1. Name and contact details of the controller and the company Data Protection Officer
This Privacy Statement applies to data processing by:
ZENK Rechtsanwälte Partnerschaft mbB (in the following: ZENK), Reinhardtstraße 29, D-10117 Berlin Email: email@example.com or firstname.lastname@example.org Phone: +49 (0)30 – 247574-0 Fax: +49 (0)30 – 2424555
ZENK’s Data Protection Officer can be contacted at the above address in Berlin, attn.: Dr Claudia Voggenreiter, or at email@example.com.
2. Collection and storage of personal data, as well as type and purpose of its use
We collect the following information when we are retained by you:
- salutation, first name, last name;
- a valid email address;
- telephone number (landline and/or mobile number);
- information that is necessary for the exercise and defence of your rights within the framework of the mandate.
This data is collected in order to
- identify you as our client;
- advise and represent you appropriately as your legal counsel;
- correspond with you;
- invoice you for our services;
- settle any liability claims and to exercise any claims against you.
Data processing takes place on your request and is necessary according to Art. 6 paragraph 1 sentence 1 point (b) GDPR for the purposes as stated above in order to ensure appropriate management of the mandate and for the fulfilment of obligations set out in the contract for legal assistance.
The personal data that is collected in order to retain our services is stored until the end of the statutory retention period for lawyers (6 years from the end of the calendar year in which the mandate came to an end) and then erased, except where we are required according to Article 6 paragraph 1 sentence 1 point (c) GDPR to retain the data for a longer period for compliance with retention and documentary obligations under fiscal or commercial law (set out in the Commercial Code (HGB), Criminal Code (StGB) or Fiscal Code (AO)) or where you have consented to a longer retention period pursuant to Art. 6 paragraph 1 sentence 1 point (a) GDPR.
3. Transfer of data to third parties
Your data is not transferred to third parties, except for the purposes stated in the following:
- Your personal data will be transferred to third parties where it is necessary according to Art. 6 paragraph 1 sentence 1 point (b) GDPR for the fulfilment of the contract for legal assistance with you. This includes, in particular, the transfer of data to the opposing party and their representatives (especially their legal counsel), as well as to courts and other public authorities for the purposes of correspondence and the exercise of rights. The third party is only entitled to use the data for the purposes set out above.
- Where we are required to reimburse you for costs, any bank data that you communicate to us will be passed on by our accounting department to the payment services provider commissioned for these transactions.
- Where you have consented to the receipt of client information (e.g. a newsletter) and invitations, your email address will be passed on to an external service provider to manage the forwarding of this information on our behalf.
Lawyer-client privilege remains unaffected. Privileged information will only be transferred to third parties after consultation with you.
4. Rights of the data subject
You have the right:
- according to Art. 7 paragraph 3 GDPR to withdraw at any time the consent you have given to us. In this case we will no longer be permitted to continue processing the data that was based on your consent, effective for the future;
- according to Art. 15 GDPR to obtain information from us concerning the processing of your personal data. In particular, you have the right to obtain information on the purpose of processing, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the envisaged period for which the data will be stored, the existence of a right to rectification, erasure, restriction of processing or objection, the right to lodge a complaint, to obtain information on the source of the data where it was not collected by us, as well as the existence of automated decision-making, including profiling, as well as meaningful information on the details of any such procedures;
- according to Art. 16 GDPR to obtain rectification or completion without undue delay of any personal data stored by us;
- according to Art. 17 GDPR to obtain erasure of the personal data stored by us, except where the data is required for exercising the right of freedom of expression or information, for compliance with legal obligations, for reasons of public interest or for the establishment, exercise and defence of legal claims;
- according to Art. 18 GDPR to obtain restriction of processing of your personal data where the accuracy of the personal data is contested by you, processing is unlawful and you oppose erasure and we no longer require the data, but it is required by you for the establishment, exercise or defence of legal claims, or where you have objected to processing according to Art. 21 GDPR;
- according to Art. 20 GDPR to obtain a copy of your personal data, which you have provided to us, in a structured, commonly used and machine-readable format, or to obtain transfer of the data to another controller.
- according to Art. 77 GDPR to lodge a complaint with a supervisory authority. For this purpose, you may usually contact the supervisory authority at your habitual place of residence, your workplace or the domicile of our law firm.
5. Right to object
Where your personal data is processed based on a legitimate interest according to Art. 6 paragraph 1 sentence 1 point (f) GDPR, you have the right as set out in Art. 21 GDPR to object to the processing of your personal data on grounds relating to your particular situation.
Where you wish to exercise your right to objection, it is sufficient to send an email to firstname.lastname@example.org.