Data protection

Privacy policy

Declaration according to DSGVO

I. Person responsible

The person responsible within the meaning of the Basic Data Protection Regulation (hereinafter referred to as “DSGVO”) and other national data protection laws and other data protection regulations:

OVH Tax consultant Overhage Villwock Heinze Legal PartGmbB

and

OVH Lawyers Overhage Villwock Heinze Tax PartGmbB

(OVH tax consultant Overhage Villwock Heinze Legal PartGmbB and

OVH Rechtsanwälte Overhage Villwock Heinze Tax PartGmbB hereinafter also jointly referred to as “OVH”)

50672 Cologne
Antwerp Str. 35
Phone: 0049 221 / 99 99 34 – 66
e-mail: info@ovh-legal.de

You can also reach our data protection officer via the above-mentioned contact details.

II. general information on data processing

OVH attaches particular importance to data protection. For this reason, we collect and use personal data of our users only to the extent necessary to provide a functional website and our contents and services. Personal data is any information relating to an identified or identifiable natural person (“data subject”).

The collection and use of personal data of our users is always in accordance with the DSGVO and the applicable country-specific data protection regulations. If it is necessary to process personal data and such processing is not permitted by legal regulations, we always obtain the consent of the person concerned.

Personal data will not be passed on to third parties. Data will only be transmitted if you have expressly consented to it (Art. 6 para. 1 sentence 1 lit. a DSGVO); if you have a legitimate interest in the transmission and there is no reason to assume that you have an overriding interest worthy of protection in not transmitting your data (Art. 6 para. 1 sentence 1 lit. f DSGVO); there is a legal obligation to pass on the data (Art. 6 para. 1 sentence 1 lit. c DSGVO); or the data may be passed on in the course of fulfilling a contract with you (Art. 6 para. 1 sentence 1 lit. b DSGVO)

III. collection and storage of personal data when visiting the website

Every time you access our websites www.ovh-legal.de, www.ovh-legal.de and www.ovh-tax.de, information is automatically transmitted to the server of our website by the browser you use. The following information is recorded and stored until automatic deletion:

  • IP address of the requesting computer,
  • Date and time of access,
  • Name and URL of the retrieved file,
  • the referrer URL, i.e. the website from which the access was made
  • Information about the type of browser used,
  • the operating system of your computer,
  • the name of the Internet service provider.

This data is only stored temporarily in a so-called log file. Not affected by this are the IP addresses of the user or other data that allow the data to be assigned to a user. This data is not stored together with other personal data of the user. When using this data, we do not draw any conclusions about the person concerned.

The legal basis for this processing is Article 6(1). 1 S. 1 lit. f DSGVO. Our legitimate interest lies in providing a functional website with correctly delivered content, in optimising our systems and in providing law enforcement agencies with the information necessary for prosecution in the event of a cyber attack. As soon as there is no longer a justified interest and there is no legal obligation to retain the data, it is routinely deleted.

We also use cookies and employ analysis and marketing services. You will find more detailed information on this under points IV, V and VI of this data protection declaration.

IV. Cookies

We use cookies on our website. Cookies are small text files which your browser automatically creates and which can be stored on your end device. This cookie contains a characteristic string of characters that allows the browser to be uniquely identified when you return to the website. This does not mean that we obtain direct knowledge of your identity.

On the one hand, the use of cookies serves to make the use of our offer more pleasant for you. In addition, we use cookies to optimise user-friendliness and our offer and for statistical purposes.

We use so-called session cookies to recognise that you have already visited individual pages of our website. These cookies are automatically deleted after leaving our site. In addition, we use temporary cookies which are stored on your end device for a certain fixed period of time. If you visit our site again, it is automatically recognised that you have already been with us and which entries and settings you have made so that you do not have to enter them again. The data collected includes the frequency of page views, search terms entered and the use of website functions.

The use of cookies for statistical recording and evaluation of our offer is described in more detail in section V. These cookies enable us to automatically recognise that you have already been with us when you visit our site again. These cookies are automatically deleted after a defined time.

