The protection of your data is important to us. We treat your personal data confidentially and according to legal regulations. With this privacy policy we want to inform you of the manner, extent and purpose of the personal data collected, used and processed by us. It also serves to inform the affected persons of the rights they have.

With the law firm Prinz Rechtsanwälte PartG mbB being the controller of the processing, it implemented numerous technical and organisational steps to ensure protection of the personal data processed via this website as complete as possible. However, web-based data transfers may still have security flaws so that absolute protection cannot be guaranteed. For this reason any data subject has the choice of transmitting to us any personal data via alternative routes, for example by telephone.

You will find the definitions of the terms used (for instance “personal data” or “processing”) in Art. 4 GDPR.

1. Controller of the processing and the firm’s privacy officer

This information on the privacy policy applies to the data processing by:

Our in-house privacy officer may be contacted at the above address or numbers, for Att. Mrs Stefanie Schulz, or under s.schulz@prinzlaw.com.

2. Collection and storage of personal data as well as the manner and purpose of its use

a) Visiting the website

With every visit of our website by the data subject or an automated system general data and information are collected. This general data and information are temporarily stored in the log files of the server for 7 days. If the data needs to be retained for reasons of proof (e. g. for cases of abuse), they are exempted from being erased until the incident has been finally clarified.

The following information is collected without any action on your part and stored until erased automatically:

• IP-Address of the accessing remote terminal,
• Date and time of the access,
• Name and URL of the accessed file or website,
• Amount of data sent,
• URL of the referring website or web page from which access was made (Referrer-URL),
• Type and version of browser used and the operating system as well as unit type of your device.

When using this general data and information, we do not draw inferences about the data subject. Rather, this information is needed and processed for the following purposes:

• to ensure a trouble-free connection establishment of the website;
• to ensure a user-friendly interaction with our website;
• Evaluation of the system security and stability / ensuring permanent functionality
• Provision of information necessary for prosecution to prosecuting authorities in the event of a cyber attack;
• for additional administrative purposes.

The legal basis for the data processing is Art. 6 subsection 1 S. 1 lit. f GDRP. Our legitimate interest arises from the purposes for data capture listed above. In neither case do we use the data collected for the purpose of drawing any inference to you as person.

b) Making contact

Personal data is collected within the context of you making contact with us (e. g. contact form or email). The data collected when using a contact form can be seen in the contact form. This data is exclusively stored and used for the purpose of replying to your enquiry and/or for making contact and the technical administration attached to this. The legal basis for the processing of the data is our legitimate interest for replying to your enquiry in terms of Art. 6 subsection 1 lit. f GDPR. If the purpose of your contacting us is to form a contract, Art. 6 subsection 1 lit. b GDPR is the additional legal basis for the processing. After the final processing of your enquiry, your data will be erased; this will be the case if the circumstances show that the relevant issue has been conclusively settled and unless legal obligations to retain data prevent this.

3. Data protection in cases of applications and during application procedures

We collect and process personal data of applicants for the purpose of handling the application procedures. The processing can also take place electronically. This is the case especially if an applicant sends us the relevant application documents electronically, for instance per email or via a web form available on our website. If we enter into an employment contract with an applicant, the transmitted data is stored for the purpose of dealing with the employment taking into account the legal requirements. If no employment contract is concluded between the controller of the processing and the applicant, the application documents are automatically erased two months after a decision of a negative reply has been made, provided we have no other legitimate interests that would prevent the erasure. Other legitimate interest in this sense, for example, is the burden of proof in a court proceeding in terms of the General Equal Treatment Act (AGG). If the processing of personal data is based on Article 6 I lit. f GDPR, our legitimate interest is the performance of our business operation for the benefit and wellbeing of all our staff and shareholders.

4. Disclosure of data

Your personal data is not disclosed to third parties other than for the purposes stated as follows:

We disclose your personal data to third parties only if:

• You have given your explicit consent to this in terms of Art. 6 para. 1 S. 1 lit. a GDPR;
• the disclosure in terms of Art. 6 para. 1 S. 1 lit. f GDPR is necessary for the enforcement, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest warranting protection in the non-disclosure of your data;
• in the event that there is a legal obligation for the disclosure in terms of Art. 6 para. 1 S. 1 lit. c GDPR; and
• that this is permitted by law and necessary in terms of Art. 6 para. 1 S. 1 lit. b GDPR for dealing with the contractual relationship with you.

5. Rights of the data subject

You have the right:

• in terms of 15 GDPR to request a confirmation whether personal data concerning you is processed by us;
• in terms of Art. 15 GDPR, to request information about your personal data processed by us. In particular, you may request information about the processing purposes, the category of the personal data, the category of recipients to which your data was or will be disclosed, the envisaged storage period, the existence of a right to correction, erasure, restriction of the processing or objection, the existence of a right to lodge a complaint, the source of your data – where it was not collected by us – and the existence of an automated decision-making inclusive of profiling and, if required, meaningful information in respect of its details. You also have a right to information on whether personal data was disclosed to a third country or an international organisation. If this is the case, you have otherwise the right to receive information on appropriate safeguards in connection with the transfer;