Data Protection

The following information is intended to provide you with an overview of how we process your personal data and your rights under data protection law. Personal data will only be processed if the data subject has consented, if it is necessary for the performance of a contract or if the EU General Data Protection Regulation (GDPR) or another law permits or prescribes the processing.

Person responsible
The controller for all locations and branches pursuant to Art. 4 (7) of the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG) is KEDAK. Kanzlei für Unternehmensrecht, Sendlinger Str. 56, 80331 Munich represented by Mr. Freddy Kedak, attorney at law
Phone: +49 (0) 89 244 1269-60, Fax: +49 (0) 89 244 1269-61
E-mail: info@kedak-law.com
Sales tax identification numbers: DE293275718A branch office is located at:
Olivaer Pl. 15, 10707 Berlin (C/O Hantschel & Wollny Rechtsanwälte & Notar), phone: +49 (0) 89 244 1269-60, fax: +49 (0) 89 244 1269-61, e-mail: info@kedak-law.com.
Collection and storage of personal data and the nature and purpose of its use
a) When visiting the websit
When you visit our website www.kedak-law.com.de, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is collected without any action on your part and stored until it is automatically deleted
IP address of the requesting computer,
Date and time of access,
Name and URL of the accessed file,
the website from which access was made (referrer URL)
browser used and, if applicable, the operating system of your computer and the name of your access provider.The aforementioned data is processed by us for the following purposes
Ensuring a smooth connection to the website,
Ensuring a comfortable use of our website,
evaluating system security and stability andfor other administrative purposes.The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR.Our legitimate interest follows from the purposes for data collection listed above. Under no circumstances do we use the data collected for the purpose of drawing conclusions about your person. We also use cookies and analysis services when you visit our website. You can find more detailed explanations on this in sections 4 and 5 of this privacy policy
b) When contacting us via contact form and email

Data processing for the purpose of contacting us is carried out in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR on the basis of your voluntarily given consent. The data you provide serves the purpose of concluding a contract. The personal data collected by us for this purpose will be deleted after completion of your request as soon as it is no longer necessary to achieve the purpose for which it was collected. In particular, it will be deleted if it can be inferred from the circumstances that a contract will no longer be concluded. Forwarding of data
Your personal data will not be transferred to third parties for purposes other than those listed below. We only pass on your personal data to third parties if:
you have given your express consent to this in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR,
the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR is necessary for the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,
in the event that there is a legal obligation for the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. GDPR, and this is legally permissible and necessary for the processing of contractual relationships with you in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR.As part of our processing of personal data, the data may be transferred to other bodies, companies, legally independent organizational units or persons or disclosed to them. The recipients of this data may include, for example, service providers commissioned with IT tasks or providers of services and content that are integrated into a website. In such cases, we observe the legal requirements and, in particular, conclude corresponding contracts or agreements with the recipients of your data that serve to protect your data.If we process data in a third country (i.e. outside the European Union (EU), the European Economic Area (EEA)) or if the processing takes place in the context of the use of third-party services or the disclosure or transfer of data to other persons, bodies or companies, this will only take place in accordance with the legal requirements.
Subject to express consent or contractually or legally required transfer, we only process or have the data processed in third countries with a recognized level of data protection, contractual obligation through so-called standard protection clauses of the EU Commission, in the presence of certifications or binding internal data protection regulations (Art. 44 to 49 GDPR, information page of the EU Commission: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection_de

Cloud services
We use software services accessible via the Internet and running on the servers of their providers (so-called “cloud services”, also referred to as “software as a service”) for the following purposes: document storage and management, calendar management, sending e-mails, spreadsheets and presentations, exchanging documents, content and information with specific recipients or publishing websites, forms or other content and information as well as chats and participation in audio and video conferences.In this context, personal data may be processed and stored on the servers of the providers, insofar as these are part of communication processes with us or are otherwise processed by us as set out in this privacy policy. This data may include, in particular, master data and contact data of users, data on transactions, contracts, other processes and their content. The cloud service providers also process usage data and metadata that they use for security purposes and to optimize their services.
If we use the cloud services to provide forms or other documents and content to other users or publicly accessible websites, the providers may store cookies on users’ devices for the purposes of web analysis or to remember user settings (e.g. in the case of media control).

