Thank you for visiting our website. We take data protection and data security in the use of our website very seriously. We would therefore like to inform you which personal data we collect when you visit our website and for what purposes the data is used.
1. Data protection at a glance
Data collection on our website
Who is responsible for data collection on this website?
The website operator is responsible for data processing on this website. You can find their contact details in the legal notice of this website.
How do we collect your data?
On the one hand, your data is collected when you disclose such data to us. This includes data you enter in a contact form.
On the other hand, data is automatically collected by our IT systems when you visit the website. This primarily concerns technical data (such as the internet browser, operating system or time of the site visit). This data is collected automatically as soon as you access our website.
What do we use your data for?
Some of the data is collected to ensure the error-free provision of the website. Other data can be used to analyse your user behaviour.
What rights do you have in connection with your data?
You have the right at any time to receive information on the origin, recipient and purpose of your personal data that we store. You also have the right to request the rectification, blocking or deletion of this data. Should you have any related questions or require further information on data protection, you may contact us at the address indicated under ‘legal notice’ at any time. Moreover, you have the right to lodge a complaint with the responsible supervisory authority
Analysis tools and third-party tools
2. General and mandatory information
Please note that online data transmission (such as email communication) may exhibit security vulnerabilities. Seamless protection of data against third-party access is not possible.
Responsibility for the content
The entity responsible for data processing on this website is:
Steuerberater Thomas Buhl
Telephone: +49 (0) 30 792 90 51
The responsible person is the natural or legal person who solely or together with others decides on the purposes and means of the processing of personal data (such as names, email addresses etc.).
Revocation of your consent for data processing
Many data processing operations are only possible with your express consent. You may withdraw your issued consent at any time. To do so, simply send us an email. The lawfulness of data processing conducted prior to revocation of your consent shall remain unaffected by the revocation.
Right to lodge a complaint with the responsible supervisory authority
In the event of violations of data protection law, the data subject is permitted to lodge a complaint with the responsible supervisory authority. The responsible supervisory authority for data protection matters is the State Data Protection Commissioner of the federal state in which our company is domiciled. A list of data protection commissioners and their contact details can be found via the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Right to data portability
You have the right to request the provision of data that we process based on your consent or automatically in fulfilment of a contract to yourself or a third party in a common, machine-readable format. Insofar as you request the direct transfer of data to another person, this shall only occur to the extent that this is technically possible.
SSL or TSL encryption
This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or enquiries which you send to as us as the website operator. You can recognise an encrypted connection by the fact that the address line of the browser switches from ‘http://’ to ‘https://’ and a lock symbol appears in your browser line.
If the SSL or TLS encryption is activated, the data you send to us cannot be read by third parties.
Objection to advertising emails
The use of contact details published in connection with the legal notice requirement in order to send not expressly requested advertising and information materials is hereby objected to. The operator of the website expressly reserves the right to take legal action in the event of the unrequested sending of advertising information, such as spam emails.
Information, blocking and deletion
In accordance with the applicable statutory provisions, you have the right at any time to receive free information regarding your stored personal data, their origin and recipient as well as the purpose of data processing, and a right to the rectification or blocking or deletion of this data. Should you have any related questions or require further information on personal data, you may contact us at the address indicated under ‘legal notice’ at any time.
3. Data collection on our website
In some instances, the website uses ‘cookies’. Cookies do not cause any damage to your computer and do not contain any viruses. Cookies enable us to make our website offering more user-friendly, effective and secure. Cookies are small text files that your browser saves to your computer.
Most of the cookies used by us are known as ‘session cookies’. They are automatically deleted after the end of your visit. Other cookies remain saved on your end device until you delete them. These cookies allow us to recognise your browser when you next visit.
You can configure your browser such that you are informed about the placement of cookies and in order to only permit cookies in individual cases, exclude the acceptance of cookies in certain cases or generally, and activate the automatic deletion of cookies when closing the browser. The functionality of this website may be restricted after cookies have been deactivated.
Server log files
The provider of the website automatically collects and stores information in server log files, which your browser automatically sends to us. These include:
- Browser type and version
- Operating system used
- Referrer URL
- Host name of the accessing computer
- Time of the server request
- IP address
This data is not combined with other data sources.
This data is collected on the basis of art. 6 (1f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of their website; this necessitates the collection of server log files.
When you send us enquiries using the contact form, your details from the form including the contact data you enter are stored with us for the purpose of processing the enquiry and in the event of follow-up questions. This data is not shared without your consent.
The data entered in the contact form is thus processed exclusively on the basis of your consent (art. 6 (1a) GDPR). You can revoke this consent at any time. To do so, simply send us an email. The lawfulness of the data processing operations conducted prior to revocation is unaffected by the revocation.
We retain the data you enter in the contact form until you request us to delete the data, you revoke your consent for data storage or the purpose for data storage no longer applies (for example, after your enquiry has been conclusively processed). Mandatory statutory provisions – in particular retention periods – remain unaffected.
Registration on this website
You can register on our website to use additional functions. We only use the data entered thereby for the purpose of using the respective offer or service for which you have registered.
