PRIVACY POLICY

The protection of personal information has the highest priority for us. We process your data confidentially in accordance with legal data protection regulations and this policy.

When using this website, various personal information is collected. This policy explains the type and purpose of use of the collected data as well as processing methods.

Below you will receive a compact overview of the processing of your personal information when accessing our web presence. Personal information refers to all data through which identification of your person is possible. For further details on information processing, please refer to the following sections.

A. Responsibility for Information Collection

The processing of your information on this web presence is the responsibility of the operator. The responsible party is:

Weigelt Werner Schuldt – Kanzlei für Arbeitsrecht GbR
Choriner Straße 63 10435 Berlin

T:  24 715 644 03 94+
F:  34 715 644 03 94+
M: ed.lagel-sww@eciffo

B. Methods of Data Collection

Your information reaches us in two ways: Either you actively transmit it, for example by filling out a form to establish contact. Alternatively, collection occurs automatically through our technical systems during your visit. This includes in particular technical parameters such as the browser used, operating system, or time of access. This collection occurs immediately upon entering our site.

I. Inquiry via Email, Telephone, or Fax

When contacting us via email, telephone, or fax, your inquiry including all personal data will be stored and processed for the purpose of handling your request. This data will not be passed on without your consent.

Processing is based on Art. 6 Para. 1 lit. b GDPR in the case of a contractual relationship or pre-contractual measures. In all other cases, processing is based on our legitimate interest in effective inquiry processing (Art. 6 Para. 1 lit. f GDPR) or on your consent (Art. 6 Para. 1 lit. a GDPR); consent can be revoked at any time.

Transmitted data remains until you request deletion, revoke consent, or the purpose of storage ceases to exist. Legal provisions – in particular retention periods – remain unaffected.

II. Contact Form

When submitting inquiries via contact form, your information including the contact details you provided will be stored for inquiry processing and for follow-up questions. This data will not be passed on without your consent.

III. Applicant Data Processing

We offer application opportunities. Below we inform you about the scope, purpose, and use of your data collected during the application process. We assure you that collection, processing, and use are in accordance with applicable data protection law and all legal provisions, and that your data will be treated strictly confidentially.

1. Scope and Purpose

When you submit an application, we process the associated personal data (e.g., contact and communication data, application documents, interview notes, etc.) insofar as this is necessary for deciding on an employment relationship. Legal basis: § 26 BDSG (initiation of employment relationship), Art. 6 Para. 1 lit. b GDPR (general contract initiation), and – if consent has been given – Art. 6 Para. 1 lit. a GDPR. Consent can be revoked at any time. Personal data is passed on internally exclusively to persons processing applications.

In the case of a successful application, the submitted data will be stored in our systems based on § 26 BDSG and Art. 6 Para. 1 lit. b GDPR for the implementation of the employment relationship.

2. Retention Period

If we are unable to make you a job offer, you reject the offer, or you withdraw your application, we reserve the right to retain the transmitted data based on legitimate interests (Art. 6 Para. 1 lit. f GDPR) for up to 6 months from the end of the application process. Subsequently, the data will be deleted and documents destroyed. Retention serves in particular for evidential purposes in the event of legal disputes. If it is evident that the data will be required after the 6-month period (e.g., imminent or pending legal dispute), deletion will only occur when the purpose ceases to exist.

Longer retention may occur with appropriate consent (Art. 6 Para. 1 lit. a GDPR) or legal retention obligations.

IV. Audio and Video Conferences

Processing is based on Art. 6 Para. 1 lit. b GDPR in the case of a contractual relationship or pre-contractual measures. In all other cases, processing is based on our legitimate interest in effective inquiry processing (Art. 6 Para. 1 lit. f GDPR) or on your consent (Art. 6 Para. 1 lit. a GDPR); consent can be revoked at any time.

Entered data remains until you request deletion, revoke consent, or the purpose of storage ceases to exist (e.g., after inquiry processing). Legal provisions – in particular retention periods – remain unaffected.