Notes on legal bases: If we ask for consent to the use of cloud services, the legal basis for processing is consent. Furthermore, their use may be part of our (pre)contractual services, provided that the use of cloud services has been agreed in this context. Otherwise, user data is processed on the basis of our legitimate interests (i.e. interest in efficient and secure administration and collaboration processes)
Processed data types: Inventory data (e.g. names, addresses), contact data (e.g. email, telephone numbers), content data (e.g. entries in online forms), usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses).
Data subjects: Customers, employees (e.g. employees, applicants, former employees), interested parties, communication partners.
Purposes of processing: Office and organizational procedures.
Legal bases: Consent ( 6 para. 1 sentence 1 lit. a. GDPR), Contract fulfillment and pre-contractual inquiries (Art. 6 para. 1 sentence 1 lit. b. GDPR), Legitimate interests (Art. 6 para. 1 sentence 1 lit. f. GDPR).HAUFE-LEXWARE GMBH & CO. KG, a company of the Haufe Group, Munzinger Straße 979111 Freiburg, www.advolux.de/datenschutzerklaerung

Cookies
Cookies We use cookies on our website. These are small files that your browser automatically creates and stores on your device (laptop, tablet, smartphone, etc.) when you visit our site. Cookies do not harm your device, contain no viruses, trojans, or other malware. The cookies store information related to the specific device used. However, this does not mean that we immediately learn your identity. The use of cookies serves to make the use of our offerings more pleasant for you. For instance, we use session cookies to recognize that you have visited individual pages of our website. These are automatically deleted after you leave our site. Moreover, we also use temporary cookies to enhance user-friendliness, which are stored on your device for a specific defined period. When you visit our site again to use our services, it is automatically recognized that you have been with us before and what inputs and settings you have made to avoid having to enter them again. Additionally, we may use cookies to statistically record the use of our website and to optimize our services for you (see clause 5), for which we would specifically inform you and obtain your consent. These cookies enable us to automatically recognize that you have visited our site before upon your return. These cookies are automatically deleted after a defined period. The data processed by cookies are necessary for the purposes mentioned, to protect our legitimate interests and those of third parties according to Art. 6 Para. 1 S. 1 lit. f GDPR. Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a notice appears before a new cookie is created. However, completely disabling cookies may mean that you will not be able to use all the functions of our website.

Analysis Tools

The tracking measures listed below, which we may use, are conducted based on Art. 6 Para. 1 S. 1 lit. f GDPR.
With the tracking measures implemented, we aim to ensure a needs-based design and the continuous optimization of our website. Additionally, we use tracking measures to statistically record the usage of our website and to optimize our services for you. These interests are considered legitimate within the meaning of the aforementioned provision. The specific purposes of data processing and data categories can be found in the respective tracking tools.

a) Google Analytics For the purpose of tailoring and continuously optimizing our pages, we use Google Analytics, a web analysis service provided by Google Inc. (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter “Google”). In this context, pseudonymized usage profiles are created and cookies (see clause 4) are used. The information generated by the cookie about your use of this website such as:

Browser type/version,
Operating system used,
Referrer URL (the previously visited page),
Hostname of the accessing computer (IP address),
Time of the server request, are transmitted to a Google server in the USA and stored there.The information is used to evaluate the use of the website, to compile reports on website activities, and to provide other services related to website usage and internet usage for purposes of market research and tailor-made design of these internet pages. This information may also be transferred to third parties if this is required by law or if third parties process this data on our behalf. Under no circumstances will your IP address be merged with other Google data. The IP addresses are anonymized, so that assignment is not possible (IP masking). You can prevent the installation of cookies by setting your browser software accordingly; however, we would like to point out that in this case, you may not be able to use all the functions of this website to their full extent. Furthermore, you can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de). Alternatively to the browser add-on, especially for browsers on mobile devices, you can prevent the collection by Google Analytics by clicking on this link. An opt-out cookie will be set, which prevents the future collection of your data when visiting this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again. Further information on data protection in connection with Google Analytics can be found in the Google Analytics Help (https://support.google.com/analytics/answer/6004245?hl=de).
b) Google AdWords Conversion Tracking To statistically record the use of our website and to evaluate the optimization of our website for you, we also use Google Conversion Tracking. In this process, a cookie (see clause 4) is set by Google AdWords on your computer if you have reached our website via a Google advertisement. These cookies expire after 30 days and are not used for personal identification. If a user visits certain pages of the website of an AdWords customer and the cookie has not yet expired, Google and the customer can recognize that the user clicked on the advertisement and was redirected to that page.
Data protection authorities require that a data processing agreement be in place for the permissible use of Google Analytics. Google provides a template for this agreement at http://www.google.com/analytics/terms/de.pdf. Each AdWords customer receives a different cookie. Therefore, cookies cannot be tracked across the websites of AdWords customers. The information obtained through the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. AdWords customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive information that allows users to be personally identified. If you do not wish to participate in the tracking process, you can also refuse to set a cookie necessary for this – for example, by setting your browser to generally disable the automatic setting of cookies. You can also disable cookies for conversion tracking by setting your browser to block cookies from the domain “www.googleadservices.com.”
Google’s privacy policy on conversion tracking can be found at (https://services.google.com/sitestats/de.html).