The data processed by cookies are processed for the above-mentioned purposes in order to safeguard our legitimate interests and those of third parties in accordance with art. 6 paragraph. 1 S. 1 lit. f DSGVO required. Our legitimate interest lies in providing a functional and user-friendly website.

Most browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your computer or so that a message always appears before a new cookie is created. However, completely deactivating cookies may mean that you cannot use all the functions of our website.

V. Use of analytical services (Google Analytics)

We use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as “Google”) (https://www.google.de/intl/de/about/) for the purpose of designing our pages to meet your needs and continuously optimising them.

We use Google Analytics on the basis of Art. 6 para. 1 S. 1 lit. f DSGVO. In this way we want to ensure that our website is designed to meet your needs and is continuously optimised. On the other hand, we use the tracking measures to record the use of our website statistically and evaluate it for the purpose of optimising our offer for you. These interests are to be regarded as legitimate within the meaning of the aforementioned provision.

In this context, pseudonymised user profiles are created and cookies (see section IV.) are used. The information generated by the cookie about your use of this website such as

  • Browser type/version,
  • operating system used,
  • Referrer URL (the previously visited page),
  • Host name of the accessing computer (IP address),
  • Time of the server request,

are usually transferred to a Google server and stored there. Under certain circumstances, the data may also be transferred to Google’s servers in the USA. As a result of Google’s certification under the EU-US Privacy Shield, the European Commission has determined an adequate level of data protection for Google.

The above-mentioned information may also be transferred to third parties if this is required by law or if third parties process this data on our behalf. Under no circumstances is the IP address transmitted by your browser merged with other Google data. The IP addresses are made anonymous so that they cannot be assigned (IP masking). Only in exceptional cases is the full IP address transferred to a Google server in the USA and shortened there.

On our behalf, Google will use this information to evaluate your use of the website, to compile reports on the website activities and to provide us with further services related to the use of the website and the internet.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and relating to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de). An opt-out cookie is set to prevent the collection of your information when you visit this website in the future. The opt-out cookie is stored on your device and is only valid in this browser and only for our website. If you delete the cookies in this browser, you must set the opt-out cookie again.

Further information on data protection in connection with Google Analytics can be found in the Google Analytics Help: https://support.google.com/analytics/answer/6004245?hl=de.

VI. use of marketing services (Google Ads)

On our website we have integrated the Google Ads service. Google Ads is an internet advertising service which allows ads to be displayed both in Google’s search engine results and on the Google advertising network. The company operating the service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads will be sold on the basis of Article 6(6) 1 S. 1 lit. f DSGVO is used. In this way, we want to ensure that our website is advertised in a targeted and needs-based manner. In connection with the tracking measures described in section V., the use of the advertising offers on our website is statistically recorded and evaluated for the purpose of optimising our offer for you. These interests are to be regarded as legitimate within the meaning of the aforementioned provision.

The purpose of Google Ads is to advertise our website by displaying advertising on the websites of third parties and in Google’s search results as well as by displaying third-party advertising on our website.

For statistical evaluation and improvement of our offer, the Google Ads ads are evaluated by means of Google Conversion Tracking. Google Ads will set a cookie (see section IV.) on your computer, provided that you have reached our website via a Google advertisement. These cookies lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of the Ads Customer’s website and the cookie has not expired, Google and the Customer will be able to tell that the user clicked on the ad and was directed to that page.

Each Ads customer receives a different cookie. Cookies can therefore not be tracked via the websites of Ads customers. The information collected using the conversion cookie is used to generate conversion statistics for ads customers who have opted for conversion tracking. Ads customers are told the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, you will not receive information that can be used to identify users personally. If you do not wish to take part in the tracking procedure, you can also refuse the necessary setting of a cookie – for example, by means of a browser setting which generally deactivates the automatic setting of cookies. You can also disable cookies for conversion tracking by setting your browser to block cookies from the domain “www.googleadservices.com”.

