Data Protection Notice

1. Name and contact details of the controller

This data protection notice applies to the processing of data by the controller:

WSWP Weinert GmbH
Wirtschaftsprüfungsgesellschaft Steuerberatungsgesellschaft
(hereinafter WSWP)
Maximiliansplatz 15
80333 Munich
Germany
T +49 89/232372798
F +49 89/232372797
email info@weinert-wp.com

Managing director: Dipl.-Kffr. Jasmin Weinert, WP/StB

2. Collection and storage of personal data, and nature and purpose of their use

a) Use of the website

When you visit the websites operated by WSWP the browser running on your terminal device automatically transmits information to our website server. This information is temporarily stored in a log file. Without you taking any action, the following information is recorded and stored until it is automatically deleted:

• IP address of the computer initiating the visit,
• date and time of access,
• name and URL of the accessed file,
• website from which access was initiated (referrer URL),
• quantity of transmitted data in bytes,
• name of browser being used and, if applicable, your computer’s operating system and the name of your access provider.

We process the forenamed data for the following purposes:

• to ensure that the connection to the website is established smoothly,
• to ensure that our website is user-friendly,
• to evaluate system security and stability, and
• for further administrative purposes.

The legal basis for the processing of data is provided by Art. 6 (1) Sentence 1 point f GDPR (General Data Protection Regulation). Our legitimate interest arises from the purposes for which the data are collected as per the above list. In no event do we use the collected data for the purpose of inferring anything about your person.

When you visit our website, we also use cookies and analysis services. For further information on this subject, see below under Clauses 4 and 5.

b) Registering for information about our firm, newsletters and events

If you have explicitly granted consent pursuant to Art. 6 (1) Sentence 1 point a GDPR or if one of the other elements of Art. 6 (1) Sentence 1 GDPR is satisfied, we use your email address to regularly send you information about our firm, newsletters and invitations to events of and with WSWP. To receive information about our firm, newsletters and invitations, you need to state only your name and an email address. You can cancel your registration at any time, for example by following the link provided at the end of every newsletter. Alternatively you can send a request to cancel your registration at any time by emailing info@weinert-wp.com.

c) Using our contact form

If you have a query on any subject, we invite you to contact us using the form on our website. We need you to state a valid email address, so that we can identify the originator of the inquiry and respond to the matter in question. The disclosure of other details is voluntary. The processing of data for the purpose of enabling you to contact us takes place pursuant to Art. 6 (1) Sentence 1 point a GDPR on the basis of your freely granted consent. The personal data collected by us to facilitate use of the contact form are automatically deleted once your query has been resolved.

3. Transfer of data

Your personal data are not transmitted to third parties for any purposes other than those specified below. We transfer your personal data to third parties only if:

• you have granted your explicit consent thereto pursuant to Art. 6 (1) Sentence 1 point a GDPR,
• the transfer is necessary pursuant to Art. 6 (1) Sentence 1 point f GDPR for the establishment, exercise or defense of legal claims and there is no reason to suppose that you have an overriding legitimate interest in your data not being transferred,
• a legal obligation for the transfer exists pursuant to Art. 6 (1) Sentence 1 point c GDPR, and
• such a transfer is allowed by law and necessary for conducting contractual relations with you pursuant to Art. 6 (1) Sentence 1 point b GDPR.

4. Cookies

We use cookies on our website. These are small files that are automatically created by your browser and stored on your terminal device (laptop, tablet, smartphone or similar) when you visit our website. Cookies do not damage your device or contain any viruses, Trojan horses or other malware.

Cookies are repositories for information arising in connection with the specific device that is in use. This does not mean, however, that we directly obtain any knowledge of your identity in this way.

One of the reasons we use cookies is to enhance user-friendliness. We use session cookies, for instance, to recognize that you have previously visited individual pages of our website. These cookies are automatically deleted when you leave the website.

Likewise for the purpose of enhancing user-friendliness, we also use temporary cookies, which are stored on your device for a specific defined period. If you visit our website again in order to use our services, these cookies automatically recognize both your previous visit and the inputs and settings you made so as to avoid having to repeat them.

We additionally use cookies to record statistics about the use of our website and for the purpose of enhancing our offering to you (see Clause 5). When you revisit our website these cookies enable us automatically to recognize that you have been with us on a previous occasion. They are deleted automatically upon expiry of a defined period.

