DATA PROTECTION INFORMATION

​

1. General information

1.1 Data Protection

We take the protection of your personal data very seriously. We keep your personal data confidential according to legal regulations and to this data protection information.
This data protection information shows which data we gather and for what reason. 
Please note that data transmission over the Internet (for example, when communicating via e-mail) may have security vulnerabilities. A complete protection of the data from access by third parties is not possible.

​

1.2 Information about the controller of your data

The party responsible for this website (“the controller”) for purposes of data protection law is:
Laura Lessig
Arndtstr. 24
60325 Frankfurt
Telefon: 01702813972
E-Mail: info@lessig-stb.de

​

2. Extent and purpose of processing personal data

​

2.1. Server-Log-files

The internet browser you are applying will automatically send data to the server of this website and so-called server-log-files are saved.
The following data will be stored without any specific entry by the visitor until its automatic deletion:

• IP-address of the visitor’s end device,

• Date and time of the visitor’s access to the website,

• Name and URL of the website visited,

• Website from which the visitor uses this website (Referrer-URL),

• Internet browser and operation system of the visitor’s end device and name of the visitor’s access providers.

The processing of this personal data is justified by Art. 6 para. 1 cl. 1 f) GDPR. 
 

My office has legitimate interest in processing this data in order to

• Build a fast connection to this website,

• Enable a user-friendly application of this website,

• Recognise and ensure the systems’ security and stability, and

• Ease and improve the administration of this website.

The data processing does not aim at gaining knowledge about the person of the website’s visitor.

 

2.2. Requests per Email or Telephone

If you contact us per email or telephone, we will save your request including the personal data (name, request) in order to provide services to you. We will not pass this data on without your approval.
Processing this data is based on Art. 6 Abs. 1 lit. b DSGVO provided the inquiry relates to the fulfilment of a contract or pre-contract measures.
In all other cases the processing of the data is based on our justified interest to ensure the effective handling of inquiries (Art. 6 Abs. 1 lit. f DSGVO) or on your consent (Art. 6 Abs. 1 lit. a DSGVO) provided this was given.
Data sent to us per contact request are saved until you ask for deletion, you withdraw your content for saving or the reason for saving the data no longer applies. Mandatory legal regulations – especially legal retention periods - remain unaffected. 

​

2.3. Storage duration

Obtained or collected personal-related data is only stored as long as necessary for the respective purpose associated with the storage. When this purpose is fulfilled, we basically delete or anonymise the data, provided that, and insofar as, deletion does not contravene any legitimate retention purposes and obligation (e.g. stipulations from tax or professional law). In the latter case, the data processing is restricted to fulfilment of the retention purposes or the retention obligation. 

 

3. Data transfer

Personal data will be transferred to third parties, if

• The affected person has explicitly agreed according to Art. 6 para. 1 cl. 1 a) GDPR,

• The transfer is necessary in order to prove, execute or plead legal claims according to Art. 6 para. 1 cl. 1 f) GDPR and there is no reason to suppose that the affected person has an interest in not transferring its data that is predominantly requiring protection,

• There is a legal obligation for the data transfer according to Art. 6 para. 1 cl. 1 c) GDPR, and/ or

• It is necessary for fulfilment of a contractual relationship according to Art. 6 para. 1 cl. 1 b) GDPR.

In other cases, personal data is not transferred to third parties.

 

4. Cookies

This website uses Cookies. Cookies are data packets that are exchanged between the website’s server and the visitor’s internet browser. Cookies are saved by the devices used (PC, notebook, tablet PC, mobile phone etc.) when visiting the website. In this respect, cookies are not able to damage the devices used. In particular, they do not include viruses or other malicious software. Information is stored in the cookies that arise each in connection with the end device used. The office is under no circumstances able to gain immediate knowledge of the visitor’s identity.

Cookies are mainly accepted based on the basic settings of the internet browsers. The browser settings can be adjusted, so that cookies are either not accepted by the devices used, or so that there is a special hint prior to creation of a cookie. However, please note that deactivating cookies can result in reduced functionality of this website.
The aim of using cookies is to make using my website more comfortable. For example, session cookies enable comprehension as to whether the visitor has already visited separate pages of this website. These session cookies are automatically deleted after leaving the website.
In order to improve user-friendliness, temporary cookies are being used. They are saved on the visitor’s device for a temporary period. If the visitor visits the website again, it will automatically be noticed that the visitor has already visited the website at an earlier time. In addition, it will be noticed which inputs and settings the visitor made so that he does not need to repeat them.
Furthermore, cookies are being used in order to analyse the website’s views for statistical purposes and to improve the website’s offer. Due to these cookies, it can be detected automatically in case the website has been visited by the visitor before. The cookies will automatically be deleted after a certain time.
The processing of data by cookies for the reasons outlined above in order to protect the office’s legitimate interest is justified by Art. 6 para. 1 cl. 1 f) GDPR.
 

 

5. Your rights as affected person

As far as your personal data is processed due to visiting my website, as an „affected person“ in the sense of the GDPR you have the following rights:

 

5.1 Information

You have the right to obtain information as to whether your personal data is being processed by me. However, you have no right to information in case the information demanded would breach the obligation of secrecy pursuant Sec. 57 para 1 StBerG, or the information has to be kept secret due to other reasons, especially a third party’s mostly legitimate interest. Deviating from this, there might be a duty to provide the information in case your interest outweighs the interest in confidentiality, especially considering thread of damage. Further, there is no right to information in case the data is only saved, because it must not be deleted due to legal or statutory retention periods, or if it only serves purposes of data security or privacy control, provided the right to information would require disproportionate effort and the processing for other reasons is impossible due to appropriate technical or organizational measures.

