PRIVACY POLICY
We process your personal data in accordance with the statutory data protection regulations and this privacy policy.
CONTROLLER
The data protection controller responsible for processing your personal data on our website is Harlander Partner Rechtsanwälte GmbH, Bayerhamerstraße 14, 5020 Salzburg, office@harlander-partner.eu, Phone +43 5 7654-321.
COOKIES / LOCAL STORAGE
This website stores personal data and information in cookies, session storage, and local storage on the user’s PC. The processing is carried out on the legal basis specified for each service.
You can also specify in your web browser settings how the web browser handles cookies, session storage, and local storage, which storage operations are allowed or rejected, and for how long the data processing takes place.
HOSTING
For hosting our website, our online shop, and our web analysis, we use the following processors:
Service: Hosting
Processor: RAIDBOXES GmbH, Friedrich-Ebert-Straße 7, 48153 Münster, Germany, support@raidboxes.de, +49 251 1498 2000
Details: Imprint, Privacy Policy
SERVER LOG FILES
For the purpose of monitoring technical function and increasing the operational security of our web host, connection data is processed. The duration of processing is limited to 7 days.
The legal basis for data processing is the absolute technical necessity of a server log file as a fundamental data basis for error analysis and security measures within the scope of the “Website” service expressly requested by your access, in accordance with § 165 Para. 3 TKG in conjunction with Art. 6 Para. 1 lit. f GDPR.
The following personal data is stored:
- Timestamp (date and time of the hit)
- Type of user request
- User’s IP
- User’s referrer information (i.e., the source of access)
- User’s client (type of client, client version)
- User’s operating system (device, OS version of the device)
CONTACT FORM
On our website, there is the possibility to contact us directly through a contact form or to book an individual consultation appointment. After submitting the contact form, we process the personal data you entered for the purpose of processing your request based on the consent you gave by submitting the form in accordance with Art. 6 Para. 1 lit. a GDPR until revoked. There is no legal or contractual obligation to provide personal data. Failure to provide it only results in you not being able to transmit your request and us not being able to process it.
For appointment scheduling, we use the Calenso service from Braincept AG, Neuenkirchstrasse 19, 6203 Sempach, Switzerland. The transfer of data to Switzerland is based on Art. 45 GDPR in conjunction with the adequacy decision C(2000) 2304 of the European Commission.
WEB ANALYSIS SERVICES
As part of hosting, we process personal user data for the purpose of web analysis (search and analysis of errors on our website, evaluation of the use of our website, derivation of measures for future development of our website). The legal basis for data processing is the absolute technical necessity to provide and deliver the “Website” service expressly requested by you through your access, in accordance with § 165 Para. 3 TKG in conjunction with Art. 6 Para. 1 lit. f GDPR.
The data is not forwarded to third parties and is anonymized in the first processing step. Therefore, no storage of personal data takes place beyond the first processing step.
You can object to the processing of your personal user data by activating the Do-Not-Track option in your web browser. Our web analysis software respects this setting and does not process personal data when the Do-Not-Track setting is activated.
Alternatively, you can object to the processing of personal data by unchecking the following checkbox:
POSTAL DIRECT MARKETING
We further process the master data of our customers on the basis of further processing compatible with the original processing purpose for direct marketing in the form of addressed postal mailing of advertising that does not require consent until the addressed postal mailing of advertising is discontinued or until objection.
You have the right to object to the further processing of your personal data for direct marketing purposes. To do so, please send us a letter or an email to office@marketingrecht.eu.
In case of objection, your personal data will no longer be processed for direct marketing purposes.
The objection does not affect the lawfulness of data processed up to the point of objection.
AUDIO AND VIDEO SERVICES
On our website, we offer you the possibility to watch our YouTube videos directly through an iFrame embedding. After granting your consent according to Art. 6 Para. 1 lit. a GDPR, we enable the service provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland to collect personal data from you for the purpose of playing the video for the duration of your stay on the accessed website. We do not process or store the data collected by Google. Your consent is valid only until you leave the respective website and is not stored.
We use the following services:
Service: YouTube
Operator: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Privacy Policy: https://policies.google.com/privacy?gl=AT=en#intro
FACEBOOK FAN PAGE
During your visit to our Facebook fan page, personal data is collected and processed by the data protection controller jointly with Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Facebook”). For this purpose, a joint responsibility agreement has been concluded with Facebook. You can find more information about this agreement at: https://www.facebook.com/legal/terms/page_controller_addendum
The processing of your personal data is carried out to improve interactions with you and to evaluate their development. For this purpose, various key figures and statistics (Insight data) are made available to us. These include, for example
- general demographic and interest-related information about you (e.g., that an advertisement was viewed by a woman between 25 and 34 years old who lives in Madrid and is interested in software engineering)
- reactions, comments, and shared content
- video views and details about playback behavior
- or confirmations of which Facebook ad ultimately prompted you to make a purchase or take an action.
Data that personally identifies you (e.g., name or email address) is not transmitted to us as part of the joint processing. You can find more information about Page Insights data at: https://www.facebook.com/legal/terms/information_about_page_insights_data
This data is available to us for a period of 2 years after its collection.
The legal basis for processing your data is our legitimate interest (marketing) pursuant to Article 6(1)(f) GDPR. If you have given Facebook your consent for a data processing process, this consent constitutes the legal basis for this processing process pursuant to Article 6(1)(a) GDPR.
We would like to point out that as part of the data processing by Facebook, your personal data may be processed outside the European Economic Area. The legal basis for the data transfer to the USA is your consent pursuant to Art. 49(1)(a) in conjunction with Art. 6(1)(a) GDPR.
Facebook is primarily responsible for providing you with information about the joint processing and enabling you to exercise your rights under the GDPR. In your Facebook settings, you can learn more about these rights: https://www.facebook.com/settings?tab=your_facebook_information
You can find more information about the right to access and data portability at: https://www.facebook.com/help/contact/2032834846972583
You can find more information about the right to object at: https://www.facebook.com/help/contact/367438723733209
You can find more information about Facebook’s cookie and privacy policies at: https://www.facebook.com/about/privacy, https://www.facebook.com/policies/cookies/
RIGHTS OF DATA SUBJECTS
You have the right to access, rectification, erasure, and restriction of processing of personal data.
If the legal basis for processing your personal data is your consent or a contract concluded with you, you also have the right to data portability.
You have the right to withdraw any consent given for the processing of your personal data. The withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.
You have the right to object to the processing of your personal data for direct marketing purposes. In the event of an objection, your personal data will no longer be processed for direct marketing purposes.
Furthermore, you have the right to lodge a complaint with the supervisory authority. You can find more information about the supervisory authorities in the European Union here.
