligation under Union law or the law of the Member States to which the data controller is subject; the personal data have been collected in relation to information society services provided in accordance with Article 8(1) GDPR (consent of a child in relation to information society services). If we have made the personal data public and we are obliged to delete them, we will take appropriate measures, including technical measures, taking into account the available technology and implementation costs, to inform data processors who process the personal data that a data subject has requested us to delete all links to this personal data or copies or replications of this personal data.
You have a claim for cancellation in accordance with Art. 17 para. 3 GDPR. You do not have a claim for cancellation to the extent that the processing is necessary for the exercise of the right to freedom of expression and information; for the performance of a legal obligation required for processing under the law of the Union or the Member States to which the controller is subject, or for the performance of a task in the public interest or in the exercise of official authority conferred on the controller; on grounds of public interest in the field of public health in accordance with Article 9(2)(h) and (i) and Article 9(3) GDPR; for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes in accordance with Article 89(1) GDPR, where the law referred to in paragraph 1 is likely to render impossible or seriously prejudicial the attainment of the objectives of such processing, or for the enforcement, pursuit or defence of claims.
d. Right to restriction of processing
You have the right to request us to restrict processing if one of the following conditions is met:
the accuracy of the personal data is disputed by the data subject for a period which allows the controller to verify the accuracy of the personal data; the processing is unlawful and the data subject refuses to delete the personal data and instead requests that the use of the personal data be restricted; the data controller no longer needs the personal data for the purposes of the processing, but the data subject needs them for the purpose of asserting, exercising or defending rights, or the data subject has lodged an objection to the processing referred to in Article 21(1) until it has been established whether the data controller's legitimate reasons outweigh those of the data subject.
Where processing has been restricted, such personal data may only be processed - apart from being stored - with your consent or for the purpose of asserting, exercising or defending rights or protecting the rights of another natural or legal person or on grounds of an important public interest of the Union or a Member State. If you have obtained a restriction on processing, you will be informed by us before the restriction is lifted.
e. Right to data portability
You have the right to receive the personal data concerning you which you have provided to a controller in a structured, current and machine-readable format and you have the right to transmit this data to another controller without hindrance by us or the controller to whom the personal data have been provided, provided that the processing is based on a consent pursuant to Article 6(1)(a) GDPR or Article 9(2)(a GDPR or on a contract pursuant to Article 6(1)(b) GDPR and the processing is carried out using automated procedures.
In exercising your right to data transferability under paragraph 1, you have the right to have the personal data transferred directly from one controller to another controller, where technically feasible. This right must not prejudice the rights and freedoms of others.
The exercise of the right to data transferability is without prejudice to Article 17 GDPR (Right to erasure (“right to be forgotten”). This right shall not apply to processing necessary for the performance of a task in the public interest or in the exercise of official authority conferred on the controller.
f. Right of opposition against the processing
They have the right to object at any time to the processing of personal data concerning them on the basis of Article 6(1)(e) (performance of a task necessary in the public interest) or (f) (protection of the legitimate interests of the controller or a third party) GDPR for reasons arising from their particular situation, including profiling based on these provisions. We will then no longer process the personal data unless we can prove compelling reasons worthy of protection for the processing which outweigh the interests, rights and freedoms of the data subject or the processing serves to assert, exercise or defend legal claims.
If personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling, insofar as it is associated with such direct marketing. If you object to the processing for direct marketing purposes, the personal data will no longer be processed for these purposes.
At the latest at the time of the first communication with you, we must expressly point out your right of objection to the processing described above; this information must be provided in an understandable form separate from other information.
In connection with the use of Information Society services, notwithstanding Directive 2002/58/EC, you may exercise your right of opposition by means of automated procedures (e.g. by pressing "no-tracing" functions on the telephone, by changing browser settings) using technical specifications.
You have the right to object on grounds arising from your particular situation to the processing of personal data concerning you, for scientific or historical research purposes or for statistical purposes in accordance with Article 89(1) GDPR, unless such processing is necessary for the performance of a task in the public interest.
g. Right of appeal to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right of appeal to a supervisory authority, in particular in the Member State where you are staying, working or suspected of having infringed this Regulation, if you believe that the processing of personal data concerning you is contrary to it.
The supervisory authority to which the complaint has been lodged shall inform you, as the complainant, of the status and the results of the complaint, including the possibility of a judicial remedy under Article 78 GDPR.
--- End of privacy policy ---
Dominik J. Fischer
