Privacy policy

Data protection

Our privacy policy explains what information we collect, for what reason and how we use this information.

Thank you for visiting our website. Safe handling of your data is very important to us. We would therefore like to give you detailed information about the use of your data when visiting our website.

Responsible party

Dr. Dienst & Partner GmbH & Co. KG
Auditing firm
Tax consulting firm
Ferdinand-Sauerbruch-Strasse 28
56073 Koblenz

Telephone: +49 (0)261 4066 0

Legal basis of data processing

Article 6 (1) (a) GDPR serves as a legal basis for our company for the processing operations for which we obtain consent for a particular processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is party, as is the case, for example, with processing operations which are necessary for the supply of goods or rendering of other services or services in return, such processing is based on Article 6 (1) (b) GDPR. The same applies to those processing operations which are necessary for the performance of pre-contractual measures, such as in cases of enquires about our products or services. If our company is subject to a legal obligation, through which processing of personal data becomes necessary, such as the fulfilment of tax obligations, the processing is based on Article 6 (1)(c) GDPR. In rare cases the processing of personal data could be necessary in order to protect the vital interests of the data subject or another natural person, Article 6 (1) (d) GDPR. Lastly, processing operations could also be based on Article 6 (1) (f) GDPR. Processing operations which are not covered by any of the aforementioned legal bases rest on this legal basis if the processing is necessary for the protection of a legitimate interest of our company or that of a third party, provided that the interests, fundamental rights and freedoms of the data subject are not overridden.

Data Protection Officer

Stefan Krumbhorn
Certified Information Systems Auditor (CISA)
Certified Data Protection Officer
Fährstr. 75
56333 Winningen

Contact

Please direct any questions, declarations and queries concerning data use to

Dr. Dienst & Partner GmbH & Co. KG
Mr Peter Pellio
Ferdinand-Sauerbruch-Strasse 28
56073 Koblenz

Telephone: +49 (0)261 4066 0

Disclosure of data

Your personal data will not be transferred to third parties for purposes other than those set out below. We will only share your personal data with third parties if:

  • you have given your explicit consent in accordance with Article 6 (1) (1a) GDPR,
  • the transfer is necessary in accordance with Article 6 (1) (1f) GDPR for the establishment, exercise or defence of legal claims and there is no reason to believe that you have an overriding and legitimate interest in the non-disclosure of your data,
  • if there is a legal obligation for the transfer, in accordance with Article 6 (1) (1c) GDPR, and
  • this is permissible by law and is necessary for the processing of a contractual relationship with you in accordance with Article 6 (1) (1b) GDPR.

Security measures

We have the appropriate technical and organisational security measures to guarantee the safety of your information and to safeguard it from unauthorised access, manipulation or destruction.

Rights of the data subject

You have the right

  • to request information about your personal data which is processed by us, in accordance with Article 15 GDPR. In particular, you may request information about the purposes of the processing, the category of personal data, the categories of recipient to whom the personal data have been or will be disclosed, the envisaged period for which the personal data will be stored, the existence of the right to rectification, erasure, restriction of processing or to object to such processing, the right to lodge a complaint, the source of your data, where these are not collected by us, as well as the existence of automated decision-making, including profiling and, where applicable, meaningful information about these details;
  • in accordance with Article 16 GDPR, to request without undue delay the rectification of your inaccurate or incomplete personal data stored by us;
  • in accordance with Article 17 GDPR, to request the erasure of your personal data stored by us provided the processing is not necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;
  • in accordance with Article 18 GDPR, to request the restriction of processing your personal data if you dispute the accuracy of the data, the processing is unlawful, but you oppose the erasure of the personal data and we no longer need the data but you require it for the establishment, exercise or defence of legal claims or you have objected to processing pursuant to Article 21 GDPR;
  • in accordance with Article 20 GDPR, to receive your personal data which you have provided us with in a structured, commonly used and machine-readable format or to request the transfer to another controller;
  • in accordance with Article 7 (3) GDPR, to withdraw your consent at any time. As a consequence, we will no longer be able to continue with the data processing which was based on this consent in future and
  • in accordance with Article 77 GDPR, you have the right to lodge a complaint with a supervisory authority, without prejudice to any other administrative or judicial remedy. As a rule you can turn to a supervisory authority in your habitual residence, place of work or place of the alleged infringement if the data subject considers that the processing of personal data relating to him or her infringes the EU’s General Data Protection Regulation (GDPR).

