Data protection

I. Data protection information

SITTIG LAW
Lawyer Markus Sittig
Martinistrasse 11
20251 Hamburg
Phone: +49 (0) 40 808 125 550
Fax: +49 (0) 40 808 125 559
E-Mail: [email protected]
Your personal data will be treated confidentially in compliance with data protection regulations. Regardless of your business relationship with us or the context in which you contact us, we would like to explain below how we process your data and ensure its protection. We ask for your understanding that, for reasons of better readability, we have omitted gender-specific terms and used male personal nouns as representatives for all genders.

1. general information on data processing

The controller responsible for data processing is

2. purposes and legal bases of data processing

The purposes of data processing at SITTIG LAW are the provision of services, fulfillment of contracts, fulfillment of legal obligations, provision of information about SITTIG LAW's services, and the possibility to contact us. Furthermore, personal data are processed based on one of the following legal grounds:

• Art. 6 para. 1 lit. a GDPR (consent).
• Art. 6 para. 1 lit. b GDPR (fulfillment of a contract and implementation of pre-contractual measures).
• Art. 6 para. 1 lit. c GDPR (fulfillment of a legal obligation under applicable law).
• Art. 6 Para. 1 lit. f GDPR (Safeguarding of legitimate interests), unless fundamental freedoms and fundamental rights as well as
  the interests of the data subject prevail. Our legitimate interests include, in particular, our
  business interest in information security on our website and in our systems
  ensure that we inform you about our range of services and enforce our legal claims as well as compliance with other legal provisions.

3. recipients of data

In our data processing, we utilize service providers who are bound by confidentiality and data protection obligations. These categories of recipients include: IT service providers, software providers,
Hosting companies, data destruction companies. Furthermore, recipients of data may include: tax authorities, social security institutions, banks, and external consultants. Data will only be passed on to authorities if there are overriding legal provisions. Data will only be transferred to third countries if the conditions stipulated in Art. 44 et seq. of the GDPR are met.

4. storage period and deletion of personal data

We only process personal data for as long as it is necessary to achieve the purpose. If the purpose of processing ceases to apply, we delete the data in accordance with the provisions of Art. 17 GDPR. After the purpose of processing ceases to apply, we store the data in accordance with the statutory retention periods. Storage beyond this period only occurs if an exception according to Art. 17 para. 3 GDPR exists.

5. your rights to information, rectification, erasure, objection and data portability as well as your right to lodge a complaint

You can exercise your right to access, rectify, and erase your data at any time. Simply contact us using the methods described above. If you request data erasure but we are still legally obligated to retain it, access to your data will be restricted (blocked). The same applies in the case of an objection. You can exercise your right to data portability insofar as the technical possibilities are available to the recipient and us. If we have obtained your explicit consent for data processing, you can withdraw your consent at any time with future effect. The contact options described above are available to you for this purpose. You also have the option to file a complaint with a data protection supervisory authority.

6. obligation to make available

Without correct information from you, we cannot provide our services, fulfill contractual agreements, or process your request. Therefore, it is your duty to provide us with accurate information to the best of your knowledge.

7. up-to-dateness and amendment of this data protection information

The effective date of these privacy notices is January 4, 2024. The privacy notices are regularly reviewed and updated. The current version of our privacy notices can be accessed at: https://sittig.law/datenschutz/.

II Data protection information for visitors to the website

In providing our website, we observe the requirements of the EU General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG), the Telemedia Act (TMG), and the Act on Data Protection and Privacy in Telecommunications and Digital Services (TDDDG). The purpose of data processing on this website is to provide information about our company's products and services, coupled with the ability for users to contact the relevant points of contact within the company in a targeted manner.

When you visit the website, a connection is established with your browser. The following information collected during this process is temporarily stored in system files and automatically recorded: the IP address of your device, the date and time of access, the name and URL of files accessed, the website from which access is made or by which you were directed to our site (referrer URL), the browser used, and if applicable, the operating system of your device, as well as the name of your provider.

The data mentioned will be processed by us for the purposes of a smooth connection setup and system security. Any connection data generated will be automatically deleted. If the website is misused, log data, the further retention of which is necessary for evidentiary purposes, will be stored until the incident is clarified.

