Data Protection

Personal data such as the name, home address, email address and telephone number of a data subject will always be processed in harmony with the European General Data Protection Regulation and in conformity with the specific data protection regulations applicable for BERGZWEI Tax GmbH and BERGZWEI Audit GmbH. This Data Privacy Statement sets out the type and scope of personal data collected by our company and informs the public about the purposes for which they are used and processed. Data subjects are also advised of their rights in this Data Privacy Statement.

As controllers responsible for processing, BERGZWEI Tax GmbH and BERGZWEI Audit GmbH have implemented many technical and organisational measures in order to ensure that the personal data processed through this website are protected as seamlessly as possible.

Gaps in security may arise when transmitting data over the internet, however, therefore absolute protection cannot be guaranteed. For this reason, every data subject is free to use alternative ways of providing us with personal data, such as by telephone.

The Data Protection Officer is Katja Reichler.
1. Definition of terms
The Data Privacy Statement of BERGZWEI Tax GmbH and BERGZWEI Audit GmbH is based on the terms used by European regulators as set out in the European General Data Protection Regulation (GDPR). Our Data Privacy Statement is intended to be easy to read and understand, both for the public and for our customers and business partners. We would like to begin by explaining the terms used so as to guarantee that we have achieved this intention.
Some of the terms used in this Data Privacy Statement are defined below:
a) Personal data
Personal data means any information relating to an identified or identifiable natural person (hereinafter “data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
b) Data subject
Data subject means any identified or identifiable natural person whose personal data are processed by the controller responsible for processing.
c) Processing
Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
d) Restriction of processing
Restriction of processing means the marking of stored personal data with the aim of limiting their processing in the future.
e) Profiling
Profiling means any form of automated processing of personal data which involves the use of these personal data to evaluate certain aspects relating to a natural person, in particular to analyse or predict aspects pertaining to the performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements of this person.
f) Pseudonymisation
Pseudonymisation means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.
g) Controller or controller responsible for processing
Controller or controller responsible for processing means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.
h) Processors
Processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
i) Recipient
Recipient means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the context of a particular inquiry in accordance with Union or Member State law are not regarded as recipients.
j) Third party
Third party means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.
k) Consent
Consent means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
2. Name and address of the controller responsible for processing
The controller within the meaning of the GDPR, other data protection laws applicable in the Member States of the European Union and other provisions having the character of data protection legislation is:

BERGZWEI Tax GmbH

BERGZWEI Audit GmbH

Wiehl office
Am Hans-Teich 18
D-51674 Wiehl

Telephone: 02262 77498-0
Fax: 02262 77498-60

Freudenberg office
Bahnhofstraße 86
D-57258 Freudenberg
Phone: +49 2734 27300

email: kanzlei@bergzwei.de
Internet: bergzwei.de

3. Cookies
The websites of BERGZWEI Tax GmbH and BERGZWEI Audit GmbH use cookies. Cookies are text files which are placed and stored on a computer system via an internet browser.
A large number of websites and servers use cookies. Many cookies contain what is known as a cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a string of characters by which websites and servers can be assigned to the specific internet browser in which the cookie was stored. This enables the web pages visited and the servers to distinguish the individual browser of the data subject from other internet browsers which contain other cookies. A specific internet browser can be recognised and identified by the unique cookie ID.
The use of cookies enables BERGZWEI Tax GmbH and BERGZWEI Audit GmbH to provide users of this website with more user-friendly services that would not be possible in the absence of cookies.
The information and features offered on our website can be optimised for the user by means of a cookie. As already mentioned, cookies enable us to recognise the users of our website. The purpose of this recognition is to make it easier for visitors to use our website. The user of a website that uses cookies does not, for instance, have to enter their access data again every time they visit the website because these data are taken from the website and the cookie stored on the user's computer system. Another example is the cookie of a shopping trolley in an online shop. The online shop makes a note of the articles that the customer has placed in the virtual shopping trolley using a cookie.
The data subject can prevent the setting of cookies by our website at any time by setting the internet browser as appropriate and permanently objecting to the setting of cookies. Furthermore, cookies which have already been set can be deleted at any time via an internet browser or other software programs. This is possible in all commonly used internet browsers. If the data subject disables the setting of cookies in the internet browser, it may not be possible to make full use of all the functions on our website.

