Privacy policy

Privacy policy on the use of the website

Privacy policy on the use of the website

Preamble

This privacy policy relates to the use of the website www.kleiner-law.com. In designing the technical conditions, great importance was given to meeting the standards of data protection law; in particular, the requirements of the DSGVO and the BDSG were implemented. The website is designed in compliance with the principles of data economy and transparency. We therefore also refrain from using cookies and tracking tools.

1. The name and contact details of the data controller and the contact details of the company data protection officer

This privacy policy applies to data processing by:

Person responsible: KLEINER Rechtsanwälte Partnerschaftsgesellschaft mbB (hereinafter: KLEINER),

Alexanderstr. 3
70184 Stuttgart, Germany
Email: stuttgart@kleiner-law.com
Phone: +49 711 601708-0
Fax: +49 711 601708-88

KLEINER’s data protection officer can be reached at:

Company Data Protection Officer
Alexanderstr. 3
70184 Stuttgart, Germany
or privacy@kleiner-law.com.

2. Basics

First of all, we would like to explain some basic terms and principles of data protection law for a better understanding of the data protection declaration:

  • “Personal data” (Art. 4 No. 1 GDPR) means any information relating to an identified or identifiable natural person (“data subject”). A person is identifiable if he or she can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, an online identifier, location data or by means of information regarding his or her physical, physiological, genetic, mental, economic, cultural or social identity characteristics. The identifiability can also be given by means of a linkage of such information or other additional knowledge. The origin, form or embodiment of the information is irrelevant (photographs, video or audio recordings may also contain personal data).
  • “Processing” (Art. 4 No. 2 GDPR) means any operation which involves the handling of personal data, whether or not by automated (i.e. technology-based) means. This includes, in particular, the collection (i.e. acquisition), recording, organisation, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment, combination, restriction, erasure or destruction of personal data, as well as the change of a purpose or intended use on which a data processing was originally based.
  • “Controller” (Art. 4 No. 7 GDPR) means the natural or legal person, public authority, agency, or other body which alone or jointly with others determines the purposes and means of the processing of personal data.
  • “Third party” (Art. 4 No. 10 GDPR) means any natural or legal person, public authority, agency, or other body other than the data subject, the controller, the processor and the persons who are authorised to process the personal data under the direct responsibility of the controller or processor; this also includes other group-affiliated legal entities.
  • “Processor” (Art. 4 No. 8 GDPR) is a natural or legal person, authority, institution or other body that processes personal data on behalf of the controller, in particular in accordance with the controller’s instructions (e.g. IT service provider). In terms of data protection law, a processor is in particular not a third party.
  • “Consent” (Art. 4 No. 11 GDPR) of the data subject means any freely given specific, informed and unambiguous indication of his or her wishes in the form of a statement or other unambiguous affirmative act by which the data subject signifies his or her agreement to the processing of personal data relating to him or her.

Personal data may only be processed if there is a legal basis for doing so. The possible legal bases are derived from Art. 6 (1) sentence 1 of the GDPR. According to this, the processing of personal data is only lawful if at least one of the following conditions is met:

  • Art. 6 para. 1 sentence 1 lit. a DSGVO: The data subject has given his/her consent to the processing of personal data concerning him/her for one or more specific purposes;
  • Art. 6 para. 1 sentence 1 lit. b DSGVO: the processing is necessary for the performance of a contract to which the data subject is party or for the performance of pre-contractual measures taken at the request of the data subject;
  • Art. 6 para. 1 sentence 1 lit. c DSGVO: processing is necessary for compliance with a legal obligation to which the controller is subject;
  • Art. 6 para. 1 sentence 1 lit. d DSGVO: processing is necessary to protect the vital interests of the data subject or another natural person;
  • Art. 6 para. 1 sentence 1 lit. e DSGVO: processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
  • Art. 6 para. 1 sentence 1 lit. f DSGVO: processing is necessary for the purposes of the legitimate interests of the controller or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data, in particular where the data subject is a child.

