Data protection information

When using the website www.rdp-law.de, its functionalities and by entering your contact details through an enquiry, you provide us with personal data which we process for the purpose of processing your enquiries. These data are treated by us only strictly appropriated in the context of the data protection laws.

Responsible in the sense of the data protection laws is:
RDP Röhl · Dehm & Partner Rechtsanwälte mbB
Moritzplatz 6
86150 Augsburg

General information on data processing by us

Scope of processing of personal data in general
In principle, we process personal data via our website only to the extent necessary, to provide a functioning website as well as our content and services.
As part of our data protection information, we inform you in accordance with Art. 12, 13 GDPR about the processing of personal data when you visit our website and interact with us via this website.
Legal basis for the processing of personal data
The respective legal basis for the processing of personal data results from the basic data protection regulation, Article 6 No.1 lit. a) - f) GDPR

Basic Principles:

If the affected person consents, Art. 6 No.1 lit. a) GDPR is the legal basis.
Art. 6 No.1 lit. b) GDPR is the legal basis for the processing of personal data necessary for the performance of a contract to which the affected person is a party or for processing operations in the case of pre-contractual measures.
If processing is required to fulfil a legal obligation of the data controller, Art. 6 No.1 lit. c) GDPR is the legal basis.
If vital interests of the affected person or another natural person make the processing necessary, Art. 6 No. 1 lit. d) GDPR is the legal basis.
If the processing is necessary for the performance of a task which is in the public interest or in the exercise of official authority vested in the controller, the legal basis is Art. 6 No.1 lit. e) GDPR.
If the processing is necessary to safeguard a legitimate interest of our law firm and the interests, fundamental freedoms or fundamental rights of the data subject do not prevail, the legal basis is Art. 6 No. 1 lit. f) GDPR.

On which of these legal grounds the respective processing is based, results from the farther representations of these data protection references.

Provision of personal data required for the conclusion of a contract or due to statutory storage obligations

When you contact us, we collect personal data. Depending on the nature of your enquiry, it may be that the approach already serves to prepare a client relationship. In this case, the requested data is necessary in order to establish a client relationship with you. In addition, this data may then be subject to further legal storage obligations.
Before providing your personal data, you are welcome to contact your respective contact person in our office to find out about the further use.

Automatic data processing when accessing the website www.rdp-law.de
Personal data is already processed when the page is opened. This happens automatically, without you having to carry out any further actions such as filling out and sending a contact form.
This automated processing concerns:

Processing the IP address
1. Description and scope of data processing
When this page is opened, requests are sent to the server, which must answer them. Your IP address must be collected and processed in order to answer the corresponding server requests.

2. Legal basis for data processing
The legal basis for the processing of these data is Art. 6 No. 1 lit. f) GDPR.

3. Purpose of the data processing
The purpose of processing your IP address is to ensure the functionality of the website and to provide technical access.

4. Legitimate interest
The justified interest in the temporary storage of the IP address lies in the fact that the functionality and provision of the technical recall option of the website is impossible without this storage.

5. Duration of storage
The data will be deleted again as soon as further storage is no longer necessary due to the achievement of the purpose.
The data is collected for the purpose of providing the website and therefore the achievement of the purpose is finalized upon termination of the retrieval process.

6. Recipient of personal data
The IP address is processed by our hosting provider HostEurope on behalf of our customers on the basis of an order processing agreement pursuant to Art. 28 No. 2 - No. 4 GDPR.

Processing as part of hosting
1.Description and scope of data processing
We use the services of our hosting service provider for the technical realisation of the website and its accessibility as well as its technical maintenance.
This includes the provision of storage and database services as well as their maintenance and care.

2. Legal basis for data processing
The legal basis for the processing of these data is Art. 6 No. 1 lit. f) GDPR.

3. Purpose of the data processing
The purpose of the processing is the realisation of the online offer as well as the recognition of malfunctions and attempted break-ins.

