Privacy Policy
Data Protection Statement
The protection of your data is very important to us. Therefore we would like to inform you in the following section about the type, extent and purposes of the collection and use of your personal data when visiting our website. The legal basis of data protection can be found in the German Federal Data Protection Law (Bundesdatenschutzgesetz, BDSG new) and in the General Data Protection Regulation (GDPR). Insofar as reference is made in this Privacy Policy to the GDPR, we hereby expressly state that it will only apply from 25 May 2018.
For any questions on these topics, please contact the responsible authority and/or our data protection officer.
Responsible Authority
The responsible authority for processing your personal data is
honert + partner mbB
attorneys public accountants tax consultants
Theatinerstr. 14 (Fünf Höfe)
80333 Munich
| Phone | +49 (89) 388 381 0 |
| Fax | +49 (89) 388 381 60 |
| info@honert.de | |
| Internet | www.honert.de |
Data protection officer
You can contact our data protection officer at the above-mentioned postal address by adding “To the data protection officer” or at the e-mail address: dsb@honert.de.
Data processing for the provision of contractual services
You can use our website and our contact details provided there to send us enquiries about mandating or commissioning other contractual services offered by us. Insofar as personal data is transmitted to us in this manner or in any other way for inquiries regarding mandating/commissioning, we process your data in order to answer your inquiries and to implement the mandate. For this purpose we require your complete name and address data as well as information for enforcing or defending your rights. Furthermore, we need your name and address for invoicing. In order to communicate with you within the scope of the mandate, we also require at least your telephone number. Without this data, the contractual relationship cannot be implemented.
In case of suppliers/service providers, we process any personal data provided in this manner or in any other way for our orders and service requests and to pay for the services provided. For this purpose we require the name, the address and the bank account details. Depending on the service/contract, we may require additional data which we then clarify on a case-by-case basis.
The legal basis for processing data is Article 6 para. 1 sentence 1 lit. b GDPR which permits the processing of data for the performance of a contract or pre-contractual measures.
Data processing for communication with you
Any communication data provided by you (name, address, telephone number, e-mail address, and fax number) will be processed by us in order to contact you, to communicate and to answer your inquiries. Any personal data that you provide to us will only be processed for correspondence and answers to your enquiries or only for the purpose for which you have made the data available to us.
The legal basis for processing data is Article 6 para. 1 sentence 1 lit. b GDPR which permits the processing of data for the performance of a contract or pre-contractual measures.
Data processing for applications
You can send us applications for jobs in our law firm via our website and the contact details provided there. If you submit personal data to us in this manner or in any other way, we process your data to assess, process and reply to your application and, if necessary, to prepare your employment.
The legal basis for processing data is Article 6 para. 2 GDPR, § 26 para. 1 BDSG (new) which permits the processing of data for the decision on the establishment, for the establishment and the implementation of employment relationships.
Access data and recording of logs
By visiting our website, any information about accessing the website, such as date, time, pages viewed, IP address, browser type, browser system, provider, referrer URL (the original URL from which you came to the website), the amount of data transferred and other data in this category, may be stored. This data is anonymized and is stored temporarily for statistical purposes and for technical security reasons only, in particular to prevent attempts to attack the web server. It is not possible for us to draw conclusions about individual persons on the basis of this data. A comparison of this data with other data stocks or a transmission to third parties, whether for commercial or non-commercial purposes, will not occur.
The legal basis for processing data is Article 6 para. 1 sentence 1 lit. f GDPR which permits the processing of data to protect the legitimate interests of the controller, provided that the interests or fundamental rights and freedoms of the person concerned do not prevail. Our aim is to ensure data security on our website and to optimize our website.
Subscription to receiving our newsletter
If you would like to subscribe to our newsletter, we require your e-mail address as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. For this purpose you will receive a confirmation e-mail with a link (Double-Opt-In) to the registered e-mail address. Only after clicking on this link the subscription is completed. The purpose of the procedure is to be able to prove your registration and, if necessary, to clarify a possible misuse of your personal data. In order to personalize the newsletter, we only collect your salutation, titles, if any, and your name. We do not collect any further data in this context. We use this data exclusively for sending the requested newsletter. Insofar as we use a commissioned processor for sending the newsletter, we comply with the applicable data protection laws.
By subscribing to our newsletter, you agree that we may periodically send you e-mails containing information on current topics, our services and events to the email address provided. You can revoke your consent to receive these e-mails at any time. It is sufficient to send a message in text form to the contact data provided in section 1 (e.g. e-mail, fax or letter).
The data will be processed on the basis of your consent pursuant to Article 6 para. 1 sentence 1 lit. a GDPR. You can revoke your consent at any time. The lawfulness of the data processing procedures already performed remains unaffected by the revocation.
Cookies
We are using so-called cookies. Cookies are small text files which are stored on a visitor’s computer and contain data about the respective user in order to give the user access to various functions. We use session cookies on our website. A session cookie is temporarily stored on the computer you are using while navigating through the website. A session cookie will be deleted as soon as you close your Internet browser or as soon as your session expires after a certain period of time has elapsed. The storage of a cookie ensures that you do not have to enter your personal settings and preferences repeatedly each time you visit our website. This will save you time and will make the use of our website more comfortable. The cookie serves only the purpose of improving usability.
Most browsers accept cookies automatically – so if you wish to disable the use of cookies, you may have to actively delete or block any cookies or prevent the storage of cookies by adjusting the settings of your browser software. Please note, however, that if you refuse the use of cookies, you may still be able to visit our website, but some functions may be affected in their function.
