Data protection
dp GmbH & Co. KG Steuerberatungsgesellschaft
März 2024
Information in accordance with Art. 13 GDPR (website)
Thank you for visiting our website. Data protection is a high priority in our company, which is why we would like to inform you below about the handling of your data in accordance with Art. 13 of the EU General Data Protection Regulation (GDPR):
1. Responsible body
Responsible for data processing within the meaning of Art. 4 No. 7 GDPR is:
dp GmbH & Co. KG
Steuerberatungsgesellschaft
Benzstr. 3
97437 Haßfurt
Tel.: +49 9521 9224-0
E-Mail: info@daxpa.de
2. Data processing in the context of visiting our website
2.1. Processing of IP address and usage data
Type of data
When you visit our website, the following usage data is temporarily stored on our web server:
-
The page from which the file was requested,
-
the name of the file
-
the date and time of the request
-
the amount of data transferred,
-
the access status (file transferred, file not found),
-
the description of the type of web browser and operating system used, including information on the language used
-
the referrer address, which indicates the page from which you came to our website
-
the IP address of the requesting computer
Legal basis and purpose of data processing
We use this data strictly for the legitimate interest of recognising, limiting and eliminating attacks on our website. The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f) GDPR.
Insofar as we use technically necessary cookies and similar technologies as part of the integration of the service, this is done in accordance with § 25 para. 2 TTDSG. Subsequent data processing is carried out based on Art. 6 para. 1 sentence 1 lit. f) GDPR in our legitimate interest in being able to provide you with an appealing and functional website and to ensure the security and freedom from interference of our website and the data processing that takes place on it.
Duration of storage
We anonymise the IP address after seven days. Once the IP address has been anonymised, it is no longer possible to establish a personal reference to the usage data. For statistical purposes and to improve the quality of our website, we subsequently analyse the data in anonymous form.
Recipients / categories of recipients
As part of the operation of our website, our web agency has access to this data as a service provider bound by instructions based on order processing in accordance with Art. 28 GDPR to support us in the operation of our website and the associated processes.
2.2. Use of cookies
We use cookies and similar technologies on our websites to store data in the browser of your end device and to read previously stored data.
The use of technically necessary cookies and similar technologies is based on § 25 Abs. 2 of the Telecommunications Telemedia Data Protection Act (TTDSG). Subsequent data processing is carried out on the basis of legitimate interests in accordance with Art. 6 Abs. 1 S. 1 lit. f) DSGVO.
The use of optional cookies and similar technologies is based on § 25 Abs. 1 TTDSG.
Subsequent data processing takes place on the basis of your consent in accordance with Art. 6 Abs. 1 S. 1 lit. a) DSGVO, provided that you have given this via our banner. Your consent is voluntary and can be revoked at any time with effect for the future via the cookie settings.
Further information on the cookies and similar technologies we use, such as name, purpose description, domain name, provider, expiry date of the cookie and, if applicable, information on transmission to third countries can be found in the cookie settings or in the cookie banner.
Purposes
• Presentation of the Website.
Legal basis
Legitimate interests in accordance with Art. 6 Abs. 1 f) DSGVO
The legitimate interests are:
• Functionality,
• visualisation,
• stability and
• security of the website.
Categories of recipients of the personal data
The web server is technically operated by a service provider (processor).
Duration of storage
Until the browser is closed.
3. Contact form, e-mail contact and telephone calls
Personal data that you provide to us when filling out contact forms, by telephone or via social media will of course be treated confidentially. We use your data exclusively for the purpose of processing your enquiry and answering it satisfactorily.
Type of data
For this purpose, we store your first and last name, your e-mail address, telephone number and the type of enquiry (private/commercial). Any additional personal information you provide is considered voluntary. When using free text fields, please refrain from providing personal data about yourself or other persons.
Legal basis and purpose of data processing
The legal basis for data processing of a general enquiry is Art. 6 para. 1 sentence 1 lit. f) GDPR. Our and your concurrent legitimate interest in this data processing arises from the purpose of answering your enquiries, solving any problems you may have and thus maintaining and promoting your satisfaction as a user of our website.
The legal basis for any mandate enquiry is Art. 6 para. 1 sentence 1 lit. b) GDPR and is carried out for the implementation of pre-contractual measures, specifically the initiation of a contract.
Recipients / categories of recipients
When responding to your enquiry, your data will be processed by our colleagues and employees. If the disclosure of your personal data should appear expedient in individual cases, we will inform you of this and ask for your consent. We will not pass on your data to third parties for these purposes without your consent.
Duration of storage
We will delete or anonymise all personal data that you provide to us in response to enquiries via our website or by e-mail no later than 95 days after the final reply has been sent. Our experience has shown that, as a rule, after 95 days queries about our responses no longer occur. If you assert your rights as a data subject, your personal data will be stored for 3 years after the final reply to prove that we have provided you with comprehensive information and that the legal requirements have been met.
