Privacy Policy
1. Responsible person
The person responsible within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:
Attorney Leonard Schneider
Agnesstrasse 19
53225 Bonn
Germany
Email: info@rechtsanwaltskanzlei-schneider.de
Tel.: 01556 / 3333181
2. General information on data processing
In principle, we only process personal data of our users to the extent that this is necessary to provide a functional website and our content and services. The processing of our users' personal data regularly only takes place with the user's consent. An exception applies in cases where obtaining prior consent is not possible for actual reasons and the processing of the data is permitted by legal regulations.
Legal basis for processing personal data
To the extent that we obtain the consent of the data subject for processing personal data, Art. 6 Para. 1 lit.a of the EU General Data Protection Regulation (GDPR) serves as the legal basis.
When processing personal data that is necessary to fulfill a contract to which the data subject is a party, Art. 6 Para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.
If the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 Para. 1 lit. c GDPR serves as the legal basis.
In the event that the vital interests of the data subject or another natural person require the processing of personal data, Art. 6 Para. 1 lit. d GDPR serves as the legal basis.
If the processing is necessary to protect a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 Para. 1 lit. f GDPR serves as the legal basis for the processing.
Data deletion and storage period
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Storage can also take place if this has been provided for by the European or national legislator in EU regulations, laws or other regulations to which the person responsible is subject. The data will also be blocked or deleted if a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data to conclude or fulfill a contract.
Sharing of data
Your personal data will not be transferred to third parties for purposes other than those listed below. We will only share your personal information with third parties if:
- you have given your express consent to this in accordance with Article 6 Paragraph 1 Sentence 1 Letter a GDPR;
- the disclosure in accordance with Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR is necessary to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data;
- in the event that there is a legal obligation for the transfer in accordance with Article 6 Paragraph 1 Sentence 1 Letter c GDPR, as well as
- This is legally permissible and is necessary for the processing of contractual relationships with you in accordance with Article 6 Paragraph 1 Sentence 1 Letter b of the GDPR.
3. Hosting and provision of the website
The domain of this website is obtained via Strato, while the technical provision of the content is carried out via GitHub.
When you access the website, the servers automatically collect certain technical information and store it in so-called server log files. This includes in particular the IP address of the requesting device, date and time of access, information about the browser used and the operating system.
This processing is carried out to ensure trouble-free operation of the website and to ensure IT security. The legal basis is Art. 6 Para. 1 lit. f GDPR, whereby the legitimate interest lies in the secure and stable provision of the website.
4. Contact form and communication
There is a contact form available on this website that you can use to send inquiries to the law firm. If you use this form, the data you enter will be processed. This includes, in particular, your first and last name, your telephone number, your email address, information about the nature of your request, information about the existence of legal protection insurance and a description of the facts that you have entered.
This data is processed exclusively for the purpose of processing your request, contacting you and, if necessary, initiating an attorney-client relationship. The legal basis for this is Article 6 Paragraph 1 Letter b GDPR (pre-contractual measures) and additionally Article 6 Paragraph 1 Letter f GDPR (legitimate interest in effective communication).
The data entered in the contact form will be sent to the law firm by email and stored there to the extent necessary to process your request.
For particularly confidential information, we recommend direct contact via email or other secure means.
5. Upload files
The contact form allows you to upload and transmit files. These files will only be used to process your request and will be forwarded to the law firm as an email attachment.
We ask that you only submit documents that are necessary to process your request.
6. Use of plausible analytics
This website uses the web analysis service Plausible Analytics. This is a data protection-friendly analysis tool that can be operated without the use of classic tracking cookies.
As a rule, Plausible does not process personal data in the narrower sense. The evaluation is based on anonymized information, such as page views, referrers, browser types used or approximate geographical origin.
If processing takes place in individual cases, this is based on your consent in accordance with Art. 6 Para. 1 lit. a GDPR, which is obtained via the cookie banner used.
Further information on data processing by Plausible can be found at: https://plausible.io/privacy
7. Cookies
Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When a user accesses a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic string that allows the browser to be uniquely identified when the website is accessed again.
Numerous websites and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a character string through which Internet pages and servers can be assigned to the specific Internet browser in which the cookie was stored. This enables the visited websites and servers to distinguish the individual browser of the data subject from other internet browsers that contain other cookies. A specific Internet browser can be recognized and identified via the unique cookie ID.
By using cookies, we can provide users of this website with more user-friendly services that would not be possible without the use of cookies.
Using a cookie, the information and offers on our website can be optimized for the user. Cookies enable us to recognize the users of our website. The purpose of this recognition is to make it easier for users to use our website. For example, the user of a website that uses cookies does not have to re-enter their access data each time they visit the website because this is done by the website and the cookie stored on the user's computer system. Another example is the cookie of a shopping cart in the online shop. The online shop remembers the items that a customer has placed in the virtual shopping cart via a cookie.
