Contents
Privacy policy when visiting our website
Privacy policy when visiting our website
1. Introduction
With the following information, we would like to give you as the "data subject" an overview of how we process your personal data and your rights under data protection laws. In principle, our website can be used without entering personal data. If you would like to use our company's special services via our website, processing of personal data may be necessary. If the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain your consent.
The processing of personal data, for example your name, address or email address, always takes place in accordance with the General Data Protection Regulation (GDPR) and in accordance with the country-specific data protection regulations applicable to the "PM GmbH Wirtschaftsprüfungsgesellschaft Steuerberatungsgesellschaft". With this data protection declaration we would like to inform you about the scope and purpose of the personal data that we collect, use and process.
We, handling the data, have implemented numerous technical and organizational measures to ensure the most complete protection possible for the personal data processed via this website. However, internet-based data transmissions can generally have security gaps, so that absolute protection cannot be guaranteed. For this reason, you are free to transmit personal data to us in alternative ways, for example by telephone or by mail.
2. Hosting and Content Delivery Networks (CDN)
This website is hosted by an external service provider (host). The personal data collected on this website is stored on the host's servers. These can be IP addresses, contact requests, meta and communication data, contract data, contact details, names, website access and other data that are generated via a website.
Our provider is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 Para. 1 lit. b GDPR) and in the interest of a safe, fast and efficient provision of our online offer by a professional provider (Art. 6 Para 1 lit.f GDPR).
Our provider will only process your data to the extent necessary to fulfill its performance obligations and to follow our instructions in relation to this data.
Closed contract for order processing
In order to guarantee data protection-compliant processing, we have closed a contract for order processing with our provider.
3. Responsible for data protection
PM GmbH Wirtschaftsprüfungsgesellschaft
Steuerberatungsgesellschaft
represented by the Managing Directors
Innere Wiener Straße 11 a
81667 Munich
E-Mail: info@pm-wpg.de
Tel.: +49 (89) 520 348-0
4. Data protection contact
You can reach our data protection officer as follows:
E-Mail: datenschutz@pm-wpg.de
You can contact our data protection officer at any time with any questions and suggestions regarding data protection.
5. Legal basis for processing
Art. 6 para. 1 lit. a GDPR is the legal basis for processing operations where we obtain consent for a specific processing purpose.
If the processing of personal data is necessary for the performance of a contract to which you are a party, as is the case, for example, with processing operations that are necessary for the delivery of goods or the provision of any other service or consideration, the processing is based on Art. 6 para. 1 lit. b GDPR. The same applies to such processing operations that are necessary to carry out pre-contractual measures, for example in cases of inquiries about our services.
If our company is subject to a legal obligation which requires the processing of personal data, such as for the fulfillment of tax obligations, the processing is based on Art. 6 Para. 1 lit. c GDPR.
In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor to our company were injured and his name, age, health insurance data or other vital information had to be passed on to a doctor, hospital or other third party. Then the processing would be based on Art. 6 Para. 1 lit. d GDPR.
Ultimately, processing operations could be based on Art. 6 Para. 1 lit. f GDPR. Processing operations that are not covered by any of the aforementioned legal bases are based on this legal basis if processing is necessary to safeguard the legitimate interests of our company or a third party, provided that the interests, fundamental rights and freedoms of the data subject do not outweigh them. Such processing operations are permitted to us in particular because they have been specifically mentioned by the European legislator. In this respect, he took the view that a legitimate interest could be assumed if you are a customer of our company (recital 47 sentence 2 GDPR).
6. Technology
6.1 SSL / TLS encryption
This site uses to ensure the security of data processing and to protect the transmission of confidential content, such as orders, login data or contact requests that you send to us as the operator, a SSL or a TLS encryption. You can recognize an encrypted connection by the fact that "https: //" appears in the address line of the browser instead of "http: //" and by the lock symbol in your browser line.
We use this technology to protect your transmitted data.
6.2 Data collection when visiting the website
If you only use our website for information purposes, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). Every time you or an automated system calls up a page, our website collects a series of general data and information. This general data and information is stored in the server's log files. The can be recorded
- browser types and versions used,
- the operating system used by the accessing system,
- the website from which an accessing system reaches our website (so-called referrer),
- the sub-websites that are accessed via an accessing system on our website,
- the date and time of access to the website,
- an internet protocol address (IP address).
When using this general data and information, we do not draw any conclusions about you personally. Rather, this information is needed to
- to deliver the contents of our website correctly,
- to optimize the content of our website and the advertising for it,
- to guarantee the permanent functionality of our IT systems and the technology of our website and
- To provide law enforcement agencies with the information necessary for law enforcement in the event of a cyber attack.
This data and information collected is therefore statistically evaluated by us on the one hand and also with the aim of increasing data protection and data security in our company in order to ultimately ensure an optimal level of protection for the personal data we process. The data of the server log files are stored separately from all personal data provided by a data subject for a period of two months.