4. Legitimate interest
The justified interest in commissioning the hosting service provider is the external technical competence and the provision of a functional and uncompromised technical Website environment.

5. Recipients of personal data and data categories:
The data will be hosted at HostEurope within the framework of an order processing agreement pursuant to Art. 28 No. 2 - No. 4 GDPR.
Data categories affected are:

User data
communication data
contact details

Processing of Server Log Files
1. Description and scope of data processing
The IP addresses collected when calling up this page are also stored in so-called server log files in order to detect technical faults and/or attempts to manipulate or break into the server structure and to make them correctable.

In addition, the hosting provider of this website automatically collects, stores and processes information in so-called server log files, which are automatically transmitted by your browser.

These are:

Browser type and browser version
Referrer URL
Hostname of the accessing computer
Time of the server request

However, this information is not merged with other data sources.

2. Legal basis for data processing
The legal basis for the processing of these data is Art. 6 No. 1 lit. f) GDPR.

3. Purpose of the data processing
The purpose of processing your IP address and the above information is to detect malfunctions and intrusion attempts.

4. Legitimate interest
The legitimate interest in processing the IP address and the above information is to provide a functional and uncompleted technical website environment.

5. Duration of storage
The data will be deleted within 7 days.

6. Recipient of personal data
The IP address and the above-mentioned information are processed by the hosting provider HostEurope on behalf of an order processing agreement pursuant to Art. 28 No. 2 - No. 4 GDPR.

Use of cookies
1. Description and scope of data processing
The website www.rdp-law.de uses a so-called "cookie". Cookies are text files which are stored in the memory and/or on a data carrier of your device used to visit the site and which are processed by your Internet browser in accordance with the settings stored there.

The content of this cookie is:

language_selector
[Stores which language was selected by the visitor]

2. Legal basis for data processing
The legal basis for the processing is Art. 6 No. 1 lit. f) GDPR.

3. Purpose of the data processing
This cookie contains technical information for the provision of website functionalities within the scope of use. This enables the technical realisation of the website.

4. Legitimate interest pursuant to Art. 6 No. 1 lit. f) GDPR
The installed cookie contains only technical data. The use of this cookie is necessary to be able to offer the user a functionality of our website that meets his expectations and to be able to select the chosen language when calling up further pages.

5. Duration of the storage as well as objection and removal possibilities
The cookie used on this site is a so-called "session cookie", which is used to adjust the language selection for the duration of the visit to the website. "Session cookies" are automatically deleted from your computer from the browser cache / memory at the end of your website visit and/or when you close your browser, provided you have activated this functionality in your browser.

Please check the settings of your Internet browser (e.g. Firefox, Internet Explorer, Edge, Chrome, Opera, Safari). Your internet browser also gives you the option of controlling the handling of cookies or deactivating them altogether. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it is possible that not all functions of the website can be used to their full extent.

Processing of personal data via the contact form
1. Description and scope of data processing
The provided contact form on our website is only used for electronic contact. We process your personal data to answer your contact request.

The following data will be processed for inquiries via the contact form:

Your name*
Email address*
Your message
telephone number

The fields marked with a "*" symbol are mandatory fields. If not filled out completely, no request can be sent to us via this contact form.
Please only enter the telephone number if you would like us to contact you by telephone.
The indication of the name serves the personal address in the context of the treatment of your inquiry.
If you simply enter the data in the forms, no data will yet be transmitted to us, this will only happen after pressing the "Send" button.

The following data will also be processed at the time the message is sent:

Date and time of the request

2. Legal basis for data processing
The legal basis for the processing of personal data to process and respond to your enquiries is Art. 6 No. 1 lit. f) GDPR.
The legal basis for the processing of personal data used for the preparation and/or execution of a contractual relationship is Art. 6 No. 1 lit. b) GDPR.

