Privacy statement
I. Name and address of the person responsible
The person responsible within the meaning of the EU General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection regulations is:
Walberg Law Tax Strategy GmbH & Cie. KG
Schackstr.1
80539 Munich
(hereinafter also referred to as “Walberg & Cie.”)
email: contact@walberg.law
Site: www.walberg.law
II. General information about data processing
1. Scope of processing of personal data
In principle, we only process our users' personal data to the extent necessary to provide a functional website and our content and services. The processing of personal data of our users is regularly carried out only with the user's consent. An exception applies in cases where prior consent cannot be obtained for factual reasons and the processing of the data is permitted by law.
2. Legal basis for processing personal data
Insofar as we obtain your consent to process personal data, Art. 6 para. 1 lit. a GDPR serves as the legal basis.
Insofar as the processing of personal data is necessary to fulfill a contract to which you are a party, Art. 6 para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are carried out at your request to carry out pre-contractual measures.
Insofar as processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis.
In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.
If processing is necessary to protect a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Article 6 (1) (f) GDPR serves as the legal basis for processing.
3. Data deletion and storage period
We store your data for as long as is necessary to provide our online offering and the associated services or for the provision of our services or as long as we have a legitimate interest in continuing to store it. In all other cases, we delete your personal data with the exception of data that we must continue to keep in order to fulfill contractual or legal (e.g. tax or commercial) retention periods (e.g. invoices). Contractual retention periods may also result from contracts with third parties (e.g. owners of copyright and ancillary copyright rights). We will block data that is subject to a storage period until the period expires.
III. Transfer of data to third parties; service providers
1. Transfer of data to third parties
In principle, we will only share your personal data with third parties insofar as this is necessary to fulfill the contract, if we or the third party has a legitimate interest in sharing it, or if you have given your consent to do so. If data is transmitted to third parties on the basis of a legitimate interest, this is explained in this privacy policy. In addition, data may be transferred to third parties if we are required to do so due to legal provisions or by an enforceable official or court order.
IV. Data collection when you visit our website
1. Description and scope of data processing
When using our website for informational purposes only, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called “server log files”). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:
(1) Information about the browser type and version used
(2) The user's operating system
(3) The user's Internet service provider
(4) Date and time of access
(5) Websites from which the user's system accesses our website
(6) Websites that are accessed by the user's system via our website
The data may also be stored in our system's log files. This data is not stored together with other personal data of the user. The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f DSGVO. The temporary storage of the IP address by the system is necessary to enable the website to be delivered to your computer. To do this, your IP address must be stored for the duration of the session. They are stored in log files to ensure the functionality of the website. We also use the data to optimize the website and ensure the security of our information technology systems. There is no evaluation of the data for marketing purposes in this context. These purposes also include our legitimate interest in data processing in accordance with Article 6 (1) (f) GDPR.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. If the data is collected to provide the website, this is the case when the respective session has ended. The collection of data to provide the website and the storage of data in log files is absolutely necessary for the operation of the website. There is therefore no option for the user to object.
V. Contact form and email contact
1. Description and scope of data processing
There is a contact form on our website, which can be used to contact us electronically. If a user makes use of this option, the data entered in the input mask is transmitted to us and stored. This data is:
First name, last name, subject text, email address, message text
At the time the message is sent, the following data is also stored:
(1) The user's IP address
(2) Date and time of dispatch
Alternatively, you can contact us via the email address provided. In this case, the user's personal data transmitted with the email will be stored.
In this context, the data will not be passed on to third parties. The data is used exclusively to process the conversation.
If the user has given consent, the legal basis for processing the data is Art. 6 para. 1 lit. a GDPR. The legal basis for processing data transmitted in the course of sending an email is Art. 6 para. 1 lit. f DSGVO. If the email contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR.
The processing of personal data from the input form is for us solely to process the contact. If you contact us by e-mail, this also constitutes the necessary legitimate interest in processing the data. The other personal data processed during the sending process is used to prevent misuse of the contact form and to ensure the security of our information technology systems.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input screen of the contact form and those sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has finally been clarified. The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.
The user has the option to withdraw his consent to the processing of personal data at any time. If users contact us by email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.
The user can object to the storage of their personal data at any time by contacting us via the email address provided in section I above. In this case, all personal data that was stored in the course of contacting us will be deleted.
