Data protection notice – website

This data protection notice provides information which personal data is processed when the user visits the website (www.acuris.de) of ACURIS Rechtsanwälte PartG mbB (“ACURIS”) and for what purposes.

1. Protocol data of the web server

ACURIS does not operate any web server of its own that would record IP addresses or other personal data of the users. The website is operated by the external service provider, ALL-INKL.COM – Neue Medien Münnich, owner: René Münnich, Hauptstraße 68, 02742 Friedersdorf (‘ALL-INKL.COM’).

Each time the ACURIS website is accessed, the ALL-INKL.COM web server automatically collects data from the user’s accessing device. The following data is collected:

• The IP address of the requesting device,
• the date and time the website was accessed,
• the time difference between the requesting host and the web server,
• the content of the enquiry or details of the retrieved file that was transmitted to the user
• the access status (successful transmission, error, etc.),
• the amount of data transferred in bytes,
• the website from which the user accessed the website
• the browser used by the user, the operating system, the interface, the language of the browser and the version of the browser software.

To protect against attacks and to ensure proper operation of the website, all access to the ACURIS website with the full IP address is temporarily and access-protected on a security system (firewall) of ALL-INKL.COM and automatically analyzed for possible risks. ALL-INKL.COM will only attempt to find out who is behind an IP address in the event of unlawful attacks or misuse of the services.

The data is stored on the web server of ALL-INKL.COM and in the log files of the web server. This data is not merged or stored together with other personal data of the user.

The temporary collection and storage of the data is technically necessary to enable delivery of the ACURIS website to the user’s end device. For this purpose, the user’s IP address must remain stored for the duration of the session. The data is stored in log files to ensure the functionality and the security of ALL-INKL.COM’s information technology systems. The data is not analyzed for marketing purposes.

The provision of the aforementioned data is based on an automated process that the user cannot select or deselect. The legal basis for the processing is Art. 6 (1) lit. f GDPR.

If the data is collected to provide the website, the data is deleted when the user’s session ends and the user closes the browser. If the data is stored in log files, ALL-INKL.COM deletes the log files after seven days at the latest. Any further storage and evaluation will only take place in exceptional individual cases and only for as long as and to the extent necessary, e.g. in the event of an attack on the information technology systems detected by ALL-INKL.COM. Data is not passed on to third parties or transferred to countries outside the EU or the EEA (so-called third countries).

2. Use of the e-mail functionality / Purpose of processing / Data categories / Legal basis

You may contact ACURIS via e-mail and, at your discretion, disclose more personal data than your e-mail address when writing us a message. How much and what kind of personal information you provide us with is left completely up to you.

Subject to deviating declarations, using the e-mail functionality constitutes your consent to the processing of personal data transferred to ACURIS for the purpose of contacting you, the user. Consequently, your consent within the meaning of Art. 6 (1) lit. a GDPR is the legal basis for the processing of data as described above.

You can revoke your consent to the processing of your personal data at any time. To do this you must inform ACURIS about your decision to revoke consent, using the contact data in paragraph 5 below.

Once you have revoked consent, ACURIS will no longer process your personal data.

Transfer of personal data to third parties

ACURIS does not transfer any personal data that has been collected via the e-mail functionality to third parties.

ACURIS cooperates with technical service providers (so-called “processors”), such as service providers for EDP/IT-applications, data destruction, marketing and website management. These service providers must only act under the instructions of ACURIS and are contractually bound to comply with applicable data protection requirements.

Data is not transferred to any countries outside the EU or the EEA respectively (so-called third countries). ACURIS does not cooperate with service providers in third countries.

Time limits for the deletion of data

Unless an explicit storage period has been indicated, data collected by ACURIS via the e-mail functionality is deleted as soon as it is no longer required for the purpose of processing (i.e. contacting the user).

Only if you commission ACURIS, personal data is further processed in order to fulfill a contract with you, the user (Art. 6 (1) lit. b GDPR). In this case, you will be informed separately about the processing of your personal data within the scope of the client-lawyer relationship when you commission ACURIS.

3. User rights

You have the following rights or claims respectively. We will immediately respond to any assertion, and asserting these rights or claims will not lead to any adverse effects for you.

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to object (Art. 21 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 et seq. GDPR)
• Right to data portability (Art. 20 GDPR)

You also have the right to file a complaint with a data protection authority.

4. Cookies

No cookies are used on the ACURIS website.

5. Controller

Controller for the purposes of data protection:

ACURIS Rechtsanwälte PartG mbB
Ludwigstraße 11
80539 Munich
Germany
Telefon: + 49 (0) 89 189 489 0
Telefax: + 49 (0) 89 189 489 15
E-mail: munich@acuris.de

Please use this address to assert any rights described in paragraph 5 or to revoke any consent given via the e-mail functionality.

The legal preconditions for the appointment of a corporate data protection supervisor are not fulfilled.

6. Supervisory authority

Bayerisches Landesamt für Datenschutzaufsicht (Bavarian Data Protection Authority) supervises the compliance with data protection laws in the private sector in Bavaria. Its contact data is:

Bayerische Landesamt für Datenschutzaufsicht
Promenade 18
91540 Ansbach
Deutschland

Postal address:
Postfach 1349
91504 Ansbach
Germany

Telefon: +49 (0) 981 18 00 93 – 0
Telefax: +49 (0) 981 18 00 93 – 800
E-mail: poststelle@lda.bayern.de

7. Amendment of the data protection declaration

ACURIS reserves the right to amend this data protection declaration if required in order to consider changed material or legal conditions.

Dated: September 2024