The storage of information in the end-user’s terminal equipment or access to information already stored in the terminal equipment is only permitted if it is covered by one of the following justifications:

  • Section 25 para. 1 TTDSG: If the end user has consented on the basis of clear and comprehensive information. Consent must be given in accordance with Art. 6 para. 1 sentence 1 lit. a DSGVO;
  • Section 25 para. 2 no. 1 TTDSG: If the sole purpose is to carry out the transmission of a message via a public telecommunications network or
  • Section 25 para. 2 no. 2 TTDSG: If the storage or access is absolutely necessary so that the provider of a telemedia service can provide a telemedia service expressly requested by the user.

3. Collection and storage of personal data and the nature and purpose of their use

(1) When visiting the website

When you visit our website www.kleiner-law.com, the browser used on your end device automatically sends information to our website server to enable the delivery of the website. This information includes, among other things:

  • IP
  • Date, time
  • Pages viewed
  • Protocols
  • Status code
  • Data volume
  • Referrer
  • User Agent
  • Hostname

This information is also stored for 60 days in a so-called log file in order to be able to detect brute force attacks and other manipulations and to be able to take countermeasures. The IP address is stored anonymised by one to three bytes.

Error logs, which record faulty page views, are deleted after seven days. In addition to the error messages, these contain the accessing IP address and, depending on the error, the accessed website.

The legal basis for this data processing (the processing of the aforementioned data including its storage in a log file) is Art. 6 para. 1 sentence 1 lit. f DSGVO, as we have a legitimate interest for the processing in each case.

The legitimate interest for processing the data for the purpose of delivering the website is to be able to provide you with the website and the information contained therein at your request. The legitimate interest for the temporary storage in a log file is to be able to protect our website from attacks and manipulations. A predominantly legitimate interest of the respective visitor is not recognisable; furthermore, only the IP address shortened by three bytes is stored.

You will find information on your right of objection in section 9.

Our website does not use cookies. Therefore, no cookies are set when you visit the website.

(2) For enquiries sent to our email addresses published on the website

For questions of any kind, we offer you the possibility to contact us by e-mail. In doing so, we obtain knowledge of the e-mail account from which the enquiry was made. Further information can be provided voluntarily.

Please bear in mind that unencrypted e-mails offer no protection against unauthorised access by third parties. For information on the transport encryption supported by our e-mail server, see section 11. You are welcome to contact us to discuss the transmission of confidential data in encrypted form.

This data processing, which is necessary to answer the enquiry, is carried out in accordance with Art. 6 para. 1  sentence 1 lit. f DSGVO on the basis of our legitimate interest in the processing. Our legitimate interest is to be able to answer the request.

You will find information on your right to object under point 9.

The personal data collected by us for contact enquiries will be deleted after the enquiry you have made has been dealt with.

If the data processing just described serves the purpose of initiating or executing a contract and is necessary for this purpose, it is also carried out on the basis of Art. 6 para. 1 sentence 1 lit. b DSGVO.

4. Host provider

We do not operate the server on which our website is stored (hosted) ourselves. We have commissioned a so-called host provider, who acts as a processor according to Art. 28 DSGVO on the basis of a processing contract and processes data for us. In doing so, the host provider has access to all data collected in accordance with section 3 (1) (data when the page is called up and log files).

Our host provider is:

Mittwald CM Service GmbH & Co. KG
Königsberger Straße 4-6
32339 Espelkamp
Phone: +49-5772-293-100

5. Disclosure of data

Personal data is not transferred to third parties for purposes other than those listed below.

We will only share your personal information with third parties if:

  • you have given your express consent in accordance with Art. 6 para. 1 sentence 1 lit. a DSGVO (for revocation of such consent, see section 10),
  • the disclosure is necessary in accordance with Art. 6 para. 1 sentence 1 lit. f DSGVO for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data,
  • there is a legal obligation for the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. c DSGVO, as well as
  • this is legally permissible and necessary according to Art. 6 para. 1 sentence 1 lit. b DSGVO for the processing of contractual relationships with you.

In any case, we adhere to our professional confidentiality obligations.