VI. Use of social plug-ins
We use social plugins for our website presence (hereinafter”Social plugins“or even”plugins“) the following provider:
1. LinkedIn
Within our online offering, functions and content of the LinkedIn service, offered by LinkedIn AG, Dammtorstraße 29-32, 20354 Hamburg, Germany, can be integrated. This may include, for example, content such as images, videos or texts and buttons with which users can express their liking about the content, subscribe to the authors of the content or our contributions. If users are members of the LinkedIn platform, LinkedIn can assign the access to the above content and functions to the users' profiles there. LinkedIn's privacy policy: https://www.linkedin.com/legal/privacy-policy
Opt-out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
2nd reason How plugins work
Only when you activate the plugins does your Internet browser establish a direct connection to the servers of the respective plug-in provider. As a result, the plug-in provider receives the information that your Internet browser has accessed the corresponding page of our online offering, even if you do not have a user account with the provider or are not currently logged in. Log files (including the IP address) are transmitted directly from your Internet browser to a server of the respective plug-in provider and, if necessary, stored there. This server may be located outside the EU or the EEA (e.g. in the USA).
The plugins represent independent extensions of the plugin providers. We therefore have no influence on the amount of data collected and stored by plugin providers via the plugins. If you do not want the plugin providers to receive and possibly save or reuse the data collected via this Internet portal, you should not use the respective plugins. In principle, you can also completely prevent plugins from loading with the help of add-ons for your browser, so-called script blockers.
For more information about the purpose and scope of the collection and the further processing and use of your data by plugin providers as well as about your rights and settings options to protect your data, please see the privacy policies of the respective providers.
VII. Rights of the person concerned
The applicable data protection law grants you comprehensive data subject rights (rights of information and intervention) vis-à-vis the person responsible with regard to the processing of your personal data, which we will inform you about below:
1. Right to information in accordance with Art. 15 GDPR
In particular, you have the right to information about your personal data processed by us, the processing purposes, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to correction, deletion, restriction of processing, objection to processing, complaint with a supervisory authority, the origin of your data, if these were not collected from you by us, the existence of automated decision-making, including profiling and, if applicable, meaningful information about the logic involved and the scope and intended effects of such processing, as well as your right to be informed of the guarantees in accordance with Article 46 GDPR when transferring your data to third countries;
2. Right to correction in accordance with Art. 16 GDPR
You have the right to immediate correction of incorrect data concerning you and/or to complete your incomplete data stored by us;
3. Right to deletion in accordance with Art. 17 GDPR
You have the right to request the deletion of your personal data if the requirements of Article 17 (1) GDPR are met. However, this right does not exist in particular if processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
4. Right to restrict processing in accordance with Article 18 GDPR
You have the right to request the restriction of the processing of your personal data as long as the accuracy of your data disputed by you is checked, if you refuse to delete your data due to unlawful data processing and instead request that the processing of your data be restricted, if you need your data to assert, exercise or defend legal claims, after we no longer need this data after the purpose has been achieved, or if you file an objection for reasons relating to your particular situation as long as it is not yet clear whether our legitimate reasons prevail;
5. Right to be informed in accordance with Art. 19 GDPR
If you have asserted the right to correct, delete or restrict processing against the person responsible, the controller is obliged to notify all recipients to whom the personal data concerning you has been disclosed of this correction or deletion of the data or restriction of processing, unless this proves impossible or involves disproportionate effort. You have the right to be informed about these recipients.
6. Right to data portability in accordance with Art. 20 GDPR
You have the right to receive your personal data, which you have provided to us, in a structured, common and machine-readable format or to request transmission to another person responsible, insofar as this is technically feasible;
7. Right to withdraw consents granted in accordance with Article 7 (3) GDPR
Once you have given your consent to the processing of data, you have the right to withdraw your consent at any time with effect for the future. In the event of withdrawal, we will immediately delete the data concerned, unless further processing can be based on a legal basis for processing without consent. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent up to the withdrawal;
8. Right to lodge a complaint in accordance with Art. 77 GDPR
If you believe that the processing of personal data concerning you is contrary to the GDPR, you have the right — without prejudice to any other administrative or judicial remedy — to lodge a complaint with the supervisory authority responsible for us. Alternatively, you can contact the data protection authority at your place of residence, which will then forward your request to the competent authority.
Due to our headquarters in Munich, the supervisory authority responsible for us is:
Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 27, D-91522 Ansbach
RIGHT OF OBJECTION
IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST AS PART OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION.
IF YOU EXERCISE YOUR RIGHT OF OBJECTION, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN PROVE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING THAT OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FUNDAMENTAL FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS.
IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT OF OBJECTION, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.
VIII. Further information and contacts
If you have any further questions about data protection, please contact us via the contact address given in section I above.