3. Purpose of the data processing
The processing of personal data via the contact form serves the sole purpose of contacting the client and enabling the firm to address the client in an informative manner on the client's initiative (answering the request).
Depending on the intention and content of your request, the purpose may also be the initiation and/or execution of a contractual relationship, in which case the purpose may also be the maintenance of the client relationship.

4. Legitimate interest

The legitimate interest in the data processing lies in the possibility to process your inquiry and to be able to answer according to your inquiry. The collected data will be processed on the basis of an outgoing request from you. This processing is also in your interest in order to be able to respond to your inquiry in accordance with your expectations.

5. Duration of storage

The data is deleted within 6 months after it is no longer necessary for the purpose of the collection or is no subject to any further legal storage obligations (e.g. 10 years after AO [German Tax Act], 6 years according to HGB [German Commercial Law]). This is the case for your data entered in the contact form when the respective conversation with the user has ended.

The conversation is terminated when the circumstances show that the matter in question has been conclusively clarified.

Processing of personal data via the contact form "Training courses and workshops".

1. Description and scope of data processing
The additional provided contact form for training courses and workshops, is only used for electronic contact. We process your personal data to answer your contact request.

The following data will be processed for enquiries via the contact form:

Interest
Place of training
Group size
Name of contact person *
Email address*
Telephone number
Remark

The fields marked with a "*" symbol are mandatory fields. If not filled out completely, no request can be sent to us via this contact form.

Please only enter the telephone number if you would like us to contact you by telephone.

The indication of the name serves the personal address in the context of the treatment of your inquiry.

If you simply enter the data in the forms, no data will yet be transmitted to us, this will only happen after pressing the "Send" button.
The following data will also be processed at the time the message is sent:

Date and time of the request

2. Legal basis for data processing
The legal basis for the processing of personal data for the processing and answering of your inquiries is Art. 6 No. 1 lit. f) GDPR.
The legal basis for the processing of personal data used for the preparation and/or execution of a contractual relationship is Art. 6 No. 1 lit. b) GDPR.

3. Purpose of data processing
The processing of personal data via the contact form serves the sole purpose of contacting the client and enabling the firm to address the client in an informative manner on the client's initiative (answering the request).
Depending on the intention and content of your request, the purpose may also be the initiation and/or execution of a contractual relationship, in which case the purpose may also be the maintenance of the client relationship.

4. Legitimate interest
The legitimate interest in the data processing lies in the possibility to process your inquiry and to be able to answer according to your inquiry. The collected data will be processed on the basis of an outgoing request from you. This processing is also in your interest in order to be able to respond to your inquiry in accordance with your expectations.

5. Duration of storage
The data is deleted within 6 months after it is no longer necessary for the purpose of the collection or is no subject to any further legal storage obligations (e.g. 10 years after AO [German Tax Act], 6 years according to HGB [German Commercial Law]). This is the case for your data entered in the contact form when the respective conversation with the user has ended.
The conversation is terminated when the circumstances show that the matter in question has been conclusively clarified.

Processing of personal data via e-mail

1. Description and scope of data processing
In the case of enquiries via e-mail, personal data is processed depending on the content of your e-mail:

This regards your e-mail address, date and time as well as the content of the message. Depending on the content of your e-mail, the following personal data may also be processed:

First name, last name
telephone number

The data will be used exclusively for the processing of the conversation and/or the execution and/or initiation of a contractual relationship.

2. Legal basis for data processing
As a result of the specific request of the user via e-mail, the legal basis for the processing of data is Art. 6 No. 1 lit. f) GDPR. If contact via e-mail is also aimed at the conclusion and/or execution of a contract, the additional legal basis for processing is Art. 6 No. 1 lit. b) GDPR.

3. Purpose of data processing
The processing of personal data via your e-mail enquiry serves the sole purpose of establishing contact and enabling the law firm to address the client in an informative manner on the client's initiative.
Depending on the intention and content of your request, the purpose may also be the initiation and/or execution of a contractual relationship.

