General information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data are all data with which you can be personally identified.

Who is responsible for data collection on this website

Data processing on this website is performed by Schalast & Partner Rechtsanwälte mbB (hereinafter: "Schalast"), Mendelssohnstrasse 75-77, 60325 Frankfurt am Main, email frankfurt@schalast.com, phone +49 (0) 69 - 97 58 31 0.

How do we collect your data?

On the one hand, your data is collected when you communicate it to us. For example, this can be data you enter in a contact form. Other data are recorded automatically or with your consent when you visit the website via our IT systems. This is mainly technical data (e.g. Internet browser, operating system or time of the page view). This data is collected automatically as soon as you access this website.

How do we use your data?

Some of the data is collected to ensure the website is error-free. Other data can be used to analyze your user behavior.

What rights do you have with regard to your data?

You have the right to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time. You have the right to request this data be corrected or deleted. If you have given your consent to data processing, you can revoke this consent at any time for the future. You have the right to request that processing your personal data be restricted under certain circumstances. You have the right to lodge a complaint with the competent supervisory authority.

External hosting

This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen. Personal data recorded on this website is stored on the host's servers. These can be IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other website generated data.

The host is used to fulfill the contract with our potential and existing customers (Article 6 (1) (b) GDPR) as well as ensure secure, fast and efficient provision of our online offer by a professional provider (Article 6 (1) (f) GDPR). Our host will only process your data insofar as this is necessary to fulfill its performance obligations and follow our instructions regarding this data.

General notice and mandatory information

Data protection

Schalast takes the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this data protection declaration.

When you use this website, various personal data are collected. Personal data are data with which you can be personally identified. This data protection declaration explains which data we collect and how it is used. It also explains how and for what purpose this is done. We would like to point out that data transmission over the Internet (e.g. when communicating by e-mail) can have security gaps. Complete data protection against third party access is not possible.

Storage period

Unless a specific storage period is specified in this data protection declaration, your personal data will remain with Schalast until the data processing purpose no longer applies. If you make a legitimate request for deletion or revoke your consent to data processing, your personal data will be deleted unless Schalast has any other legally permissible reasons for storing it (e.g. tax or commercial retention periods); in the latter case, deletion takes place after these reasons no longer apply.

Note about data transfer to the USA and other third countries

Among other things, Schalast uses tools from companies based in the USA or other third countries that are not secure in terms of data protection law. If these tools are active, your personal data can be transferred to these third countries and processed there. We would like to point out that no data protection level comparable to that in the EU can be guaranteed in these countries. For example, US companies are obliged to surrender personal data to security authorities without you as the person concerned being able to take legal action against this. Therefore, it cannot be ruled out that US authorities (e.g. secret services) process, evaluate and permanently store your data on US servers for monitoring purposes. We have no influence on these processing activities.

Revoking your consent to data processing

Many data processing operations are only possible with your express consent. You can revoke your consent at any time. The legality of the data processing carried out before revocation remains unaffected by it.

Right to object to collecting data in special cases and direct advertising (Article 21 GDPR)

If data processing takes place on the basis of Article 6 (1) (e) and (f) GDPR, you have the right to object to processing your personal data at any time for reasons that arise from your particular situation; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this data protection declaration. If you object, we will no longer process your personal data concerned, unless we can prove compelling legitimate reasons for processing that outweigh your interests, rights and freedoms or processing serves to assert, exercise or defend legal claims (objection according to Article 21 (1) GDPR).

Right of appeal to the competent supervisory authority

In the event of GDPR violations, parties involved have the right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, place of work or place of the alleged violation. The right of appeal exists without prejudice to other administrative or judicial remedies.

Right to data portability

You have the right to have data we process on the basis of your consent or in fulfillment of a contract automatically handed over to you or a third party in a commonly used, machine-readable format. If you request, direct data transfer to another responsible person will only be done if it is technically feasible.

SSL or TLS encryption

For security reasons and to protect confidential content transmission, such as orders or inquiries you send us as the website operator, this website uses SSL or TLS encryption.

Information, deletion and correction

Within the framework of applicable statutory provisions, you have the right to free information about your stored personal data, their origin, recipient and data processing purpose and, if necessary, a right to correct or delete this data. You can contact us at any time if you have any further questions about the subject of personal data.

Right to processing restriction

You have the right to request that processing your personal data be restricted. You can contact Schalast at any time for this purpose. The right to processing restriction exists in the following cases:

If you dispute the accuracy of your personal data stored by us, we usually need time to check this. For the duration of the test, you have the right to request that processing your personal data be restricted. If processing your personal data happened/happens unlawfully, you can request data processing restriction instead of deletion.