In the event of important changes such as relating to the offer scope or technically required changes, we use the email address entered during registration in order to inform you.
When you sign up for our reminder service, we process and store your email address in order to regularly remind you of dates by email in accordance with your wishes. We retain your data until you terminate the contract for unsubscribing to this service. We will not pass on your email address without your consent.
If you would like to receive the newsletter offered on the website, we require your email address as well as information which enables us to check that you are the owner of the entered email address and that you agree to receive the newsletter. Additional data is not collected or only collected on a voluntary basis. We use this data only to dispatch the requested information and do not pass on this data to third parties.
The data entered in the newsletter registration form is processed exclusively on the basis of your consent (art. 6 (1a) GDPR). You can revoke your issued consent for the storage of data, your email address and its use for dispatching the newsletter at any time, for example via the ‘unsubscribe’ link contained in the newsletter. The lawfulness of the previous data processing is not affected by the revocation.
We store the data you disclose to us for the purpose of receiving the newsletter until you unsubscribe from the newsletter and we delete this data following cancellation of your newsletter subscription. Data we store for other purposes (such as email addresses for the members’ section) remains unaffected.
Disclosure to third parties
We will only process your data for the aforementioned purposes. Data shall not be disclosed to third parties beyond the extent required for these purposes. Personal data shall only be disclosed to state institutions and authorities if this is required by a legal provision and the data is requested.
4. Analysis Tools and advertising
This website uses functions of the web analysis service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses ‘cookies’. These are text files that are stored on your computer and which enable an analysis of your use of the website. The information generated by the cookie regarding your use of this website is typically sent to a Google server in the USA, where it is then stored.
The saving of Google Analytics cookies is based on art. 6 (1f) GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise their website offering as well as their advertising.
We have activated the IP anonymisation function on this website. As a result, your IP address is shortened by Google within the member states of the European Union or in other contractual states of the Agreement on the European Economic Area before being sent to the USA. Only in exceptional cases will the full IP address be sent to a Google server in the USA and then shortened there. On behalf of the operator of this website, Google uses this information to analyse your use of the website, compile reports on website activity and provide further services related to website and Internet use to the website operator. The IP address sent by your browser in connection with Google Analytics will not be combined with other data held by Google.
You can prevent the saving of cookies by configuring your browser software settings accordingly; please note, however, that you may then not be able to use the full functionality of this website. Moreover, you can prevent the collection of data related to your website use by the cookie (including your IP address), its provision to Google and the processing of this data by Google by downloading and installing the browser plugin available via the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
Objection to data collection
You can prevent the collection of your data by Google Analytics by clicking the following link. An opt-out cookie will be placed which prevents the collection of your data when you visit this website in the future: deactivate Google Analytics.
External data processing
We have concluded an external data processing contract with Google and fully implement the strict provisions of the German data protection authorities in the use of Google Analytics.
5. Plugins and tools
This website uses the map service Google Maps via an API. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
It is necessary to store your IP address in order to use the functions of Google Maps. This information is typically sent to a Google server in the USA, where it is then stored. The provider of this website has no influence on this data transmission.
The use of Google Maps occurs in the interest of attractively presenting our website and facilitating the finding of the locations indicated on our website. This represents a legitimate interest within the meaning of art. 6 (1f) GDPR.
Our website uses functions of the XING network. The provider is XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany.
A connection is established with XING servers whenever one of our web pages is accessed which contains XING functions. To the best of our knowledge, no personal data is stored in this process. In particular, no IP addresses are stored or usage behaviour analysed.
Facebook-Plugins (Like & Share-Button)
Plugins for the social network Facebook, from the provider Facebook Inc. 1 Hacker Way, Menlo Park, California 94025, USA, are integrated on our website. You can recognise the Facebook plugins by the Facebook logo under the ‘Like’ button on our website. An overview of the Facebook plugins can be found here: https://developers.facebook.com/docs/plugins/.
If you do not want Facebook to be able to link your visit to our website with your Facebook user account, please log out of your Facebook user account.
The use of Facebook plugins is based on art. 6 (1f) GDPR. The website operator has a legitimate interest in maximum visibility on social media.
Our website uses plugins from YouTube, a website operated by Google. The operator of the website is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
When you visit one of our web pages which contains a YouTube plugin, a connection is established with the YouTube servers. The YouTube servers thereby receive the information that you have visited our website.
If you are logged into your YouTube account, you allow YouTube to directly assign your browsing behaviour with your personal profile. You can prevent this by logging out of your YouTube account.
The use of YouTube is in the interest of attractively presenting our website. This represents a legitimate interest within the meaning of art. 6 (1f) GDPR.
6. Integration of third-party services and content
It is possible that third-party content, such as RSS feeds or graphics from other websites, are integrated within this website. This is always subject to the condition that the providers of this content (‘third-party providers’) obtain the IP addresses of users. Without the IP address, they would be unable to send the content to the browser of the respective user. The IP address is therefore necessary for presenting this content.
We endeavour only to use such content whose respective providers only use the IP address to deliver the content. However, we have no influence on whether the third-party providers store the IP addresses, such as for statistical purposes. In the event that we know this information, we disclose it to the users.