The processing of data by way of cookies is necessary for the specified purposes of the legitimate interests pursued by us or by a third party pursuant to Art. 6 (1) Sentence 1 point f GDPR.

Most browsers accept cookies automatically. You can configure your browser, however, to prevent cookies being stored on your computer or to trigger a warning each time a new cookie is about to be created. If you block cookies completely, you may not be able to use all the functions of our website.

5. Google Maps

We use maps provided by “Google Maps” of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The data collected may include the IP- address and data on the place of location of the user, which are not collected without agreement by the user (in general based on the configuration of your mobile). The data can be processed in the US. Data privacy statement: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.

6. Consent, information, deletion, blocking

By using our online services, you expressly agree to our above-mentioned collection, forwarding and use of the data that you provide online.

Your consent will be recorded when you use a contact form or sign up for a newsletter. You may revoke this consent at any time with immediate effect by sending an email to the relevant registration address without giving any reasons. Your data will then be deleted immediately.

You have the right at any time to request information, free of charge, on your stored personal data; its origins and recipients; and the purpose of its use. You also have the right to have this data amended, blocked or deleted. If you have any questions on this or any other matters of personal data, you can contact us at any time at the address given in the legal notice.

7. Rights of data subjects

You have the right:

• pursuant to Art. 15 GDPR to obtain from us confirmation as to whether your personal data are being processed. In particular, you have the right to obtain information on the purposes of the processing; the categories of personal data concerned; the categories of recipients to whom your data have been or will be disclosed; the envisaged storage period; the existence of a right to request rectification or erasure or restriction of processing, or to object to such processing; the existence of a right to lodge a complaint; the source of your data if not collected by us; and on the existence of automated decision-making, including profiling, and, in those cases, meaningful information about the particularities of such activities;
• pursuant to Art. 16 GDPR to obtain from us without undue delay the rectification of inaccurate personal data concerning you held by us, or to have incomplete personal data completed;
• pursuant to Art. 17 GDPR to obtain from us the erasure of your personal data stored by us unless the processing is necessary for exercising the right of freedom of expression and information; for compliance with a legal obligation; for reasons of public interest; or for the establishment, exercise or defense of legal claims;
• pursuant to Art. 18 GDPR to demand that we restrict the processing of your personal data if the accuracy of the data is contested by you, the processing is unlawful but you oppose the erasure of the personal data and we no longer need the data, but they are required by you for the establishment, exercise or defense of legal claims; or if you have objected to processing pursuant to Art. 21 GDPR;
• pursuant to Art. 20 GDPR to receive your personal data, which you have provided to us, in a structured, commonly used and machine-readable format, or to demand their transmission to another controller;
• pursuant to Art. 7 (3) GDPR at any time to withdraw your consent given to us. In consequence of withdrawal, we shall no longer be allowed to process the data in future on the basis of such consent; and
• pursuant to Art. 77 GDPR to lodge a complaint with a supervisory authority. For this purpose you can, as a general rule, address your complaint to the supervisory authority in the place of your habitual residence, your place of work, or the place where our firm has its registered office.

8. Right to object

If your personal data are being processed on the basis of legitimate interests pursuant to Art. 6 (1) Sentence 1 point f GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR on grounds relating to your particular situation, or if the objection relates to direct marketing. In the second of these two cases, you have a right to object in general without invoking a particular situation and we shall comply with the objection. If you wish to exercise your right to withdraw consent or object, simply send an email info@weinert-wp.com.

9. Data security

When you visit our website we use the widely adopted protocol secure sockets layer (SSL) in conjunction with the highest encryption level supported by your browser. As a general rule, 256-bit encryption is supported. If your browser is incompatible with a 256-bit key, we revert to the 128-bit v3 technique instead. The open or closed lock or padlock symbol displayed on the browser page or further information contained in the properties of the browser show whether or not the data constituting our website are encrypted during their transmission.

In other respects we take suitable technical and organizational security measures to protect your data against coincidental or intentional manipulation, partial or complete loss, destruction, and unauthorized access by third parties. We continuously improve our security measures in keeping with technological progress.

10. Currency and revision of this data protection notice

This is the currently applicable version of the data protection notice as of May 2018. The evolution of our website and services offered by way of same, as well as changes to statutory or official requirements, can make it necessary for us to revise this data protection notice from time to time.