Welcome to our website mkm-partner.de. We appreciate your interest in our company.
The protection of your personal data, such as date of birth, name, phone number, address, etc., is important to us.
The purpose of this Privacy Policy is to inform you about processing of your personal data, which we collect when you visit our website. Our Privacy Policy is in line with legal provisions of the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Law (BDSG). The following Privacy Policy is used to comply with our duty to inform resulting from the GDPR. Please refer to Art. 13 and 14 et seqq. of the GDPR.
Controller
Controller in the sense of Art. 4 para. 7 GDPR means the person, which, alone or jointly with others, determines the purposes and means of the processing of personal data.
With regard to our website, the controller is:
MKM + PARTNER Rechtsanwälte PartmbB
Äußere Sulzbacher Straße 124 a
90491 Nuremberg
Germany
E-mail: info@mkm-partner.de
Phone.: +49 911 669577-0
Fax: +49 911 669577-66
Contact details of the data protection officer
We have appointed a data protection officer pursuant to Art. 37 of the GDPR. You may contact our data protection officer using the following contact details:
MKM Datenschutz GmbH
Äußere Sulzbacher Straße 118
90491 Nuremberg
Germany
E-mail: info@mkm-datenschutz.de
Phone: +49 911 990 860 0
Website: http://www.mkm-datenschutz.de/
Provision of our website and creation of log files
Every time our website is called up, our system automatically records data and information of the access device (e.g. computer, mobile phone, tablet, etc.).
What personal data are collected and to which extent will they be processed?
(1) Information about the browser type and the version used;
(2) Operating system of the access device;
(3) Name of the accessing host;
(4) IP address of the access device;
(5) Date and time of access;
(6) Websites and resources (images, files, other site contents) accessed on our website;
(7) Websites from which the user’s system accessed our website (referrer tracking);
(8) Confirmation whether retrieval was successful;
(9) Transferred data volume
These data are stored in our system’s log files. These data are not stored together with the personal data of a specific user so that it is not possible to identify individual users of the website.
The legal basis for the processing of personal data
Art. 6 para. 1 lit. f of the GDPR (legitimate interest). Our legitimate interest is to guarantee that the purpose described below is achieved.
Purpose of data processing
The temporary (automated) storage of data is only required during the website visit so that the website can be provided. Storage and processing of personal data is also required to maintain compatibility of our website for all visitors, as far as possible, and to combat misuse and eliminate faults. It is necessary to log technical data of the accessing computer to be able to react promptly to incorrect visualisation, attacks to our IT systems and/or lack of functionality of our website. Furthermore, this data is used to optimise the website and to generally safeguard the security of our IT systems.
Length of time in storage
The above-mentioned technical data are erased as soon as they are no longer needed to guarantee compatibility of the website for all visitors but at the latest 3 months after you have visited our website.
Right to object and to erasure
You may object to processing any time under Art. 21 of the GDPR and request erasure of data pursuant to Art. 17 of the GDPR. The rights you are entitled to and how to enforce them is described further below in this Privacy Policy.
Special functions of the website
Our website offers you various functions, during the use of which personal data is collected, processed and stored by us. Below we explain what happens with this data:
Contact form(s)
What personal data are collected and to which extent will they be processed?
The data you entered in our contact forms, which you entered in the input mask of the contact form.
The legal basis for the processing of personal data
Art. 6 para. 1 lit. a GDPR (consent through clear confirming action or behaviour)
Purpose of data processing
We will use the data collected via our contact form or contact forms only for processing the specific contact request received through the contact form. Please note that in order to fulfil your contact request, we may also send you e-mails to the address provided. The purpose of this is so that you can receive confirmation from us that your request has been correctly forwarded. However, the sending of this confirmation e-mail is not obligatory for us and is only for your information.
Length of time in storage
After processing your request, the collected data will be deleted immediately, unless there are legal retention periods.
Right to object and to erasure
The objection and deletion options are based on the general regulations on the right of objection and deletion under data protection law described below in this privacy policy.
The need to provide personal data
The use of the contact forms is on a voluntary basis and is neither contractually nor legally required. You are not obliged to contact us via the contact form, but can also use the other contact options provided on our site. If you wish to use our contact form, you have to fill in the fields marked as mandatory. If you do not fill out the required information of the contact form, you can either not send the request or we can unfortunately not process your request.
Newsletter subscription form
What personal data are collected and to which extent will they be processed?
By registering for the newsletter on our website, we receive the e-mail address entered by you in the registration field and, if applicable, further contact data, provided that you communicate this to us via the newsletter registration form.