Use of storage technologies on your end device

This website uses storage technologies („cookies“ and/or browser storage) to enable us to store your website usage. The information generated by cookies about your use of this website is used to pursue the purpose of data processing in compliance with the respective legal bases.

If storage technologies are necessary on your end device for the functionality of the website, we will use these technologies based on our legitimate interests. The legal basis for data processing is then Art. 6(1)(f) GDPR (legitimate interest in establishing a connection to and displaying our website) in conjunction with Section 25(2) No. 2 TDDDG. The cookies will be deleted at the end of the session.

If cookies are used that are not necessary for the operation of the website, we ask for your consent in advance. The legal basis for data processing is then Art. 6 para. 1 lit. a GDPR in conjunction with Section 25 para. 1 TDDDG.
The cookies will be deleted within 2 years at the latest. You can prevent the installation of cookies by adjusting your browser software settings; however, we would like to point out that in this case you may not be able to fully use all functions of this website. Data collection is anonymized; the data collected cannot be traced back to you personally.

Data security/encryption

This website uses „Hypertext Transfer Protocol Secure“ (https). The connection between your browser and our server is encrypted.

Google Tag Manager

For the control of Google Services, we use the „Google Tag Manager“ from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This is used to manage Google services on our site; no
Data processing through Google Tag Manager.

III Data processing in legal advice

The processing of personal data in the context of legal advice is carried out for the performance of a contract based on Art. 6 para. 1 lit. b GDPR.

If you express interest in a business relationship with us, we will process your data for the purpose of initiating the contractual relationship based on Art. 6 para. 1 lit. b GDPR. If you are in contact with us as a business partner, we will process personal data for the performance of our contractual agreements with you based on Art. 6 para. 1 lit. b GDPR and based on our legitimate interests according to Art. 6 para. 1 lit. f GDPR in maintaining our business relationships.

We process personal data only as long as is necessary to achieve the purposes. If the purpose of processing ceases to exist, we will delete the data in accordance with the provisions of Art. 17 GDPR. After the purpose of processing ceases to exist, we will store the data in accordance with the statutory retention periods. Storage beyond this is only carried out if an exception according to Art. 17 para. 3 GDPR exists.

IV. Data processing in the application process

When you apply to us, we process your data in the context of establishing an employment relationship based on Art. 88 (1) GDPR in conjunction with Section 26 of the German Federal Data Protection Act (BDSG). Your data will not be shared with other companies. Data will only be shared with authorities if there are overriding legal provisions.

Your data will be stored for the duration of the application process. If you are hired, your application data will be stored with us for the duration of your employment. If your application is rejected, we will retain your data for an additional six months on a legal basis and then delete it. For unsolicited applications or if you agree to have your data stored for longer for a potential future position, we will retain your data until you withdraw your consent or for a maximum of two years.

V. Data protection information about our Instagram presence

The purpose of data processing on our Instagram presence is to provide information about our services, coupled with the opportunity for users to interact with us in a targeted manner. The legal basis for data processing is our legitimate interest based on Art. 6 para. 1 lit. f GDPR. Our legitimate interest is particularly our business interest in sharing information about our law firm with interested parties, clients, applicants, and third parties.
share and maintain contact with them.

Instagram is a service provided by Meta Platforms Ireland Ltd. An agreement for joint responsibility has been concluded with Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, which you can access here:

https://www.facebook.com/legal/terms/dataprocessing

https://www.facebook.com/legal/terms/page_controller_addendum

Meta Platforms Ireland Ltd. bears primary responsibility under the EU General Data Protection Regulation (GDPR). You can find Instagram's Data Policy here:

https://help.instagram.com/155833707900388/?helpref=hc_fnav&bc[0]=Instagram-Hilfe&bc[1]=Datenschutz%20und%20Sicherheitsbereich

It is not ruled out that data from users will be processed on systems outside the European Union. Data will only be transferred to third countries if the requirements of Articles 44 et seq. of the GDPR are met.

For the operation of the fan page, we are supported by service providers who have been specifically obligated to confidentiality and data protection. Data will only be passed on to authorities if there is a prevailing
Legislation.