The legal basis for processing data is Article 6 para. 1 sentence 1 lit. f GDPR which permits the processing of data to protect the legitimate interests of the data controller, provided that the interests or fundamental rights and freedoms of the person affected do not prevail. Our aim is to improve the design and usability of our website.
Data processing for compliance with legal obligations
Additionally, we may process your data to comply with legal obligations (e.g. regulatory requirements, commercial and tax retention and verification obligations).
The legal basis for processing data is Article 6 para. 1 sentence 1 lit. c GDPR which permits processing for compliance with a legal obligation.
Categories of recipients of personal data
Your mandate and communication data will be forwarded to the responsible lawyer or employee within our law firm for answers to your inquiries, for communication or for the implementation of the mandate/commission. The legal basis for this is Article 6 para. 1 sentence 1 lit. b GDPR which permits the processing of data for the performance of a contract or pre-contractual measures.
In case of applications, the data will also be forwarded to the relevant office and the relevant staff within our law firm. The legal basis for this is Article 6 para. 2 GDPR, § 26 para. 1 GDPR (new) which permits the processing of data for the decision on the establishment, for the establishment as well as for the implementation of employment relationships.
Your personal data will only be disclosed or otherwise transmitted to third parties outside our law firm if this is necessary for the purpose of handling the mandate or for invoicing purposes or if you have given your prior consent or if there is a statutory basis for the disclosure. In the course of handling your mandate, your data will be disclosed to your opponents and their representatives, to your potential contractual partners and their representatives and to courts or authorities, for example, for notifications of representation, contract negotiations and/or assertion or exercise of the defense of your claims. The attorney-client privilege shall remain unaffected. As far as data which are subject to the attorney-client privilege are concerned, a disclosure to third parties shall only takes place in consultation with you.
Additionally, as part of the invoicing process, the service providers assigned by us are provided with the necessary data for accounting and the execution of payments. The data disclosed in this way may only be used by our service providers for the performance of their task. These service providers are also subject to statutory confidentiality obligations.
Insofar as we assign third parties to carry out and perform data processes, the provisions of the General Data Protection Regulation shall be complied with. Service providers who support us in providing our services to you are in particular hosting providers, e-mail service providers/software providers et al. for the production, the processing and handling and the provision of documents and information as well as for the recording of service provision and the invoicing of services, IT service providers, IT specialists, newsletter dispatch service providers, and as the case may be translation companies and foreign law firms.
Duration of data storage
In principle, we delete your data as soon as it is no longer required for the above-mentioned purposes, unless temporary storage is still required because of statutory proof and storage obligations. Therefore, a legal retention period of six years applies to the storage of files and the personal data collected by us within the scope of our mandate (Sec. 50 para. 1 German Federal Lawyers’ Act (BRAO)). Furthermore, there are storage periods of up to ten years for tax documents in accordance with Sec. 147 German Fiscal Code (AO). Additionally, we store your data for the period during which claims can be asserted against our law firm (statutory limitation period of three or up to thirty years).
Data security
Your personal data is transmitted securely by encryption. We use the SSL (Secure Socket Layer) coding system. Furthermore, we protect our website and other systems through technical and organizational measures against loss, destruction, access, modification or distribution of your data by unauthorized persons. Our security measures are continuously improved in accordance with technical developments. We expressly point out that data transmission on the Internet has security gaps and cannot be completely protected from access by third parties which applies in particular and above all to communication via e-mail.
Links to third-party websites
You will find links to third-party websites on our homepage. The respective site operator is responsible for data processing on these websites. Any data processing on those pages begins as soon as you click on the respective link or follow the URL stored there.
Our website contains links to a map of the respective office location on Google Maps. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The purpose and scope of data collection and the further processing and use of the data by Google Maps as well as the relevant rights can be found in Google’s data protection information: https://policies.google.com/privacy?hl=en&gl=de.
Rights of the persons affected
You have the right to request information about any data collected and stored about you at any time within the limits of the statutory provisions. In particular, you have the right to:
- request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of the personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right of correction, deletion, restriction of processing or objection, the existence of a right of appeal, the origin of your data, if these were not collected by us, and the existence of automated decision-making procedures including profiling and, if applicable, substantive information on the details, Article 15 GDPR;
- demand without delay the correction of incorrect and/or completion of the personal data stored with us, Article 16 GDPR;
- request the deletion of your personal data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise and defend legal claims, Article 17 GDPR;
- request the limitation of the processing of your personal data if the accuracy of the data is objected to by you, the processing is unlawful, but you oppose the deletion of the data, but you need it to establish, exercise and defend legal claims, Article 18 GDPR or you have filed an objection to the processing, Article 21 GDPR;
- receive the personal data you have provided to us in a structured, common machine-readable format or to request its transfer to another controller, Article 20 GDPR;
- file a complaint to a supervisory authority pursuant to Article 77 GDPR if you can claim a violation of the collection, processing, use or storage of your data or of your other rights as a person affected.
Right of revocation and objection
You may revoke your consent to the processing of your personal data given to us pursuant to Article 6 para. 1 sentence 1 lit. a GDPR at any time, Article 7 para. 3 GDPR.
In accordance with Article 21 GDPRyou also have the right to object to the processing of personal data concerning you, which is carried out on the basis of Article 6, paragraph 1, sentence 1, lit. f GDPR, at any time for any reason arising from your specific situation. Processing will then be omitted unless there are compelling interests requiring protection which outweigh your interest in not processing or the processing serves to assert, exercise and defend legal claims.
Please use the contact data given above for your revocation or objection.