4. Collection of general data and information
The websites of BERGZWEI Tax GmbH and BERGZWEI Audit GmbH record a range of general data and information every time the website is accessed by a data subject or automated system. These general data and information are stored in the server log files. The data recorded may include (1) the browser types and versions used, (2) the operating system used by the system accessing the site, (3) the website from which a system gains access to our website (known as the referrer), (4) the subpages which are visited on our website through the system gaining access, (5) the date and time of the website visit, (6) an internet protocol address (IP address), (7) the internet service provider of the system gaining access, and (8) other similar data and information used for security purposes in the event of attacks on our information technology systems.
When using these general data and information, BERGZWEI Tax GmbH and BERGZWEI Audit GmbH do not determine the identity of the data subject. This information is required to (1) deliver our website content correctly, (2) to optimise our website content and the advertising for the website, (3) to ensure the permanent operability of our information technology systems and our website technology, and (4) to provide law enforcement authorities with the information necessary for criminal prosecution in the event of a cyber attack. These data and information are collected anonymously and are therefore evaluated by BERGZWEI Tax GmbH and BERGZWEI Audit GmbH both for statistical purposes and in order to increase data protection and data security in our company with the ultimate aim of ensuring an optimum level of protection for the personal data processed by us. The anonymous data in the server log files are stored separately from all the personal data provided by a data subject.

5. Subscription to our newsletter
The websites of BERGZWEI Tax GmbH and BERGZWEI Audit GmbH offer users the opportunity to subscribe to the newsletter of our company. Which personal data are transferred to the controller responsible for processing when ordering the newsletter is set out in the input template used.
BERGZWEI Tax GmbH and BERGZWEI Audit GmbH use a newsletter to inform their customers and business partners at regular intervals of what the company offers. The data subject can in principle only receive the newsletter of our company if (1) the data subject has a valid email address and (2) the data subject registers for newsletter mailing. For legal reasons, a confirmation mail in the double opt-in process is first sent to the email address given by a data subject for newsletter mailing. This confirmation mail is sent in order to verify whether the owner of the email address, as the data subject, has authorised receipt of the newsletter.
In the newsletter registration process, we also store the IP address of the computer system used by the data subject at the time of registration as allocated by the internet service provider (ISP), as well as the date and time of registration. We need to collect these data in order to be able to verify the (possible) misuse of the email address of a data subject at a later date, so it serves as legal protection for the controller responsible for processing.
The personal data collected when registering for the newsletter will be used solely in order to mail our newsletter. In addition, subscribers to the newsletter may be informed by email if this is necessary for operation of the newsletter service or a related registration, such as would be the case in the event of modifications to the newsletter service or changes to the technical circumstances. The personal data collected for the purposes of the newsletter service will not be passed on to third parties. The data subject can cancel subscription to our newsletter at any time. Consent to the storage of personal data which the data subject has given to us for the newsletter mailing can be withdrawn at any time. Each newsletter contains a link which can be used in order to withdraw consent. There is also the option of cancelling registration for the newsletter at any time, either directly on the website of the controller responsible for processing or by informing the controller of this in some other way.

6. Newsletter tracking
The newsletters of BERGZWEI Tax GmbH and BERGZWEI Audit GmbH contain what are known as tracking pixels. A tracking pixel is a miniature graphic that is embedded in emails which are sent in HTML format in order to enable the log file to be recorded and analysed. This allows a statistical evaluation of the success or failure of online marketing campaigns. Using the embedded tracking pixel, BERGZWEI Tax GmbH and BERGZWEI Audit GmbH can identify whether and when an email was opened by a data subject and which of the links contained in the email the data subject actually called up.
The personal data collected by means of the tracking pixels contained in the newsletters are stored and analysed by the controller responsible for processing in order to optimise the newsletter mailing and adapt the content of future newsletter more closely to the interests of the data subject. These personal data will not be passed on to third parties. Data subjects have the right at any time to withdraw the separate consent given through the double opt-in process. Following withdrawal, the controller responsible for processing will erase these personal data. BERGZWEI Tax GmbH and BERGZWEI Audit GmbH will automatically take cancellation of registration to receive the newsletter as withdrawal of consent.