The legal basis for the processing of personal data
Art. 6 para. 1 lit. a GDPR (consent through clear confirming action or behaviour)
Purpose of data processing
The data entered in the registration mask of our newsletter will be used by us exclusively for sending our newsletter, in which we inform you about all our services and our latest news. After registration, we will send you a confirmation e-mail containing a link that you have to click to complete the registration for our newsletter (double opt-in).
Length of time in storage
Our newsletter can be unsubscribed at any time by clicking on the unsubscribe link, which is also included in every newsletter. Your data will be deleted by us immediately after unsubscribing, provided that there are no legal retention obligations. Likewise, your data will be deleted by us immediately in the event that your subscription is not completed. We reserve the right to delete without giving reasons and without prior or subsequent information.
Right to object and to erasure
The objection and deletion options are based on the general regulations on the right of objection and deletion under data protection law described below in this privacy policy.
The need to provide personal data
If you would like to receive our newsletter, you have to fill in the fields marked as mandatory and confirm the e-mail address by clicking on the double opt-in link. The newsletter registration information is neither necessary to enter into a contract with us nor legally binding. They are used exclusively for sending our newsletter. If you do not fill in the mandatory fields, we will unfortunately not be able to provide you with our newsletter service.
Statistical analysis of visits to this website – Web tracker
We collect, process and store the following data when this website or individual files on the website are accessed: IP address, website from which the file was accessed, name of the file, date and time of access, amount of data transferred and report on the success of the access (so-called web log). We use this access data exclusively in non-personalized form for the continuous improvement of our Internet offering and for statistical purposes. We also use the following web trackers to evaluate visits to this website:
- Matomo (local)
Scope of the processing of personal data
Our website contains a tracking code from Matomo (formerly Piwik), an open source web analysis tool (https://matomo.org). The web tracking is done solely by us without any personal reference. Matomo is hosted on our own server infrastructure for this purpose. A transfer to third parties therefore does not take place.
We collect, process and store usage data about the use of our site, such as referrer links, the time spent on certain URLs, the clickstream and also data about your browser settings, such as the manufacturer of the browser and also its version, the screen resolution and the operating system used.
The legal basis is Art 6 para. 1 lit. f GDPR, namely the legitimate interest in the analysis of the website.
We may also collect and store parts of your IP address and information about the loading speed of our website. From this data, we can only create anonymous usage profiles and extract statistical information. We also use cookies as part of Matomo web tracking to distinguish returning site visitors from first-time visitors. Cookies are small text files that are stored locally in the memory of your Internet browser and contain a separate ID and possibly other technical information. The data collected in this context will not be merged with other personal data that may be available to us without your separate consent.
The legal basis for the processing of personal data
In many cases, there is no personal reference. If there is a reference to a person, the legal basis for the collection is Art. 6 para. 1 lit. f GDPR, the legitimate interest in the analysis of our website.
Purpose of data processing
The purpose of web tracking is to analyse user flows in order to enable us to anonymously monitor the functionality and user-friendliness of our website and to constantly improve our Internet offering. Its sole purpose is to collect statistical, non-personal data.
Length of time in storage
We store all web tracking data collected using Matomo for an indefinite period of time, insofar as this data is only available to us in anonymized form. If the data is not anonymized, we will delete it after 12 months at the latest.
Right to object and to erasure
You can prevent the collection of the aforementioned data as well as its processing by installing a JavaScript blocker to prevent the collection of other app analysis data. Insofar as a personal reference should arise, you can withdraw your consent at any time according to the rules outlined in this privacy policy.
Integration of external web services and processing of data outside the EU
On our website, we use active content from external providers, so-called web services. When you visit our website, these external providers may receive personal information about your visit to our website. This may involve the processing of data outside the EU. You can prevent this by installing an appropriate browser plug-in or disabling the execution of scripts in your browser. This may result in some functional restrictions on the websites that you visit.
We use the following external web services:
- Bootstrap CDN
On our website we use the service Bootstrap CDN of the company StackPath, LLC, 2021 McKinney Avenue, Suite 1100, 75201 Texas, United States of America, email: privacy@stackpath.com, website: https://www.stackpath.com/. The processing also takes place in a third country for which there is no Commission adequacy decision. Therefore, the usual level of protection for the GDPR cannot be guaranteed for the transfer, as it cannot be ruled out that in the third country, authorities can access the collected data.
The legal basis for the transmission of personal data is our legitimate interest in the processing according to Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the achievement of the purpose described below.
Bootstrap CDN is a content delivery network that mirrors our content across different servers to ensure optimal accessibility worldwide.