6. Cookies

We do not use cookies on our site.

7. Analysis/profiling/social media

We do not use third party analytics tools.

We do not engage in profiling or use automated decision making tools.

We do not use any social media plug-ins.

8. Data subject rights

You have the right:

  • to request information about your personal data processed by us in accordance with Art. 15 DSGVO. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected from you, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
  • demand the correction of incorrect or incomplete personal data stored by us without delay in accordance with Art. 16 DSGVO;
  • pursuant to Art. 17 DSGVO to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims;
  • to request the restriction of the processing of your personal data in accordance with Art. 18 DSGVO, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the assertion, exercise or defence of legal claims or you have objected to the processing in accordance with Art. 21 DSGVO;
  • pursuant to Art. 20 DSGVO to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another controller;
  • revoke your consent at any time in accordance with Art. 7 para. 3 DSGVO. This has the consequence that we may no longer continue the data processing based on this consent for the future and
  • complain to a supervisory authority in accordance with Art. 77 DSGVO. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our registered office.

9. Right of objection

If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f DSGVO, you have the right to object to the processing of your personal data pursuant to Art. 21 DSGVO, provided that there are grounds for doing so that arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right of objection, which is implemented by us without specifying a particular situation.

If you wish to exercise your right to object, simply send an e-mail to privacy@kleiner-law.com.

If you have objected to the processing, we will no longer process the personal data unless we can prove that we have overriding interests. Pursuant to Art. 18 para. 1 lit. d DSGVO, you have the right to demand the restriction of processing until the conclusion of our examination.

10. Voluntary provision of data and revocation of consent given

In principle, you are not obliged to provide us with your personal data. However, if you do not do so, we will not be able to provide you with unrestricted access to our website or answer your enquiries to us.

If the processing of personal data is based on your consent pursuant to Art. 6 para. 1 sentence 1 lit a DSGVO, you have the right to revoke this consent at any time with effect for the future, without this affecting the lawfulness of the processing carried out on the basis of the consent until revocation.

If you wish to exercise your right of withdrawal, simply send an e-mail to privacy@kleiner-law.com.

11. Data security

We use the widespread SSL procedure (Secure Socket Layer) in connection with the highest encryption level supported by your browser when visiting the website. As a rule, this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser.

We also use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

Our e-mail server supports transport encryption according to the TLS 1.3 standard. If the server used by you or your e-mail provider also supports this procedure, e-mail communication with us is automatically transport encrypted.

12. Version and amendment of this privacy policy

This privacy policy is currently valid and has the status January 2023.

Due to the further development of our website and offers on it or due to changed legal or official requirements, it may become necessary to change this data protection declaration. You can access and print out the current data protection declaration at any time on the website at http://www.kleiner-law.com/de/datenschutz/.

Information on data processing in the context of the activity of KLEINER Rechtsanwälte as a counsel of trust

Information on data processing in the context of the activity of KLEINER Rechtsanwälte as a counsel of trust

1. Name and contact details of the controller responsible for processing and of the company data protection officer

These notes on data protection apply to data processing by:

Responsible: KLEINER Rechtsanwälte Partnerschaftsgesellschaft mbB (hereinafter: KLEINER), Michael Rajkowski, LL.M.

Alexanderstr. 3
70184 Stuttgart, Germany
email: privacy@kleiner-law.com
Telephone: +49 711 601708-0
Fax: +49 711 601708-88

2. Recording and storing personal data as well as the type and purpose of their use

If you contact us, we record personal data only to the extent that you provide it to us. Otherwise, data are processed anonymously without reference to a person.

  • Title, first name, surname of the tipster or pseudonym
  • A valid email address of the tipster
  • Telephone number (fixed line and/or mobile)
  • First name, surname of the accused, insofar as communicated

These data are recorded for the following purposes,

  • In order to get in contact with you
  • In order to correspond with you
  • In order to make an appropriate assessment of the matter described by you
  • In order to enable further investigations of the matter

Data are processed upon your inquiry and is necessary pursuant to Art. 6 Para. 1 Clause 1 Letter b, Art. 6 Para. 1 Clause 1 Letter f and Art. 6 Para. 1 Clause 1 Letter a GDPR for the aforesaid purposes of adequately processing the notice and for fulfilling obligations from the client contract with the company commissioning us.