7. Contact via the website
In accordance with statutory provisions, the websites of BERGZWEI Tax GmbH and BERGZWEI Audit GmbH contain information which enables rapid electronic contact with our company and direct communication with us, likewise including a general address for electronic mail (email address). If a data subject contacts the controller responsible for processing by email or by means of a contact form, the personal data transmitted by the data subject will be stored automatically. Any such personal data voluntarily sent to the controller responsible for processing by a data subject will be saved for the purposes of processing the case or contacting the data subject. These personal data will not be passed on to third parties.

8. Routine erasure and blocking of personal data
The controller responsible for processing will process and store the personal data of the data subject only for the time necessary to achieve the purpose for which the data are stored, or to the extent dictated by European regulators or by other legislators in laws or regulations to which the controller is subject.
If the storage purpose ceases to apply, or if a storage period prescribed by European regulators or by other legislators expires, the personal data will be routinely blocked or erased in accordance with the statutory provisions.

9. Rights of the data subject
a) Right of confirmation
European regulators grant every data subject the right to ask the controller responsible for processing for confirmation of whether personal data concerning the data subject are being processed. If a data subject would like to make use of this right of confirmation, they can contact an employee of the controller responsible for processing at any time.
b) Right of access

European regulators grant every data subject whose personal data are processed the right to obtain, at any time and free of charge, information from the controller about the personal data concerning the data subject which are stored and a copy of this information. European regulators have also given data subjects the right to access the following information:
the purposes of the processing;
the categories of personal data concerned;
the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;
the right to lodge a complaint with a supervisory authority;
where the personal data are not collected from the data subject, any available information as to their source;
the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

The data subject also has a right of access to information as to whether personal data have been transferred to a third country or to an international organisation. If this is the case, the data subject also has the right to obtain information on the appropriate safeguards in connection with the transfer.
If a data subject would like to make use of this right of access, they can contact an employee of the controller responsible for processing at any time.

c) Right to rectification
European regulators grant every data subject whose personal data are processed the right to request the rectification of incorrect personal data without undue delay. Taking into account the purposes of the processing, the data subject also has the right to have incomplete personal data completed, including by means of providing a supplementary statement.
If a data subject would like to make use of this right, they can contact an employee of the controller responsible for processing at any time.

d) Right to erasure (right to be forgotten)

European regulators grant every data subject whose personal data are processed the right to ask the controller to erase the personal data concerning the data subject without undue delay where one of the following grounds applies and insofar as the processing is not necessary:
the personal data are no longer needed for the purposes for which they were collected or otherwise processed;
the data subject withdraws consent on which the processing is based according to point (a) of Article 6(1) or point (a) of Article 9(2) GDPR, and where there is no other legal ground for the processing;
the data subject objects to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2) GDPR;
the personal data have been processed unlawfully;
the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject;
the personal data have been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.

If one of these grounds applies and a data subject wants the personal data which are stored at BERGZWEI Tax GmbH and BERGZWEI Audit GmbH to be erased, they can contact an employee of the controller responsible for processing at any time.
The employees of BERGZWEI Tax GmbH and BERGZWEI Audit GmbH will ensure that the request for erasure is met without undue delay.
If the personal data were made available to the public by BERGZWEI Tax GmbH and BERGZWEI Audit GmbH and our company as the controller pursuant to Art. 17(1) GDPR has a duty to erase the personal data, BERGZWEI Tax GmbH and BERGZWEI Audit GmbH, having regard for the available technology and costs of implementation, will take appropriate measures, including those of a technical nature, to inform other controllers which process the published personal data that the data subject has demanded that these other controllers erase all links to these personal data or copies or replications of these personal data to the extent that processing is not necessary. The employees of BERGZWEI Tax GmbH and BERGZWEI Audit GmbH will do what is necessary in the individual case.

e) Right to restriction of processing

European regulators grant every data subject whose personal data are processed the right to ask the controller to restrict the data processing if one of the following conditions applies:
the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data;
the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims;
the data subject has objected to processing pursuant to Article 21(1) GDPR pending verification of whether the legitimate grounds of the controller override those of the data subject.