5. Duration of storage
The data is deleted within 6 months after it is no longer necessary for the purpose of the collection or is no subject to any further legal storage obligations (e.g. 10 years after AO [German Tax Act], 6 years according to HGB [German Commercial Law]). This is the case for your data transmitted via e-mail, when the respective conversation with the user has ended.
The conversation is terminated when the circumstances show that the matter in question has been conclusively clarified.

Processing personal data via telephone

1. Description and scope of data processing
In the case of telephone enquiries, personal data is processed depending on the content of the call:

Depending on the information you provide during the call, this may also include the following personal data:

First name, last name
telephone number
call duration

The data will be used exclusively for the processing of the conversation and/or the execution and/or initiation of a client relationship.

2. Legal basis for data processing
As a result of the specific request of the user via telephone, legal basis for the processing of data is Art. 6 No. 1 lit. f) GDPR. If the establishment of contact by telephone also aims at the conclusion and/or execution of a mandate relationship, the additional legal basis for the processing is Art. 6 No. 1 lit. b) GDPR.

3. Purpose of data processing
The processing of personal data by telephone is intended solely for the purpose of contacting the client and enabling the firm to address the client in an informative manner at the client's initiative.
Depending on the intention and content of your request, the purpose may also be the initiation and/or execution of a contractual relationship, as well as the maintenance of the client relationship.

5. Recipient of personal data
Administrative access to the telephone system data within the scope of maintenance and service services:
Support service provider for the telephone system
Our service providers act on our behalf and on the basis of an order processing agreement pursuant to Art. 28 No. 2 - 4 GDPR.

6. Duration of storage
The data is deleted within 6 months after it is no longer necessary for the purpose of the collection or is no subject to any further legal storage obligations (e.g. 10 years after AO [German Tax Act], 6 years according to HGB [German Commercial Law]).

Processing of personal data via fax
1. Description and scope of data processing
In the case of enquiries by fax, personal data will be processed depending on the content of your message:

This regards your fax number, date and time as well as the content of the message. Depending on the content of your message, the following personal data may also be processed:

First name, last name
fax number
Time Date

The data will be used exclusively for the processing of the conversation and/or the execution and/or initiation of a client relationship.

2. Legal basis for data processing
As a result of the specific request of the user via fax legal basis for the processing of data is Art. 6 No. 1 lit. f) GDPR. If the establishment of contact by fax also aims at the conclusion and/or the execution of a mandate relationship, the additional legal basis for the processing is Art. 6 No. 1 lit. b) GDPR.

3. Purpose of data processing
The processing of personal data concerning your request by fax is solely for the purpose of establishing contact and enabling the firm to address the client in an informative manner at the initiative of the client.
Depending on the intention and content of your enquiry, the purpose may also be the initiation and/or execution of a contractual client relationship.

5. Duration of storage
The data is deleted within 6 months after it is no longer necessary for the purpose of the collection or is no subject to any further legal storage obligations (e.g. 10 years after AO [German Tax Act], 6 years according to HGB [German Commercial Law]).
This is the case for fax enquiries when the respective conversation with the user has ended.
The conversation is then ended when it results from the circumstances that the circumstances concerned have been conclusively clarified.

Processing of personal data for client contact and transfer of visa cards

1. Description and scope of data processing
We process personal data of the involved contact persons and employees within the scope of establishing contact, by surrendering business cards or carrying out the business and client relationship. In most cases, this involves the contact data of the internal contact persons communicated to us by our clients or business partners.

This data is entered into our office system and processed in the Outlook address book.

