1 General information

Thank you for your interest in our website. Data protection and data security when using our website are very important to us. We are therefore committed to protecting your privacy and treating your data confidentially. We would like to take this opportunity to inform you about which of your personal data we collect in relation to your visit to our website and for what purposes it is used. As changes in the law or changes to our internal company processes may require adjustments to this privacy policy, we ask you to read this privacy policy regularly. It goes without saying that we comply with the legal provisions of the EU General Data Protection Regulation (EU GDPR), the German Federal Data Protection Act (BDSG), the German Digital Services Act (DDG), and other data protection regulations.

2 What is personal data?

Personal data is information that can be used to find out personal or factual information about you. Information that we cannot link to your person (or only with disproportionate effort), e.g., by pseudonymizing or anonymizing the information, is not personal data.

3 Designation and purpose of data processing

Data collection, processing, and use within the framework of the Schneider + Partner GmbH website is carried out to safeguard the legitimate interests of the law firm (Article 6(1)(f) EU GDPR). These are as follows: Website for the purpose of public presentation and contacting the law firm, as well as for registering for events organized by Schneider + Partner GmbH. No personal evaluation takes place. We reserve the right to statistically evaluate pseudonymized or anonymized data sets. This is done, for example, for system security reasons to prevent misuse, to improve the website, and for statistical purposes (number of users and page views).

In connection with the retrieval of the information you have requested, data that may allow identification is stored on our servers for the purpose of providing the service or for security purposes. This includes:

• IP address of the requesting computer
• Date and time of the request
• Desired access method/function
• Input values transmitted
• Access status of the web server
• Name of the requested file
• URL from which the file was requested or the desired action was initiated

As long as they are not evaluated in anonymized form, they are deleted immediately after the end of the session. The website is operated on the servers of the web host all-inkl.com. The content of the website is maintained by digitalwert and Schneider + Partner GmbH.

3.1 Contact form or registration for events

In the case of an inquiry via the contact form, we collect your last name, first name, title (if applicable), email address, and telephone number (if applicable) in order to provide the respective services and to contact you. The user's IP address is also recorded.

Alternatively, you can contact us or register using the email addresses provided. In this case, the user's personal data transmitted with the email will be stored.

In this context, the data will not be passed on to third parties. The data will be used exclusively for processing the conversation.

3.2 Application form

If you apply via our online form on the website or send us your application documents by email or post, you consent to the collection, storage, and processing of your data for the purpose of application processing and in the recruitment process. Unless you have given us your consent under data protection law to consider you for other open vacancies, the data in your application will be deleted or destroyed after the application process has been completed. The same applies to application documents sent by post. Unfortunately, application documents that we receive by mail cannot be returned. All data that you provide us for the purpose of your application will be stored for the duration of the application process, in particular contact details and data relating to your career, including qualifications and references.

4 Data deletion and storage period

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Storage may also take place if this has been provided for by the European or national legislator in EU regulations, laws, or other provisions to which the controller is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.

5 Information, correction, revocation of consent, and complaints

Upon your request, we will be happy to inform you at any time whether and which of your data we have stored. If, despite our efforts to ensure that your data is accurate and up to date, we have stored incorrect data about you, we will correct it immediately upon your request. If you wish to have the stored data deleted, this will also be done immediately upon your request. If deletion is not possible for legal reasons, the respective data will be blocked instead.

You can also revoke your consent to the processing and storage of your personal data by Schneider + Partner GmbH at any time. To revoke your consent, simply send an informal letter or email to: info[at]schneider-wp.de.

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, your place of work, or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.

The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 GDPR.

6 Information about cookies

We only use technically necessary cookies (small files containing configuration information). These are used in particular to determine the frequency of use and the number of users of our website, as well as to make visiting our website easier and more convenient for you. This information is only exchanged between the page and the user's browser. It is also possible to use our website without cookies. Most browsers are preset to automatically accept cookies. However, you can deactivate the storage of cookies or set your browser to notify you before cookies are stored. The data processed by cookies is justified for the above-mentioned purposes in order to pursue the legitimate interests of the law firm in accordance with Art. 6 (1) sentence 1 letter f) GDPR.

7 Disclosure to third parties

Due to legal requirements, we are obliged in certain cases to disclose your personal data to third parties. This is the case, for example, if there is suspicion of a criminal offense or misuse of our website. We are then obliged to disclose your data to the relevant law enforcement authorities. If the law firm uses third-party companies for data processing in order to fulfill its contractual obligations to you (so-called data processing on behalf of the law firm), these companies are contractually obliged to handle your data carefully in compliance with data protection regulations and in accordance with our instructions, and neither to use it for their own purposes nor to pass it on to third parties.

8 Hyperlinks to external websites

Our website contains hyperlinks to websites of other providers. In these cases, you will be redirected from our website directly to the website of the other provider. You can recognize this by the change in the URL, among other things. We cannot accept any responsibility for the confidential handling of your data, as we have no influence on whether these companies comply with data protection regulations. Please refer to their websites directly for information on how these companies handle your personal data.

Our website allows you to take part in virtual 360° tours, where you can get to know our company better. These tours are provided and hosted by our service provider, intersyst GmbH, Wittenberger Str. 55, 01309 Dresden.

The following data is regularly processed by our service provider:

• IP address
• Date and time of the request
• Time zone difference to Greenwich Mean Time (GMT)
• Content of the request (specific page)
• Access status/HTTP status code
• Amount of data transferred in each case
• Website from which the request originates
• Browser
• Operating system and its interface
• Language and version of the browser software.
• Statistical data on the time of access and duration of data transfers

To protect your personal data, you can only start the tour once you have consented to data transfer to our hosting partner.

We have concluded a data processing agreement with the hosting partner that enables data processing by the hosting partner and will regularly review this agreement for appropriateness.

You can also consent to data processing for the future at any time by adjusting your selection in our consent management tool, which you can access at the following link: https://usercentrics.com/de/datenschutzerklaerung/

9 Contact Data Protection Officer

If you have any questions regarding data protection, please contact our company data protection officer appointed in accordance with Art. 37 GDPR in conjunction with § 38 BDSG (Federal Data Protection Act)

Bernd Bosch (DATEV eG)
IT Strategy, IT Security & Data Protection
Phone +49(172)8809561 | Fax +49(911)14702407
bernd.bosch[at]datev.de