1. Name and contact details of the data controller and the company data protection officer
This data protection information applies to data processing by:
Glock Liphart Probst & Partner
Phone: +49 (0) 89 / 23 11 88-0
Fax: +49 (0) 89 / 260 96 31
The data protection officer of Glock Liphart Probst & Partner Rechtsanwälte mbB can be contacted at the above address, for the attention of Mr. Florian Siegl, or by email to firstname.lastname@example.org.
2. Collection and storage of personal data and the nature and purpose of their use
a) When visiting the website
When you visit our website www.glock-liphart-probst.de, the browser used by your terminal device will automatically transmit data to our website server. We automatically collect and store information in so-called server log files which your browser automatically transfers to us. This data are temporarily stored in a so-called log file. The following data are collected without your intervention and stored until automated erasure:
- IP address of the accessing computer,
- the hostname of the accessing computer
- date and time of the server request,
- name and URL of the retrieved file,
- website from which the access is made (referrer URL),
- the browser used (browser type and browser version) and, if applicable, the operating system of your computer as well as the name of your access provider.
These data will be processed by us for the following purposes:
- Ensuring a smooth connection to the website (presentation of his website without technical errors),
- ensuring the convenient use of our website,
- assessment of system security and stability (optimisation of the website), and
- for further administrative purposes.
b) When using our contact form
For questions of any kind, we provide you with the option of contacting us via a form on the website. For this, you are required to enter a valid e-mail address so that we know from whom the request originates and are able to answer it. Further information can be provided on a voluntary basis. Data processing for the purpose of contacting us is carried out in accordance with Art. 6 (1) sent. 1 lit. a) GDPR on the basis of your voluntarily given consent. The personal data we collect in the context of the use of the contact form will be automatically erased after completion of your request.
3. Retention period
4. Information on data transfers to the US and other third countries
Among the tools we use, some are from companies based in the USA or other countries that are not considered safe third countries under data protection law (this is expressly pointed out in each individual case in this data protection notice). When these tools are active, your personal data may be transferred to and processed in these third countries. We would like to point out that in these countries, a level of data protection comparable to that in the EU cannot be guaranteed. For example, US companies are required to hand over personal data to security agencies, without you as the data subject being able to take legal action against such disclosure. It is therefore possible that US authorities (e.g. intelligence services) process, evaluate and permanently store your data located on US servers for surveillance purposes. We have no influence over these processing activities.
5. Rights of data subjects
You have the right:
- to request information pursuant Art. 15 GDPR about your personal data processed by us. In particular, you have the right to be informed about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage duration, the existence of a right to rectification, erasure, restriction of processing or objection to processing, the existence of a right of complaint, the origin of your data if they have not been collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
- to demand the correction of incorrect or incomplete personal data stored by us without delay in accordance with Art. 16 GDPR;
- pursuant to Art. 17 GDPR to request the erasure of your personal data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;
- to request the restriction of the processing of your personal data in accordance with Art. 18 GDPR, insofar as you dispute the accuracy of the data, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need them for the assertion, exercise or defence of legal claims or if you have objected to the processing in accordance with Art. 21 GDPR;
- pursuant to Art. 20 GDPR to receive your personal data that you have provided to us in a structured, commonly-used and machine-readable format or to request that your personal data be transmitted to another data controller;
- to revoke your consent at any time in accordance with Art. 7 (3) GDPR. This has the consequence that we are in future no longer allowed to continue the data processing based on this consent:
- to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our registered office for this purpose.
6. Right to object
If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) sent. 1 lit. f) GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, provided that there are grounds for doing so relating to your particular situation, or if the objection is directed against direct advertising. In the latter case, you have a general right of objection, which we will comply with without requiring you to specify a particular situation. If you wish to exercise your right of revocation or objection, simply send an email to email@example.com.
7. Right to lodge a complaint with the competent authority
In the event of violations of the GDPR, data subjects have a right to lodge a complaint to a supervisory authority, in particular in the Member State of their habitual residence, place of work or the place of the alleged violations. The right of appeal is without prejudice to any other administrative or judicial remedy.
8. Right to data portability
You have the right to demand that data which are automatically processed based on your consent or in the fulfilment of a contract are transferred to you or to third parties in a common, machine-readable format. If you request that the data be provided directly to another controller, this will only be done where technically feasible with economically reasonable effort.