These data can be:
Name, first name
Company
email address
Telephone number, mobile number
Position in the company

2. Legal basis for data processing and legitimate interest
The legal basis for the processing is Art. 6 No. 1 lit. b) GDPR, insofar as the data is processed for the initiation or execution of a contractual or mandate relationship.
In addition, the legal basis for processing employees as contact persons is Art. 6 No. 1 lit. f) GDPR, as the processing is carried out in the legitimate interest of the employees.
This legitimate interest results from the fact that the data is handed over to us for the cultivation of contacts and for a later establishment of contact.
In addition, the processing of contact data is necessary to maintain a business relationship.

3. Purpose of data processing
The data is processed exclusively for the purpose for which the data was provided to us (by handing over the business card, by naming the responsible contact person, etc.).

These purposes can be:
When a business card is handed over, the purpose is to establish contact at a later date to discuss common business interests.
The purpose of naming a contact person is to carry out concrete contractual measures, usually within the framework of processing the mandate.

4. Duration of storage
The data is deleted within 6 months after it is no longer necessary for the purpose of the collection or is no subject to any further legal storage obligations (e.g. 10 years after AO [German Tax Act], 6 years according to HGB [German Commercial Law]).

5. Recipient of personal data
Administrative access to the data within the scope of maintenance and services:
IT service provider and support of the office administration system
Our service providers act on our behalf and on the basis of an order processing agreement pursuant to Art. 28 No. 2 - 4 GDPR.

6. Transfer of personal data to a third country
There are no plans to transfer personal data to a third country or to an international organisation.

Processing of personal data in the context of the processing of mandates
1. Description and scope of data processing
We process personal data by telephone, fax, e-mail, post and beA as part of processing the mandate.
On the one hand, these are personal data of our clients and their employees.
Beyond, we also process data of opponent representatives, courts and authorities as well as their employees and opponents.

This data is entered into our office system and processed in Outlook.

This data can be:
Name, first name
Company and
email address
Telephone number, mobile number
bank account
Further facts and data necessary for the processing of the mandate, communicated to us by our clients or the opposing party/representative of the opposing party

2. Legal basis for data processing and legitimate interest
The legal basis for the processing is Art. 6 No.1 lit. b) GPRD, insofar as the data is processed for the initiation or execution of a mandate relationship.

In addition, the legal basis for employees as contact persons is Art. 6 No. 1 lit. f) GDPR, as the processing is carried out in the legitimate interest of the employees.

The legal basis for the processing of data of opponents and representatives of opponents is Art. 6 No. 1 lit. f) GDPR, as the processing is carried out in the legitimate interest of our mandates.

This legitimate interest results from the fact that the data for the processing of the mandate is either handed over to us by our clients or by the opponents and/or their representatives themselves and that without the processing the mandate handling and thus a pursuit of the legal interests of our clients is not possible.

3. Purpose of data processing
The data is processed for the purpose of handling the mandate and safeguarding the interests of our clients and clarifying their individual concerns.

Purposes can be in particular:

Correspondence with clients, opponents, representatives of opponents, courts and authorities
Enforcement of legal claims by our clients
Clarification of the situation to enable clearance of the legal situation
mandate administration

5. Recipient of personal data
Administrative access to the data within the scope of maintenance and services:
IT service provider and support of the office administration system

Our service providers act on our behalf and on the basis of an order processing agreement pursuant to Art. 28 No. 2 - 4 GDPR.

In addition, the data may be passed on to courts for the purpose of enforcing legal claims and to authorities within the framework of the processing of mandates. This disclosure is made on the basis of Art. 6 No. 1 lit. f) GDPR, as our clients have a legitimate interest.

6. Transfer of personal data to a third country
There are no plans to transfer personal data to a third country or to an international organisation.

Processing of personal data in the context of the application procedure
1. Description and scope of data processing
In job advertisements or as part of our Internet presence, we regularly provide information about current vacancies. You have the opportunity to apply for these positions. You can send us these applications either by post or by e-mail.