The data subject can prevent the setting of cookies through our website at any time by means of an appropriate setting in the Internet browser used and thus permanently object to the setting of cookies. Furthermore, cookies that have already been set can be deleted at any time via an Internet browser or other software programs. This is possible in all common internet browsers. If the person concerned deactivates the setting of cookies in the Internet browser used, not all functions of our website may be fully usable.
Some of the cookies are technically necessary to ensure the basic functions of the website. In addition, cookies can be used in connection with the analysis tool used, provided you have consented to this.
Processing is carried out on the basis of your consent in accordance with Article 6 Paragraph 1 Letter a GDPR and Section 25 TTDSG, to the extent this is necessary.
8. Social media presence on Instagram and TikTok
We maintain publicly accessible profiles on the social networks Instagram and TikTok. We use these profiles to provide information about our law firm, our legal work and legal topics and, in particular, publish explanatory, informational and advertising videos.
We operate a profile on the social network Instagram, a service provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
When you visit our Instagram profile and interact with our content published there, personal data may be processed by Meta. This may include, in particular, information about the device used, the IP address, usage and interaction data as well as information and content provided by users.
If you interact with our Instagram profile or our posts, for example by liking, commenting, sharing posts, following our profile or sending direct messages, this information may be processed by Instagram and made available to us as part of the functions provided by Instagram.
We process the personal data made available to us via Instagram in particular to communicate with interested parties, to answer inquiries, for public relations work and to provide information about our legal work.
The legal basis for the processing for which we are responsible is Article 6 (1) (f) GDPR. Our legitimate interest lies in contemporary public relations work, information about our legal work and communication with existing and potential clients and other interested parties.
Instagram Insights
We use the “Instagram Insights” function for our Instagram profile. Meta provides us with statistical evaluations about the use and reach of our profile and our published content.
The statistics provided may include, in particular, information about reach, views, interactions, followers as well as the composition and interests of the target groups reached. The evaluations serve to understand the use of our content, analyze its reach and improve our social media communication.
Processing in connection with Instagram Insights takes place within the framework of the functions provided by Meta. To the extent that personal data is processed, the processing can be carried out under joint responsibility with Meta. We have only limited influence on the specific data collection and processing by Meta and on the design of the insights functions provided by Meta.
The legal basis for the use of the statistical evaluations for which we are responsible is Article 6 (1) (f) GDPR. Our legitimate interest lies in analyzing the reach and effectiveness of our social media content and in improving our public relations work.
TikTok
We also operate a publicly accessible profile on the social network TikTok.
For users in the European Economic Area, according to TikTok, TikTok Technology Limited, Ireland, and TikTok Information Technologies UK Limited, United Kingdom, in particular, act as joint controllers for certain processing operations.
When you visit our TikTok profile and use and interact with our videos published there, personal data may be processed. This may include, in particular, device and network data, IP address, usage information and information about interactions with our profile and videos.
For example, if you watch, interact with, like, comment, share our videos, follow our profile or send us a message via TikTok, relevant information may be processed.
To the extent that personal data is made available to us when using TikTok, we process it in particular to communicate with interested parties, to answer inquiries, for public relations work and to provide information about our legal work.
The legal basis for the processing for which we are responsible is Article 6 (1) (f) GDPR. Our legitimate interest lies in contemporary public relations work, information about our legal work and communication with existing and potential clients and other interested parties.
TikTok analytics and evaluations
We use the analysis and statistical functions provided by TikTok, in particular TikTok Analytics or the insights and analysis functions available as part of a TikTok Business or comparable account.
This can provide us with statistical information about the use and reach of our profile and our videos. This may include, in particular, information about video views, likes, comments, shares, followers, profile views, reach and the composition of the target groups reached.
The evaluations serve to analyze the reach and effectiveness of our content, to further develop our videos and to optimize our public relations work.
According to its own information, TikTok provides creators and companies with aggregated statistics and insights that can be used, among other things, to analyze interaction with content as well as the reach and composition of the audience.
To the extent that personal data is processed in connection with these analysis functions and we decide together with TikTok on the purposes and means of processing, the processing takes place within the framework of the data protection responsibility regulations provided for this purpose.
The legal basis for the use of the analysis results for which we are responsible is Article 6 (1) (f) GDPR. Our legitimate interest lies in analyzing and improving our social media communication as well as optimizing the reach and quality of our content.
Paid advertising on Instagram and TikTok
We may display individual videos and other content we publish as paid advertising on Instagram and/or TikTok.
We use the advertising functions offered by Meta and TikTok to display our content to a larger or specifically selected group of people. The respective platform operators can process information about users, devices, usage, interactions and target groups in order to enable and measure the delivery, reach and effectiveness of advertising.