Information that we collect

We only collect and process personal data for purposes of our own use, for the performance of the agreed contract. We do not pass on any data to third parties, other than to fulfil contractual obligations with the client’s consent, e.g. to banks, and to comply with statutory obligations arising from the contract, e.g. transfer of data to tax authorities, social security providers. We treat your personal data as strictly confidential. Insofar as personal data are processed by a processor, e.g. Datev eG, they too must give sufficient guarantees that suitable technical and organisational measures are implemented in such a way that the processing takes place in accordance with the requirements of the GDPR and the BDSG (German Federal Data Protection Act) and guarantees the protection of the data subject’s rights.

We do not collect any data from our (this) Internet homepage other than contact details via email or via our contact form.

Contact forms

If you send us an enquiry using a contact form, your details from the enquiry form including the contact details you have given are stored and processed by us for the purpose of processing your enquiry and in case of follow-up questions. Your data are used solely for the intended purpose of answering and processing your question. Data processing here takes place pursuant to Article 6 (1) (a) GDPR on the basis of your freely given consent. You may object to this at any time (right of revocation).

Applicant data

We process applicant data solely for the purpose of and in the course of the application procedure in accordance with statutory requirements. Processing applicant data takes place to fulfil our (pre)contractual obligations in the course of the application procedure within the meaning of Article 6 (1) (b) GDPR, Article 6 (1) (f) GDPR where data processing is necessary for us, e.g. as part of legal proceedings (in Germany § 26 BDSG additionally applies).

By sending us an application, applicants give explicit consent to the processing of their data for the purposes of the application procedure in accordance with the type and scope set out in this privacy policy.

If, within the context of the application procedure, special categories of personal data are provided voluntarily within the meaning of Article 9 (1) GDPR, this data will be processed in addition in accordance with Article 9 (2) (b) GDPR (e.g. data on health such as severe disabilities or ethnic origin).

Moreover, applicants can send us their applications by email. Please note, however, that emails are generally not transmitted in encrypted form and applicants must take care of the encryption themselves. We are therefore unable to assume any responsibility for the transmission path of the application between the sender and receipt by our server. Instead of making an application by email, applicants still have the option of sending us their applications through the post.

Data provided by applicants may be further processed by us in the event of a successful application for the purposes of the employment relationship. Otherwise, if an application for a job is not successful, the applicants’ data are deleted. Applicants’ data are also deleted if an application is withdrawn, something applicants are entitled to do at any time.

Deletion takes place, subject to a justified withdrawal by the applicant, after a period of six months, so that we can answer any follow-up questions on the application and comply with the obligation to provide proof, in accordance with the Equal Treatment Act. Invoices for any reimbursement of travel expenses are archived commensurate with tax legislation.

Right of access, right to rectification, blocking, erasure, objection, retention period:

Upon written request we will supply you with information about your personal data which is stored by us. You also have the right to rectification, blocking, objection or erasure of this data. Furthermore, personal data are only stored until the contractual purpose for which you disclosed it is fulfilled. Statutory or legal retention periods need to be observed. The request should be made to the address given in the legal notice on our website.

Right of revocation

Provided that your personal data are processed on the basis of legitimate interests, you have the right, in accordance with Article 21 GDPR, to object to processing of your personal data, provided there are reasons arising from your particular situation or you object to processing for direct marketing purposes. In the latter case, you have a general right of objection which can be implemented without specifying a particular individual situation. If you would like to exercise your right of revocation or objection, you just need to send an email to the address given in the legal notice on our website.

