Data protection - C.O.X.legal Rechtsanwaltsgesellschaft mbH

Privacy policy

In the following, we inform you about the processing of personal data by us as the controller when you use our website. The processing of personal data (e.g. name, address, e-mail address or telephone number of a data subject) is carried out in accordance with the statutory provisions, in particular the requirements of the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG).

I. Person responsible

The controller within the meaning of the GDPR and the national data protection laws of the member states as well as other data protection regulations is

C.O.X.legal Rechtsanwaltsgesellschaft mbH
Brachvogelstraße 1
10961 Berlin
Germany
Phone: +49 30 6903510
E-mail: mail[at]cox-legal.de

II General information on data processing

Personal data is any information relating to an identified or identifiable natural person, such as your name or e-mail address. Data processing” refers in particular to the collection, storage, use and transmission of your data.

Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 p. 1 lit. a GDPR as the legal basis.

In the processing of personal data necessary for the performance of a contract to which the data subject is party, Art. 6 para. 1 p. 1 lit. b GDPR as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.

Insofar as the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 para. 1 p. 1 lit. c GDPR as the legal basis.

In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 p. 1 lit. d GDPR as the legal basis.

If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 para. 1 p. 1 lit. f GDPR as the legal basis for processing.

The personal data of data subjects will be deleted or blocked as soon as the purpose of storage no longer applies. Data may be stored after the purpose of storage no longer applies if this is provided for by law. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.

Further information on the legal basis for processing and the storage period for specific personal data can be found in the relevant subsection.

III Rights of the data subject

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller (where applicable, if other requirements set out in the relevant provisions are met):

Right to information (Art. 15 GDPR),
Right to rectification and erasure (Art. 16, 17 GDPR),
Right to restriction of processing (Art. 18 GDPR),
Right of revocation if you have consented to the processing,
Right to data portability (Art. 20 GDPR).

If we process personal data as explained above in order to safeguard our legitimate interests, which are overriding in the context of a balancing of interests, you can object to this processing with effect for the future, but only if there are reasons arising from your particular situation (Art. 21 GDPR). If the processing is carried out for direct marketing purposes, you can exercise this right at any time without giving reasons. After the justified exercise of your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or if the processing serves the establishment, exercise or defense of legal claims. This restriction does not apply if the processing is carried out for direct marketing purposes.

If you are of the opinion that we are not respecting your rights to the extent owed, you have the right to complain to a data protection supervisory authority about the processing of your personal data by us. Before you do so, however, we would appreciate it if you could inform us of your criticism beforehand so that we can remedy the cause of the complaint ourselves.

IV. Visiting the website and log files

1. scope of the processing of personal data

Each time our website is accessed, our system automatically collects the following data and information from the computer system of the accessing computer.

Information about the browser type and version used
The user’s operating system
The IP address of the user
Date and time of access
Websites from which the user’s system accesses our website
Size of the response body
Status code
Subpages that are accessed by the user’s system on our website

Data is only stored in log files in anonymized form.

2. legal basis for the processing of personal data

The legal basis for the collection of data is Art. 6 para. 1 lit. f GDPR.

3. purpose of data processing

The temporary storage of the IP address is necessary in order to be able to display the website to you. For this purpose, the IP address must remain stored for the duration of the session. The other data is collected for technical reasons in order to ensure stability and security.

This also gives rise to the legitimate interest in processing in accordance with Art. 6 para. 1 lit. f GDPR.

4. duration of storage

The data will be deleted as soon as it is no longer required for the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.

V. Making contact

1. scope of the processing of personal data

If you contact us by e-mail, post or in any other way, the data you provide (e.g. your e-mail address, your name and telephone number if applicable) will be processed by us in order to process or respond to your request.

2. legal basis for the processing of personal data

If you provide us with your data in a pre-contractual context, for example with a request for a quotation or with questions about our products, Art. 6 para. 1 lit. b GDPR is the legal basis. If you have given us your consent to contact you, Art. 6 para. 1 lit. a GDPR is the legal basis. In all other cases, Art. 6 para. 1 lit. f GDPR is the legal basis.

3. purpose of data processing

The processing of personal data serves us solely to process the contact. This may also constitute the necessary legitimate interest in the processing of the data.

4. duration of storage

Your data will be deleted when it can be inferred from the circumstances that your request or the matter in question has been conclusively clarified.

VI Categories of recipients of personal data

Personal data will only be transferred to third parties in the cases specified in this declaration or if we expressly inform you of this elsewhere. In addition, we sometimes use external processors (Art. 28 GDPR) to provide our services (e.g. host providers, email providers). However, these process personal data exclusively within the European Union.