1. Name and contact details of the data controller and the company data protection officer

This data protection information applies to data processing by:

Data controller:

Glock Liphart Probst & Partner
Rechtsanwälte mbB
Marienplatz 26
D-80331 Munich

Email: info@glock-liphart-probst.de
Phone: +49 (0) 89 / 23 11 88-0
Fax: +49 (0) 89 / 260 96 31

The data protection officer of Glock Liphart Probst & Partner Rechtsanwälte mbB can be contacted at the above address, for the attention of Mr. Florian Siegl, or by email to f.siegl@glock-liphart-probst.de.

2. Collection and storage of personal data and the nature and purpose of their use

a) When visiting the website

When you visit our website www.glock-liphart-probst.de, the browser used by your terminal device will automatically transmit data to our website server. We automatically collect and store information in so-called server log files which your browser automatically transfers to us. This data are temporarily stored in a so-called log file. The following data are collected without your intervention and stored until automated erasure:

• IP address of the accessing computer,
• the hostname of the accessing computer
• date and time of the server request,
• name and URL of the retrieved file,
• website from which the access is made (referrer URL),
• the browser used (browser type and browser version) and, if applicable, the operating system of your computer as well as the name of your access provider.

These data will be processed by us for the following purposes:

• Ensuring a smooth connection to the website (presentation of his website without technical errors),
• ensuring the convenient use of our website,
• assessment of system security and stability (optimisation of the website), and
• for further administrative purposes.

The legal basis for the processing is Art. 6 (1) sent. 1 lit. f) GDPR. Our legitimate interest follows from the purposes of the data collection listed above. Under no circumstances do we use the collected data for the purpose of drawing conclusions about your person. These data are not combined with other data sources. In addition, we use cookies and analytics services when you visit our website. You can find more detailed explanations in sections 12 and 13 of this Data Privacy Policy.

b) When using our contact form

For questions of any kind, we provide you with the option of contacting us via a form on the website. For this, you are required to enter a valid e-mail address so that we know from whom the request originates and are able to answer it. Further information can be provided on a voluntary basis. Data processing for the purpose of contacting us is carried out in accordance with Art. 6 (1) sent. 1 lit. a) GDPR on the basis of your voluntarily given consent. The personal data we collect in the context of the use of the contact form will be automatically erased after completion of your request.

3. Retention period

Unless a more specific storage period is stated within this Privacy Policy, we will retain your personal data until the purpose for processing the data no longer applies. If you claim a justified request for erasure or revoke your consent to data processing, your data will be erased unless we have other legitimate reasons for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, the data will be deleted once these reasons no longer apply.

4. Information on data transfers to the US and other third countries

Among the tools we use, some are from companies based in the USA or other countries that are not considered safe third countries under data protection law (this is expressly pointed out in each individual case in this data protection notice). When these tools are active, your personal data may be transferred to and processed in these third countries. We would like to point out that in these countries, a level of data protection comparable to that in the EU cannot be guaranteed. For example, US companies are required to hand over personal data to security agencies, without you as the data subject being able to take legal action against such disclosure. It is therefore possible that US authorities (e.g. intelligence services) process, evaluate and permanently store your data located on US servers for surveillance purposes. We have no influence over these processing activities.

5. Rights of data subjects

You have the right:

• to request information pursuant Art. 15 GDPR about your personal data processed by us. In particular, you have the right to be informed about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage duration, the existence of a right to rectification, erasure, restriction of processing or objection to processing, the existence of a right of complaint, the origin of your data if they have not been collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
• to demand the correction of incorrect or incomplete personal data stored by us without delay in accordance with Art. 16 GDPR;
• pursuant to Art. 17 GDPR to request the erasure of your personal data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;
• to request the restriction of the processing of your personal data in accordance with Art. 18 GDPR, insofar as you dispute the accuracy of the data, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need them for the assertion, exercise or defence of legal claims or if you have objected to the processing in accordance with Art. 21 GDPR;
• pursuant to Art. 20 GDPR to receive your personal data that you have provided to us in a structured, commonly-used and machine-readable format or to request that your personal data be transmitted to another data controller;
• to revoke your consent at any time in accordance with Art. 7 (3) GDPR. This has the consequence that we are in future no longer allowed to continue the data processing based on this consent:
• to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our registered office for this purpose.

