Data protection

Below, we inform you about the collection of personal data when using our website. Personal data are all data that can be personally related to you, e.g., name, address, email addresses, or user behavior.

I. Name and Address of the Controller

The controller according to Art. 4 No. 7 of the General Data Protection Regulation (“GDPR”) is:

Meilicke Hoffmann & Partner Lawyers Tax Advisors LLP

Dr. Irini Ahouzaridi

Poppelsdorfer Allee 114

53115 Bonn

Email: info@meilicke-hoffmann.de

Phone: 0228 72543 -0

Website: www.meilicke-hoffmann.de

II. Contact Details of the Data Protection Officer

Reinhold Goetz
Dipl. Eng. Telecommunications
Certified Data Protection Specialist

III. General Information on Data Processing

1. Purpose and Scope of the Processing of Personal Data

We collect and use personal data of our users based on legal regulations, as far as this is necessary for the provision and maintenance of the functions, content, and services of the website. The collection and use of personal data of our users occur with the user's consent when using special services such as our newsletter.

2. Legal Basis for the Processing of Personal Data

The legal basis for the processing of personal data with the consent of the person concerned is Art. 6 Para. 1 lit. a GDPR, for the processing of personal data necessary for the performance of a contract, Art. 6 Para. 1 lit. b GDPR, for the processing of personal data necessary for compliance with a legal obligation, Art. 6 Para. 1 lit. c GDPR, and in case vital interests of the person concerned or another natural person require processing of personal data, Art. 6 Para. 1 lit. d GDPR. If the processing is necessary to safeguard a legitimate interest of our company or a third party and the interests, fundamental rights, and freedoms of the person concerned do not override the first interest, Art. 6 Para. 1 lit. f GDPR serves as the legal basis for the processing.

3. Data Deletion and Duration of Storage

Personal data of the person concerned will be deleted or blocked as soon as the purpose of storage ceases to apply or a legally prescribed storage period expires. Storage may also occur if provided for by laws.

4. Encrypted Transmission

This website uses, for security reasons and to protect the transmission of personal data and other confidential content (e.g., inquiries to us as the site operator), SSL encryption (Secure Socket Layer) in conjunction with the highest encryption level supported by your browser. Usually, this is a 256-bit encryption. If your browser does not support 256-bit encryption, we will instead use 128-bit v3 technology.

IV. Provision of the Website and Creation of Logfiles

1. Description and Scope of Data Processing

With each merely informational visit to our website, i.e., if you do not register or otherwise provide us with information, our system automatically records data and information sent by your computer system to our server. When you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security:

(1) Information about the browser software, its language, and the version used

(2) The user's operating system and interface

(3) The user's IP address

(4) Date and time of access

(5) Content of the request (specific page)

(6) Access status/http status code

(7) Websites from which the user's system reaches our website

This data is also stored in the log files of our system. This data is not stored together with other personal data of the user.

2. Legal Basis for Data Processing

The legal basis for the temporary storage of data is Art. 6 Para. 1 lit. f GDPR.

3. Purpose of Data Processing

The temporary storage of the IP address by the system is necessary to enable the delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session. The storage in log files is done to ensure the functionality of the website. In addition, the data serves us to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context. These purposes also constitute our legitimate interest in data processing according to Art. 6 Para. 1 lit. f GDPR.

4. Duration of Storage

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In the case of collecting data for the provision of the website, this is the case when the respective session is ended.

In the case of storing the data in log files, this is after no more than seven days. Further storage is possible. In this case, the IP addresses of the users are deleted or altered, so that the calling client can no longer be traced.

5. Objection and Removal Possibility

An objection to the collection and processing of personal data is only possible for voluntarily provided information within the scope of consent, not for data in log files that are mandatory for the operation of the website.

Use of Cookies

1. Description and Scope of Data Processing

Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. If a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string that enables the browser to be uniquely identified when the website is revisited. Cookies do not cause any damage to your device, do not contain viruses, Trojans, or other malware. The cookie stores information that arises in connection with the specific device used. However, this does not mean that we directly become aware of your identity.

We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser be identified even after a page change.

The following data is stored and transmitted in the cookies:

(1) Session ID

(2) Consent to the cookie notice

In addition, cookies from Google Analytics are used for the analysis of visitor behavior, further information under VIII a).

2. Legal Basis for Data Processing

The legal basis for the processing of personal data using cookies is Art. 6 Para. 1 lit. f GDPR.

3. Purpose of Data Processing

The use of cookies is intended to make the use of websites easier for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change.

