Data Protection Policy
We would like to inform you about the processing of personal data when you use our website.
The data controller, i.e., the person responsible for processing your personal data is,
Löffel Abrar Rechtsanwälte PartG mbB
Partners within the meaning of PartGG [German Partnership Companies Act]:
Dr. Sascha Abrar, Oliver Löffel
Further information about our law firm is available in the “Imprint” on our website.
WHICH DATA ARE PROCESSED?
LEGAL BASIS FOR DATA PROCESSING
To be able to offer you our website and the related services we process personal data on the following legal basis:
- Consent(Art. 6 (1) (a) GDPR)
- For the performance of contracts (Art. 6 (1) (b) GDPR)
- On the basis of a balancing of interests (Art. 6 (1) (f) GDPR)
- For compliance with a legal obligation (Art. 6 (1) (c) GDPR)
In connection with the processing of relevant data we will refer to the corresponding term, so that you can comprehend on which basis we will process personal data. If personal data are processed on the basis of a consent given by you, you have the right to withdraw your consent at any time with future effect.
If we process data on the basis of a balancing of interests you have the right as data subject to object to the processing of your personal data, taking account of the requirements provided in Art. 21 GDPR.
When you access our website personal data will be processed to enable us to display the content of the website on your end device. To display the pages in your browser the IP address of the end device used by you must be processed. Further information about the browser of your end device is additionally processed.
We are obliged under data protection law to ensure the confidentiality and integrity of the personal data processed by our IT systems.
For this purpose and in this interest the following data are recorded based on the balancing of interests:
- IP address of the accessing computer (for a maximum of 7 days)
- Operating system of the accessing computer
- Browser version of the accessing computer
- Name of the file called up;
- Date and time of access
- Data volume transmitted
- Referral URL
The IP address will be deleted by all systems which are used in connection with the operation of this website at the latest after 7 days. We cannot allocate the remaining data to a person.
The data are further used to allow the detection and removal of errors on the website.
PURPOSES OF PROCESSING PERSONAL DATA
We process the aforementioned data for the purpose of operating our website or for the purpose of our legitimate interests, respectively.
If you voluntarily provide data to us e.g. by sending an email to the email address mentioned on our website and these data are not required for performing our contractual obligations, we process these data on the legitimate assumption that the processing and use of these data is in your interest.
RECIPIENTS / TRANSMISSION OF DATA
Data which you provide to us will in principle not be transmitted to third parties. In particular, your data will not be transmitted to third parties for their marketing purposes.
However, we may use service providers for the operation of this website or for other products and services provided by us. In this context, it is possible that a service provider gains knowledge of personal data. We choose our service providers carefully – in particular with regard to data protection and security – and take all measures required under data protection law to ensure lawful data processing.
CONTACT BY EMAIL
Our websites provide an email address which can be used for establishing contact electronically. In this case, the personal data of the user transmitted with the email will be stored.
The legal basis for the processing of the data which are transmitted by sending an email is Art. 6 (1) (f) GDPR. If the contact by email is intended to conclude a contract the processing of data is additionally based on Art. 6 (1) (b) GDPR.
YOUR RIGHTS AS DATA SUBJECT
Subject to the statutory requirements, the fulfilment of which must be assessed on a case-by-case basis, you have the following rights:
You have the right to obtain access to the personal data relating to you. You can contact us at any time and request access.
If the request for access is not made in writing, we ask for your understanding that we might ask you for proofs evidencing that you are the person who you claim to be.
Moreover, you have a right to obtain rectification or erasure or restriction of processing, if you are legally entitled.
Finally, you have the right to object to processing of data within the scope of the legal requirements.
The same applies to a right to data portability: Within the scope of the legal requirements, you have the right, amongst others, to receive the personal data concerning you which you have provided to the controller in a legally defined format and the right to transmit these data to another controller.
To exercise the above rights, please contact our law firm’s partners mentioned above under “Controller”.
ERASURE OF DATA
We will generally erase personal data if it is no longer required to store them. Further storage might in particular be required if the data are still necessary for performing contractual obligations, for checking, granting or defending warranty claims or tortious liability claims. If there is a legal obligation to retain them, the data can only be erased after expiry of the relevant obligation of retention.
RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY
You have the right to lodge a complaint with a supervisory authority competent for data protection concerning our processing of personal data.
Version: 24 May 2018