If one of these conditions are met and a data subject wants the processing of the personal data which are stored at BERGZWEI Tax GmbH and BERGZWEI Audit GmbH to be restricted, they can contact an employee of the controller responsible for processing at any time. The employees of BERGZWEI Tax GmbH and BERGZWEI Audit GmbH will ensure that the processing is restricted.

f) Right to data portability
European regulators grant every data subject whose personal data are processed the right to receive the personal data which have been provided by the data subject to a controller in a structured, commonly used and machine-readable format. They also have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where the processing is based on consent pursuant to point (a) of Article 6(1) or point (a) of Article 9(2) GDPR or on a contract pursuant to point (b) of Article 6(1) GDPR and the processing is carried out by automated means, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
In exercising their right to data portability, Art. 20(1) GDPR also gives the data subject the right to have the personal data transmitted directly from one controller to another, where technically feasible and provided this does not adversely affect the rights and freedoms of others.
To assert this right to data portability, the data subject can contact an employee of BERGZWEI Tax GmbH and BERGZWEI Audit GmbH at any time.

g) Right to object
European regulators grant every data subject whose personal data are processed the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on point (e) or (f) of Article 6(1) GDPR. This also applies to any profiling based on these provisions.
BERGZWEI Tax GmbH and BERGZWEI Audit GmbH will stop processing the personal data in the event of an objection unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.
If BERGZWEI Tax GmbH and BERGZWEI Audit GmbH process personal data for direct marketing purposes, the data subject has the right to object at any time to processing of personal data concerning him or her for such marketing. This includes profiling to the extent that it is related to such direct marketing. If the data subject objects to the processing of their personal data by BERGZWEI Tax GmbH and BERGZWEI Audit GmbH for direct marketing purposes, BERGZWEI Tax GmbH and BERGZWEI Audit GmbH will stop processing the personal data for these purposes.
The data subject also has the right, on grounds relating to his or her particular situation, to object to the processing of their personal data by BERGZWEI Tax GmbH and BERGZWEI Audit GmbH for scientific or historical research purposes or statistical purposes pursuant to Article 89(1) GDPR, unless the processing is necessary for the performance of a task carried out for reasons of public interest.
To assert this right to object, the data subject can contact an employee of BERGZWEI Tax GmbH and BERGZWEI Audit GmbH directly at any time. In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, the data subject may further exercise his or her right to object by automated means using technical specifications.

h) Automated individual decision-making, including profiling
European regulators grant every data subject whose personal data are processed the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her, provided that the decision (1) is necessary for entering into, or performance of, a contract between the data subject and a data controller, or (2) is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the data subject's rights and freedoms and legitimate interests, or (3) is based on the data subject's explicit consent.
If the decision is (1) necessary for entering into, or performance of, a contract between the data subject and a data controller or is (2) authorised by Union or Member State law to which the controller is subject, BERGZWEI Tax GmbH and BERGZWEI Audit GmbH will take appropriate measures to safeguard the data subject's rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and to contest the decision.
If a data subject would like to assert their rights relating to automated decision-making, they can contact an employee of the controller responsible for processing at any time.

i) Right to withdrawal of data protection consent
European regulators grant every data subject whose personal data are processed the right to withdraw consent to the processing of their personal data at any time.
If a data subject would like to assert their right to withdraw consent, they can contact an employee of the controller responsible for processing at any time.

10. Data protection provisions governing the application and use of Facebook
The controller responsible for processing has integrated components of Facebook into this website. Facebook is a social network.
A social network is a social meeting point operated on the internet, in other words an online community which normally enables users to communicate with each other and interact in the virtual sphere. A social network can serve as a platform for the exchange of opinions and experience or enable the internet community to provide personal or company-related information. Among other features, Facebook enables users of the social network to create private profiles, upload photographs and network via friend requests.
The operator of Facebook is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. The controller responsible for the processing of personal data if a data subject lives outside the USA or Canada is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Each visit to one of the individual pages of this website, which is operated by the controller responsible for processing and into which a component of Facebook (Facebook plug-in) has been integrated, causes the browser of the data subject’s computer system, via the Facebook component in question, to automatically download a presentation of the corresponding Facebook component from Facebook. A complete overview of all Facebook plug-ins can be accessed at developers.facebook.com/docs/plugins/. As part of this technical process, Facebook learns which specific subpage of our website is accessed by the data subject.
If the data subject is simultaneously logged on to Facebook, every time they access our website and throughout the entire duration of the visit to our website, Facebook recognizes which specific subpage of our website has been visited by the data subject. This information is collected by the Facebook component and allocated by Facebook to the data subject’s individual Facebook account. If the data subject clicks on one of the Facebook buttons integrated into our website, such as the “Like” button, or if the user submits a comment, Facebook allocates this information to the data subject’s personal Facebook user account and saves these personal data.
Through the Facebook component, Facebook will always receive notification that the data subject has visited our website if the data subject is simultaneously logged on to Facebook at the time they access our website, regardless of whether or not the data subject clicks on the Facebook component. If the data subject does not want information of this kind to be transferred to Facebook, they can prevent the transfer by logging out of their Facebook account before visiting our website.
Facebook’s published data policy, which can be viewed at de- de.facebook.com/about/privacy/, provides information about the collection, processing and use of personal data by Facebook. In addition, the policy explains which settings Facebook offers to protect the data subject’s privacy. Various applications which make it possible to prevent the transfer of data to Facebook are also available. Applications of this kind can be utilised by the data subject in order to prevent the transfer of data to Facebook.

