DATA PROTECTION NOTICE

I. CONTROLLER FOR THE WEBSITE ACCORDING TO THE GDPR

CLASSREACTION Rechtsanwalts GmbH Rosenheimer Platz 6 81669 Munich Tel.: +49 89 290366500 Email: info@classreaction.com

 

 

 

 

 

 

II. VISITING OUR WEBSITE

When visiting our website www.classreaction.com, information is automatically sent to the server of our website by the browser used on your end device. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until automated deletion:

• IP address 
• date and time of the access
• name and URL of the website/file accessed
• website from which the access is made (referrer URL)
• browser used and, if applicable, the operating system of your end device as well as the name of your access provider.

We process the aforementioned data for the following purposes:

• ensuring a frictionless connection set-up of the website,
• ensuring a comfortable use of our website as well as
• evaluation of system security and stability.

The legal basis for the abovementioned data processing is Art 6 (1) sentence 1 (f) GDPR. Our legitimate interest arises from the above listed purposes for data collection and processing.

The aforementioned personal data is stored and processed by our web hoster, who may have access to it during maintenance activities. A third country transfer does not take place.

We store your personal data only as long as necessary to achieve the respective purpose, but usually for a maximum of 7 days. After the respective purpose has ceased to exist or this period has expired, the corresponding data is routinely blocked or deleted in accordance with the statutory provisions.

There is neither profiling nor automated decision-making.

The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address in particular, the functionality of our website cannot be guaranteed.

With regard to your right to object under Art 21 GDPR, we refer to Section IX. of our Data Protection Notice.

 

III. USE OF COOKIES

Our website uses cookies. These are small text files that are stored on the terminal device with which you access this website. Basically, cookies are used to ensure security when visiting a website and its basic functions ("absolutely necessary"), to implement certain functionalities such as standard language settings ("functional"), to improve the user experience or performance on the website ("performance") or to play out target group-based advertising ("marketing"). Cookies cannot execute programs or transmit viruses to your computer.

Only absolutely necessary cookies are used on our website

• PHPSESSID: This cookie contains a randomly generated unique session number (so-called session ID) and is absolutely necessary for you to navigate our website and use its features. As a "session cookie", the cookie is stored on your terminal device only for the duration of your current visit to our website and is deleted again when your browser session ends.

The legal basis for the use of the aforementioned cookies is Art 6 (1) sentence 1 (f) GDPR. Our legitimate interest also follows from the data collection purposes listed under II.

The aforementioned personal data is stored and processed by our web hoster, who may have access to it during maintenance activities. A third country transfer does not take place.

The use of cookies is not required by law or contract. You can prevent the installation of cookies by deleting existing cookies and disabling an installation of cookies in the settings of your browser. However, we would like to point out that in this case you may not be able to fully use all functionalities of our website.

 

IV. CONTACT

In addition to the purely informational use of our website, we offer you various ways to contact us and find out about our services. For this purpose, you usually have to provide further personal data:

• Email
  If you contact us via info@classreaction.com, the information and personal data you provide will be processed exclusively for the purpose of handling and responding to your respective inquiry.
• Telephone/Fax
  The same applies if you contact us by telephone or fax via the numbers provided on our website.

The processing of your personal data entered or communicated for the purpose of contacting you is carried out either for the implementation of pre-contractual measures or for the fulfillment of an already existing contract with you or, in the case of any other inquiry, on the basis of our legitimate interest in successful communication with you. Legal bases for our processing are Art 6 (1) sentence 1 (b) or (f) GDPR.

The aforementioned personal data is stored and processed in cloud-based CRM systems, at telephone service providers and partly at our web hoster. A third country transfer does not take place.

We store the personal data that you enter and/or provide to us as part of your contact request, usually for a maximum of six months after your contact has ended; the contact is ended when it can be inferred from the circumstances that your relevant request has been conclusively clarified. Longer storage will only take place if your contact is made in connection with an existing contract, leads to a contractual relationship with us or is required by law. In these cases, we store the personal data for as long as it is necessary for the fulfillment of the contract with you or is required by law.

Neither profiling nor automated decision-making takes place.

The provision of your personal data in the context of a contact request is voluntary. However, we would like to point out that we may not be able to process your request if you do not provide us with the necessary information.

With regard to your right to object under Art 21 GDPR, we refer to Section IX of our Data Protection Notice.
 

V. SOCIAL MEDIA PLATFORMS

1. Controller according to the GDPR

We have online presences on the social media platforms of the following providers:

• LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland

As far as your personal data is processed by one of these social media providers when you access our websites there, the social media provider is the controller of the data processing in accordance with the GDPR. For the assertion of your data subject rights, we therefore point out that these can be asserted most effectively with the respective provider, as only this provider has access to the data processed of you.

How to contact the data protection officer of the aforementioned social media providers is described in the links below:

• LinkedIn Ireland Unlimited Company: https://www.linkedin.com/­ help/linkedin/ask/TSO-DPO 

As far as your data transmitted via one of the aforementioned social media platforms is processed by us ourselves, we are also the controller of the data processing in accordance with the GDPR.