Google’s further information and privacy policy on conversion tracking can be found here: https://support.google.com/google-ads/answer/1722022?hl=de and https://policies.google.com/privacy?hl=de

We also use the Google Tag Manager on our website. Google Tag Manager is a solution that allows marketers to manage website tags through one interface. The Tag Manager tool itself (which implements the tags) is a cookie-less domain and does not collect personal information. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If deactivation has been made at the domain or cookie level, it will persist for all tracking tags implemented with Google Tag Manager.

Our website also uses the remarketing function of Google. This technology is used to present visitors to the website with interest-based advertisements within the Google Partner Network. The display of advertising is achieved through the use of cookies, which can be used to analyse user behaviour when visiting the website and then used for targeted product recommendations and interest-based advertising. These pages may then display advertisements to the visitor relating to content that the visitor has previously viewed on websites that use Google’s remarketing technology. According to its own information, Google does not collect any personal data during this process. Further information can be found at https://www.google.de/tagmanager/use-policy.html and https://policies.google.com/technologies/ads?hl=de.

If you do not wish to receive interest-based advertising through Google Remarketing technology, you can disable Google’s use of cookies for these purposes by selecting the appropriate settings at the following link:

https://adssettings.google.com/anonymous?sig=ACi0TCgMFcf7FpekvHUqS-mPHxN1gZpfvDSpUrN9mSa8V9nxDdenZ-3K4xcFepsHZ35FPiNdD0SeRFM2chd1zi7uP3IDoR8jvBQbn63Xn0KVL5FnADEnJaI&hl=de

VII. contacting via the website

Due to legal regulations, our site contains information that enables our company to contact us electronically (in particular e-mail address). If you contact us by e-mail, your voluntarily submitted personal data is automatically stored for the purpose of processing or contacting you. This data will not be passed on.

The data will be deleted if there is no longer a legal retention period and if they are no longer required for contract fulfilment or contract initiation. The legal basis for the processing of data transmitted in the course of sending an e-mail is article 6, paragraph. 1 S. 1 lit. f DSGVO. The legitimate interest within the meaning of the DSGVO is to process and respond to your contact.

The data will be deleted as soon as it is necessary to achieve the purpose for which it was collected, which will be the case when the respective conversation with the user has ended. The conversation ends when it is clear from the circumstances that the matter in question has been conclusively clarified. You have the possibility to object to the storage of your personal data at any time. To do so, contact the person in charge mentioned in point I. (in writing, by e-mail or by telephone). The data from the previous communication is then deleted and no further conversation is possible.

VIII. contact form

Users of our website have the option of contacting us via a contact form (“Contact” or “Become a partner”). If you take this opportunity, the data entered in the input mask will be transmitted to us and stored. These data are:

  • Name,
  • telephone number,
  • Postcode
  • e-mail address,
  • where applicable, your personal details in the subject or free text.

When the message is sent, the following data is also saved:

  • IP address of the calling computer,
  • Date and time of registration.

The legal basis for this data processing is Art. 6 paragraph. 1 S. 1 lit. a DSGVO. For the processing of this data, your consent will be obtained during the sending process and reference will be made to this privacy policy. Sending the contact form without this declaration of consent is not possible. Alternatively, contact can be established via the e-mail address provided. In this case, the user’s personal data transmitted with the e-mail will be stored.

We need the collected data only to answer your contact request. The data stored at the time of sending is used to ensure the security of our systems and to prevent abuse of the contact form. This data will not be used or passed on in any other way.

The data are deleted as soon as they are no longer necessary for the purpose for which they were collected. For the personal data from the input mask of the contact form, this is the case when the respective conversation with the user has ended. The conversation ends when it is clear from the circumstances that the matter in question has been conclusively clarified.

If the contact request results in a contractual or contract initiation relationship, the legal basis for further data processing is Art. 6 paragraph. 1 S. 1 lit. b DSGVO.