11. Data protection provisions governing the application and use of Google Analytics (with anonymisation function)
The controller responsible for processing has integrated Google Analytics components (with anonymisation function). Google Analytics is a web analysis service. Web analysis is the collection and assessment of data on the behaviour of visitors to websites. Among other types of data, a web analysis tool collects data about which website a data subject visited before coming to a website (known as referrers), which subpages of the website were visited and how often, and the length of time a subpage was viewed. Web analysis is primarily applied for the optimisation of a website and the cost-benefit analysis of online advertising.
The operator of the Google Analytics component is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043- 1351, USA.
The controller responsible for processing uses the suffix "_gat._anonymizeIp" for web analysis via Google Analytics. This suffix is used by Google to shorten and anonymise the IP address of the data subject's internet collection if the access to our website is from a Member State of the European Union or from another state party to the Agreement on the European Economic Area.
The purpose of the Google Analytics component is to analyse visitor flows on our website. Among other things, Google uses the data and information obtained to evaluate the use of our website, to compile online reports for us showing the activities on our websites, and to provide other services relating to the use of our website.
Google Analytics sets a cookie on the data subject’s computer system. What cookies are has already been explained above. By setting this cookie, Google is able to analyse the use of our website. Each visit to one of the individual pages of this website, which is operated by the controller responsible for processing and into which a Google Analytics component has been integrated, causes the browser of the data subject’s computer system, via the Google Analytics component in question, to transfer data to Google for the purposes of online analysis. As part of this technical process, Google learns of personal data such as the IP address of the data subject which, among other things, enable Google to track the origin of the visitors and clicks and subsequently to make commission settlements possible.
The cookie stores personal data such as the time of access, the location from which access was made and the frequency of visits to our website by the data subject. Upon each visit to our website, these personal data, including the IP address of the internet connection used by the data subject, are transferred to Google in the United States of America. These personal data are stored by Google in the United States of America. Under certain circumstances Google may transfer such personal data collected through the technical process to third parties.
The data subject can prevent the setting of cookies through our website, as shown above, at any time by making a corresponding setting in their internet browser used and thus permanently prevent the setting of cookies. Such a setting of the internet browser used would also prevent Google from setting a cookie on the data subject’s computer system. In addition, a cookie already set by Google Analytics can be deleted at any time via the internet browser or other software programs.
Furthermore, the data subject has the option of objecting to and preventing the collection of the data generated by Google Analytics for the use of this website and the processing of this data by Google. To do this, the data subject must download and install a browser add-on from tools.google.com/dlpage/gaoptout. This browser add-on informs Google Analytics via JavaScript that no data and information about website visits may be transferred to Google Analytics. The installation of the browser add-on is considered by Google to be an objection. If the data subject’s computer system is later deleted, formatted or reinstalled, the data subject must re-install the browser add-on in order to disable Google Analytics. If the browser add-on is uninstalled or disabled by the data subject or any other person within their sphere of control, it is possible to reinstall or reactivate the browser add-on.
Additional information and Google’s privacy policy can be found at www.google.de/intl/de/policies/privacy/ and www.google.com/analytics/terms/de.html. Google Analytics is explained in more detail under the link www.google.com/intl/de_de/analytics/.