If we no longer need your personal data, but you need them to exercise, defend or assert legal claims, you have the right to request that processing your personal data be restricted instead of deleted. If you have lodged an objection according to Article 21 (1) GDPR, your interests and ours must be considered. As long as it is not yet clear whose interests prevail, you have the right to request that processing your personal data be restricted.

If you have restricted processing your personal data, this data - apart from its storage - may only be allowed with your consent or for establishing, exercising or defending legal claims; protecting the rights of another natural or legal person or reasons of important public interest processed by the European Union or a member state.

Data collection on this website

Server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

Browser type and browser version, operating system used, referrer URL, accessing computer host name, server request time, IP address.

This data is not merged with other data sources. This data is recorded on the basis of Article 6 (1) (f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of his website. To do this, the server log files must be recorded.

Contact form

If you send us inquiries using the contact form, your details from the inquiry form, including contact details you provided there, will be stored by us for the purpose of processing the request and in case of follow-up questions. We do not pass on this data without your consent. Data are processed on the basis of Article 6 (1) (b) GDPR, provided that your request is related to fulfilling a contract or is necessary to carry out pre-contractual measures. In all other cases, processing is based on our legitimate interest in effectively processing inquiries sent to us (Article 6 (1) (f) GDPR) or on your consent (Article 6 (1) (a) GDPR) if this was queried.

Data you enter in the contact form will remain with us until you ask us to delete it, revoke your consent to storage or the data storage purpose no longer applies (e.g. after your request has been processed). Mandatory statutory provisions - in particular retention periods - remain unaffected.

Newsletter

If you would like to receive the newsletter offered on the website, we need an e-mail address from you as well as information allowing us to verify that you are the owner of the e-mail address provided and you agree to receive the newsletter. Further data is not collected or is only collected on a voluntary basis. We use this data exclusively for sending the requested information and do not pass it on to third parties. Processing data entered in the newsletter registration form takes place exclusively on the basis of your consent (Article 6 (1) (a) GDPR). You can revoke your consent to storing the data, e-mail address and their use for sending the newsletter at any time, for example via the "Unsubscribe" link in the newsletter. The legality of data processing operations that have already taken place remains unaffected by the revocation. Data you have stored with us for subscribing to the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter and will be deleted from the newsletter distribution list after you unsubscribe or after the purpose has ceased to exist. We reserve the right to delete or block e-mail addresses from our newsletter distribution list at our own discretion within the framework of our legitimate interest in accordance with Article 6 (1) (f) GDPR. After you have been removed from the newsletter distribution list, your email address may be stored in a blacklist by us or the newsletter service provider in order to prevent future mailings. Data from the blacklist will only be used for this purpose and will not be merged with other data. This serves both your and our interests in compliance with legal requirements when sending newsletters (legitimate interest within the meaning of Article 6 (1) (f) GDPR). Storage in the blacklist is not limited in time. You can object to the storage provided your interests outweigh our legitimate interests.

Plugins and Tools

YouTube with extended data protection

This website includes videos from YouTube. The operator of the website is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. We use YouTube in the extended data protection mode. According to YouTube, this mode ensures that it does not store any information about visitors to this website before they watch the video. However, transferring data to YouTube partners is not necessarily excluded by the extended data protection mode. For example, YouTube connects to the Google DoubleClick network regardless of whether you watch a video. As soon as you start a YouTube video on this website, a connection to YouTube servers is established. The YouTube server is informed which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.

Furthermore, after starting a video, YouTube can save various cookies on your device or use comparable recognition technologies (e.g. device fingerprinting). In this way, YouTube can receive information about visitors to this website. This information is used, among other things, to collect video statistics, improve usability and prevent fraud attempts. If necessary, further data processing operations can be triggered after the start of a YouTube video, over which we have no influence. YouTube is used in the interest of an appealing presentation of our online offers. This represents a legitimate interest within the meaning of Article 6 (1) (f) GDPR. If a corresponding consent has been requested, processing takes place exclusively on the basis of Article 6 (1) (a) GDPR; the consent can be revoked at any time. You can find more information about data protection at YouTube in their data protection declaration at: https://policies.google.com/privacy?hl=de.

Google Maps

This site uses the Google Maps map service. The provider is Google. To use Google Maps functions, it is necessary to save your IP address. This information is usually transmitted to and stored by Google on servers in the United States. The provider of this site has no influence on this data transfer. If Google Maps is activated, Google can use Google Web Fonts for the purpose of uniformly displaying the fonts. When you call up Google Maps, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly. Use of Google Maps is in the interest of an appealing presentation of our online offers and easy retrieval of places we have indicated on the website. This represents a legitimate interest within the meaning of Article 6 (1) (f) GDPR. If a corresponding consent has been requested, processing takes place exclusively on the basis of Article 6 (1) (a) GDPR; the consent can be revoked at any time. Data transfer to the USA is based on the standard contractual clauses of the EU Commission. You can find details here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/. You can find more information about handling user data in Google's data protection declaration: https://policies.google.com/privacy?hl=de.