For the following applications, we require cookies:

(1) To prevent / detect misuse of the website

(2) Storage of consent to the cookie notice

The user data collected by technically necessary cookies are not used to create user profiles. These purposes also constitute our legitimate interest in the processing of personal data according to Art. 6 Para. 1 lit. f GDPR.

4. Duration of Storage, Objection, and Removal Possibility

Cookies are stored on the user's computer and transmitted by it to our site. Therefore, as a user, you have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Already stored cookies can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may not be possible to use all functions of the website to their full extent.

VI. Email Contact

1. Description and Scope of Data Processing

An email address is available on our website, which can be used for electronic contact. If a user takes advantage of this option, the data entered in the email will be transmitted to us and stored.

This does not involve any disclosure of the data to third parties. The data is used exclusively for processing the conversation.

2. Legal Basis for Data Processing

The legal basis for the processing of data transmitted in the course of sending an email is Art. 6 Para. 1 lit. f GDPR.

If the email contact aims at the conclusion of a contract, then an additional legal basis for the processing is Art. 6 Para. 1 lit. b GDPR.

3. Purpose of Data Processing

The processing of personal data serves us solely to process the contact. This also constitutes the necessary legitimate interest in the processing of the data.

4. Duration of Storage

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. For the personal data sent by email, this is the case when the respective conversation with the user has ended. The conversation is considered to have ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.

5. Objection and Removal Possibility

If the user contacts us by email, he can object to the storage of his personal data at any time. In such a case, the conversation cannot continue.

To withdraw the processing of personal data transmitted by email, simply send an informal email to datenschutz@meilicke-hoffmann.de.

All personal data stored in the course of contacting us will be deleted in this case.

VII. Newsletter

1. Description and Scope of Data Processing

There is the possibility to subscribe to a free newsletter on our website. If you would like to receive the newsletter offered on the website, we require an email address from you, as well as information that allows us to verify that you are the owner of the provided email address and that you agree to receive the newsletter.

To ensure consensual newsletter dispatch, we use the so-called double opt-in procedure. In the course of this, the potential recipient is added to a distribution list. Subsequently, the user receives a confirmation email to legally confirm the registration. Only if the confirmation is made, the address is actively added to the distributor.

We use this data exclusively for sending the requested information and offers.

2. Legal Basis for Data Processing

The legal basis for the processing of data after the user subscribes to the newsletter is Art. 6 Para. 1 lit. a GDPR, provided the user has given consent.

3. Purpose of Data Processing

The collection of the user's email address serves to deliver the newsletter. The collection of other personal data during the registration process serves to prevent misuse of the services or the used email address.

4. Duration of Storage

The data will be deleted as soon as it is no longer necessary for the purpose of its collection. The user's email address will therefore be stored as long as the subscription to the newsletter is active.

5. Objection and Removal Possibility

The subscription to the newsletter can be canceled by the affected user at any time. For this purpose, there is a corresponding link in each newsletter.

This also allows a revocation of the consent to the storage of personal data collected during the registration process.

VIII. Analysis and Social Media Tools

1. Tracking Tools

The tracking measures listed below and used by us are carried out on the basis of Art. 6 Para. 1 S. 1 lit. f GDPR. With the tracking measures to be used, we want to ensure a needs-based design and the continuous optimization of our website. On the other hand, we use the tracking measures to statistically record the use of our website and evaluate it for the purpose of optimizing our offer for you. These interests are to be regarded as legitimate within the meaning of the aforementioned provision.

The respective data processing purposes and data categories can be taken from the corresponding tracking tools.

We respect the "Do Not Track" settings of your browser.

2. Google Analytics

For the purpose of customizing and continually optimizing our pages and our newsletter, we use Google Analytics, a web analysis service of Google Inc. (https://www.google.de /intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter "Google"). In this context, pseudonymized usage profiles are created and cookies (see under V.) are used. The information generated by the cookie about your use of this website such as

• Browser type/version,
• Used operating system,
• Referrer URL (the previously visited page),
• Hostname of the accessing computer (IP address),
• Time of the server request,

are transmitted to a Google server in the USA and stored there.

The information is used to evaluate the use of the website, to compile reports on website activities, and to provide further services associated with website use and internet use for the purposes of market research and demand-oriented design of these internet pages. This information may also be transferred to third parties if required by law or if third parties process this data on behalf of Google. Under no circumstances will your IP address be merged with other Google data. The IP addresses are anonymized, so that an assignment is not possible (IP masking).

You can prevent the installation of cookies by setting your browser software accordingly; however, we would like to point out that in this case, not all functions of this website may be fully usable.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de).

As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent the collection by Google Analytics by clicking on this link. An opt-out cookie will be set that prevents the future collection of your data when visiting this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.

