Privacy policy

 

Privacy at MUNKERT & PARTNER

Data-processing controller

MUNKERT & PARTNER
Steuerberater Wirtschaftsprüfer Rechtsanwälte mbB
Äußere Sulzbacher Straße 29
90491 Nürnberg

Telephone:: + 49 (0) 911 – 59 87 01
Fax: + 49 (0) 911 – 59 87 400
EMail: info@munkert.de

Our data protection officers can be contacted by email at datenschutz@neumeier-edv.de or by telephone on 08772/ 80353-0.

Using our website www.munkert.de

Data that is always collected and processed when using this website

1. Server-log files

As soon as you arrive at our page, you send (for technical reasons) data to our web server via your Internet browser. The following data is recorded during a live connection to enable communication between your Internet browser and our web server:

• Name and URL of the retrieved file
• Date and time of visit
• Volume of data sent
• Notification of successful retrieval (HTTP response code)
• Browser type and version
• Your end device’s operating system
• Referrer URL (i.e. the page visited immediately prior)
• Websites retrieved by the user’s system through our website
• The user’s Internet service provider
• Your IP address and the requesting provider

For technical-security reasons, particularly to defend against attempted attacks on our web server, we store this data for 14 days. This is also our legitimate interest as defined by Art 6 Para. 1 Clause 1 f GDPR.

2. Usercentrics Consent Management Platform (CMP)

Purpose and description
This site uses third-party website-tracking technologies to offer its services, constantly improve them and show advertising that fits users’ interests.

In accordance with the provisions of the GDPR, however, we require your consent for this. The CMP manages and stores your consent settings for our website for 3 years (statute of limitations as per Section 195 of the German Civil Code). You can revoke your consent, effective for the future, at any time through the CMP settings by clicking on the light-blue/white symbol in the bottom left corner of our website.

The legal basis for using the CEMP is thus Art. 6 Para. 1 Clause 1 c GDPR – Complying with a legal obligation.

Processing company
Usercentrics GmbH
Sendlinger Str. 7, 80331 Munich, Germany
datenschutz@usercentrics.com
Privacy policy: https://usercentrics.com/privacy-policy/

Categories of collected data

• Device information
• Browser information
• Anonymised IP address
• Opt-in and opt-out data
• Date and time of visit
• Requesting website URLs
• The website’s site path
• Geographic location
• Technologies used

3. Openstreetmap.org
Our website uses a map extract from OpenStreetMap (https://www.openstreetmap.de/) to show you our firm’s location. While this involves sending your IP address, no cookies are enabled. Privacy policy: https://wiki.osmfoundation.org/wiki/Privacy_Policy

Data that is only collected and processed with your consent when using our website

1. Google Analytics

If you have provided your consent when visiting our website, Google Analytics will be used.

Google Analytics uses cookies that enable us to analyse your use of our website. The information generated by the cookies about your use of this website is generally sent to a Google server in the USA, where it is stored.

We use the ‘anonymizeIP’ function (known as IP masking): By enabling IP anonymisation on this website, your IP address will be shortened by Google within European Union member states or other states of the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and then shortened. The IP address sent by your browser as part of Google Analytics is not merged with other Google data.

The following data is among the data collected when you visit our website

• The pages you visit, your ‘click path’
• The achievement of ‘website targets’ (conversions, e.g. newsletter subscriptions, downloads, purchases)
• Your user behaviour (e.g. clicks, duration of visit, bounce rates)
• Your approximate location (region)
• Your IP address (shortened)
• Technical information about your browser and the end devices you use (e.g. language settings, screen resolution)
• Your Internet provider
• The referrer URL (the website/advertisement through which you accessed this website)

Purpose of processing
Google will use this information on behalf of this website’s operator to analyse your (pseudonymous) use of the website and compile reports on the website activities. The reports provided by Google Analytics serve to analyse our website’s performance.

Recipient
The data recipient is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as order processor. We have signed an order-processing contract with Google for this. Google LLC based in California, USA, and any US authorities can access the data stored by Google.

Google’s privacy policy
This can be viewed here: https://policies.google.com/privacy?hl=de

Storage duration
The data sent by us and linked to cookies is automatically erased after 14 months. Data whose storage-duration limit has been reached is automatically erased once a month.

