Data privacy
I. Information on the processing of your data in accordance with Article 13 of the General Data Protection Regulation (GDPR)
1. Data controller and data protection officer
The data controller for this website is KASTEL Patentanwälte PartG mbB, Bernhard Surrer, St.-Cajetan-Str. 41, 81669 Munich, bernhard.surrer@kastel.attorney.
You can contact the Data Protection Officer by email at bernhard.surrer@kastel.attorney or at the following address: KASTEL Patentanwälte PartG mbB, Data Protection Officer, St.-Cajetan-Str. 41, 81669 Munich.
2. Data processed for the provision of the website and the creation of log files
a. What data is processed and for what purpose?
Each time content on the website is accessed, data is temporarily stored which may allow identification. The following data is collected in this process:
– Date and time of access
– IP address
– Hostname of the accessing computer
– Website from which this website was accessed
– Websites accessed via this website
– Pages visited on our website
– Indication of whether the request was successful
– Volume of data transferred
– Information about the browser type and version used
– Operating system
The temporary storage of this data is necessary for the duration of a website visit to enable the website to be displayed. Further storage in log files takes place to ensure the functionality of the website and the security of the IT systems. These purposes also constitute our legitimate interest in data processing.
b. On what legal basis is this data processed?
The data is processed on the basis of Article 6(1)(f) of the GDPR.
c. Are there any recipients of the personal data other than the controller?
The website is hosted by Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, info@hetzner.com. The hosting provider receives the aforementioned data in its capacity as a data processor.
d. How long is the data stored?
The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. In the case of the website, this is the case once the relevant session has ended. The log files are retained for a maximum of one week and are accessible directly and exclusively to administrators. Thereafter, they are only available indirectly via the restoration of backups and are permanently deleted after a maximum of one month.
3. Data subjects’ rights
a. Right of access
You may request access, in accordance with Article 15 of the GDPR, to your personal data that we process.
b. Right to object:
You have the right to object on grounds relating to your particular situation (see section II).
c. Right to rectification
Should the information concerning you no longer be accurate, you may request rectification in accordance with Article 16 of the GDPR. Should your data be incomplete, you may request that it be completed.
d. Right to erasure
You may request the erasure of your personal data in accordance with Article 17 of the GDPR.
e. Right to restriction of processing
Under Article 18 of the GDPR, you have the right to request that the processing of your personal data be restricted.
f. Right to lodge a complaint
If you believe that the processing of your personal data infringes data protection law, you have the right under Article 77(1) of the GDPR to lodge a complaint with a data protection supervisory authority of your choice. This also includes the data protection supervisory authority responsible for the controller: Bavarian State Office for Data Protection Supervision,
www.lda.bayern.de/de/index.html.
g. Right to data portability
Where the conditions set out in Article 20(1) of the GDPR are met, you have the right to have data which we process automatically on the basis of your consent or in fulfilment of a contract transferred to you or to a third party. The collection of data for the provision of the website and the storage of log files are strictly necessary for the operation of the website. They are therefore not based on consent under Article 6(1)(a) of the GDPR or on a contract under Article 6(1)(b) of the GDPR, but are justified under Article 6(1)(f) of the GDPR. The conditions set out in Article 20(1) of the GDPR are therefore not met in this respect.
II. Right to object under Article 21(1) of the GDPR
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data carried out on the basis of Article 6(1)(f) of the GDPR. The controller will then no longer process the personal data, unless it can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves to establish, exercise or defend legal claims. The collection of data for the provision of the website and the storage of log files are strictly necessary for the operation of the website.