Further information on data protection in connection with Google Analytics can be found in the Google Analytics Help (https://support.google.com/analytics/answer/6004245?hl=de).

IX. Tools / Other Data Protection Relevant Technologies

1. Google Maps

This website uses Google Maps by Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. By using the embedded maps from Google Maps, we can display our location and simplify the journey for you.

As soon as the user accesses a webpage with an embedded Google Maps map, personal data (such as your IP address) is transmitted to Google. This data is also transmitted if you are not logged into a user account of Google. If you are logged into a user account, Google will assign this data to your user account.

The data is stored by Google (even if the user is not logged in) as usage profiles and evaluated. The legal basis for such an evaluation is Art. 6 Para. 1 lit. f GDPR, based on the legitimate interests of Google in the needs-based design of its content, market research and/or the display of personalized advertising. The user has the right to object to the creation of these user profiles. This right must be exercised directly against Google.

Google LLC, based in the USA, is certified for the US-European data protection agreement "Privacy Shield", which ensures compliance with the data protection level applicable in the EU.

The terms of use of Google can be viewed at http://www.google.de/intl/de/policies/terms/regional.html, the additional terms of use for Google Maps can be found at https://www.google.com/intl/de_US/help/terms_maps.html

Detailed information on data protection in connection with the use of Google Maps can be found on the website of Google ("Google Privacy Policy"): http://www.google.de/intl/de/policies/privacy/

2. Google Fonts

This website uses web fonts provided by Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google") for uniform font representation. When you call up a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly.

For this purpose, the browser you are using must connect to Google's servers. As a result, Google becomes aware that our website has been accessed via your IP address. The use of Google Web Fonts is done in the interest of a uniform and attractive presentation of our online offers. This constitutes a justified interest within the meaning of Art. 6 Para. 1 lit. f GDPR. The user has the right to object to the processing of his IP address and the information that he has accessed our website. This right must be exercised directly against Google.

Google LLC, based in the USA, is certified for the US-European data protection agreement "Privacy Shield", which ensures compliance with the data protection level applicable in the EU.

Further information about Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy/

X. Rights of the Data Subject

If personal data concerning you is processed, you are a data subject within the meaning of the GDPR and you have the following rights against the controller. For questions on the subject of data protection and especially regarding the rights of data subjects, please contact our data protection officer (see above II.).

1. Right of Access (Art. 15 GDPR)

You can request confirmation from the controller as to whether personal data concerning you is being processed by us.

If such processing is taking place, you can request information from the controller about your processed personal data according to Art. 15 GDPR.

2. Right to Rectification (Art. 16 GDPR)

You have the right according to Art. 16 GDPR to demand the immediate correction of incorrect or completion of your personal data stored by us.

3. Right to Restriction of Processing (Art. 18 GDPR)

Under the conditions of Art. 18 GDPR, you can request the restriction of the processing of your personal data.

If the processing has been restricted according to the above conditions, you will be informed by the controller before the restriction is lifted.

4. Right to Erasure (Art. 17 GDPR)

You may request the controller to delete your personal data stored by us according to Art. 17 GDPR.

5. Right to be Informed

If you have asserted the right to rectification, erasure, or restriction of processing against the controller, he/she is obliged to notify all recipients to whom the personal data concerning you was disclosed of this rectification or erasure of the data or restriction of processing unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients.

6. Right to Withdraw the Data Protection Consent Declaration

You have the right to withdraw your data protection consent declaration at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

7. Automated Individual Decision-M aking, Including Profiling

You have the right not to be subject to a decision based solely on automated processing – including profiling – that produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision

(1) is necessary for entering into, or performance of, a contract between you and the data controller,

(2) is authorized by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests, or

(3) is based on your explicit consent.

However, these decisions must not be based on special categories of personal data referred to in Art. 9(1) GDPR, unless Art. 9(2) lit. a or g applies and suitable measures to safeguard your rights and freedoms and legitimate interests are in place.

Regarding the cases referred to in (1) and (3), the controller shall implement suitable measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and to contest the decision.

8. Right to Complain to a Supervisory Authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR.

Responsible supervisory authority for North Rhine-Westphalia:
State Commissioner for Data Protection and Freedom of Information
P.O. Box 20 04 44
40102 Düsseldorf
Phone: 0211/38424-0 Fax: 0211/38424-10
Email: poststelle@ldi.nrw.de

The supervisory authority with which the complaint has been lodged shall inform the complainant about the status and the results of the complaint including the possibility of a judicial remedy pursuant to Art. 78 GDPR.

Created on May 23, 2018