You can also prevent Google from recording and processing the data generated by the cookie relating to your website usage (incl. your IP address) by

a. Not consenting to the cookie, revoking your consent to it, or

b. Downloading and installing a browser add-on to disable Google Analytics here. (N.B.: Not available for all browsers)

You can additionally prevent cookies from being stored by adjusting your browser software settings accordingly. However, if you configure your browser in such a way that all cookies are denied, this may affect the functionality of this and other websites.

2. Google Webfonts

If you have provided your consent when visiting our website, Google Webfonts will be used. This is a collection of fonts for commercial and personal use. We have integrated fonts from Google Webfonts into our website, and these are loaded from the Google servers when you first access the website. As part of this, the following data concerning you is generally sent to a Google server in the USA:

• IP address
• CSS request
• Collected usage data
• Requirements for font files
• Referrer URL

If you do not want this to happen, you will have to refuse or revoke your consent to this by clicking the light-blue/white button in the bottom left corner of our website.

Legal basis
The legal basis for data-processing based on consent is Art. 6 Para. 1 a GDPR.

Processing company
The data recipient is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as order processor. We have signed an order-processing contract with Google for this. Google LLC based in California, USA, and any US authorities can access the data stored by Google. The data is erased as soon as it is no longer required for processing purposes.

Google’s privacy policy
This can be viewed here: https://policies.google.com/privacy?hl=de

Data you send to us via contact forms
If you transmit data to us via a contact form on our website, your data will be sent to us via an SSL-encrypted connection. The purpose and legal basis of the processing are justified by the matter for which you are contacting us. If, for example, you send us a request or have a query as a client, the legal basis is Art. 6 Para. 1 b. In other applicable cases, we will inform you separately about the data-processing. We only store your personal data for as long as is necessary to process your request. If your request results in you hiring us, we may need to store your personal data for longer due to legal storage obligations.

Data you sent us when subscribing to our newsletter
By subscribing to our newsletter, you expressly consent to the processing of the personal data you send to us. The legal basis for the processing of personal data is thus the consent as per Art. 6 Para. 1 Clause 1 a) GDPR. You can unsubscribe from future newsletters at any time by clicking a special link in the info centre under ‘Unsubscribe from newsletter’ or advising us accordingly by emailing info@munkert.de. We will store your data in our newsletter system until you unsubscribe or the purpose no longer applies.

Applicants

Which of your data do we collect/process?
When applying to us, we process the data we receive from you as part of your application. This may include contact details or any data relating to the application (CV, references, qualifications, responses to questions, etc.). The legal basis for this is established in Section 26 of the German Federal Data Protection Act (BDSG).

For how long is your data stored?
Your data will be erased as soon as it no longer needs to be stored. If you are hired, we will inform you separately about the further data-processing measures. If you are not hired, we will erase your data within 6 months of the application process concluding. The legal basis for this is Art. 6 Para. 1 f) GDPR. If your application remains of interest to us, we will ask you if we are allowed to keep your data for future job vacancies.

Confidential handling of your data
The data we receive from you as part of the application process is processed solely for the purposes of the application. We naturally treat your data as confidential, and do not send this to third parties, even outside the EU.

Your rights as the data subject

Right of access:
In accordance with Art. 15 GDPR, you can ask to obtain the personal data concerning you that has been processed by us. When doing so, you should specify your request, so as to make it easier for us to collate the necessary data. Please note that, in certain circumstances, your right of access may be limited in accordance with the legal regulations (particularly Section 34 BDSG).

Right to rectification:
If the information concerning you is not (or no longer) correct, you can request rectification thereof under Art. 16 GDPR. If your data is incomplete, you can request for it to be completed.

Right to erasure:
Under Art. 17 GDPR, you can request for your personal data to be erased. Your right to erasure depends

Right to restriction of processing:
Under Art. 18 GDPR, you have the right to request restriction of processing of the data concerning you.

Right to data portability:
Under Art. 20 GDPR, you have the right to receive the data you have provided to us in a structured, commonly used and machine-readable format, or to transmit this data to another controller.

Right to object:
If the processing of your personal data is based on Art. 6 Para. 1 f GDPR, you have the right, under Art. 21 GDPR, to object to the processing.

Right to lodge a complaint:

If you consider that our processing of your data infringes the data-protection regulations, you can lodge a complaint with a supervisory authority under Art. 77 GDPR.

Version: 23/10/2020