In particular, we may use target group characteristics and selection options offered by the platforms, such as geographical or demographic characteristics as well as interests or interactions, to the extent that these are offered by the respective platform and are legally permissible.
The selection and delivery of the specific users to whom an ad is displayed is carried out by Meta or TikTok based on the respective platform and advertising systems. We generally receive statistical or aggregated information about the performance of our advertising campaigns and not simply the identity of the individual people to whom an ad was shown.
We process it for the purpose of public relations, advertising our legal work and attracting interested parties and potential clients. The legal basis for the processing for which we are responsible is Article 6 (1) (f) GDPR. Our legitimate interest lies in targeted and economically sensible public relations work as well as informing potential clients about our services.
TikTok offers advertisers in particular functions to increase reach, target potential interested parties and measure the performance of advertising campaigns.
To the extent that Meta or TikTok processes personal data under their own data protection responsibility, this processing is governed by the respective data protection regulations of the platform operators.
Retargeting and targeted advertising
To the extent that we use functions offered by the platform operators to form or use target groups or to re-address people, the respective platform can use information about interactions with our profiles and content to put together corresponding target groups.
TikTok, for example, offers the opportunity to create target groups for re-targeting based on specific interactions with a business account. This may include, among other things, profile views, video views as well as likes, shares and comments.
We only use such functions within the scope of the available and legally permissible options. If separate consent is required for a specific form of data processing, this will be obtained before the corresponding processing.
Publishing and redistributing videos
The videos we publish on Instagram and TikTok may contain personal data, especially if people are recognizable or their voices can be heard.
We only publish images, video and sound recordings of people if there is an appropriate data protection and, if necessary, copyright or personal rights basis for this.
The content published on Instagram and TikTok can be viewed, commented on, shared, saved or otherwise redistributed by other users. We have no complete influence on such further processing by other users or on the further distribution of the content outside of our immediate sphere of influence.
No publication of confidential mandate information
As a law firm, we treat information from client relationships confidentially. Personal data of our clients and information that is subject to client confidentiality are generally not published in our social media videos or other public social media content unless there is a corresponding legal basis for this in individual cases and - if necessary - express consent.
We expressly ask users not to transmit confidential information about specific legal matters via comments, direct messages or other public communication functions on Instagram or TikTok.
In particular, no sensitive personal data, file numbers, documents or other information relating to an existing or planned mandate should be transmitted via these platforms.
For confidential inquiries, we recommend contacting us via the communication channels listed on our website.
Third country transfers
When using Instagram and TikTok, personal data may also be processed outside the European Union or the European Economic Area. This can occur in particular in connection with the global technical infrastructure, the analysis, advertising and other services of the platform operators.
According to their own statements, the respective platform operators take measures to lawfully carry out such data transfers. Details can be found in the respective data protection regulations of Meta and TikTok.
We have only limited influence on the specific design of data processing by Instagram and TikTok as well as on their technical and organizational measures.
Responsibility of the platform operators
We would like to point out that Instagram and TikTok carry out their own personal data processing, over which we have only limited influence. The respective platform operators are generally responsible for this processing in accordance with the data protection regulations applicable to their services.
Further information on data processing, the rights of those affected and the setting options of the respective platforms can be found in the data protection declarations of Meta and TikTok.
9. Your rights as a data subject
Right to information
You can request confirmation from the person responsible as to whether personal data concerning you is being processed by us.
If such processing occurs, you can request information from the person responsible about the following information:
You have the right to request information as to whether the personal data concerning you will be transferred to a third country or to an international organization. In this context, you can request to be informed about the appropriate guarantees in accordance with Art. 46 GDPR in connection with the transfer.
- the purposes for which the personal data are processed;
- the categories of personal data that are processed;
- the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;
- the planned duration of storage of the personal data concerning you or, if specific information is not possible, criteria for determining the storage period;
- the existence of a right to rectification or deletion of personal data concerning you, a right to restrict processing by the controller or a right to object to this processing;
- the existence of a right to lodge a complaint with a supervisory authority;
- all available information about the origin of the data if the personal data is not collected from the data subject;
- the existence of automated decision-making including profiling in accordance with Article 22 Paragraphs 1 and 4 GDPR and - at least in these cases - meaningful information about the logic involved as well as the scope and intended effects of such processing for the data subject.
Right to rectification
You have the right to request correction and/or completion from the person responsible if the personal data processed concerning you is incorrect or incomplete. The person responsible must make the correction immediately.
Right to restriction of processing
You can request the restriction of the processing of personal data concerning you under the following conditions:
If the processing of personal data concerning you has been restricted, these data - with the exception of their storage - may only be processed with your consent or to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State.
If the restriction on processing has been restricted in accordance with the above conditions, you will be informed by the person responsible before the restriction is lifted.