Cookies

Our website uses cookies. A cookie is a text file created when you visit a website and which is cached on the system of the website user. If our website’s server is accessed again by the website user, the website user’s browser sends the previously received cookie back to the server. Through this process the server can evaluate the information received. The use of cookies helps to, for example, target pop-up ads or facilitate navigation to a website. Moreover, cookies are necessary to ensure the functionality of our website operation (the legal basis for this is Article 6 (1) (f) GDPR, the safeguarding of the legitimate interests of the operator of this website – we use cookies only in agreement with Article 5 (1) (a) GDPR, i.e. pursuant to the principles of “lawfulness, lawful and fair processing, transparency”).

If you want to disable cookies, you can do so through the local settings in your Internet browser (e.g. Internet Explorer, Mozilla Firefox, Opera or Safari).

YouTube videos

We have embedded YouTube videos on our website which are stored on the servers of the provider YouTube and can be played from our website using embedding. Embedding the videos takes place with an option enabled for enhanced privacy settings. When you play these videos, YouTube cookies and DoubleClick cookies are stored on your computer and may transfer data to Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as the YouTube operator.

When playing videos stored on YouTube, based on current information the following data as a minimum will be sent to Google Inc. as YouTube operator and operator of the DoubleClick network: IP address and cookie, the specific address of the page on our site you visited, system date and time of request, your browser ID.

The transfer of this data takes place regardless of whether you have a Google user account, which you have logged in with or whether you have no user account. If you are signed in to it, these data may be directly associated with your account. If you do not want this association with your profile, you need to log out before you activate the play button for the video.

YouTube or Google Inc. save these data as usage profiles and use them where applicable for the purposes of advertising, market research and/or the user-oriented design of their websites. Such analysis takes place in particular (including for non-registered users) for the provision of tailored advertising and to tell other users about your activities on our website. You have a right of objection to this creation of a user profile, whereby you need to address Google as the operator of YouTube to exercise this right.

Further information about the purpose and scope of the data collection and its processing by Google can be found on this information page.

General collection of data

When you access our website or retrieve a file, data about this procedure are stored in a log file on our web server. In particular, the following data can be stored:

  • IP address (if possible, this will be stored in an anonymous form)
  • Domain name of the website from which you came
  • Names of the retrieved files
  • Date and time of the retrieval
  • Name of your Internet service provider
  • and, where applicable, the operating system and browser version of your end device

We only store IP addresses for data security reasons, in order to ensure the stability and security of our system (legal basis: Article 6 (1) (f) GDPR). We reserve the right to statistically evaluate anonymised data sets.

Server log data, log files

When you visit our website, the device you use to access the site automatically sends log data (connection data) to our provider’s servers. Log data contain, for example, the IP address of the device you use to access the website or a service, the type of browser you are using, the website from which you came, your system configuration and date and time stamps. Our provider only stores IP addresses as far as it is necessary to provide the services. Otherwise IP addresses are deleted or anonymised. This means the IP addresses of visitors to the websites are anonymised shortly after disconnection.

Contact forms

If you send us an enquiry using a contact form, your details from the enquiry form including the contact details you have given are stored and processed by us for the purpose of processing your enquiry and in case of follow-up questions. Your data are used solely for the intended purpose of answering and processing your question. Data processing here takes place pursuant to Article 6 (1) (a) GDPR on the basis of your freely given consent. You may object to this at any time (right of revocation).

Newsletter

We send newsletters with promotional information only with the consent of the recipient or on the basis of legal permission.

Signing up for our newsletter takes place via a double opt-in process: Once you have registered, you receive an email in which you need to confirm your registration.

This confirmation is necessary to verify you as the owner of the email address. Registration for the newsletter is logged, in order to be able to prove that the registration is in accordance with legal requirements.

This includes storing the registration and confirmation times and your IP address. Equally, additional data which you gave when signing up for the newsletter are also stored.

We use your information, except for your email address, exclusively to personalise the newsletter, such as with your name.

You can unsubscribe from the newsletter at any time. In every newsletter email you will find a link to unsubscribe from the newsletter.

Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, every data subject shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her residence, place of work or place of the alleged infringement if the data subject considers that the processing of personal data relating to him or her infringes the EU’s General Data Protection Regulation (GDPR).

Right to data portability

You have the right to receive the personal data concerning you, which you provided to us, in a structured, commonly used and machine-readable format.

Confidentiality of your customer access

If you have been granted access to a secure area of our website, which is password-protected, it is your responsibility to keep this password confidential. We request that you do not disclose this password to anyone.

Links to other websites

From time to time our website/app can contain links to third-party websites or other websites of our own. If you follow a link to one of these websites, we would like to make you aware that these websites have their own privacy policies and that we cannot accept responsibility or liability for these policies. Please check these privacy policies before you share personal data with these websites.

SSL encryption

This website uses SSL encryption (secure socket layer) to transfer data from your browser to our server and to servers which provide files which we embed in our website.

With SSL, encrypted data are transferred. The data cannot be changed, and the sender can be identified. You can tell whether SSL encryption is used by the letters “https” in front of the address of the website you are opening in the browser.

Links to third-party websites

On this website references to third-party websites are made in the form of links. Data are only transferred to the link destination when you click on one of these links. This is necessary for technical reasons. The data transferred include, in particular: your IP address, the time you clicked on the link, the page you were on when you clicked on the link, information about your Internet browser. If you do not want this data to be transferred to the link destination, do not click on the link.

Google Maps form

We provide an input form which you can use to show the position of an address on the map, such as for route planning. The underlying map software is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google”). Your input together with your IP address and the website address where the form is located is only transmitted to Google when you have submitted the form. By using the form you give your consent to the collection, processing and use of data by Google and its representatives.

  • Google Maps terms and conditions.
  • Google Privacy Policy

Google Analytics

Our website uses the analytics service operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as: Google). We use Google Analytics to evaluate your use of our website and to compile reports about user activity. For these purposes our legitimate interest is in data processing. The legal basis for the use of Google Analytics is § 15 (3) German Telemedia Act (TMG) and Article 6 (1) (f) GDPR. This analytical tool works on the basis of cookies. A cookie is a text file which is sent when you visit a website and which is cached on the hard drive of the website user to enable an analysis of your use of the website. The information stored by the cookie is usually transmitted to a Google server in the US and then stored there. As part of the IP anonymisation, your IP address is first shortened by Google within an EU member state or another signatory state to the European Economic Area Treaty. Google uses the transferred information on our behalf to create a report about the use of the website. We have concluded an order processing contract with Google. The IP address transmitted in regard to Google Analytics is not linked to other Google data. If you want to disable cookies, you can do so by making local changes to the settings in the Internet browser used on your computer (e.g. Safari, Internet Explorer, Opera, Firefox, etc.), i.e. the program used to open and display web pages. Moreover, you can prevent Google cookies from collecting and processing your data by downloading and installing a Google browser plugin from the following link: http://tools.google.com/dlpage/gaoptout.

You can prevent Google Analytics from collecting your data by clicking on the following link. This installs an ‘opt-out’ cookie which prevents your data being collected when you visit this website in future. Deactivate Google Analytics

Further information about Google and Google Analytics’ terms of use and data protection can be found at https://www.google.com/analytics/terms/ and https://policies.google.com/.

We would like to point out that Google Analytics uses the extension “anonymizeIp”. This guarantees the anonymised recording of IP addresses.

Security note

We safeguard our website and other IT systems by means of suitable technical and organisational measures against loss, destruction, unauthorised access, unauthorised change or unauthorised distribution of your data. Complete protection against all risks is, however, not always practically possible despite all due diligence. As we cannot guarantee complete data security when communicating by email, we recommend sending confidential information by post.

Changes to this Privacy Policy

We reserve the right to change this privacy policy if the legal situation or this online offering or the type of data collection changes. This only applies, however, to data processing declarations. If the user’s consent is necessary or elements of the privacy policy contain a regulation about the contractual relationship with the user, the change to the privacy policy will only be made with the consent of the user.

Please therefore refer to this privacy policy if required, particularly if you provide us with personal data.