You have the possibility to revoke your consent to the processing and storage of your data at any time with effect for the future. To do so, contact the person in charge mentioned in point I. (in writing, by e-mail or by telephone). The data from the previous communication is then deleted and no further conversation is possible.

IX. Integration of social media components and plugins

We set on our website on the basis of article 6 paragraph. 1 S. 1 lit. f DSGVO Social Media Plugins from the social networks Facebook, Twitter, Xing, LinkedIn and Google+ to make our website and our company better known. The advertising purpose behind this is to be regarded as a legitimate interest within the meaning of the DSGVO. The responsibility for data protection-compliant operation must be guaranteed by the respective provider.

  1. Facebook Plugin

On our website we use components and plugins of the social network facebook.com facebook.com is operated by Facebook Inc., Hacker Way, Menlo Park, CA 94025, USA (hereinafter referred to as “Facebook”). The person responsible for processing personal data for data subjects outside the USA or Canada is Facebook Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland.

You can recognise these plugins by the Facebook logo (white “f” on blue tile), by a “thumbs up” sign or by buttons marked “LIKE” or “SHARE”. This is an offer from Facebook. When you call up a page of our website that contains such a plugin, your browser establishes a direct connection with the Facebook servers. The content of the plugin is transmitted by Facebook directly to your browser and integrated by it into the website. By integrating the plugins, Facebook receives the information that your browser has called up the corresponding page of our website, even if you do not have a Facebook account or are not currently logged in to Facebook. This information (including your IP address) is transmitted by your browser directly to a Facebook server in the USA and stored there. If you are logged in to Facebook, Facebook can assign your visit to our website directly to your Facebook account. If you interact with the plugins, for example by pressing the “LIKE” or “SHARE” button, the corresponding information is also transmitted directly to a Facebook server and stored there. The information is also published on Facebook and – depending on your Facebook settings – displayed to your Facebook friends.

Facebook may use this information for the purposes of advertising, market research and the design of Facebook pages in line with requirements. For this purpose, Facebook creates usage, interest and relationship profiles, e.g. to evaluate your use of our website with regard to the advertisements displayed on Facebook, to inform other Facebook users about your activities on our website and to provide other services associated with the use of Facebook.

If you do not want Facebook to assign the data collected via our website to your Facebook account, you must log out of Facebook before visiting our website.

For the purpose and scope of data collection and the further processing and use of the data by Facebook, as well as your rights and setting options for protecting your privacy, please refer to Facebook’s data protection information (https://de-de.facebook.com/privacy/explanation).

  1. Facebook Pixel

We also use the so-called “Facebook Pixel” of the social network Facebook. With the help of the Facebook pixel, Facebook is on the one hand able to determine visitors to our online offer as a target group for the presentation of ads (so-called “Facebook ads”). Accordingly, we use the Facebook pixel to display the Facebook ads placed by us only to those Facebook users who have also shown an interest in our online offering or who exhibit certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited) that we transmit to Facebook (so-called “custom audiences”). With the help of the Facebook pixel, we also want to make sure that our Facebook ads match the potential interest of the users and are not annoying. With the help of the Facebook pixel we can further track the effectiveness of Facebook Ads for statistical and market research purposes by seeing whether users are redirected to our website after clicking on a Facebook ad (so-called “conversion”).

For the purpose and scope of data collection and the further processing and use of the data by Facebook, as well as your rights and setting options for protecting your privacy, please refer to Facebook’s data protection information (https://de-de.facebook.com/privacy/explanation).

  1. Twitter

Our website integrates components and plug-ins of the short message network of Twitter Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103, USA (hereinafter referred to as “Twitter”). You can recognise the Twitter plugins (tweet button) by the Twitter logo.

When you call up a page of our website that contains such a plugin, a direct connection is established between your browser and the Twitter server. Twitter receives the information that you have visited our site with your IP address. If you click the Twitter “tweet button” while logged in to your Twitter account, you can link the contents of our pages on your Twitter profile. This allows Twitter to associate visits to our site with your user account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Twitter. Regardless of whether you click on a Twitter component, Twitter will know that you have visited our website if you are logged in to Twitter at the same time.