The legal basis for data processing is Art. 6 Para. 1 S. 1 lit. f GDPR. Our legitimate interest follows from the data collection purposes listed above.
We hereby object to the use of contact data published within the framework of the imprint obligation for sending unsolicited advertising and information material. The operators of the pages expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, such as spam e-mails.
8. Use of cookies
We use technical cookies on our website. These are small files that your browser automatically creates and that are saved on your IT system (laptop, tablet, smartphone, etc.) when you visit our website.
Information is stored in the cookie, which results in connection with the specific device used. However, this does not mean that we are immediately aware of your identity.
The use of cookies serves on the one hand to ensure the use of our webpage more pleasant for you, but not to track the individual visits to our website. If you have any concerns in this regard, you can also set your browser in a way that it does not accept cookies.
9. Content of our webpage
9.1 Registration as a user
You have the option of registering on our website by providing personal data.
Which personal data are transmitted to us is determined by the respective input mask used for the registration. The personal data you enter will only be collected and stored for internal use by us and for your own purposes. We can arrange for the data to be passed on to one or more processors, for example a parcel service provider, who will also only use the personal data for internal use that is attributable to us.
By registering on our website, the IP address assigned by your Internet service provider (ISP), the date and the time of registration are also saved. This data is stored because the misuse of our services can only be prevented in this way and, if necessary, this data enables crimes committed to be investigated. In this respect, the storage of this data is necessary for our security. As a matter of principle, this data will not be passed on to third parties unless there is a legal obligation to pass it on or the passing on is used for criminal prosecution.
Your registration with voluntary provision of personal data also serves us to offer you content or services that, due to the nature of the matter, can only be offered to registered users. Registered persons are free to change the personal data provided during registration at any time or to have them completely deleted from our database.
We will provide you with information about which personal data is stored about you at any time on request. We also correct or delete personal data at your request, provided that there are no statutory retention requirements. The data protection officer named in this data protection declaration is available to the data subject as a contact person in this context.
9.2. Contact/Contact form
When contacting us (e.g. via contact form or email), personal data is collected. Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of answering your request or for contacting you and the associated technical administration. The legal basis for processing the data is our legitimate interest in answering your request in accordance with Art. 6 Para. 1 lit. f GDPR. If your contact is aimed at the conclusion of a contract, then an additional legal basis for the processing is Art. 6 Para. 1 lit. b GDPR. Your data will be deleted after the final processing of your request, this is the case if it can be inferred from the circumstances that the matter concerned has been finally clarified and provided that there are no statutory retention requirements.
9.3 Handling the data of applicants
We offer you the opportunity to apply to us (e.g. by email, post or via the online application form). In the following, we will inform you about the scope, purpose and use of your personal data collected during the application process. We assure that the collection, processing and use of your data is carried out in accordance with applicable data protection law and all other legal provisions and that your data is treated in strict confidence.
Scope and purpose of data collection
If you send us an application, we process your associated personal data (e.g. contact and communication data, application documents, notes in the context of job interviews, etc.), as far as this is necessary to decide on the establishment of an employment relationship. The legal basis for this is § 26 BDSG-new under German law (initiation of an employment relationship), Art. 6 para. 1 lit. b GDPR (general contract initiation) and - if you have given your consent - Art. 6 Para. 1 lit. a GDPR. The consent can be revoked at any time. Your personal data will only be passed on within our company to people who are involved in processing your application.
If the application is successful, the data submitted by you will be processed on the basis of § 26 BDSG-new and Art. 6 para. 1 lit. b GDPR stored in our data processing systems for the purpose of proceeding the employment relationship.
Storage time of the data
If we cannot make you a job offer, you reject a job offer or withdraw your application, we reserve the right to store the data transmitted by you based on our legitimate interests (Art. 6 Para. 1 lit.f GDPR) for up to 6 months to be kept with us from the end of the application process (rejection or withdrawal of the application). The data is then deleted and the physical application documents are destroyed. The storage serves in particular for verification purposes in the event of a legal dispute. If it can be seen that the data will be required after the 6-month period has expired (e.g. due to an impending or pending legal dispute), deletion will only take place if the purpose for further storage no longer applies.
Longer storage can also take place if you have given the appropriate consent (Art. 6 Para. 1 lit. a GDPR) or if there are legal retention obligations to prevent deletion.
Inclusion in the applicant pool
If we do not make you a job offer, you may have the opportunity to be included in our applicant pool. In the case of admission, all documents and information from the application are transferred to the applicant pool to contact you in the event of suitable vacancies.
Admission to the applicant pool is based solely on your express consent (Art. 6 Para. 1 lit. a GDPR). The submission of consent is voluntary and has no relation to the ongoing application process. The person concerned can withdraw their consent at any time. In this case, the data from the applicant pool will be irrevocably deleted, provided there are no legal reasons for storage.