With regard to the processing, you have the right to object mentioned in Art. 21 GDPR. You can find more information at the end of this privacy policy.
For more information on the handling of transmitted data, please refer to the provider’s privacy policy at https://www.bootstrapcdn.com/privacy-policy/.
- Google Fonts
We use on our site the service Google Fonts of the company Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States of America, e-mail: support-de@google.com, website: http://www.google.com/. The processing also takes place in a third country for which there is no Commission adequacy decision. Therefore, the usual level of protection for the GDPR cannot be guaranteed for the transfer, as it cannot be ruled out that in the third country, authorities can access the collected data.
The legal basis for the transmission of personal data is your consent according to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, which you have provided on our website.
Fonts are reloaded on our site via the Google Fonts service in order to be able to display the site in a visually better version.
You can withdraw your consent at any time. You can find more information about withdrawing your consent either with the consent itself or at the end of this privacy policy.
For more information on the handling of transmitted data, please refer to the provider’s privacy policy at https://policies.google.com/privacy.
- Google APIS
We use on our site the service Google APIS of the company Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States of America, e-mail: support-de@google.com, website: http://www.google.com/. The processing also takes place in a third country for which there is no Commission adequacy decision. Therefore, the usual level of protection for the GDPR cannot be guaranteed for the transfer, as it cannot be ruled out that in the third country, authorities can access the collected data.
The legal basis for the transmission of personal data is your consent according to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, which you have provided on our website.
We use Google APIS to be able to reload additional services from Google on the website. Google Apis is a collection of interfaces for communication between the various Google services that are used on your website.
The service or we collect the following data for processing: IP address.
You can withdraw your consent at any time. You can find more information about withdrawing your consent either with the consent itself or at the end of this privacy policy.
For more information on the handling of transmitted data, please refer to the provider’s privacy policy at https://policies.google.com/privacy.
- Gstatic
We use on our site the service Gstatic of the company Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States of America, e-mail: support-de@google.com, website: http://www.google.com/. The processing also takes place in a third country for which there is no Commission adequacy decision. Therefore, the usual level of protection for the GDPR cannot be guaranteed for the transfer, as it cannot be ruled out that in the third country, authorities can access the collected data.
The legal basis for the transmission of personal data is your consent according to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, which you have provided on our website.
Gstatic is a service used by Google to retrieve static content in order to reduce bandwidth usage and to preload required catalogue files.
You can withdraw your consent at any time. You can find more information about withdrawing your consent either with the consent itself or at the end of this privacy policy.
For more information on the handling of transmitted data, please refer to the provider’s privacy policy at https://policies.google.com/privacy.
- WordPress
We use on our site the service WordPress of the company Automattic Inc, 60 29th Street #343, CA 94110 San Francisco, United States of America, e-mail: vipprivacyshield@automattic.com, website: https://automattic.com/. The processing also takes place in a third country for which there is no Commission adequacy decision. Therefore, the usual level of protection for the GDPR cannot be guaranteed for the transfer, as it cannot be ruled out that in the third country, authorities can access the collected data.
The legal basis for the transmission of personal data is our legitimate interest in the processing according to Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the achievement of the purpose described below.
WordPress is the technical system behind our website for operating our WordPress website. We need this integration in order to provide you our website and edit the content.
With regard to the processing, you have the right to object mentioned in Art. 21 GDPR. You can find more information at the end of this privacy policy.
For more information on the handling of transmitted data, please refer to the provider’s privacy policy at https://automattic.com/privacy/.
- Jsdelivr
We use on our site the service Jsdelivr of the company Prospect One Sp., Krolweska 65A, 30-081 Krakow, Poland, e-mail: hello@prospectone.io, website: https://prospectone.io/. The transfer and processing of personal data takes place exclusively on servers in the European Union.
The legal basis for the transmission of personal data is our legitimate interest in the processing according to Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the achievement of the purpose described below.
JSDelivr is a content delivery network that mirrors our content across multiple servers to ensure optimal accessibility worldwide.
With regard to the processing, you have the right to object mentioned in Art. 21 GDPR. You can find more information at the end of this privacy policy.
For more information on the handling of transmitted data, please refer to the provider’s privacy policy at https://www.jsdelivr.com/privacy-policy-jsdelivr-com.
Information about the use of cookies
Scope for processing personal data
We embed and use cookies at different pages to enable certain functions of our website and to embed external web services. So-called “cookies” are small text files your browser can store on your access device. These text files contain a characteristic string chain, which uniquely identifies your browser when you come back to our website. Storage of a cookie file is also called “setting a cookie”. Cookies can be set both by our website and by external web services.
