1. Name and contact details of the controller and the Data Protection Officer

This privacy policy applies to data processing by:

FGR Steuerberatungsgesellschaft mbH
Bölschestraße 27, 12587 Berlin, Germany
T +49 (0)30 200 53 72 0
F +49 (0)30 200 53 72 11
info@fgr-steuerberater.de

(hereinafter: “FGR”)

Our Data Protection Officer can be reached at the above postal address and at info@fgr-steuerberater.de.

2. Collection and storage of personal data; type and purpose of their use when using the website

The website www.fgr-steuerberater.de provides information about the site operator.

The collection of personal data (name, address, contact details, etc.) is not intended.

In all other respects, the following principles apply:

We process personal data of our users only insofar as this is necessary to provide a functional website and our content and services.

Processing of personal data of our users generally takes place only with the user’s consent. An exception applies in cases where obtaining consent in advance is not possible for factual reasons and processing is permitted by legal provisions.

When accessing the website operated by FGR (www.fgr-steuerberater.de), the browser used on your device automatically sends information to our website server. This information is stored temporarily in a so-called log file. The following information is collected without your intervention and stored until automatic deletion, which takes place after 30 days:

• IP address of the requesting computer,

• date and time of access,

• name and URL of the retrieved file,

• website from which the access occurs (referrer URL),

• amount of data transmitted in bytes,

• browser used and, where applicable, the operating system of your computer as well as the name of your access provider.

The data listed are processed for the following purposes:

• ensuring a smooth connection setup of the website,

• ensuring comfortable use of our website,

• evaluation of system security and stability, and

• for further administrative purposes.

The legal basis for data processing is Art. 6(1)(f) GDPR. Our legitimate interest follows from the purposes listed above. Under no circumstances do we use the collected data to draw conclusions about your identity.

In addition, we use cookies and, where applicable, analytics services when you visit our website. Details are set out in sections 4 and 5 of this privacy policy.

We do not collect any additional personal data on this website.

3. Disclosure of data

Your personal data will not be transferred to third parties for purposes other than those listed below. We only disclose your personal data to third parties if:

• you have given your explicit consent pursuant to Art. 6(1)(a) GDPR,

• the disclosure is necessary pursuant to Art. 6(1)(f) GDPR for the establishment, exercise, or defense of legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data,

• there is a legal obligation for disclosure pursuant to Art. 6(1)(c) GDPR, or

• it is legally permissible and necessary for the performance of a contract with you pursuant to Art. 6(1)(b) GDPR.

4. Cookies

We use cookies on our website.

Cookies are small files automatically created by your browser and stored on your device (laptop, tablet, smartphone, etc.) when you visit our site. Cookies do not damage your device, nor do they contain viruses, trojans, or other malware. The cookie stores information resulting from the specific device used. However, this does not mean that we thereby obtain direct knowledge of your identity.

We use cookies to make the use of our offering more pleasant for you. We use session cookies to recognize that you have already visited individual pages of our website. These are deleted automatically after you leave our site.

We also use temporary cookies to optimize user-friendliness, which are stored on your device for a defined period. If you revisit our site to use our services, it is automatically recognized that you have been with us before and which inputs and settings you made so that you do not have to enter them again.

We also use cookies to statistically record the use of our website and to evaluate it for the purpose of optimizing our offering (see section 5). These cookies enable us to automatically recognize that you have already been to our site when you visit again. These cookies are deleted automatically after a defined period.

The data processed by cookies are necessary for the purposes mentioned to safeguard our legitimate interests and those of third parties pursuant to Art. 6(1)(f) GDPR.

Most browsers accept cookies automatically. You can configure your browser so that no cookies are stored on your computer or a warning always appears before a new cookie is created. The complete deactivation of cookies may, however, result in you not being able to use all functions of our website.

5. Analytics tools

If we use analytics measures, they are implemented on the basis of Art. 6(1)(f) GDPR. The aim is a needs-based design and the ongoing optimization of our website. We also use such measures to statistically record the use of our website and evaluate it for optimization purposes. These interests are legitimate within the meaning of the provision cited.

We currently do not use any analytics tools.

6. Social media plug-ins

We do not use social plug-ins of the social networks Twitter, LinkedIn, or XING on our website.

7. Rights of the data subject

You have the right to:

• request access to your personal data processed by us pursuant to Art. 15 GDPR (including processing purposes, categories of data, categories of recipients, storage period, existence of rights to rectification, erasure, restriction or objection, the existence of a right to lodge a complaint, source of your data if not collected from you, and the existence of automated decision-making including profiling and, where applicable, meaningful information about the details involved);

• request rectification of inaccurate personal data or completion of incomplete data stored by us without undue delay pursuant to Art. 16 GDPR;

• request erasure of your personal data stored by us pursuant to Art. 17 GDPR, unless processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims;

• request restriction of processing of your personal data pursuant to Art. 18 GDPR if the accuracy of the data is contested by you, the processing is unlawful but you oppose erasure, we no longer need the data but you require them for legal claims, or you have objected to processing pursuant to Art. 21 GDPR;

• receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or request transmission to another controller pursuant to Art. 20 GDPR;

• withdraw consent once given at any time pursuant to Art. 7(3) GDPR with effect for the future; and

• lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR. As a rule, you can contact the supervisory authority of your habitual residence or place of work or the place of our registered office.

8. Right to object

Where your personal data are processed on the basis of legitimate interests pursuant to Art. 6(1)(f) GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR on grounds relating to your particular situation or where the objection is to direct marketing. In the latter case, you have a general right to object which will be implemented by us without specification of a particular situation.

To exercise your right of withdrawal or objection, it is sufficient to send an email to info@fgr-steuerberater.de.

9. Data security

During your website visit we use the commonly employed TLS/SSL protocol (Secure Socket Layer) in conjunction with the highest encryption level supported by your browser. As a rule, this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in your browser and by further browser properties.

We also use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or total loss, destruction, or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

10. Currency and amendments to this privacy policy

This privacy policy is currently valid and was last updated in January 2019. Due to the further development of our website and services or due to changed legal or regulatory requirements, it may become necessary to amend this privacy policy.