The data with a reference to a person recorded by us in the context of receiving notices are stored up to the end of the legal duties of retention for lawyers (6 years after the end of the calendar year in which the client relationship was terminated) and then deleted, insofar as we receive the release for transmission to the company commissioning us, unless we are obliged to undertake a longer period of storage pursuant to Article 6 Para. 1 Clause 1 Letter c GDPR due to duties of retention and documentation under fiscal and commercial laws (HGB, StGB or AO). We do not transmit your data to the company commissioning us unless we have express consent in text form, otherwise all notices are passed on anonymously.

Insofar as you insist on being named as a tipster and the data concerns personal information of third parties, which we must forward to the company commissioning us, the person you accuse must be informed as a matter of principle about the process (storage, type of data, the purpose of processing and the identity of the responsible person, including that of the tipster) by the company at the latest one month from the report to the company (Art. 14 Para. 3 Letter a GDPR) or one month after the end of investigations.

If, after an initial contact, you decide that the information you have provided should not be passed on to the company commissioning us, all data will be destroyed immediately.

3. Forwarding data to third parties

Your personal data are not transmitted to third parties other than those listed in the following purposes.

Insofar as is necessary to process the notices given by you and you have given us a release for this pursuant to Art. 6 Para. 1 Clause 1 Letter b GDPR, we will pass on your personal data to the company commissioning us.

Attorney confidentiality remains unaffected, we assure confidentiality.

As far as data are concerned which are subject to attorney confidentiality, they are not forwarded to third parties unless we have your consent. Confidentiality is protected by us, as long as this remains legally possible for us.

We draw the line if a tip notice to a planned crime under §§ 138, 139 of the Criminal Code (e.g. murder, manslaughter, kidnapping or crimes committed by a terrorist group). In these cases, even an attorney is obliged to report this to the law enforcement agencies, even we as counsels of trust. Neither can the access opportunities of the state prosecuting authorities during any criminal proceedings be influenced by us or by the company. Likewise, law enforcement agencies cannot give pledges of impunity. They decide independently.

4. Right of data subjects

You have the right:

  • Pursuant to Art. 7 Para. 3 GDPR, you can revoke your consent once given to us at any time. This has the consequence that we will discontinue the data processing based on this consent in the future
  • Pursuant to Art. 15 GDPR, you can demand information on your personal data processed by us. In particular, you can demand information on the purposes of processing, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned duration of storage, the existence of a right to correct, delete or restrict the processing or to file objection, the existence of a right of appeal, the origin of your data, if these were not recorded from you, and the existence of automated decision-making including profiling and possibly meaningful information on the details
  • Pursuant to Art. 16, you can demand the correction of inaccurate personal data or the completion of your personal data stored by us without delay
  • Pursuant to Art. 17 GDPR, you can demand the deletion of your personal data stored by us, insofar as processing is not required to exercise the right of expression of free opinion, if the information is necessary to fulfil a legal obligation, for reasons of the public interest or to pursue, exercise or defend against legal claims
  • Pursuant to Art. 18 GDPR, you can demand the restriction of the processing of your personal data, insofar as you dispute the accuracy of the data, the processing is illegitimate, although you reject their deletion and we no longer require the data because you require these to pursue, exercise or defend against legal claims or if you have filed objection against processing pursuant to Art. 21 GDPR
  • Pursuant to Art. 20 GDPR, you can demand that you receive your personal data, that you have provided to us, in a structured, common and machine-readable format, or demand that they be transmitted to another responsible office
  • Pursuant to Art. 77 GDPR, you can complain to a supervisory authority. As a rule, you can apply to the supervisory authority at your normal place of residence or your workplace or at our law firm.