The data from the applicant pool will be irrevocably deleted at the latest two years after consent has been given.
10. Inquiry by email, phone or fax
If you contact us by email, phone or fax, your request, including all personal data resulting from it (name, request), will be stored and processed by us for the purpose of processing your request. We will not pass on this data without your consent.
This data is processed on the basis of Art. 6 Para. 1 lit. b GDPR, if your request is related to the fulfillment of a contract or is necessary to carry out pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of inquiries addressed to us (Art. 6 Para. 1 lit. GDPR) or on your consent (Art. 6 Para. 1 lit. was queried.
The data you send to us via contact requests will remain with us until you request us to delete it. Revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory statutory provisions -especially statutory retention periods- remain unaffected.
Registration on this website
You can register on this website to use additional functions on the site. We only use the data entered for the purpose of using the respective offer or service for which you have registered. The mandatory information requested during registration must be given in full. Otherwise we will reject the registration.
For important changes, such as the scope of the offer or for technically necessary changes, we use the email address provided during registration to inform you via email.
The data provided during registration is processed for the purpose of implementing the user relationship established by the registration and, if necessary, for initiating further contracts (Art. 6 Para. 1 lit. b GDPR).
The data collected during registration will be stored by us as long as you are registered on this website and will then be deleted. Statutory retention periods remain unaffected.
11. Your rights regarding personal data
11.1 Right to confirmation
You have the right to request confirmation from us as to whether your personal data is being processed.
11.2 Right to information Art. 15 GDPR
You have the right to receive free information from us at any time about the personal data stored about you and a copy of this data in accordance with the statutory provisions.
11.3 Right to rectification Art. 16 GDPR
You have the right to request the correction of incorrect personal data concerning you. You also have the right to request the completion of incomplete personal data, taking into account the purposes of the processing.
11.4 Deletion Art. 17 GDPR
You have the right to ask us to delete your personal data immediately, provided that one of the reasons stipulated by law applies and if the processing or storage is not necessary.
11.5 Limitation of processing Art. 18 GDPR
You have the right to request that we restrict processing if one of the legal requirements is met.
11.6 Transfer of data Art. 20 GDPR
You have the right to receive the personal data concerning you, which you have provided to us, in a structured, common and machine-readable format. You also have the right to transfer this data to another controller without hindrance from us, to whom the personal data has been provided, provided that the processing is based on consent in accordance with Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR or on a contract in accordance with Art. 6 Para. 1 lit. b GDPR is based and processing is carried out using automated processes, unless the processing is necessary for the performance of a task that is in the public interest or in the exercise of official authority that has been transferred to us.
Furthermore, when exercising your right to data transfer in accordance with Art. 20 Para. 1 GDPR, you have the right to have the personal data transferred directly from one responsible person to another responsible person, insofar as this is technically feasible and if not the rights and freedoms of others are compromised.
11.7 Objection to Art. 21 GDPR
You have the right, for reasons that arise from your particular situation, at any time against the processing of your personal data, which is based on Art. 6 Para. 1 lit. e (data processing in the public interest) or f (data processing based on a balance of interests) GDPR, to object.
This also applies to profiling based on these provisions within the meaning of Art. 4 No. 4 GDPR.
If you file an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
In individual cases, we process personal data in order to operate direct mail. You can object to the processing of personal data for the purpose of such advertising at any time. This also applies to profiling insofar as it is connected to such direct advertising. If you object to processing for direct marketing purposes, we will no longer process the personal data for these purposes.
In addition, you have the right, for reasons that arise from your particular situation, to object to the processing of personal data relating to you that is carried out by us for scientific or historical research purposes or for statistical purposes in accordance with Article 89 (1) GDPR unless such processing is necessary to serve the public interest.
You are entitled to exercise your right to object in connection with the use of information society services, regardless of Directive 2002/58 / EC, using automated procedures that use technical specifications.
11.8 Revocation of consent under data protection law
You have the right to revoke your consent to the processing of personal data at any time with future effect.
11.9 Complaint to a supervisory authority
You have the right to complain to a data protection supervisory authority about our processing of personal data.
12. Routine storage, deletion and blocking of personal data
We process and store your personal data only for the period of time necessary to achieve the storage purpose or if this was provided for by the legal regulations to which our company is subjected to.
If the storage purpose no longer applies or the required storage period expires, the personal data will be routinely blocked or deleted in accordance with the statutory provisions.
13. Currentness and change of the data protection declaration
This data protection declaration is currently valid as of February 2020.
Due to the further development of our websites and offers or due to changes in legal or official requirements, it may become necessary to change this data protection declaration. You can access and print out the current data protection declaration at any time on the website at "https://www.pm-wpg.de/de/das_sind_wir/datenschutz".