1. Data Processing

We use online conference tools for customer communication. The tools used are listed below. During video or audio conferences via the internet, your personal data is collected and processed by us and the tool provider.

Conference tools collect all data that you provide to use the tool (email address and/or telephone number). Furthermore, the tools process conference duration, start and end of participation, number of participants, and other "context information" related to the communication process (metadata).

Furthermore, the tool provider processes all technical data required to conduct online communication. This includes in particular IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone or speaker, and connection type.

If content is exchanged, uploaded, or made available within the tool, this is stored on the tool provider's servers. Such content includes in particular cloud recordings, chat/instant messages, voicemails, uploaded photos and videos, files, whiteboards, and other information shared during service use.

Please note: We do not have full control over the data processing operations of the tools. Our options are determined by the corporate policy of the respective provider. For further information on data processing, please refer to the privacy policies of the tools used.

2. Tools Used

Microsoft Teams

DPF certification exists. Information: https://www.dataprivacyframework.gov/participant/6474

3. Data Processing Agreement

A data processing agreement (DPA) has been concluded for this service. This is a legally required contract that ensures that personal data is only processed according to our instructions and in compliance with the GDPR.

4. Purpose and Legal Basis

Conference tools are used to communicate with contractual partners or to provide services to customers (Art. 6 Para. 1 lit. b GDPR). Furthermore, the use of tools serves to simplify and accelerate general communication (legitimate interest within the meaning of Art. 6 Para. 1 lit. f GDPR). If consent has been obtained, the use of tools is based on this consent; consent can be revoked at any time.

5. Storage Duration

Data collected directly via video and conference tools is deleted from our systems upon request for deletion, revocation of storage consent, or when the purpose of storage ceases to exist. Stored cookies remain on the end device until deletion. Legal retention periods remain unaffected.

We have no influence on the storage duration for the tool operators' own purposes. For details, please contact the tool operators directly.

C. Purposes of Use

The collection serves partly to ensure the smooth functionality of the web presence. Additional data enables us to analyze your usage behavior. In the case of contract conclusions or initiations via the website, the transmitted information is used for offer preparation, order processing, or further inquiries.

D. Retention Periods

Unless a specific period is mentioned, your data remains with us until the processing purpose ceases to exist. In the case of a legitimate deletion request or revocation of consent, deletion occurs unless there are legal retention obligations (e.g., under tax law); in this case, deletion occurs after these obligations cease to exist.

E. Legal Basis for Processing

If consent has been given, processing is based on Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR for special data categories. In the case of explicit consent to third-country data transfer, processing is additionally based on Art. 49 Para. 1 lit. a GDPR. In the case of consent to cookie storage or device access, processing additionally occurs on the basis of § 25 Para. 1 TDDDG. Consent can be revoked at any time. For contract fulfillment or pre-contractual measures, processing is based on Art. 6 Para. 1 lit. b GDPR. For legal obligations, processing is based on Art. 6 Para. 1 lit. c GDPR. Processing may also be based on our legitimate interest according to Art. 6 Para. 1 lit. f GDPR. Details on the respective legal basis are provided in the following sections.

F. Your Rights

I. Objection to Data Processing

If you read in this privacy policy that we have legitimate interests in processing your data and therefore base this on Art. 6 Para. 1 sentence 1 lit. f) GDPR, you have the right to object pursuant to Art. 21 GDPR. This also applies to profiling based on the aforementioned provision. The prerequisite is that you provide reasons for the objection that arise from your particular situation. A justification is not required if the objection is directed against the use of your data for direct marketing. The consequence of the objection is that we may no longer process your data. This only does not apply if one of the following conditions is met: We can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms. The processing serves the establishment, exercise, or defense of legal claims.

The exceptions do not apply if your objection is directed against direct marketing or profiling associated with it.

