This privacy notice tells you what to expect me to do with your personal data when you contact me or use my services. This privacy notice complies with the respective requirements of the EU General Data Protection Regulation (GDPR), applicable national data protection laws and regulations. This privacy notice also informs you about rights you have regarding your personal data and how you can contact me in this respect.
1. Name and contact details of the data controller
This data protection information applies to data processing by:
Law Firm GERSTBERGER l Products & Law
Dr. Ina Gerstberger
80538 Munich, Germany
I can be reached at the above address or also at email@example.com
2. Collection and storage of personal data as well as the type and purpose of their use when visiting the website
When you visit my website www.productsandlaw.de, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information will be collected without your intervention and stored until automated deletion:
IP address of the requesting computer,
Date and time of access,
Name and URL of the retrieved file,
Website from which access is made (referrer URL),
the browser used and, if applicable, the operating system of your computer as well as the name of your access provider.
The mentioned data will be processed by me for the following purposes:
Ensure a smooth connection of the website,
To ensure a comfortable use of my website,
Evaluation of system safety and stability as well as
for other administrative purposes.
The legal basis for data processing is Art. 6 Para. 1 S. 1 lit. f GDPR. My justified interest follows from the purposes listed above for the collection of data. In no case do I use the collected data for the purpose of drawing conclusions about your person.
3. Disclosure of data
Your personal data will not be transferred to third parties for purposes other than those listed below.
I only give your personal data to third parties if:
you have given your express consent to this in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR,
the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR is necessary for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data,
if there is a legal obligation to pass on data pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR, and
this is legally permissible and required for the execution of contractual relationships with you pursuant to Art. 6 Para. 1 S. 1 lit. B GDPR.
In addition, I also use temporary cookies to optimize user-friendliness, which are stored on your device for a specified period. If you visit my page again, in order to use my services, it is automatically recognized that you were already with me and which inputs and settings you have made, in order not to have to enter these again.
The data processed by cookies are necessary for the purposes mentioned to protect my legitimate interests and those of third parties in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR.
Most browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your computer or a message always appears before a new cookie is created. However, if you disable cookies completely, you may not be able to use all the features of my website.
5. Google Maps
This web site uses Google Maps to display interactive maps and to provide driving instructions.
Google Maps is a map service from Google Inc., 1600 Amphitheatre Parkway, Mountain View, California 94043, USA. By using Google Maps, information about the use of this website, including your IP address and the (start) address entered as part of the route planner function, may be transmitted to Google in the USA. If you call up a website of my internet appearance which contains Google Maps, your browser establishes a direct connection with the servers of Google. The map content is transmitted by Google directly to your browser and integrated into the website by it. Therefore, I have no influence on the extent of the data collected in this way by Google. To the best of my knowledge, these are at least the following data:
the date and time of the visit to the website in question,
Internet address or URL of the website accessed,
IP address, the (start) address entered during route planning.
By using my website, you consent to the processing of data about you by Google Maps in the manner and for the purposes set out above.
6. Google Analytics
For the purpose of the needs-based design and continuous optimization of my pages, I use Google Analytics, a web analysis service of Google Inc. (https://www.google.de/ intl/en/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter “Google”). In this context, pseudonymised user profiles are created and cookies (see section 4) are used. The information generated by the cookie about your use of this site such as
operating system used,
Referrer URL (the previously visited page),
Host name of the accessing computer (IP address),
Time of the server request,
are transferred to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on website activities and to provide other services related to website and Internet use for market research purposes and to design these Internet pages in line with requirements.
7. Google Adwords Conversion Tracking
8. Social Media Plug-ins
I maintain profiles on the social media platforms LinkedIn (www.linkedin.com) and XING (www.xing.de) under my name to network, gain information and to showcase my advisory services. On my website, these profiles are hyperlinked by using the plattforms’ respective icons. This means you will be linked to my respective social media plattform profile when you click on the respective link. If you choose to interact with me on these social media platforms (e.g. by commenting), which is at your full discretion, you will likely publish and disclose your personal data (such as your name or your picture). Insofar I process your personal data in the context of using these social media platforms, I do this for the abovementioned purposes and the legal basis for such processing is Art. 6 para. 1 lit. f GDPR. With respect to any processing of your personal data by the social media platforms themselves, which I have no control over, please refer to their respective privacy statements:
9. Google Web Fonts
10. Processing of data when using the website – your requests by e-mail
If you send me an inquiry by e-mail, I collect your data for reviewing and responding to your request. I store this information for verification purposes for a period of up to two years. Legal basis for data processing is Article 6(1) sentence 1(f) GDPR. I will not pass on your data to third parties unless this is necessary to answer your enquiry or is permitted or required by law.
11. Rights of the data subject
You have the right:
to request information about your personal data processed by me in accordance with Art. 15 GDPR. In particular, you may request information on the purposes of processing, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned duration of storage, the existence of a right to rectification, erasure, limitation of processing or opposition, the existence of a right of appeal, the origin of your data if not collected from me, as well as the existence of automated decision-making including profiling and, where applicable, meaningful information on its details;
in accordance with Art. 16 GDPR to immediately request the correction of incorrect or incomplete personal data stored by me;
to demand the deletion of your personal data stored with me in accordance with Art. 17 GDPR, insofar as the processing is not necessary for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims;
to demand the restriction of the processing of your personal data in accordance with Art. 18 GDPR if the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it and I no longer need the data, but you need it to assert, exercise or defend legal claims or you have objected to the processing in accordance with Art. 21 GDPR;
in accordance with Art. 20 GDPR, to receive your personal data which you have provided to me in a structured, common and machine-readable format or to request transmission to another responsible person;
in accordance with Art. 7 para. 3 GDPR to revoke your consent once given to me at any time. As a consequence, I may not continue the data processing based on this consent for the future; and
to complain to a supervisory authority pursuant to Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or of my office for this purpose.
12. Right of objection
If your personal data are processed based on legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right, pursuant to Art. 21 GDPR, to object to the processing of your personal data if there are reasons for doing so which arise from your particular situation or if the objection is directed against direct advertising. In the latter case, you have a general right of objection, which is implemented by me without stating a particular situation.
If you wish to make use of your right of withdrawal or objection, simply send an e-mail to firstname.lastname@example.org
13. Data security
I have taken security measures on my website to protect any personal data collected from unauthorized access, loss or unauthorized use und to ensure a secure data transfer. I use the common SSL-Procedure (Secure Socket Layer) in connection with the highest encryption level supported by your browser, typically 256 bits. If your browser does not support 256-bit encryption, I use 128-bit v3 technology instead. You can check for an encrypted transfer of any site of my web presence by looking at the key or lock symbol in your browser.
I also make use of suitable technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. My security measures are continuously improved in line with technological developments.
Please note that, given the general internet infrastructure and set-up, an unintended data access by third parties remains possible and it is also your responsibility to protect your data against misuse through encryption or otherwise. Without sufficient security measures on your part, unencrypted data transfers – including by email – can potentially be reviewed/accessed by third parties.
14. Version and update of this privacy notice
This privacy notice is currently valid and has the status 07/2019.
Due to changes to my website or changes required by law, changes to this privacy notice may be required. The respective valid privacy notice can be accessed at www.productsandlaw.de/datenschutz.