(1) COHAUSZ & FLORACK processes your personal data only to the extent permitted by law, in particular the EU Data Protection Basic Regulation ("DSGVO") and the Federal Data Protection Act ("BDSG").
The object of data processing by us is your contact data as well as any other personal data that may be required for our service provision or our communication with you (e.g. information that (i) is typically contained in legal documents (contracts, briefs, etc.) and/or public registers, e.g. e.g. patent, trademark, design, land register, commercial and association registers, (ii) was the subject of our correspondence with you, or (iii) affects your legal relations with your employer or third parties, such as personal data, file numbers or loan or account numbers at credit institutions.
If you have not provided us with your personal data yourself, we have received this data from our clients, business partners, service providers or cooperation partners for whom you may work as a representative or employee or through whom you are invited to our events, or we have taken the data from publicly accessible sources such as, in particular, company websites, lists of participants in events or industry directories.
We process personal data insofar as this is necessary to protect the legitimate interests of COHAUSZ & FLORACK (Art. 6 Para. 1 lit. f DS-GVO), in particular
- to conclude or execute mandate agreements, orders to our notaries, contracts and other business relationships (including for the processing of purchase orders, deliveries or payments) or to prepare or respond to requests for quotations and to determine the terms and conditions of the contractual relationship with our clients, business partners, service providers or cooperation partners for whom you may be acting as agent or employee;
- for internal administrative purposes of the firm (e.g. for accounting purposes);
- if necessary, for the performance of anti-terrorism and sanctions list screenings;
- to conduct legal and administrative proceedings and/or for the purpose of asserting/exercising and defending against legal claims in Germany and abroad, including the exercise of professional privileges and other special confidentiality rights;
- to send you our client information, such as newsletters with information on current legal topics or events at our law firm, to the extent relevant to your business activities;
- for other communication purposes;
- to ensure the IT security and IT operation of our law firm;
- to use service providers (e.g. external IT service providers) that support our business processes;
- to prevent criminal offences and, in individual cases, to conduct compliance investigations and the associated (also electronic) review of correspondence and documents;
- to plan and conduct events to which you are invited, including reporting on these events on our intranet, which may include the publication of image and video material on the intranet on which you are represented.
In addition, personal data is processed for the purpose of fulfilling contracts with or orders from individuals (natural persons) with whom we have business relations (Art. 6 Para. 1 lit. b DS-GVO).
If a client/contractual partner does not provide the necessary personal data, COHAUSZ & FLORACK cannot carry out the contractual relationship or fulfil the above-mentioned communication purposes.
We are also partly required by law to process data (Art. 6 para. 1 lit. c) DS-GVO). For example, according to the provisions of the Money Laundering Act we are obliged to identify our clients and require the necessary information from you (Art. 11 Para. 6 Sentence 1 GWG). According to § 50 BRAO we are obliged by professional law to keep legal files and can use electronic data processing for this purpose.
(2) Confidentiality and deletion of your personal data: All our employees and all employees of external service providers who have access to personal data are obliged to treat this data confidentially.
We delete the personal data after termination of the mandate, assignment or contractual relationship or our contact if the storage is no longer necessary for the fulfilment of our (post-)contractual obligations or the legitimate interests mentioned in this data protection declaration and if there is no legal obligation to retain the data. Insofar as statutory storage obligations exist, we will restrict the processing of the data.
(3) Disclosure of your personal data: We will only transfer your personal data to third parties on the basis of legal regulations or if you have given your consent in individual cases.
Your personal data may be transferred to contractors within and outside the European Economic Area (EEA) who perform services for us, such as IT services (contract processors), to the extent necessary for the purposes mentioned in point (1). These contractors are bound by us to secrecy and process personal data only according to our instructions. In the normal course of business and for the purposes set out in point (1) above, we may also disclose your data to third parties within and outside the EEA, e.g. to our business partners or law firms with whom we work on a mandate, translators, opponents and other third parties.
In addition, we may, to the extent permitted by law, transfer your personal data to authorities (e.g. social security institutions, tax authorities or law enforcement agencies), public registers and courts in Germany and abroad in order to fulfil legal obligations or in the interest of our law firm. These may also be foreign authorities and courts.
Countries outside the EEA may have different data protection regulations than the EU. To the extent that no legal level of protection comparable to the European data protection law exists in these countries, we will take precautions to ensure the adequate protection of your personal data in these countries if your personal data is transferred to these countries. In particular, the standard contractual clauses published by the European Commission are available to us for this purpose. You can obtain further information from our data protection officers and, in particular, ask them to inspect the contracts concluded.