6. Right to object

If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) sent. 1 lit. f) GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, provided that there are grounds for doing so relating to your particular situation, or if the objection is directed against direct advertising. In the latter case, you have a general right of objection, which we will comply with without requiring you to specify a particular situation. If you wish to exercise your right of revocation or objection, simply send an email to info@glock-liphart-probst.de.

7. Right to lodge a complaint with the competent authority

In the event of violations of the GDPR, data subjects have a right to lodge a complaint to a supervisory authority, in particular in the Member State of their habitual residence, place of work or the place of the alleged violations. The right of appeal is without prejudice to any other administrative or judicial remedy.

8. Right to data portability

You have the right to demand that data which are automatically processed based on your consent or in the fulfilment of a contract are transferred to you or to third parties in a common, machine-readable format. If you request that the data be provided directly to another controller, this will only be done where technically feasible with economically reasonable effort.

9. SSL/TLS encryption – data security

For forms and logins used in the context of a visit to the website, we have implemented the commonly-used SSL procedure (Secure Socket Layer) in connection with the highest encryption level supported by your browser. As a rule, this is a 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. Whether a given page of our website is transmitted in encrypted form is indicated by the locked key or lock symbol in the status bar of your browser or, if applicable, at another location provided for this purpose on your screen. We also use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continuously improved in line with the development of technology.

10. Disclosure of data

Your personal data will not be transferred to third parties for purposes other than those listed below. We will only share your personal information with third parties if:

• You have given your express consent to this in accordance with Art. 6 (1) sent. 1 lit. a) GDPR,
• the disclosure is required for the assertion, exercise or defence of legal claims in accordance with Art. 6 (1) sent. 1 lit. f) GDPR and there is no reason to assume that you have an overriding legitimate interest in precluding the disclosure of your data,
• a legal obligation applies for the disclosure pursuant to Art. 6 (1) sent. 1 lit. c) GDPR, and/or
• this is legally permissible and required under Art. 6 (1) sent. 1 lit. b) GDPR for the processing of contractual relationships with you.

11. Hosting

Our website is hosted at All-Inkl. The provider is ALL-INKL.COM – Neue Medien Münnich, Inh. René Münnich, Hauptstraße 68, 02742 Friedersdorf (hereinafter All-Inkl). For details, please refer to All-Inkl’s privacy policy:

https://all-inkl.com/datenschutzinformationen/.

The use of All-Inkl is based on Art. 6 (1) lit. f) GDPR. We have a legitimate interest in ensuring that the presentation of our website is as reliable as possible. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 (1) lit. a) GDPR and § 25 para. 1 TTDSG Telecommunications and Telemedia Data Protection Act (TTDSG), to the extent that the consent covers the storage of cookies or access to information in the user’s terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time.

12. Cookies

We use cookies on our website. Cookies are small files that are automatically created by your browser and stored on your terminal device (laptop, tablet, smartphone or similar) when you visit our website. Cookies do not cause any damage to your terminal device and do not contain viruses, Trojans or other malware. The cookie is used to store information which is created in the context of the specific terminal device used. However, this does not mean that we gain immediate knowledge of your identity. On the one hand, the use of cookies serves to make the use of our website more convenient for you. We use so-called session cookies to recognise that you have already visited individual pages of our website. These are automatically deleted after you leave our site. In addition, we also use temporary cookies to optimise user-friendliness, which are stored on your terminal device for a certain fixed period of time. If you visit our site again to use our services, our system automatically recognises that you have already visited the site and which entries and settings you have made so that you do not have to enter them again. We also use cookies to collect statistic data about the use of our website which we evaluate in order to optimise our website for you (see clause 2). When you return, these cookies enable us to automatically recognise that you have already visited us. These cookies are automatically deleted after a certain period of time. The data processed through cookies is required for the aforementioned purposes to protect our legitimate interests and those of third parties in accordance with Art. 6 (1) sent. 1 lit. f) GDPR, or where required by law, we expressly request your consent to the use of certain cookies (which we then do not use if you refuse to give your consent). Most web browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or that a message is shown before a new cookie is created. However, if you deactivate cookies completely (apart from the technically required cookies that cannot be deactivated) it may mean that you will be unable to use all the functions of our website.