II. Revocation of Your Consent to Data Processing

Many data processing operations are based on your consent. You give this consent, for example, by checking an appropriate box on online forms before sending the form, or by allowing certain cookies when you visit our website. You can revoke your consent at any time without giving reasons (Art. 7 Para. 3 GDPR). From the time of revocation, we may no longer process your data. The only exception: We are legally obligated to retain the data for a certain period of time. Such retention periods exist particularly in tax and commercial law.

III. Right to Complain to the Competent Supervisory Authority

If you are of the opinion that we are violating the General Data Protection Regulation (GDPR), you have the right pursuant to Art. 77 GDPR to complain to a supervisory authority. You can contact a supervisory authority in the member state of your residence, your workplace, or the place where the alleged violation occurred. The right to complain exists in addition to administrative or judicial remedies.

IV. Right to Data Portability

We must provide you or a third party with data that we process automatically based on your consent or in fulfillment of a contract in a common machine-readable format if you request it. We can only transfer the data to another controller insofar as this is technically feasible.

V. Right to Data Access, Deletion, and Correction

You have the right pursuant to Art. 15 GDPR to receive free information about what personal data we have stored about you, where the data comes from, to whom we transmit the data, and for what purpose it is stored. Should the data be incorrect, you have a right to correction (Art. 16 GDPR), and under the conditions of Art. 17 GDPR you may request that we delete the data.

VI. Right to Restriction of Processing

In certain situations, you can request pursuant to Art. 18 GDPR that we restrict the processing of your data. The data may then – apart from storage – only be processed as follows: with your consent for the establishment, exercise, or defense of legal claims to protect the rights of another natural or legal person for reasons of an important public interest of the European Union or a member state.

The right to restriction of processing exists in the following situations:

You have disputed the accuracy of your personal data stored with us and we need time to verify this. Here the right exists for the duration of the review.

The processing of your personal data is unlawful or was unlawful in the past. Here the right exists as an alternative to data deletion.

We no longer need your personal data, but you need it to exercise, defend, or establish legal claims. Here the right exists as an alternative to data deletion.You have lodged an objection pursuant to Art. 21 Para. 1 GDPR and now your interests and ours must be weighed against each other. Here the right exists as long as the result of the balancing has not yet been determined.

G. Hosting – Webflow

Our web content is hosted by Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA. When accessed, Webflow collects various log files including IP addresses.

Webflow provides a platform for website creation and hosting. Cookies or similar identification technologies are used that are necessary for page display, functionality, and security.

Further details: https://webflow.com/legal/eu-privacy-policy

The use is based on Art. 6 Para. 1 lit. f GDPR. Our legitimate interest lies in the reliable presentation of our web presence. If consent has been obtained, processing is based on Art. 6 Para. 1 lit. a GDPR and § 25 Para. 1 TDDDG, provided the consent includes cookie storage or device access (e.g., fingerprinting). Consent can be revoked at any time.

Data transfers to the USA are based on EU standard contractual clauses. Details: https://webflow.com/legal/eu-privacy-policy

H. SSL or TLS Encryption

For security reasons and to protect confidential transmissions, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the change in the browser address bar from "http://" to "https://" and by the lock symbol in the browser bar.

When encryption is activated, transmitted data cannot be read by third parties.

Data transfer to the USA is based on EU standard contractual clauses. Details: https://business.safety.google/adscontrollerterms/sccs/

I. Recipients of Personal Information

In our business activities, we cooperate with various external partners. In some cases, the transmission of personal data is necessary. Data is only passed on for contract fulfillment, legal obligation, legitimate interest according to Art. 6 Para. 1 lit. f GDPR, or other legal basis. For data processors, data is passed on based on a valid DPA. For joint processing, an appropriate agreement is concluded.

J. Rejection of Advertising Emails

We hereby object to the use of contact data published as part of the imprint obligation for sending unsolicited advertising and information. The site operators reserve the right to take legal action in the event of unsolicited advertising information, such as spam emails.

K. Notice

Internet transmissions (e.g., email communication) may have security vulnerabilities. Complete protection against third-party access cannot be guaranteed.