If we publish image and sound recordings of individuals, this will be done with their consent (legal basis: Art. 6(1)(a) GDPR) or based on a contractual assignment of usage rights (legal basis: Art. 6(1)(b) GDPR). If your rights need to be asserted against Meta Platforms Ireland Ltd., we will forward your request to Meta Platforms Ireland Ltd.

Use of Instagram Insights

We run ads on Instagram and use Instagram Insights to evaluate our target audience's behavior when interacting with our page. The precise targeting of ads to our audience is a legitimate interest of our company. Instagram users are informed about this; the responsibility for data collection lies primarily with Meta Platforms Ireland Ltd. Overriding interests of the users (display of individually targeted advertising) are not predominant. The legal basis for us is Art. 6(1)(f) GDPR.

VI Data protection information about our TikTok presence

TikTok is a video portal that is jointly operated for persons established in the European Economic Area by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380 Ireland, and TikTok Information Technologies UK Limited („TikTok UK“).

The purpose of data processing on our TikTok account is to provide information about products, services, and news, along with the opportunity for users to interact with us in a targeted manner. The legal basis for data processing is Art. 6(1)(f) GDPR. Our legitimate interest is particularly our economic interest in sharing information with and communicating with our users.

Our TikTok presence is not intended for individuals under 16 years of age. We request that individuals under 16 years of age do not provide us with any personal data. If we become aware that we have collected personal data from individuals under 16 years of age, we will take steps to delete that data as quickly as possible. If you become aware that a user of our website is younger than 16 years of age, please contact us via [email protected] Contact us. We will treat this information with the strictest confidence.

If we publish images and videos of individuals, this is done with consent (legal basis: Art. 6(1)(a) GDPR), based on a contractual agreement (legal basis: Art. 6(1)(b) GDPR), and in exceptional cases, based on legitimate interests (legal basis: Art. 6(1)(f) GDPR in conjunction with Section 23(1) No. 3 of the German Copyright Act).

Use of TikTok for Business Insights

We use a business account that allows us to create or place advertising or sponsored content on TikTok-operated websites. This enables us to statistically evaluate your interaction with our content. The precise targeting of advertising is a legitimate interest of our company. The primary responsibility for data collection lies with TikTok Technology Limited („TikTok Ireland“) and TikTok Information Technologies UK Limited („TikTok UK“). Overriding legitimate interests of users (display of individual, target group-optimized advertising) are not predominant. The legal basis for us is Art. 6 (1) lit. f GDPR.

The processing of personal data by TikTok

When visiting our TikTok page and its content, TikTok automatically collects data such as your IP address, as well as other information stored in cookies on your PC. TikTok also stores information about its users' devices (e.g., advertising ID). If you are currently logged into TikTok, a cookie with your TikTok ID will be present on your device. This enables TikTok to track which pages you have visited and how you have used them. Furthermore, TikTok processes data that you voluntarily provide (e.g., name and username, email address, phone number, contacts, and direct messages). You have the option to restrict the processing of your data by TikTok. To do this, you can open the general settings of your TikTok account and change your privacy settings. You can control and customize your privacy settings here:

https://support.tiktok.com/de/account-and-privacy/account-privacy-settings

To get in touch with TikTok, you can follow this link:

https://www.tiktok.com/legal/impressum?lang=de-DE

Third country transfer

The data collected about you in this context will be processed by TikTok Technology Limited and TikTok Information Technologies UK Limited and transferred to countries outside the European Union. TikTok relies on the EU standard contractual clauses for this.

Information regarding the data processing activities carried out by TikTok Technology Ltd. and the corresponding purposes pursued can be found in TikTok's Privacy Policy. The Privacy Policy can be accessed here:

https://www.tiktok.com/legal/new-privacy-policy?lang=de#legal-base

In case of doubt, all companies within the TikTok group have access to the stored data. If you need to assert your rights against TikTok Technology Limited and TikTok Information Technologies UK Limited, we will forward your request to the responsible parties. Further information can be found here under „Your Rights and Choices“:

https://www.tiktok.com/legal/page/eea/new-privacy-policy/de-DE#legal-base

Duration of storage and deletion of data

Your personal data will be deleted by us if the purpose ceases. We have no influence on storage by TikTok. Your data will be stored for the duration of processing within the scope of your visit to our TikTok page; if statutory provisions exist, the data will be retained until the end of these provisions and then deleted.