Data that you send us as part of the application process may be:

Name, address and contact details
Curriculum vitae including all other details
Personal cover letter
qualifications
interests

If you have sent us your data via e-mail, we will also process your e-mail address, date and time and the content of the message. Depending on the content of your e-mail, the following personal data may also be processed:

First name, last name
telephone number

The data will be used exclusively within the framework of the application procedure for the decision on the staffing of the columns.

2. Legal basis for data processing
The legal basis for the processing of the data within the framework of the application procedure is Art. 6 No. 1 lit. b) GDPR, § 26 No. 1 BDSG (German Data Protection Act).

If you provide us with special categories of personal data within the framework of the application procedure, such as a severe disability or other health data, which are necessary for the assessment of your suitability for a specific position, the processing of this data communicated on your initiative will take place in accordance with Art. 9 No. 2 lit. b), lit. h) GDPR, § 26 No. 3 BDSG.

3. Purpose of data processing
The processing of personal data within the framework of the application procedure serves the sole purpose of personnel planning and the establishment of employment relationships.

4. Duration of storage
The data in case of rejection of an application will be deleted within 6 months after rejection. Data of successful applications are subject to the storage obligations resulting from the labour law and social law regulations, the AO and the HGB.

5. Transfer to a third country
It is not intended to transfer the personal data to a third country or to an international organization.

6. Necessity of the provision
The provision of the data is necessary because otherwise it is not possible to consider the application in the application process.

7. Automated decision-making / profiling
No automated decision-making or so-called profiling takes place.

Rights of the person concerned
If your personal data is processed, you are the person concerned within the scope of the Data Protection Regulation. You therefore have the following rights against the responsible processor.

To exercise your rights in relation to us as the responsible processor, please contact the following e-mail address: dsb.intern(at)rdp-law.de

1. Right to information - Art. 15 DS-GVO
You have the right to ask the data processor to confirm whether your personal data is processed.

In the event of such processing, you have the right to be informed about this personal data and of the following information:

the purposes for which the personal data is processed;
the categories of personal data processed;
the recipients or categories of recipients to whom the personal data has been or will be disclosed;
where possible, the intended duration for which the personal data will be stored or, if this is not possible, the criteria for determining the duration of the storage;
the existence of a right to rectify or delete personal data relating to you, a right to limit the processing by the controller or a right to object to such processing;
the existence of a right of appeal to a supervisory authority;
all available information on the origin of the data if the personal data is not collected from the data subject;
the existence of automated decision-making, including profiling, in accordance with Article 22 (1) and (4) of the GDPR and - at least in these cases - meaningful information on the logic involved and the scope and intended effects of such processing on the data subject.

In addition, you have the right to request information as to whether the personal data concerning you will be transferred to a third country or to an international organisation. In this context, you may also request to be informed of the appropriate guarantees pursuant to Art. 46 GDPR in connection with the transfer.

2. Right to rectification - Art. 16 GDPR
Against the responsible processor you have the right to immediately rectify and/or complete the data concerning you, if the personal data processed is incorrect or incomplete.

3. right to cancellation - Art. 17 GDPR
You have the right to demand the immediate deletion of your personal data at any time, provided that one of the following reasons is present:

the personal data concerning you is no longer necessary for the purposes for which it was collected or otherwise processed;
You have withdrawn your consent on which the processing according to Art. 6 No. 1 lit. a) or Art. 9 No. 2 lit. a) GDPR was based and there is no other legal basis for the processing;
You have objected to the processing pursuant to Art. 21 No. 1 GDPR and there are no superior legitimate reasons for the processing, or you have objected to the processing pursuant to Art. 21 No. 2 GDPR;
the personal data concerning you has been unlawfully processed;
the deletion of personal data relating to you is necessary to fulfil a legal obligation under Union law or the law of the Member States to which the controller is subject;
the personal data concerning you has been collected in relation to information society services offered according to Art. 8 No. 1 GDPR.