12. Data protection provisions governing the application and use of YouTube
The controller responsible for processing has integrated components of YouTube into this website. YouTube is an internet video portal that allows video publishers to offer video clips free of charge and other users to view, rate and comment on them, likewise free of charge. YouTube allows the publication of all types of videos, which is why not only complete film and television broadcasts but also music videos, trailers or user-made videos are available via the internet portal.
The operator of YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
Each visit to one of the individual pages of this website, which is operated by the controller responsible for processing and into which a component of YouTube (YouTube video) has been integrated, causes the browser of the data subject’s computer system, via the YouTube component in question, to automatically download a presentation of the corresponding YouTube component from YouTube. More information about YouTube can be found at www.youtube.com/yt/about/de/. As part of this technical process, YouTube and Google learn which specific subpage of our website is accessed by the data subject.
If the data subject is simultaneously logged on to YouTube, YouTube can recognise which specific subpage of our website the data subject visits when they access a subpage containing a YouTube video. This information is collected by YouTube and Google and associated with the data subject’s individual YouTube account.
Through the YouTube component, YouTube and Google will always receive notification that the data subject has visited our website if the data subject is simultaneously logged on to YouTube at the time they access our website, regardless of whether or not the data subject clicks on the YouTube video. If the data subject does not want information of this kind to be transferred to YouTube and Google, they can prevent the transfer by logging out of their YouTube account before visiting our website.
YouTube's privacy policy, available at www.google.de/intl/de/policies/privacy/, provides information on the collection, processing and use of personal information by YouTube and Google.

13. Legal basis for the processing
Point (a) of Art. 6(1) GDPR serves our company as the legal basis for processing operations where we obtain consent for a particular processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is a party, as is the case, for example, in processing operations necessary for the supply of goods or the provision of any other service or consideration, processing is based on point (b) of Art. 6(1) GDPR. The same applies to processing operations that are necessary in order to take steps prior to entering into a contract, for example in cases of enquiries regarding our products or services. If our company is subject to a legal obligation which requires the processing of personal data, such as the fulfilment of tax obligations, the processing is based on point (c) of Art. 6(1) GDPR. In rare cases, the processing of personal data may be required in order to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor to our premises were injured and his or her name, age, health insurance or other vital information needed to be passed on to a doctor, hospital or other third party. The processing would then be based on point (d) of Art. 6(1) GDPR. Finally, processing operations could be based on point (f) of Art. 6(1) GDPR. This is the legal basis for processing operations that are not covered by any of the above legal bases but which are required if processing is necessary in order to safeguard the legitimate interests of our company or a third party, unless these are overridden by the interests, fundamental rights and fundamental freedoms of the data subject. We are particularly allowed to carry out such processing operations because they have been specifically mentioned by European legislators. In that regard, it is considered that a legitimate interest can be assumed if the data subject is a customer of the controller (recital 47, clause 2, GDPR).

14. Legitimate interests in the processing pursued by the controller or a third party
If the processing of personal data is based on point (f) of Article 6(1) GDPR, our legitimate interest is in conducting our business for the benefit of all of our employees and shareholders.

15. Duration of storage of personal data
The statutory retention period which applies in any given case is the relevant criterion for the term of storage of personal data. Once the term has expired, the corresponding data will be routinely erased, provided that they are no longer required for the performance or initiation of a contract.

16. Statutory or contractual regulations governing the provision of personal data; necessity for conclusion of contract; obligation of the data subject to provide the personal data; possible consequences of failure to provide the data
We should advise you that the provision of personal data is prescribed by law in some cases (e.g. tax regulations) or may also be required as a result of contractual arrangements (e.g. information on the contractual partner). It may occasionally be necessary, in respect of the conclusion of a contract, for a data subject to provide us with personal data which we must subsequently process. The data subject is obliged to provide us with personal data if, for example, our company enters into a contract with the data subject. Failure to provide the personal data would render it impossible to enter into the contract with the data subject. The data subject must contact one of our employees prior to providing any personal data. Our employee will inform the data subject on a case-by-case basis whether the provision of the personal data is required by law or contract or is required for the conclusion of the contract, whether there is an obligation to provide the personal data, and the consequences of failure to provide the personal data.

17. Use of third-party content on our website
Our website also makes use of pages/information with content emanating from Ernst Röbke Verlag (www.erv-online.de). If you access these pages, your browser will establish a direct connection with the server of the third-party provider. This may store the IP address for statistical purposes. These data cannot be associated with particular people. The author is responsible for the content of the third-party pages. To that extent we exclude all liability for third-party content.

18. Automated decision-making systems
As a responsible company, we do not engage in automated decision-making or profiling.
This Data Privacy Statement was created by the data privacy statement generator of datenschutz in der arztpraxis in cooperation with RC GmbH, which recycles used notebooks, and the file-sharing lawyers of WBS-LAW.