If you do not want Twitter to be able to track your visit to our site, please log out of your Twitter account. Further information can be found in the Twitter privacy statement: https://twitter.com/privacy

  1. Xing

On our website we use components and plugins of the social network xing.com xing.com is operated by Xing SE, Dammtorstraße 30, 20354 Hamburg, Germany (“Xing”). Xing is a social network especially for business contacts.

You can recognise Xing plug-ins by the buttons with the Xing logo or by the name “XING”. This is an offer from Xing. By calling up pages on this website on which Xing plug-ins have been integrated, your browser establishes a direct connection with the Xing servers. The content of the plugin is transmitted by Xing directly to your browser, which integrates it into the website. By integrating the plugins, Xing receives the information that your browser has called up the corresponding page of our website. If you are logged in to Xing with your own profile, Xing can directly assign your visit to our website, the sub-pages visited and the duration of your stay to your Xing account. This happens regardless of whether you use a Xing button. When you interact with the plugins, for example by pressing the “Share” button, the corresponding information is also transmitted directly to a Xing server and stored there. The information is also published on Xing and – depending on your Xing settings – displayed to your Xing contacts.

If you do not want Xing to allocate the data collected via our website to your Xing account, you must log out of Xing before visiting our website.

Information on the collection, processing and use of personal data by Xing is available at https://privacy.xing.com/de/datenschutzerklaerung.

  1. LinkedIn

We have also included components of the linkedin.com website on our website. Linkedin.com is operated by LinkedIn Corporation, 2029 Stierlin Court Mountain View, CA, 94043, USA, and LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (hereinafter referred to as “LinkedIn”) is responsible for the operation of the Website and data protection matters outside the USA. LinkedIn is a social network especially for business contacts.

You can recognise LinkedIn plugins by the buttons with the LinkedIn logo or by the label “in”. This is an offer from LinkedIn.

By calling up pages on this website on which LinkedIn plug-ins have been integrated, your browser establishes a direct connection with the LinkedIn servers. The content of the plugin is transmitted by LinkedIn directly to your browser, which integrates it into the website. By integrating the plugins, LinkedIn receives the information that your browser has called up the corresponding page of our website.

If you are logged in to LinkedIn with your own profile, LinkedIn can directly link your visit to our website, the sub-pages you visit and the length of your stay to your LinkedIn account. This happens regardless of whether you use a LinkedIn button. When you interact with the plugins, for example by pressing the “tell” button, the corresponding information is also transmitted directly to a LinkedIn server and stored there. The information can also – depending on your settings – be published on linkedin.com and displayed to your contacts.

If you do not want LinkedIn to associate the information collected through our website with your LinkedIn account, you must log out of LinkedIn before visiting our website. LinkedIn’s current privacy policy with the ability to disable LinkedIn cookies can be found at www.linkedin.com/legal/privacy-policy

X. Rights of data subjects

As a data subject, you are entitled to the following rights vis-à-vis the person in charge. If you wish to exercise any of these rights, please contact the person responsible using the contact details given in point I.

  1. Right to information (Art. 15 DSGVO)

You may request information from the data controller as to whether personal data concerning you is being processed by him.