 

• If in your specific case the right to information is not excluded and your personal data is processed by me, you can demand disclosure about the following information:

• Purposes of processing,

• Categories of your personal data processed,

• Recipients or categories of recipients to whom your personal data are disclosed, in particular to recipients in third countries,

• If possible, the planned duration which your personal data will be stored for or, if this is not possible, the criteria for determining the retention period,

• The existence of a right of rectification or deletion or restriction of processing personal data concerning you or a right to object to such processing,

• The existence of a right of appeal to a data protection supervisory authority,

• If the personal data has not been collected from you as affected person, the information available about the origin of the data,

• The existence of automated decision-making, including profiling, and meaningful information about the logic involved, and the consequences and implications of automated decision-making,

• In case of transmission to recipients in third countries, if there is no decision of the European Commission on the appropriateness of the protection level under Art. 45 Sec. 3 GDPR, information on which suitable guarantees are intended acc. Art. 46 para. 2 GDPR for the protection of personal data.

 

5.2 Correction and completion

 

If you determine that I have incorrect personal data about you, you may request immediate correction of such incorrect data. In case of incomplete personal data concerning you, you can request completion.

​

5.3 Deletion

You have the right to deletion („right to be forgotten”), unless the processing is necessary for exercising the right to freedom of expression, the right to information or to fulfil a legal obligation or to perform a task of public interest and one of the following reasons applies:

• The personal data is no longer necessary for the purposes they were processed for.

• The justification for processing was solely your consent, which you have revoked.

• You have objected to the processing of your personal data which I have made public.

• You have objected to the processing of personal data that was not made public by me and there are no legitimate reasons for the processing.

• Your personal data has been processed unlawfully.

• Deletion of your personal data is required to fulfil a legal obligation that I am subject to.

There is no claim for deletion if, in the case of legitimate non-automated data processing, deletion is not possible or only possible with disproportionately high outlay due to the special nature of the storage and your interest in deletion is low. In this case, restriction of processing replaces the deletion.

​

5.4 Limitation of processing

You may ask for limitation of processing if any of the following applies:

• You deny the accuracy of your personal data. In this case, the limitation may be demanded for a duration that allows me to verify the accuracy of the data.

• The processing is unlawful and instead of deletion you ask for restriction of using your personal data.

• Your personal data is no longer required by me for the purposes of processing that are required in order for you to assert, exercise or defend your rights.

• You have filed an objection according to Art. 21 para. 1 GDPR. You may ask for limitation of processing as long as it is not certain whether my legitimate reasons outweigh yours.

Limitation of processing means that the personal data will only be processed with your consent or in order to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of important public interest. I have the duty to inform you prior to lifting the restriction.

 

5.5 Data portability

You have the right of data transferability if the processing is based on your consent (Art. 6 para. 1 cl. 1 a) or Art. 9 para. 2 a) GDPR) or on a contract to which you are a party and the processing is done using automated procedures. In this case, the right to data portability includes the following rights, provided that this does not affect the rights and freedoms of others: You can ask me to obtain the personal information you have provided in a structured, common and machine-readable format. You have the right to transfer this data to another person without hindrance on my part. As far as technically feasible, you may ask me to directly submit your personal data to another person in charge.

 

5.6 Opposition

Insofar as the processing is based on Art. 6 para. 1 cl. 1 e) of the GDPR (exercise of a task in public interest or in exercise of official authority) or on Art. 6 para. 1 cl. 1 f) GDPR (legitimate interest of the person in charge or a third party), you have the right, at any time, to object to the processing of your personal data for reasons of your particular situation. This also applies to a profiling based on Art. 6 para. 1 cl. 1 e) or f) of the GDPR. Once you have exercised your right of objection, I will no longer process your personal data unless I can demonstrate compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing has the purpose of enforcing, pursuing or defending legal claims.
You may at any time object to the processing of your personal data for direct marketing purposes. This also applies to a profiling associated with such direct marketing. After you have exercised this right of objection, I will no longer use the personal data in question for direct marketing purposes.
You have the opportunity to informally notify my about the opposition by telephone, e-mail or to my postal address listed at the beginning of this Privacy Policy.

​

5.7 Disclaimer of consent 

You have the right to revoke your consent at any time with effect for the future. The disclaimer of the consent can be informally disclosed by phone, by e-mail or to my postal address. The disclaimer does not affect the lawfulness of the data processing which has taken place on the basis of your consent until receipt of the disclaimer. Upon receipt of the disclaimer, the data processing which was based solely on your consent will cease.

​

5.8 Complaint

If you believe that the processing of your personal data is unlawful, you may lodge a complaint with a data protection supervisory authority that has jurisdiction over your place of residence or employment or the location of the alleged breach.

 

6. Status and update of this Privacy Policy 

This Privacy Policy is dated 25 Ma 2018. I reserve the right to update the Privacy Policy in due course to improve privacy and / or adapt it to changes in regulatory practice or jurisdiction.