The legal basis for the processing of personal data
Art. 6 para. 1 lit. f (legitimate interest) and/or Art. 6 para. 1 lit. a and/or Art. 9 para. 2 lit. a of the GDPR (consent).
The relevant legal basis can be seen in the cookie table further below.
In general, the legitimate interest for cookies set based on a legitimate interest is to guarantee functionality of our website and the embedded services (technically required cookies). It may also be possible that cookies increase user-friendliness and allow for a more individual addressing. We have weighed up your interests against our interests.
By using cookie technology, we can identify, analyse and track individual website users if the visitor has consented to the use of cookies as per Art. 6 para. 1 lit. a of the GDPR.
Purpose of data processing
The cookies are set by our website and/or external web services to achieve full functionality of our website, to improve user-friendliness and to pursue the purpose stated with your consent. Cookie technology allows us to recognise individual visitors based on pseudonyms, such as an individual or random ID, so that we can offer more individualised services. Details are listed in the following table.
Length of time in storage
The cookies listed in the following are stored in your browser until they are deleted or, in case of a session cookie, until the session has expired. Details are listed in the following table:
| Cookie-Name | Server | Provider | Purpose | Legal basis | Duration of storage | Type |
| _pk_id | www.mkm-partner.de | Website provider | This cookie is used to recognize visitors (e.g. if the visitor already has an active session) and to calculate unique visitors. | Consent | approx. 13 months | Analytics |
| _pk_ses | www.mkm-partner.de | Website provider | This cookie is used to calculate the number of visits by assigning an ID to each new visitor and uniquely assigning the visitor. | Consent | approx. 31 minutes | Configuration |
| pll_language | www.mkm-partner.de | Website provider | This cookie is used to determine the origin of the visitor by means of the IP address and to set the language of the website based on the origin of the page access. | Consent | approx. 12 months | Comfort |
| JSESSIONID | appload.scopevisio.com | Website provider | This cookie assigns an ID to the site visitor and collects statistical data on the site visits of the site visitor. This serves to individualize the advertising displayed to the visitor. | Consent | Session | Marketing |
| SV_prod-ws | appload.scopevisio.com | Website provider | This cookie assigns an ID to the site visitor and collects statistical data on the site visits of the site visitor. This serves to individualize the advertising displayed to the visitor. | Consent | Session | Marketing |
Sofern wir Cookies aufgrund ihrer ausdrücklichen Einwilligung gesetzt haben, können Sie jederzeit ihre Einwilligung im Rahmen unseres Cookiebanners widerrufen. Ihre Einstellungen können Sie hier anpassen.
Right to object, withdrawal of consent and erasure
You can set your browser as you wish so that the setting of cookies is generally prevented. You may then decide on a case-by-case basis whether you accept a cookie or generally accept cookies. Cookies can be used for different purposes, e.g. to recognise whether your access device is already connected to our website (permanent cookies) or to save last viewed offers (session cookies). If you have given us your explicit consent to the processing of your personal data, you may withdraw this consent any time. Please note that this does not affect the lawfulness of the processing carried out on the basis of your consent until you withdraw your consent.
Data safety and data protection, communication by e-mail
Your personal data will be protected by technical and organisational measures during collection, storage and processing so that third parties cannot access them. In case of unencrypted communication by e-mail, data security during transfer to our IT systems cannot be guaranteed in full by us so that we recommend to send information with a high need for confidentiality in encrypted form or by post.
Automatic e-mail archiving
- Scope for processing personal data
We explicitly inform you that our mailing system uses an automated archiving process. All incoming and outgoing e-mails are digitally archived in tamper-proof form.
- The legal basis for the processing of personal data
Art. 6 para. 1 lit. c of the GDPR (for compliance with a legal obligation). Our legal obligation is to comply with tax and commercial law (e.g. §§ 146 and 147 of the German Tax Code, §§ 238 and 257 of the German Commercial Code).
- Purpose of data processing
The purpose of archiving is to comply with tax law (e.g. §§ 146 and 147 of the German Tax Code – duty to archive e-mails of relevance under tax law) and commercial law (e.g. §§ 238 and 257 of the German Commercial Code – duty to archive commercial correspondence).
- Length of time in storage
Our e-mail communication is stored until retention periods under tax and commercial law have expired. The retention period can be up to 10 years.
- Right to object and to erasure
You may object to processing any time under Art. 21 of the GDPR and request erasure of data pursuant to Art. 17 of the GDPR. The rights you are entitled to and how to enforce them is described further below in this Privacy Policy.