Where processing is involved, you may obtain information from the data controller about these personal data and the purposes of processing; the categories of personal data processed; the recipients or recipients of the data; the purposes of processing; the categories of personal data processed; the recipients or recipients of the data. the categories of recipients to whom the personal data concerning you have been or will be disclosed; the envisaged period for which the personal data concerning you will be stored or, if this is not possible, the criteria for determining the storage period; the existence of a right of rectification or erasure of personal data concerning you or of a right of objection to the processing by the controller; the existence of a right of appeal to a supervisory authority; if the personal data are not collected from you, all available information on the origin of the data; the existence of automated decision making, including profiling in accordance with Article 3(1)(b) of the Directive; the existence of a right of access to the personal data; the existence of a right of rectification or erasure of personal data concerning you or of a right of objection to the processing; the existence of a right of appeal to a supervisory authority; if the personal data are not collected from you, all available information on the origin of the data; the existence of automated decision making, including profiling in accordance with Article 3(1)(b) of the Directive. Art. 22 para. 1, 4 FADP and, at least in these cases, relevant information about the logic involved and the scope and intended effects of such processing on the data subject; the transfer of personal data to a third country or to an international organisation and about the appropriate safeguards in this context, in accordance with Article 1, 4 FADP. Art. 46 DSGVO; request information.

  1. Right of rectification (Art. 16 DSGVO)

You have the right to have your personal data corrected and/or completed without delay vis-à-vis the controller if the processed personal data concerning you is incorrect or incomplete.

  1. Right of cancellation (Art. 17 DSGVO)

You can demand the deletion of your data stored with us if the data are no longer necessary for the purposes for which they were collected or processed; you revoke your consent and there is no other legal basis for the processing; you object in accordance with section 3.2.1. Art. 21 para. 1 DSGVO and there are no overriding legitimate reasons for the processing or you do not have a legitimate reason pursuant to Art. gem. Art. 21 para. 2 DSGVO; the personal data have been processed unlawfully; the deletion is necessary for the fulfilment of a legal obligation; or the personal data are processed in relation to information society services offered in accordance with Section 2 DSGVO. Art. 8 Abs. 1 DSGVO were collected. This right of deletion shall not apply if the processing is necessary for the exercise of the right to freedom of expression and information; for the fulfilment of a legal obligation; for reasons of public interest; or for the assertion, exercise or defence of legal claims.

  1. Right to restrict processing (Art. 18 DSGVO)

You may request the restriction of the processing of personal data concerning you if the accuracy of the personal data is disputed by you for the duration of the verification of its accuracy by the controller; if the processing is unlawful and you request the restriction of the processing instead of its erasure; if the controller no longer needs the data but you need it for the exercise, exercise or defence of legal claims; or if you object to the processing pursuant to Art. 21 para. 1 DSGVO and it has not yet been established whether justified reasons on the part of the person responsible outweigh your reasons.

If the processing of personal data relating to you has been restricted, such data, apart from being stored, may be processed only with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or on grounds of an important public interest of the Union or a Member State.

If the restriction on processing has been restricted in accordance with the above conditions, you will be informed by the controller before the restriction is lifted.

  1. Right to data transferability (Art. 20 DSGVO)

You have the right to receive your personal data that you have provided us with in a structured, common and machine-readable format or to request that it be transferred to another responsible party.

  1. Right of appeal

Provided that your personal data is based on legitimate interests in accordance with Art. 6 para. 1 S. 1 lit. f DSGVO are processed, you have the right to object to the processing of your personal data for reasons arising from your particular situation. If the objection is directed against direct advertising, you have a general right of objection, which will be implemented by us without specifying a special situation.

  1. Right to withdraw consent (Art. 7 para. 3 DSGVO)

You have the right to revoke your consent to us at any time with the consequence that we may no longer continue to process the data based on this consent in the future.

  1. Right of appeal (Art. 77 DSGVO)

They have the right to complain to a supervisory authority. You can contact the supervisory authority at your place of residence or workplace or the supervisory authority responsible for us.

XI. Data security

In order to protect your data in the best possible way, we use the SSL (Secure Socket Layer) procedure on our website in conjunction with the highest encryption level supported by your browser. You can tell whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the status bar of your browser. We also use suitable technical and organisational security measures to protect your data against manipulation, loss, destruction or unauthorised access by third parties.

XII. Up-to-dateness and amendment of this data protection declaration

This privacy policy is currently valid as of March 2020. Due to the further development of our website and offers or due to changed legal requirements, an amendment of this declaration may become necessary.