5. Right of objection

Insofar as your personal data are processed on the basis of legitimate interests pursuant to Art. 6 Para. 1 Clause 1 Letter f GDPR, you have the right to file objection to the processing of your personal data pursuant to Art. 21 GDPR, insofar as there are reasons for this that result from your special situation.

If you wish to make use of your right of objection, simply send an email to privacy@kleiner-law.com.

Information on data processing by KLEINER Rechtsanwälte in the course of a client relationship

Information on data processing by KLEINER Rechtsanwälte in the context of the client relationship and its initiation

1. Definitions

According to Art. 4 of the General Data Protection Regulation (GDPR), personal data is any data that can be related to you personally, e.g., name, address or email address. With regard to the other terms used below, such as “controller” or “processor”, we refer to the catalogue of definitions in Art. 4 of the GDPR.

2. Name and contact details of the controller and availability of the data protection officer

This data protection information applies to data processing by:

Controller: KLEINER Rechtsanwälte Partnerschaftsgesellschaft mbB (hereinafter: KLEINER), Alexanderstr. 3, 70184 Stuttgart, Germany Email: stuttgart@kleiner-law.com Phone: +49 711 601708-0 Fax: +49 711 601708-88

KLEINER’s data protection officer can be reached at: Kleiner Rechtsanwälte, Data Protection Officer, Alexanderstr. 3, 70184 Stuttgart, Germany or privacy@kleiner-law.com.

3. Collection and storage of personal data and type and purpose of processing

When you engage us, we regularly collect personal data of our clients or contact persons in addition to company data. In particular, we collect the following information:

  • salutation, first name, surname of the client, in the case of companies our contact person(s),
  • a valid e-mail address of the client(s) or contact person(s),
  • address of the client,
  • telephone number (landline and/or mobile),
  • information necessary for the assertion and defence of your rights within the scope of our engagement.

The collection of this data takes place,

  • to check for possible conflicts before we enter the engagement agreement;
  • in order to be able to identify you as our client and – in the case of companies – to set up one or more specific contacts as a contact;
  • in order to be able to provide you with appropriate legal advice and representation;
  • for correspondence with you;
  • for invoicing;
  • for the settlement of any existing liability claims and the assertion of any claims against you.

Your personal data is processed because you have engaged us and is required in accordance with Art. 6 subsecs. 1 b and f GDPR for the aforementioned purposes in order to appropriately handle the matter and for the mutual fulfillment of obligations arising from the engagement agreement. This also represents our legitimate interest. For these reasons, the processing is permissible in accordance with the aforementioned statutory provisions. With regard to personal data of third parties that you provide to us in the context of our engagement, the processing is necessary to the aforementioned extent for the enforcement of rights and is permissible on the basis of your legitimate interest in this pursuant to Art. 6 subsec. 1 f GDPR. If the data to be processed belongs to special categories of personal data within the meaning of Art. 9 subsec. 1 of the General Data Protection Regulation (e.g., data revealing racial and ethnic origin, political opinions or health data), processing is permitted without separate consent pursuant to Art. 9 subsec. 2 f GDPR if it is necessary for the assertion, exercise or defence of legal claims.

We may also process your personal data for the following purposes.

  • Client letters: From time to time, we may inform our clients about current developments in case law or new legal regulations. In long-term client relationships, this is done in execution of the existing client relationship pursuant to Art. 6 subsec. 1 b GDPR; otherwise, it is done on the basis of our legitimate interest pursuant to Art. 6 subsec. 1 f GDPR to inform our clients about current developments relevant to them.
  • Christmas and other greeting cards: If we know you personally and/or you have a client relationship with our law firm, we may send you greeting cards on special occasions such as Christmas, on the basis of our legitimate interest pursuant to Art. 6 subsec. 1 f GDPR. We assume that the recipients are pleased with the greetings on special occasions. If this is not the case, you can object to the sending of greeting cards in accordance with Art. 21 of the GDPR (see section 8).