- Handling application documents
E-mails sent to career@mkm-partner.de are excluded from archiving. If you have questions regarding our e-mail archiving system, please do not hesitate to contact our data protection officer. We also inform you that we only accept applications in PDF format. Zipped files (WinZip, WinRAR, 7Zip, etc.) are filtered out by our security systems and not delivered. We do not consider applications in Word format and other formats and delete them unread. Please note that applications sent by e-mail in unencrypted form may be opened by third parties before they are received by our IT systems. We assume that we may answer unencrypted application e-mails also in unencrypted form. If you do not wish this, please inform us accordingly in your application e-mail.
Right to access and rectification – erasure of data and right to restriction of processing – withdrawal of consent – right to object
Right to access
You are entitled to request a confirmation of whether we process your personal data. If this is the case, you have the right to access the information mentioned in Art. 15 para. 1 of the GDPR as long as the rights and freedoms of others are not adversely affected (see Art. 15 para. 4 of the GDPR). We are glad to provide you a copy of this data.
Right to rectification
Under Art. 16 of the GDPR, you are entitled to obtain the rectification of inaccurate personal data (such as address, name, etc.) any time. You may also request any time to have incomplete personal data completed. A corresponding adjustment is made immediately.
Right to erasure
Based on Art. 17 para. 1 of the GDPR, you are entitled to request from us the erasure of your personal data if
- data are no longer required;
- there is no longer any legal ground for processing because you withdraw your consent;
- you object to the processing and there are not any legitimate grounds for the processing;
- your data have been unlawfully processed;
- this is required for compliance with a legal obligation or a collection was based on Art. 8 para. 1 of the GDPR.
According to Art. 17 para. 3 of the GDPR, you do not have this right if
- processing is necessary for exercising the right of freedom of expression and information;
- your data have been collected on the grounds of a legal duty;
- processing is required for reasons in the public interest;
- data are required for the enforcement, exercise or defence of legal claims.
Right to restriction of processing
Under Art. 18 para. 1 of the GDPR, you have the right to restrict the processing of your personal data in certain cases.
This applies if
- the accuracy of the personal data is contested by you;
- processing is unlawful and you oppose the erasure;
- data are no longer required for the purpose of processing, but the collected data are used for enforcement, exercise or defence of legal claims;
- an objection to processing pursuant to Art. 21 para. 1 of the GDPR has been made and the verification whether the legitimate grounds of whom override is still pending.
Right to withdraw your consent
If you have given us your explicit consent to the processing of your personal data [Art. 6 para. 1 lit. f or Art. 9 para. 2 lit. a of the GDPR], you may withdraw it any time. Please note that this does not affect the lawfulness of the processing carried out on the basis of your consent until you withdraw your consent.
Right to object
Pursuant to Art. 21 of the GDPR, you have the right to object at any time to processing of your personal data, which were collected based on Art. 6 para. 1 lit. f GDPR (on the grounds of a legitimate interest). You only have this right if particular circumstances speak against storage and processing.
How do you exercise your rights?
You may exercise your rights any time by contacting us as follows:
MKM + PARTNER Rechtsanwälte PartmbB
Äußere Sulzbacher Straße 124 a
90491 Nuremberg
Germany
E-mail: info@mkm-partner.de
Phone: +49 911 669577-0
Fax: +49 911 669577-66
Right to data portability
Under Art. 20 of the GDPR, you have the right to have your personal data transferred to you. We provide your personal data in a structured, commonly used and machine-readable format. The data can either be transferred to you or a controller you specify.
On request, we provide you the following data acc. to Art. 20 para. 1 of the GDPR:
- data collected based on an explicit consent pursuant to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR;
- data we have received from you for the performance of a contract acc. to Art. 6 para. 1 lit. b GDPR;
- data having been processed in automated procedures.
We will transfer the personal data directly to a controller specified by you insofar as this is technically feasible. Please note that according to Art. 20 para. 4 GDPR we may not transfer data which adversely affect the rights and freedoms of others.
Right to complain to supervisory authority pursuant to Art. 77 para. 1 of the GDPR
Insofar as you suspect that your data are being processed unlawfully on our website, you may, of course, bring about a judicial clarification of the issue at any time. In addition, any other legal option is open to you. Irrespective of that, you may contact a supervisory authority based on Art. 77 para. 1 of the GDPR. You have a right to lodge a complaint pursuant to Art. 77 of the GDPR in the Member State of your habitual residence, place of work or place of the alleged infringement, i.e. you can choose the supervisory authority of one of the above-mentioned places. The supervisory authority with whom the complaint is lodged shall notify you of the status and outcomes of your complaint, including your right to an effective judicial remedy based on Art. 78 of the GDPR.