Social Media Plugins, Google Maps, and Contact Form

On our website, based on Art. 6 Para. 1 S. 1 lit. f GDPR, we may use social plugins from social networks like Facebook and LinkedIn to increase the visibility of our law firm. The underlying advertising purpose is considered a legitimate interest under the GDPR. The responsibility for data protection-compliant operation is ensured by their respective providers. The integration of these plugins by us is carried out using the so-called two-click method to protect visitors of our website as much as possible.
a) Facebook We use social media plugins from Facebook on our website to make their use more personal. For this, we use the “LIKE” or “SHARE” button. This is an offering from Facebook. When you access a page of our website that contains such a plugin, your browser establishes a direct connection with Facebook’s servers. The content of the plugin is transmitted directly from Facebook to your browser and integrated into the webpage. By integrating the plugins, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook account or are not currently logged in to Facebook. This information (including your IP address) is transmitted directly from your browser to a server of Facebook in the USA and stored there. If you are logged into Facebook, Facebook can directly associate the visit to our website with your Facebook account. If you interact with the plugins, for example, by pressing the “LIKE” or “SHARE” button, the corresponding information is also transmitted directly to a Facebook server and stored there. The information is also published on Facebook and shown to your Facebook friends. Facebook may use this information for the purposes of advertising, market research, and the tailored design of Facebook pages. To this end, Facebook creates usage, interest, and relationship profiles, for example, to evaluate your use of our website concerning the ads displayed to you on Facebook, to inform other Facebook users about your activities on our website, and to provide other services associated with the use of Facebook. If you do not want Facebook to assign the data collected through our web appearance to your Facebook account, you must log out of Facebook before visiting our website. For the purpose, scope of data collection, further processing and use of the data by Facebook, as well as your related rights and settings options for protecting your privacy, please refer to the privacy policy of Facebook (https://www.facebook.com/about/privacy/).
b) LinkedIn Our website also utilizes the “Share” function of the LinkedIn network. The provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. When you click the LinkedIn “Share” button (plugin), if you are logged into your LinkedIn account, you will be redirected in a separate browser window to your user account where you can share the electronic publication posted on our website along with a comment. The plugin creates a direct connection between your browser and LinkedIn’s server. LinkedIn thus receives information that you have visited our website with your IP address. It also enables LinkedIn to associate your visit to our website with you and your user account. We note that we do not have knowledge of the content of the transmitted (personal) data or their use by LinkedIn. For more information, please see LinkedIn’s privacy policy at: https://www.linkedin.com/legal/privacy-policy.
c) Google Maps On our website, we use Google Maps to display our location and to create directions. This is a service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, hereinafter referred to as “Google.” By being certified under the EU-US Privacy Shield (“EU-US Privacy Shield”) https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active Google guarantees that it will comply with the EU’s data protection regulations even when processing data in the USA.
To enable the display of certain fonts on our website, a connection to the Google server in the USA is established when our website is accessed. If you access the Google Maps component integrated into our website, Google stores a cookie on your device via your internet browser. To display our location and create directions, your user settings and data are processed. We cannot exclude the possibility that Google may use servers in the USA.
The legal basis is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in optimizing the functionality of our website. The connection made to Google enables Google to determine from which website your request has been sent and to which IP address the directions should be sent.

If you do not agree with this processing, you have the option to prevent the installation of cookies by making the appropriate settings in your internet browser. Details can be found above under the section “Cookies.” Additionally, the use of Google Maps and the information obtained through Google Maps is subject to Google’s terms of use https://policies.google.com/terms?gl=DE&hl=de and the terms and conditions for Google Maps https://www.google.com/intl/de_de/help/terms_maps.html.