9. SSL/TLS encryption – data security
For forms and logins used in the context of a visit to the website, we have implemented the commonly-used SSL procedure (Secure Socket Layer) in connection with the highest encryption level supported by your browser. As a rule, this is a 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. Whether a given page of our website is transmitted in encrypted form is indicated by the locked key or lock symbol in the status bar of your browser or, if applicable, at another location provided for this purpose on your screen. We also use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continuously improved in line with the development of technology.
10. Disclosure of data
Your personal data will not be transferred to third parties for purposes other than those listed below. We will only share your personal information with third parties if:
- You have given your express consent to this in accordance with Art. 6 (1) sent. 1 lit. a) GDPR,
- the disclosure is required for the assertion, exercise or defence of legal claims in accordance with Art. 6 (1) sent. 1 lit. f) GDPR and there is no reason to assume that you have an overriding legitimate interest in precluding the disclosure of your data,
- a legal obligation applies for the disclosure pursuant to Art. 6 (1) sent. 1 lit. c) GDPR, and/or
- this is legally permissible and required under Art. 6 (1) sent. 1 lit. b) GDPR for the processing of contractual relationships with you.
The use of All-Inkl is based on Art. 6 (1) lit. f) GDPR. We have a legitimate interest in ensuring that the presentation of our website is as reliable as possible. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 (1) lit. a) GDPR and § 25 para. 1 TTDSG Telecommunications and Telemedia Data Protection Act (TTDSG), to the extent that the consent covers the storage of cookies or access to information in the user’s terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time.
13. Analysis tools, plug-ins and website tools
a) Tracking tools
The tracking measures listed below which are used by us are based on Art. 6 (1) sent. 1 lit. f) GDPR. We employ tracking measures in order to ensure that the design of our website meets requirements and to enable its ongoing optimisation. We also use the tracking measures to collect statistic data about the use of our website which we evaluate in order to optimise our website for you. These interests must be considered legitimate within the meaning of the aforementioned provision. The respective purposes of data processing and the data categories can be found in the corresponding tracking tools.
b) Google Analytics
In order to ensure that the design of our webpages meets user requirements and to enable their continuous optimisation, we use Google Analytics, a web analytics service of Google LLC (https://about.google/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter: “Google”). In this context, pseudonymised usage profiles are created and cookies (see under clause 4) are used. The information generated by the cookie about your use of this website, such as your
- browser type/version,
- operating system,
- referrer URL (the page visited previously),
- the hostname of the accessing computer (IP address),
- the time of the server query,
14. Data protection in applications and in application procedures
In the following, we inform you about data protection in applications and in application procedures in addition to the preceding and following notes. The protection of your privacy is just as important to us as your trust in us when it comes to your data. For this reason, we only collect the data that is absolutely necessary and manage the data with due care against misuse. In doing so, we adhere to the data protection regulations when collecting and processing your data.
a) Categories of personal data, purpose and legal basis of processing:
We process your data in order to be able to carry out the application procedure. Only the data that you provide to us by submitting your application documents will be processed. These are in particular the following data:
- First name, last name
- Your address
- Email address
- Telephone number (landline and/or mobile)
- Date of birth
- Marital status
- Cover letter
- Other documents that you have submitted to us.
This data is collected
- to be able to carry out the application procedure
- for correspondence with you
- to conduct a possible job interview.
The legal basis for the processing of your personal data is the necessary processing for the implementation of pre-contractual measures, which is also based on your application as a data subject (Art. 6 para. 1 b) DS-GVO).
b) Recipients or categories of recipients of the personal data:
Your data will not be passed on to third parties as part of the application process.
c) Duration of storage of personal data:
If no employment relationship is established, your data will be deleted or destroyed four months after notification of the rejection decision, provided that there are no other legal obligations to retain the data or that there is no legitimate interest (enforcement of civil law claims, other legal disputes) in the continued retention of the data.
If we conclude an employment contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions.
15. Contact form
If you send us enquiries via the contact form, the data you enter in the contact form, including the contact details you have provided there, will be stored by us for the purpose of processing the enquiry and for any follow-up enquiries. We do not pass on these data without your consent. The processing of these data is based on Art. 6 (1) lit. b) GDPR, insofar as your request is related to the fulfilment of a contract or if it is required for carrying out pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the enquiries addressed to us (Art. 6 (1) lit. f) GDPR) or on your consent (Art. 6 (1) lit. a) GDPR), if such consent has been requested; this consent can be revoked at any time. The data you enter in the contact form will remain with us until you ask us to erase them, until you revoke your consent to store them or until the purpose for storing the data no longer applies (e.g. after we have completed processing your enquiry). This has no effect on mandatory provisions of the law, in particular with regard to statutory retention periods.