13. Analysis tools, plug-ins and website tools

a) Tracking tools

The tracking measures listed below which are used by us are based on Art. 6 (1) sent. 1 lit. f) GDPR. We employ tracking measures in order to ensure that the design of our website meets requirements and to enable its ongoing optimisation. We also use the tracking measures to collect statistic data about the use of our website which we evaluate in order to optimise our website for you. These interests must be considered legitimate within the meaning of the aforementioned provision. The respective purposes of data processing and the data categories can be found in the corresponding tracking tools.

b) Google Analytics

In order to ensure that the design of our webpages meets user requirements and to enable their continuous optimisation, we use Google Analytics, a web analytics service of Google LLC (https://about.google/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter: “Google”). In this context, pseudonymised usage profiles are created and cookies (see under clause 4) are used. The information generated by the cookie about your use of this website, such as your

• browser type/version,
• operating system,
• referrer URL (the page visited previously),
• the hostname of the accessing computer (IP address),
• the time of the server query,

is transferred to a Google server in the USA and stored there. The data are used to evaluate the use of the website, to compile reports on website activity and to provide other services related to the use of the website and the internet for the purposes of market research and to ensure that the webpages meet requirements. These data may also be transferred to third parties where required to do so by law, or where such third parties carry out commissioned data processing. Your IP will under no circumstances be associated with any other Google data. The IP addresses are anonymised so that no association is possible (IP masking). You may refuse the use of cookies by selecting the appropriate settings on your browser. However, please note that if you do so, you may not be able to use the full functionality of this website. You can furthermore prevent Google’s collection and use of data generated by cookies and relating to your use of the website (including your IP address) by downloading and installing the browser add-on available under: https://tools.google.com/dlpage/gaoptout?hl=en. As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent Google Analytics from collecting data by clicking on this link (https://tools.google.com/dlpage/gaoptout?hl=en). This will cause the placement of an opt-out cookie which will prevent the collection of your data during future visits to this website. The opt-out cookie is only valid in this browser and only for our website and it is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again. Further information on data protection relating to Google Analytics can be found in the Google Analytics Help (https://support.google.com/analytics/answer/6004245?hl=de).

14. Data protection in applications and in application procedures

In the following, we inform you about data protection in applications and in application procedures in addition to the preceding and following notes. The protection of your privacy is just as important to us as your trust in us when it comes to your data. For this reason, we only collect the data that is absolutely necessary and manage the data with due care against misuse. In doing so, we adhere to the data protection regulations when collecting and processing your data. 

a) Categories of personal data, purpose and legal basis of processing:

We process your data in order to be able to carry out the application procedure. Only the data that you provide to us by submitting your application documents will be processed. These are in particular the following data: 

• Salutation
• First name, last name
• title
• Your address
• Email address
• Telephone number (landline and/or mobile)
• Date of birth 
• Marital status
• Cover letter
• Testimonials
• Other documents that you have submitted to us.

This data is collected

• to be able to carry out the application procedure
• for correspondence with you
• to conduct a possible job interview.

The legal basis for the processing of your personal data is the necessary processing for the implementation of pre-contractual measures, which is also based on your application as a data subject (Art. 6 para. 1 b) DS-GVO).

b) Recipients or categories of recipients of the personal data:

Your data will not be passed on to third parties as part of the application process. 

c) Duration of storage of personal data: 

If no employment relationship is established, your data will be deleted or destroyed four months after notification of the rejection decision, provided that there are no other legal obligations to retain the data or that there is no legitimate interest (enforcement of civil law claims, other legal disputes) in the continued retention of the data.

If we conclude an employment contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions.

15. Contact form

If you send us enquiries via the contact form, the data you enter in the contact form, including the contact details you have provided there, will be stored by us for the purpose of processing the enquiry and for any follow-up enquiries. We do not pass on these data without your consent. The processing of these data is based on Art. 6 (1) lit. b) GDPR, insofar as your request is related to the fulfilment of a contract or if it is required for carrying out pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the enquiries addressed to us (Art. 6 (1) lit. f) GDPR) or on your consent (Art. 6 (1) lit. a) GDPR), if such consent has been requested; this consent can be revoked at any time. The data you enter in the contact form will remain with us until you ask us to erase them, until you revoke your consent to store them or until the purpose for storing the data no longer applies (e.g. after we have completed processing your enquiry). This has no effect on mandatory provisions of the law, in particular with regard to statutory retention periods.

16. Updating and amending this Privacy Policy

This Privacy Policy is currently valid as of May 2022. It may become necessary to change this Privacy Policy as we improve our website, or due to changing requirements imposed by the law or official authorities. You can always download the currently applicable Privacy Policy on our website under https://glock-liphart-probst.com/privacypolicy