Moreover, Google provides further information under https://adssettings.google.com/authenticated https://policies.google.com/privacy
Rights of Data Subjects You have the right to:
According to Art. 15 GDPR, request information about your personal data processed by us. Specifically, you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage duration, the existence of a right to correction, deletion, limitation of processing, or objection, the right to lodge a complaint, the source of your data if they were not collected by us, and the existence of automated decision-making, including profiling and, if applicable, meaningful information about the details thereof;
According to Art. 16 GDPR, demand immediate correction of incorrect or complete your personal data stored by us;

According to Art. 17 GDPR, demand the deletion of your personal data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims

According to Art. 18 GDPR, demand the restriction of the processing of your personal data insofar as the accuracy of the data is contested by you, the processing is unlawful, you oppose the deletion of the data, and we no longer need the data, but you require them for the establishment, exercise, or defense of legal claims or you have objected to processing pursuant to Art. 21 GDPR;
According to Art. 20 GDPR, receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format or request the transfer to another controller;
According to Art. 7 para. 3 GDPR, withdraw your consent at any time. This means that we may no longer continue the data processing based on this consent for the future; and

According to Art. 77 GDPR, lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.

Rights of Data Subjects You have the right to:
According to Art. 15 GDPR, request information about your personal data processed by us. Specifically, you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage duration, the existence of a right to correction, deletion, limitation of processing, or objection, the right to lodge a complaint, the source of your data if they were not collected by us, and the existence of automated decision-making, including profiling and, if applicable, meaningful information about the details thereof;
According to Art. 16 GDPR, demand immediate correction of incorrect or complete your personal data stored by us;

According to Art. 17 GDPR, demand the deletion of your personal data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims;

According to Art. 18 GDPR, demand the restriction of the processing of your personal data insofar as the accuracy of the data is contested by you, the processing is unlawful, you oppose the deletion of the data, and we no longer need the data, but you require them for the establishment, exercise, or defense of legal claims or you have objected to processing pursuant to Art. 21 GDPR;

According to Art. 20 GDPR, receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format or request the transfer to another controller;

According to Art. 7 para. 3 GDPR, withdraw your consent at any time. This means that we may no longer continue the data processing based on this consent for the future; and

According to Art. 77 GDPR, lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.

Rights of Data Subjects
Right to Access (Art. 15 GDPR): You can request information about your personal data that we process, including the purposes of processing, the categories of personal data, recipients, planned storage duration, and details on automated decision-making, among others.
Right to Rectification (Art. 16 GDPR): You are entitled to have incorrect personal data corrected, or incomplete personal data completed.
Right to Erasure (Art. 17 GDPR): You can demand the deletion of your personal data unless the processing is necessary for specific legal purposes such as freedom of expression, compliance with legal obligations, public interest, or the establishment, exercise, or defense of legal claims.
Right to Restrict Processing (Art. 18 GDPR): You have the right to restrict the processing of your personal data under certain conditions, such as if you contest the accuracy of the data, the processing is unlawful, or the data is no longer needed but required by you for legal claims.
Right to Data Portability (Art. 20 GDPR): You can receive your personal data in a structured, commonly used, and machine-readable format, or request its transfer to another controller.
Right to Withdraw Consent (Art. 7 para. 3 GDPR): You may withdraw your consent at any time, which will stop any data processing activities based on that consent for the future.
Right to Lodge a Complaint (Art. 77 GDPR): You can lodge a complaint with a supervisory authority, typically in your place of residence, workplace, or where the alleged infringement has occurred.
Data Security We use the widespread SSL (Secure Socket Layer) protocol during website visits, combined with the highest level of encryption supported by your browser. Typically, this is 256-bit encryption. If your browser does not support 256-bit encryption, we revert to 128-bit v3 technology. Whether a single page of our website is transmitted encrypted can be recognized by the closed representation of the key or lock symbol in the lower status bar of your browser. We also employ suitable technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or total loss, destruction, or unauthorized access by third parties. Our security measures are continuously improved in accordance with technological development.
Currency and Modification of this Privacy Policy This Privacy Policy is currently valid and was last updated in May 2020. Due to the further development of our website and offers, or due to changes in legal or regulatory requirements, it may become necessary to change this Privacy Policy. The current Privacy Policy can be accessed and printed at any time on the website at https://www.kedak-law.com/datenschutz.