Privacy Policy

Name and contact details of the controller

This Privacy Policy provides information about the processing of personal data on the company website of: Susanne E. Ritter, Steuerkanzlei Ritter, Eitel-Fritz-Str. 12, 14129 Berlin, buero@ritter-steuerkanzlei.de, Tel.: +49 30-804 98 49 30, Fax: +49 30-804 98 49 39

Scope and purpose of the processing of personal data

Accessing the website
When visiting this website ritter-steuerkanzlei.de, the internet browser used by the visitor automatically sends information to this website’s server and temporarily stores a log file. The following data concerning the visitor is stored without further input of the visitor until the file is automatically deleted:

  • IP address of the visitor’s device
  • date and time of access by the visitor
  • name and URL of the pages visited
  • website visited prior to the company website (so-called referral website)
  • browser and operating system on the visitor’s device, as well as the name of the access provider used by the visitor

This personal data is processed in compliance with Art. 6 (1)(1)(f) of the GDPR. The company has a legitimate interest in the data processing for the following purpose:

  • to establish a rapid connection to the company website
  • to allow for user-friendly operation of the website
  • to identify and ensure the security and stability of the systems and
  • to facilitate and improve administration of the website

The objective of the processing is not to gain information about the person visiting the website.

SSL encryption
In order to protect the security of your data during transmission, we use the latest encryption procedure (e.g. SSL) via HTTPS.

Use of Google Maps
This website utilises Google Maps API to visualise geographical information. When Google Maps is used, Google collects, processes and uses data concerning the usage of the map functions by visitors. For more information about data processing by Google, please see the privacy information provided by Google. You can also change your personal privacy settings in the Google Privacy Centre.
You can find detailed instructions concerning managing your own data in the context of Google products here.

 

Disclosure of data

Personal data is transferred to third parties if:

  • the data subject has expressly consented to this in line with Art. 6 (1)(1)(a) of the GDPR
  • the disclosure is necessary in compliance with Art. 6 (1)(1)(f) of the GDPR to enforce, exercise or defend legal claims and there is no reason to believe
  • that the data subject has an overriding legitimate interest in the non-disclosure of their data
  • there is a legal obligation to transfer the data in compliance with Art. 6 (1)(1)(c) of the GDPR, and/or
  • this is necessary to fulfil a contractual relationship with the data subject in compliance with Art. 6 (1)(1)(b) of the GDPRPersonal data is not passed onto third parties in any other case.

 

Cookies

This website uses so-called cookies. Cookies are data packets that are sent between the server of the company website and the visitor’s browser. They are stored by the device used (PC, laptop, tablet, smartphone etc.) when the website is visited. Cookies cannot damage the device in question. They do not contain any viruses or other malicious software. Cookies store information relating directly to the specific device in question. The company cannot gain any knowledge about the identity of the visitor to the website from a cookie.
Cookies are largely accepted in line with the default browser settings. Browser settings can, however, be configured to prevent cookies from being accepted on the device in question, or so a warning message appears before a new cookie is stored. It should, however, be noted that deactivating cookies can prevent some features of this website from working properly.
Cookies are used to make the company website more convenient to use. Session cookies can, for example, be used to see whether the visitor has already visited some pages on the website. Session cookies are automatically deleted upon leaving the website.
Temporary cookies are used to improve user-friendliness. They are stored on the visitor’s device for a temporary period. If the website is visited again, the cookie automatically detects that the visitor has already visited the page and which information was provided and settings made so the visitor does not need to repeat this process.
Cookies are also used to analyse visits to the website for statistical purposes and to improve the service provided. In the case of a return visit, these cookies make it possible to automatically detect if the website has already been accessed by the visitor. The cookies are automatically deleted after a specific period of time.
The data processed by the cookies is used for the aforementioned reasons of safeguarding the legitimate interests of the company in compliance with Art. 6 (1)(1)(f) of the GDPR.

 

Use of Google Analytics

Art. 6 (1)(1)(f) provides the legal basis for the use of analysis tools. Website analysis is a legitimate interest of our company and is used to statistically evaluate the use of our website for the continuous improvement of our company website and our services.
This website uses Google Analytics, a web analysis service by Google Inc. (hereinafter: Google). Google Analytics uses so-called “cookies”; text files, which are saved on your computer and allow for an analysis of your use of the website. The information generated by the cookie about your use of this website is generally transferred to a Google server in the USA and stored there. In the case of the activation of the IP anonymisation on this website, your IP address will still be shortened prior to this by Google within the member states of the European Union or in other contracting states of the convention about the European Economic Area. The full IP address will only be transferred to a Google server in the USA and shortened there in exceptional cases. Google uses this information on behalf of the operator of this website to analyse your use of the website, to compile reports about the website activities, and to provide further services related to the use of the website and the Internet in general. The IP address transferred from your browser as part of Google Analytics will not be merged with other data from Google.
This data processing is used to evaluate use of the website and to compile reports about activities on the website. Further associated services should then be provided based on the use of the website and the internet. The processing is a legitimate interest of the website operator.
You can prevent the storage of cookies through a setting on your web browser software. However, we would like to point out that if you turn off cookies, you will not be able to use all of the functions of this website to their full extent. In addition, you can prevent the gathering of the data generated by the cookie and relating to your usage of the website (including your IP address) by Google, as well as the processing of this data by Google. To do so, download and install the browser plugin from the following page: browser add-on to deactivate Google Analytics.
In addition or as an alternative to the browser add-on, you can click on this link to prevent tracking by Google Analytics on our website. This will place an opt-out cookie on your device. This will prevent the collection of data by Google Analytics for this website and for this browser for as long as this cookie is installed in your browser.

