At this point, we would like to inform you, in accordance with the requirements of the General Data Protection Regulation (GDPR), about how we handle data that can be personally related to you (e.g. name, address, e‑mail addresses, user behaviour that you, knowingly or unknowingly, leave behind when you visit our website), and, if applicable, about the duration for which the data are stored as well as about the rights that you as a data subject have in relation to us.
I. Data controller
The data controller pursuant to Article 4(7) GDPR is Reusch Rechtsanwaltsgesellschaft mbH, (hereinafter, “Reusch Rechtsanwälte”, “Reuschlaw” or “we”), Joachimsthaler Str. 34, 10719 Berlin, phone: + 49 30 2332 895 0, fax + 49 30 2332 895 11, e‑mail: email@example.com.
II. Data Protection Officer
You can reach our data protection officer at firstname.lastname@example.org or at our postal address with the addition “Data Protection Officer”.
III. Data processing operations
1. Access to our website
When you visit our website, the data your browser transmits to the server on which the website content is hosted are automatically stored in log files and, if necessary, processed.
Purposes and legal bases of data processing
The following data are processed during your visit:
- date and time of access;
- IP address of the accessing terminal device;
- website that is accessed;
- the URL from which the file was requested/the desired function was initiated;
- the volume of the data transferred; and
- the transmitted browser ID.
These data are processed for the purpose of providing the contents of our website as well as for purposes of identifying and tracing unauthorised access to the web server and other criminal offences. The legal basis for the data processing is Article 6(1), Sentence 1, Litera f GDPR.
Legitimate interests in data processing
Our legitimate interests consist in the guarantee of IT security and the guarantee of the operation of our website.
Categories of data recipients
The recipients of the data are a processor from the IT sector and Typeform S.L. with its registered office in Pallars 108 (Aticco), 08018 Barcelona, Spain.
Transfers to a third country
Insofar as personal data is processed by Typeform S.L., the data may be processed by subcontracted processors in the USA. For this case, we have concluded standard contractual clauses with Typeform S.L.. These are available at https://admin.typeform.com/to/dwk6gt. In order to guarantee an appropriate level of data protection when transferring personal data to a third country such as the USA, Typeform S.L. has implemented supplementary measures in the form of state-of-the-art technical and organisational measures. In addition, the adequacy decision on the EU-U.S. Data Privacy Framework entered into force on 10 July 2023. The adequacy decision is available at https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en.
Period of data storage
The data is only stored anonymously. IP addresses are replaced by 127.0.0.1 or ::1.
Right to object to data processing
Data processing is essential for the security and operation of the website. Opting out is therefore only practicable if you do not access our website.
Obligations / obligation to provide data
The provision of the aforementioned personal data is neither required by law nor by contract. Without the processing, however, the service and functionality of our website cannot be guaranteed. In addition, individual services may not be available or may be restricted.
You have the possibility to contact us using the information on our website.
Purposes and legal bases of data processing
If you contact us by e‑mail, phone or via our contact form, your request including all resulting personal data (name, request) will be stored and processed by us for the purpose of processing your request. The legal basis for the processing of these data is Article 6(1), Sentence 1, Litera b GDPR, insofar as your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. Otherwise, the legal basis is Article 6(1), Sentence 1, Litera f GDPR. Our legitimate interest lies in the effective processing of the inquiries addressed to us.
Duration of data storage
The data you provide will remain with us until the purpose for storing the data no longer applies (e.g. after your request has been completely processed).
Right of objection
You may object to the processing of your personal data on the basis of Article 6(1), Sentence 1, Litera f GDPR at any time. To exercise your right of objection towards us, please contact the “Data Protection Officer” at either email@example.com or the above address. We will then process your request immediately.
IV. Your rights as a data subject
1. Right of access
You can request information in accordance with Art. 15 GDPR about the personal data of yours which we process.
2. Right to rectification
If the information concerning you is not (or no longer) correct, you can request a rectification in accordance with Art. 16 GDPR. If your data is incomplete, you can request that it be completed.
3. Right to erasure
You may request the erasure of your personal data in accordance with Art. 17 GDPR.
4. Right to restrict processing
In accordance with Art. 18 GDPR, you have the right to request a restriction on the processing of your personal data.
5. Right to portability
In the event the requirements of Art. 20, Para. 1 GDPR are met, you have the right to have data which we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to third parties. The collection of data for the provision of the website and the storage of data in log files are mandatory for the operation of the website. They are therefore not based on consent in accordance with Art. 6, Para. 1, Sen. 1, lit. a) GDPR or on a contract in accordance with Art. 6, Para. 1, Sen. 1, lit. b) GDPR, but are legitimate in accordance with Art. 6, Para. 1, Sen. 1, lit. f) GDPR. The prerequisites of Art. 20, Para. 1 GDPR are therefore not fulfilled in this respect.
6. Right to lodge a complaint
If you are of the opinion that the processing of your personal data violates data protection law, you have the right in accordance with Art. 77, Para. 1 GDPR to lodge a complaint with a data protection supervisory authority of your own choice. This also includes the data protection supervisory authorities responsible for the controller:
- Berlin Commissioner for Data Protection and Freedom of Information, phone: +49 (0)30 13889–0, fax: +49 (0)30 2155050, e‑mail: firstname.lastname@example.org and
- Saarland Independent Data Protection Centre, phone: +49 (0)681 947810, fax: +49 44 681 94781 44, e‑mail:email@example.com.
V. Right to object pursuant to Art. 21, Para. 1 GDPR
You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you, which is based on Art. 6, Para. 1, Sen. 1, lit. f) GDPR. The controller will then no longer process the personal data, unless the controller can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject for the establishment, exercise or defence of legal claims. The collection of data for the provision of the website and the storage of data in log files are mandatory for the operation of the website.
Version: October 2023