Google Analytics

If you have given consent, Google Analytics, a web analysis service provided by Google LLC, is used on this website. The responsible service provider in the EU is Google.

Scope of processing

Google Analytics uses cookies that enable your use of our website to be analyzed. Information collected by the cookies about your use of this website is usually transferred to a Google server in the USA and stored there.

We use the Google Analytics 4 function: Due to IP anonymization activation on this website, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address will only be sent to a Google server in the USA and shortened there in exceptional cases. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

The following data, among other things, is recorded during your website visit:

• The pages you have viewed,
• Your "click path" achievement of "website goals" (conversions, e.g. newsletter registrations, downloads, purchases)
• Your user behavior (e.g. clicks, length of stay, bounce rates)
• Your approximate location (region)
• Your IP address (in abbreviated form)
• Technical information about your browser and the end devices you use (e.g. language setting, screen resolution)
• Your Internet provider, the referrer URL (via which website / via which advertising material you came to this website)

Processing purposes

On behalf of this website's operator, Google will use this information to evaluate the use of the website and compile reports about website activity. Reports provided by Google Analytics are used to analyze the performance of our website.

Receiver

Recipient of the data is Google as the processor. We have concluded an order processing contract with Google for this purpose. Google LLC, based in California, USA, and possibly US authorities, can access data stored by Google.

Storage period

Data sent by us and linked to cookies is automatically deleted after 14 months. Deleting data whose retention period has expired takes place automatically once a month.

You can also prevent Google from collecting data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by (i) not giving your consent to the cookie setting or (ii) downloading and installing the browser add-on to deactivate Google Analytics under the link https://tools.google.com/dlpage/gaoptout?hl=de.

You can also prevent storing cookies by setting your browser software accordingly. However, if you configure your browser so that all cookies are rejected, functionality on this and other websites may be restricted.

The legal basis and the possibility of revocation for this data processing is your consent, Article 6 (1) (1) (a) GDPR.

You can find more information about Google Analytics use terms and data protection at https://marketingplatform.google.com/about/analytics/terms/en/ and at https://policies.google.com/?hl=de.

Slider Revolution from ThemePunch

We use the slider tool "Slider Revolution" from the provider ThemePunch on the basis of our legitimate interests within the meaning of Article 6 (1) (f) GDPR. This is provided by ThemePunch oHG, Heumarkt 52, 50667 Cologne. When you visit a website on which such a slider is integrated, your browser establishes a direct connection to the ThemePunch servers in order to load the slider. ThemePunch receives the information that our website is being accessed from your IP address. Data processing takes place on the basis of our legitimate interest in an attractive design of our website. The legal basis is Article 6 (1) (f) GDPR. You can access the ThemePunch privacy policy at the following link: https://essential.themepunch.com/datenschutz/. You can object to data processing under the following link.

Adobe TypeKit Fonts

We use so-called web fonts provided by Adobe for uniform font representation. When you call up a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly. For this purpose, the browser you are using must connect to the Adobe servers. This gives Adobe knowledge that our website has been accessed via your IP address. Adobe TypeKit fonts are used in the interest of a uniform and appealing presentation of our online offers. The legal basis is Article 6 (1) (f) GDPR.

For more information about Adobe TypeKit fonts, see Adobe's privacy policy: https://www.adobe.com/en/privacy/policies/typekit.html

You can set your browser so the fonts are not loaded from Adobe servers (e.g. by installing add-ons such as NoScript or Ghostery). If your browser does not support Adobe fonts or you prevent access to the Adobe server, the text is displayed in the system's standard font.

Social Media Plug-ins

We use social plug-ins from the social network LinkedIn on our website based on Article 6 (1) (1) (f) GDPR to make our law firm better known. The underlying advertising purpose is to be regarded as a legitimate interest within the meaning of the GDPR. Responsibility for data protection-compliant operation is to be guaranteed by the respective provider. Our website continues to use the “share function” of the LinkedIn network. The provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. If you click on the LinkedIn “share button” (plug-in) when you are logged into your LinkedIn user account, you will be forwarded to your user account in a separate browser window and can share the electronic publication stored on our website by adding a comment. The plug-in creates a direct connection between your browser and the LinkedIn server. LinkedIn receives the information that you have visited our website with your IP address. In addition, it is then possible for LinkedIn to assign your visit to our website to you and your user account. We point out that we have no knowledge of the transmitted (personal) data content or their use by LinkedIn. You can find more information about this in LinkedIn's data protection declaration at: https://www.linkedin.com/legal/privacy-policy.