Exceptions:

A right to deletion does not exist insofar as processing is necessary

for the exercise of the right of freedom of speech and information;
to fulfil a legal obligation according to which processing is subject to under the law of the Union or of the Member States to which the controller is subject or to perform a task carried out in the public interest or in the exercise of official authority vested in the controller;
on grounds of public interest in the field of public health in accordance with Art. 9(2)(h) and (i) and Art. 9(3) GDPR;
for archival, scientific or historical research purposes in the public interest or for statistical purposes in accordance with Art. 89(1) of the GDPR, insofar as the law referred to in point (a) is likely to make it impossible or seriously prejudicial to the attainment of the objectives of such processing, or
for the assertion, exercise or defence of legal claims.

4. Right to limitation of processing - Art. 18 GDPR
You have the right to request the restriction of your personal data under the following conditions:

if you dispute the accuracy of the personal data concerning you for a period of time that enables the responsible processor to verify the accuracy of the personal data;
if the processing is unlawful and you refuse the deletion of the personal data and instead request the restriction of the use of the personal data;
if the processor no longer needs the personal data for the purposes of the processing, but you need it to assert, exercise or defend legal claims, or
if you have lodged an objection against the processing according to Art. 21 No. 1 GDPR and it has not yet been determined whether the legitimate reasons of the data processor outweigh your grounds.

If the processing of personal data concerning you has been restricted, such data may only be processed - apart from storage - with your consent or for the purpose of asserting, exercising or defending legal claims or for the protection of the rights of another natural or legal person or for reasons of an important public interest of the Union or a Member State.

If the restriction on processing has been limited as a result of the above conditions, you shall be informed by the processor before the restriction is revoked.

5. Right to information - Art. 19 GDPR
If you have exercised any of your rights to rectification, deletion or limitation of processing, we are obliged to notify all recipients to whom the personal data concerning you has been disclosed about the rectification, deletion or limitation of processing, unless this proves impossible or involves disproportionate effort.

You also have the right to be informed of such recipients.

6. Right to data transfer - Art. 20 GDPR
You have the right to receive your personal data that you have provided to the responsible processor in a structured, common and machine-readable format. In addition, you have the right to communicate this data to another data controller without being hindered by the controller to whom the personal data was provided, as long as:

(a) the processing is based on a consent according to Art. 6 No. 1 lit. a) GDPR or Art. 9 No. 2 lit. a) GDPR or on a contract according to Art. 6 No. 1 lit. b) GDPR and

(b) the processing is carried out with automated methods.

In exercising this right to data transfer, you also have the right to request that the personal data concerning you be transferred directly by a person responsible to another person responsible, insofar as this is technically feasible.

7. Right of objection - Art. 21 GDPR
You have the right to object the processing of personal data at any time according to Art. 6(1) e) or (f) GDPR for reasons arising from your particular situation; this also applies to profiling based on these provisions.

We will no longer process the personal data concerning you unless we can prove compelling reasons for the processing which outweigh your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims. In the case of data processing within the framework of mandate processing, the processing serves to assert the exercise or defence of our clients' legal claims, which is why the right of objection only exists under this restriction for the relevant data processing.

If personal data is processed for the purpose of direct advertising, you have the right to object at any time against the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is connected with such direct advertising.

If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

You have the possibility to exercise your right of objection through automated procedures using technical specifications in connection with the use of Information Society services, notwithstanding the Directive 2002/58/EC.

8. Right to revoke the declaration of consent under data protection law
You have the right to revoke your declaration of consent under data protection law at any time. The revocation of your consent does not affect the legality of the processing that took place on the basis of your consent until you revoke your consent.

9. Right to appeal to a supervisory authority - Art. 77 GDPR
Regardless of any other administrative or judicial remedy, you have the right to complain to a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of presumed infringement, if you consider that the processing of your personal data is contrary to the provisions of the GDPR.

The supervisory authority where you lodge a complaint must inform you, as the complainant, about the status and outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.

This data protection information is updated at regular intervals.