Regarding our contact details, we refer to Section I. of our Data Protection Notice. If you have any questions about data processing in connection with social media platforms carried out by us as the controller, you can also contact our data protection officer directly; you will find his contact details under Section IX.

2. Processing of your personal data on social media platforms

2.1 Accessing the social media platforms

If you access one of our websites on the aforementioned social media platforms via a link on our website, your personal data will only be collected and processed by the respective social media platform when you click on the respective link. No prior data transfer takes place (e.g. through tracking pixels or similar).

Usually, your personal data is processed by the social media platforms mentioned for market research and advertising purposes. For this purpose, a cookie is set in your browser, which enables the respective social media provider to recognize you when you access the social media platform again. Based on the collected data, usage profiles can be created, which are used to display advertisements within and outside the social media platform that presumably correspond to your interests. Furthermore, usage profiles may also store data regardless of the devices you use. This is regularly the case when you are logged in as a member of the respective social media platform.
Please note that by using the aforementioned social media platforms, data processing may take place outside the EU and the European Economic Area, so that the European level of data protection is not necessarily guaranteed.
Furthermore, please note that we have no influence on the processing of your personal data by the respective social media provider nor on the storage period of your data. 

For more information on data processing by the respective social media provider, please check the privacy policy of the respective provider:

 

• LinkedIn Datenschutzerklärung: https:// www.linkedin.com/ legal/privacy-policy
• Opt-Out: https:// www.linkedin.com/ psettings/ guest-controls/ retargeting-opt-out 

2.2 Contact via a social media platform

We collect your personal data ourselves when you contact us via one of the aforementioned social media platforms, e.g. via a messenger service. Which data is collected depends largely on the information you provide in the context of the respective contact.
The processing of your personal data provided for contacting us is carried out either for the implementation of pre-contractual measures or for the fulfillment of an existing contract with you or, in the case of any other inquiry, on the basis of our legitimate interest in successful communication with you. The legal basis for our processing is Art 6 (1) sentence 1 (b) or (f) GDPR.
We may store the personal data you provide in cloud-based CRM systems and process it there. In this case, a third country transfer does not take place. Furthermore, we will not transfer your personal data to third parties under any circumstances without your prior consent.
We store the personal data that you provide to us in the course of contacting us usually for a maximum of six months after your contact has been terminated; the contact is ended when it can be inferred from the circumstances that your relevant inquiry has been conclusively clarified. Longer storage will only take place if your contact is made in connection with an already existing contract, leads to a contract with us (e.g. employment relationship) or is required by law. In these cases, we store the personal data for as long as this is necessary for the fulfillment of the contract with you or is required by law.

There is no automated decision-making.
The provision of your personal data in the context of a contact request is voluntary. However, we would like to point out that we may not be able to process your request if you do not provide us with the necessary information.

With regard to your rights as a data subject and your right to object, we refer to Sections VIII. and IX. of our Data Protection Notice.
 

VI. INTERNAL RECIPIENT

Within our company, only the employees responsible for the aforementioned purposes have access to your data.

 

VII. DATA SUBJECT RIGHTS

You have the right:

• pursuant to Art 15 GDPR, to access information about your personal data processed by us;
• pursuant to Art 16 GDPR to demand without undue delay the rectification of inaccurate or incomplete personal data stored by us;
• pursuant to Art 17 GDPR, to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of speech and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims;
• pursuant to Art 18 GDPR to request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer need the data, but you need it for the assertion, exercise or defense of legal claims or you have objected to the processing pursuant to Art 21 GDPR;
• pursuant to Art 20 GDPR to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to transmit this data to another controller;
• pursuant to Art 7 (3) GDPR to withdraw any consent you have given us at any time. This has the consequence that we may no longer continue the data processing based on these consents for the future. An informal email to info@classreaction.com is sufficient for your withdrawal;
• pursuant to Art 77 GDPR to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual residence or workplace or our company headquarters for this purpose. You can find a list of contact options for the supervisory authorities for the non-public sector at: https://www.bfdi. bund.de/ DE/Service/ Anschriften/ Laender/Laender-node.html;jsessionid= ; F597F2AA4040551E0FD8053 D6A0DFE2E.intranet211

 

 

VIII. RIGHT OF OBJECTION

If your personal data is processed by us on the basis of legitimate interests pursuant to Art 6 (1) sentence 1 (f) GDPR, you have the right to object to the processing of your personal data pursuant to Art 21 GDPR, insofar as there are reasons for doing so that arise from your particular situation. 

If you wish to exercise your right of object, it is sufficient to send an informal email to: info@classreaction.com  

 

IX. QUESTIONS TO THE DATA PROTECTION OFFICER

If you have any questions regarding data protection, please contact our data protection officer directly: 

CLASSREACTION Rechtsanwalts GmbH
Email: datenschutz@­classreaction.com

 

MODIFICATIONS OF OUR DATA PROTECTION NOTICE

We reserve the right to modify this Data Protection Notice at any time to ensure that it always complies with the current legal requirements and/or to describe changes or additions to our offerings, e.g. when introducing new services. The current Data Protection Notice will then apply to your next visit.