 

Your rights as a data subject

Insofar as your personal data is processed through visiting our website, you have the following rights as a “data subject” as described by the GDPR:

Information
You have the right to ask us for information regarding whether we are processing your personal data. There is no right to information if the provision of the desired information infringes confidentiality in line with § 57 of the Tax Advisory Act (StBerG) or if the information must be kept secret to protect an overriding legitimate interest of a third party. Despite this, there may be an obligation to provide the information if your interests override the interest in maintaining confidentiality, in particular in cases of impending damages. Furthermore, the right to information is excluded if the data is only stored because it may not be deleted due to legal or statutory retention periods or is used solely for the purposes of data backup and data protection control, insofar as providing the information would require a disproportionate amount of effort and the processing for other purposes is prevented by appropriate technical and organisational measures. Insofar as your right to information is not excluded and your personal data is processed by us, you can request details about the following information:

  • the purpose of processing
  • categories of the personal data that is processed
  • recipients or categories of recipients who are provided with your personal data, in particular recipients in third countries
  • if possible, the planned duration for which your personal data will be saved or, where this is not possible, the criteria for determining the retention period
  • the existence of a right to rectification or erasure or restriction of processing for your personal data or a right to object to this processing
  • the existence of a right to complain to a regulatory body for data protection
  • insofar as the personal data has not been collected from you the data subject, available information on the origin of the data
  • where applicable, the existence of automated decision-making including profiling and substantiated information about the involved logic and the scope and desired impact of automated decision-making
  • in the case of transfer to recipients in third countries, insofar as there is no decision by the EU Commission regarding the adequacy of the level of
  • protection in compliance with Art. 45 (3) of the GDPR, information about which suitable guarantees are provided regarding the protection of personal data in compliance with Art. 46 (2) of the GDPR.

Rectification and completion
If you ascertain that we hold incorrect personal data, you can request the immediate correction of this incorrect data. You can request completion in the case of incomplete personal data.

Erasure
You have a right to erasure (“right to be forgotten”), insofar as the processing is not required to exercise the right to freedom of expression, the right to information or to fulfil a legal obligation or to perform a task that is in the public interest and one of the following reasons applies:

  • The personal data is no longer required for the purposes for which it was processed.
  • The legal basis for the processing was solely your consent, which you have revoked.
  • You have objected to the processing of your personal data, which we have made public.
  • You have objected to the processing of personal data that we have not made public and there are no overriding legitimate reasons for the data processing.
  • Your personal data was processed unlawfully.
  • Your personal data must be deleted to fulfil a legal obligation that we must comply with.
  • There is no right to erasure if the deletion concerns legitimate non-automated data processing and is not possible due to the special type of storage or is only possible with a disproportionately high amount of effort and your interest in the deletion is low. In this case, the processing will be restricted in place of the data being deleted.

Restriction of processing
You can request a restriction of processing if one of the following reasons applies:

  • You contest the accuracy of the personal data. In this case, the restriction can be requested for the length of time it takes us to check the accuracy of the data.
  • The processing is unlawful, and you request the restriction of the use of your personal data rather than its erasure.
  • Your personal data is no longer needed by us for the purposes of processing; but is required to enforce, exercise of defend legal claims.
  • You have filed an objection in line with Art. 21 (1) of the GDPR. Restriction of processing can be requested until it has been established that our legitimate reasons override your reasons.

Restriction of processing means that your personal data is only processed with your consent or to enforce, exercise or defend legal claims, or to protect the rights of another natural or legal person or for reasons of substantial public interest. We are obligated to inform you prior to lifting the restriction.

Data portability
You have a right to data portability, insofar as the processing is based on your consent (Art. 6 (1)(1)(a) or Art. 9 (2)(a) of GDPR) or on a contract for which you are a contractual party and the processing is carried out by automated means. The right to data portability includes the following rights, insofar as this does not affect the rights and freedoms of others: you can request to be sent the personal data that you have provided to us in a structured, commonly used and machine-readable format. You have the right to transfer this data to another responsible party without hindrance by us. Insofar as it is technically feasible, you can request that we pass your personal data directly onto another responsible party.

Right to object
Insofar as the processing concerns Art. 6 (1)(1)(e) of the GDPR (processing for the performance of a task carried out in the public interest or in the exercise of official authority) or Art. 6 (1)(1)(f) of the GDPR (legitimate interests pursued by the controller or by a third party), you have the right, in line with reasons arising from your specific situation, to object to the processing of your personal data at any time. This also applies to profiling based on Art. 6 (1)(1)(e) or (f) of the GDPR. If you exercise your right to object we will no longer process your personal data, unless we can provide compelling and legitimate reasons for the processing, which override your interests, rights and freedoms, or the processing is to exercise, enforce or defend legal claims.
You can object to the processing of your personal data for the purposes of direct marketing at any time. This also applies to profiling, which is connected to this kind of direct marketing. Once this right to object has been exercised, we will no longer use your personal data for direct marketing purposes.
You can object by telephone, by email, by fax or by sending a letter to our company address, as provided at the beginning of this Privacy Policy.
Withdrawal of consent
You have the right to withdraw your consent at any time with effect for the future. You can withdraw your consent by telephone, by email, by fax or by sending a letter to our postal address. The revocation does not affect the legality of the data processing that has taken place on the basis of the consent prior to receipt of the revocation. Upon receipt of the revocation, the data processing that was solely based on your consent will be discontinued.

Complaints
If you believe that the processing of your personal data is unlawful, you can file a complaint with the regulatory body for data protection that is responsible for the area in which you live or work or for the area where the presumed infringement took place.

 

Status of and revisions to this Privacy Policy

This Privacy Policy was written on 25th May 2018. We reserve the right to update this Privacy Policy from time to time to improve data protection and/or to adapt to changes in practice or jurisprudence.