4. Additional data processing within the application of the Money Laundering Act

Insofar as the the German Money Laundering Act (GwG) is applicable, we are obliged to collect and process further information, § 2 subsec. 1 no. 10 GwG. We check whether the GwG is applicable before we enter the engagement agreement. The GwG is applicable if we

  • participate in the planning or execution of the following transactions on behalf of the client:
    • purchase and sale of real estate or commercial enterprises,
    • management of money, securities or other assets,
    • opening or managing of bank, savings or securities accounts,
    • raising the funds necessary for the establishment, operation or administration of companies,
    • establishment, operation or management of trusts, companies or similar structures,
  • carry out financial or real estate transactions in the name and for the account of the client,
  • advise the client on its capital structure, industrial strategy or related issues,
  • provide advice or services in connection with mergers or acquisitions; or
  • provide assistance in tax matters on a business basis.

The collection and processing includes, among other things, information on your identity and that of our contact persons, on the beneficial owners, on the purpose and nature of the business relationship, and on the money laundering risk. In the case of natural persons, we also make copies of official identification documents in order to fulfill our obligations under the German Money Laundering Act in accordance with § 8 subsec. 2 sentence 2 GwG.

The processing is carried out to fulfill our legal obligation under the German Money Laundering Act. The legal basis for this processing is Art. 6 subsec. 1 c GDPR in conjunction with §§ 10-13, 15 GwG.

5. Storage period

The personal data collected by us for our engagement will be stored until the expiry of the statutory retention obligation for lawyers (6 years after the end of the calendar year in which the engagement was terminated) and deleted thereafter, unless we are obliged to store the data for a longer period pursuant to Art. 6 subsec. 1 c GDPR due to tax and commercial law retention and documentation obligations (under the German Commercial Code (HGB), the German Criminal Code (StGB) or the German Fiscal Code (AO)) or you have consented to a storage beyond this period of time according to Art. 6 subsec. 1 a GDPR.

6. Disclosure of data to third parties, processors

Your personal data will not be transferred to third parties for purposes other than those listed below.

Insofar as this is necessary in accordance with Art. 6 subsec. 1 b GDPR for the processing of client relationships, your personal data will be passed on to third parties. This includes in particular the disclosure to opposing parties and their representatives (in particular their lawyers) as well as courts and other public authorities for the purpose of correspondence and the assertion and defence of your rights. The data passed on must be used by the third party exclusively for the purposes stated.

The attorney-client privilege remains unaffected. Insofar as data subject to legal professional privilege is concerned, it will only be passed on to third parties in consultation with you.

In addition, we use external (technical) service providers as processors in accordance with Art. 28 GDPR who are carefully selected and monitored by us. Lastly, a disclosure may be made to the competent authority on the basis of statutory provisions, for example to report suspicious cases pursuant to § 43 GwG. The legal basis for the disclosure in this respect is Art. 6 subsec. 1 c GDPR in conjunction with § 43 GwG.

7. Data subjects’ rights

You have the right:

  • to revoke your consent at any time in accordance with Art. 7 subsec. 3 GDPR. This has the consequence that we may no longer continue the data processing based on this consent for the future;
  • to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
  • to demand the correction of incorrect or incomplete personal data stored by us without delay in accordance with Art. 16 GDPR;
  • pursuant to Art. 17 GDPR, to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims;
  • to request the restriction of the processing of your personal data in accordance with Art. 18 GDPR, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the assertion, exercise or defence of legal claims or you have objected to the processing in accordance with Art. 21 GDPR;
  • in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another controller; and
  • to complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our registered office.

8. Right of objection

If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 subsec. 1 f GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR insofar as there are grounds for doing so that arise from your particular situation or the objection is directed against direct advertising (or related profiling). In the latter case, you have a general right of objection that is implemented by us without the need for you to specify grounds arising from your particular situation.

If you wish to exercise your right to object, simply send an e-mail to privacy@kleiner-law.com.

In the event of objection to direct advertising (or profiling in connection therewith), the personal data will then no longer be processed for this purpose. In other cases, we also no longer process the personal data after an objection, unless we can prove overriding interests on our part. Pursuant to Art. 18 subsec. 1 d GDPR, you have the right to demand the restriction of processing until the conclusion of our examination.