- if you contest the accuracy of the personal data relating to you for a period enabling the controller to verify the accuracy of the personal data;
- the processing is unlawful and you refuse the deletion of the personal data and instead request the restriction of the use of the personal data;
- the controller no longer needs the personal data for the purposes of processing, but you need them to assert, exercise or defend legal claims, or
- if you have objected to the processing in accordance with Article 21 Paragraph 1 of the GDPR and it is not yet clear whether the legitimate reasons of the person responsible outweigh your reasons.
Right to deletion
a. Obligation to delete
You can request that the person responsible delete the personal data concerning you immediately, and the person responsible is obliged to delete this data immediately if one of the following reasons applies:
b. Information to third parties
If the person responsible has made the personal data concerning you public and is obliged to delete it in accordance with Article 17 Paragraph 1 of the GDPR, he shall take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform those responsible for data processing who process the personal data that you, as the data subject, have requested them to delete all links to this personal data or copies or replications of this personal data.
c. Exceptions
There is no right to deletion if processing is necessary
- The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
- You revoke your consent on which the processing was based in accordance with Art.6 Para.1 lit.a or Art.9 Para.2 lit.a GDPR and there is no other legal basis for the processing.
- You object to the processing in accordance with Art. 21 Para. 1 GDPR and there are no overriding legitimate reasons for the processing, or you object to the processing in accordance with Art. 21 Para. 2 GDPR.
- Your personal data has been processed unlawfully.
- The deletion of personal data concerning you is necessary to comply with a legal obligation under Union or Member State law to which the controller is subject.
- The personal data concerning you was collected in relation to information society services offered in accordance with Art. 8 Para. 1 GDPR.
- to exercise the right to freedom of expression and information;
- to fulfill a legal obligation requiring processing under Union or Member State law to which the controller is subject, or to carry out a task carried out in the public interest or in the exercise of official authority vested in the controller;
- for reasons of public interest in the field of public health in accordance with Art.9 Para.2 lit.h and i as well as Art.9 Para.3 GDPR;
- for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes in accordance with Art. 89 Para. 1 GDPR, insofar as the law mentioned under section a) is likely to make the achievement of the objectives of this processing impossible or seriously impair it, or
- to assert, exercise or defend legal claims.
Right to information
If you have asserted the right to rectification, deletion or restriction of processing against the controller, the controller is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification or deletion of the data or restriction of processing, unless this proves impossible or involves disproportionate effort.
You have the right to be informed about these recipients by the person responsible.
Right to data portability
You have the right to receive the personal data concerning you that you have provided to the person responsible in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another person responsible without hindrance from the person responsible to whom the personal data was provided, provided that
In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one controller to another controller, to the extent that this is technically feasible. The freedoms and rights of other people must not be impaired by this.
The right to data portability does not apply to processing of personal data that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
- the processing is based on consent in accordance with Art.6 Para.1 lit.a GDPR or Art.9 Para.2 lit.a GDPR or on a contract in accordance with Art.6 Para.1 lit.b GDPR and
- the processing takes place using automated procedures.
Right to object
You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data, which is carried out on the basis of Article 6 (1) (e) or (f) of the GDPR; This also applies to profiling based on these provisions.
The person responsible will no longer process the personal data concerning you unless he can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
If your personal data is processed for the purpose of direct advertising, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; This also applies to profiling insofar as it is connected to such direct advertising.
If you object to processing for direct advertising purposes, your personal data will no longer be processed for these purposes.
In connection with the use of information society services - regardless of Directive 2002/58/EC - you have the opportunity to exercise your right to object using automated procedures that use technical specifications.
Right to revoke the declaration of consent under data protection law
You have the right to revoke your data protection declaration of consent at any time. The revocation of consent does not affect the lawfulness of the processing carried out based on the consent before its revocation.
Automated decision-making in individual cases including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision
However, these decisions may not be based on special categories of personal data according to Art.9 Para.1 GDPR, unless Art.9 Para.2 lit.a or g GDPR applies and appropriate measures have been taken to protect your rights and freedoms as well as your legitimate interests.
With regard to the cases mentioned in (1) and (3), the controller shall take appropriate measures to protect the rights and freedoms as well as your legitimate interests, which includes at least the right to obtain human intervention on the part of the controller, to express one's own point of view and to challenge the decision.
- is necessary for the conclusion or fulfillment of a contract between you and the person responsible,
- is permitted by Union or Member State law to which the controller is subject and such law contains appropriate measures to safeguard your rights and freedoms and your legitimate interests or
- with your express consent.
Right to complain to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement, if you believe that the processing of personal data concerning you violates the GDPR.
The supervisory authority to which the complaint was submitted will inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy in accordance with Article 78 GDPR.
10. SSL or TLS encryption
This website uses SSL or TLS encryption for security reasons. This protects transmitted data and cannot easily be read by third parties. You can recognize an encrypted connection by the address line in your browser (“https://”).