4. Career area / application
We welcome applications, whether for a specific advertised position or unsolicited. You have the option of sending us an application in electronic form by e-mail to karriere@daxpa.de or via our application form on the website.
Type of data
If you decide to send us an application, we would like to point out that you yourself determine the scope of the data that you transmit to us as part of your application. Typically, the application will of course include information about yourself (title, surname, first name, date of birth and, if applicable, place of birth, home address, other contact details such as telephone number and e-mail address), information about your educational background (school, vocational training and/or information about your studies including relevant certificates), information about your previous professional experience (information about previous employers, activities there, periods and work or internship certificates), information about your motivation to apply, any interests and other information about your CV and, if applicable, salary expectations and a photograph.
If you provide additional personal data voluntarily, for example via the free text field as part of an online application via our website, please note that only data/information that is necessary for the specific application should be provided in these open text fields.
Legal basis and purpose of data processing
The legal basis for the processing of your personal data by us in the application process is derived from Art. 88 para. 1 GDPR in conjunction with Art. 26 para. 1 sentence 1 BDSG and Art. 6 para. 1 sentence 1 lit. b GDPR. § Section 26 para. 1 sentence 1 BDSG or Art. 6 para. 1 sentence 1 lit. b) GDPR. We process the data that you provide to us as part of your application exclusively for the purpose of checking your application, selecting applicants and, if necessary, preparing joint interviews. We do not process data for any other purposes.
If you provide us with additional data, e.g. in the free text field, which is not necessary for the aforementioned purpose (e.g. information on hobbies), we would like to point out that this is voluntary on your part. By submitting this information to us, you consent in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR that we may also process your data to gain an impression of your application in advance. You can revoke your consent at any time with effect for the future.
Recipients / categories of recipients
Your details will be treated confidentially within our company and will not be passed on to third parties. Internally, applications are processed electronically or as a manual file, depending on how they are sent. As a rule, applications are forwarded to the decision-makers responsible for filling the specific position.
Duration of storage
If your application is followed by the conclusion of an employment contract, the data you have submitted may be stored by us in your personnel file for the purpose of the usual organisational and administrative process in compliance with the relevant legal regulations.
If you are not hired, the data you have submitted will generally be deleted 3 months after notification that your application has been rejected.
If you are not hired, but your application is still of interest to us, we will ask for your consent as to whether we may keep your application for future job advertisements.
5. Client area
dp Cloud und dp Signatur
DATEV Unternehmen online
DATEV Meine Steuern
If you follow an external link to our cloud or DATEV in the client area, the data protection notices and declarations there apply. As soon as you click on an external link, data is transmitted to the operator of this website, particularly your IP address, the time the link was accessed and the page from which you clicked on the link.
In our role as a tax consultancy firm, we have access to the corresponding cloud applications and use them as an exchange platform for information, documents and receipts.
These are processed by us if necessary.
6. Links to network and co-operation partners / external links
Our website contains so-called "external links" (links) to other websites.
If you follow a link to one of the websites of our network or co-operation partners, the data protection information and declarations there apply. As soon as you click on an external link, data is transmitted to the operator of this website, particularly your IP address, the time the link was called up and the page from which you clicked on the link.
9. Your data protection rights
As a data subject, you have the right to access your personal data (Art. 15 GDPR) and to rectification of inaccurate data (Art. 16 GDPR) or erasure if one of the grounds specified in Art. 17 GDPR applies. You also have the right to restriction of processing if one of the conditions set out in Art. 18 GDPR applies and, in the cases set out in Art. 20 GDPR, the right to data portability.
If the processing of data is based on your consent, you are entitled to withdraw your consent to the use of your personal data at any time in accordance with Art. 7 para. 3 GDPR. Please note that the revocation only takes effect for the future. Processing that took place before the revocation is not affected. Please also note that we may have to retain certain data for a certain period in order to fulfil legal requirements despite your revocation.
In cases in which we process your personal data on the legal basis of Art. 6 para. 1 sentence 1 lit. f) GDPR, you have the right to object at any time in accordance with Art. 21 GDPR. We will then no longer process the personal data unless there are demonstrably compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
You can exercise your data protection rights and any revocation via the following e-mail address:
cordula.karrer@karrer-viellieber.de
As a data subject, you also have the right to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR if you believe that the processing of data concerning you violates data protection regulations. The Bavarian State Office for Data Protection Supervision based in Ansbach is responsible for us.
10. Our data protection officer
You also have the right to contact our data protection officer at any time, who is obliged to maintain confidentiality regarding your enquiry. The contact details of our data protection officer are:
Cordula Karrer
cordula.karrer@karrer-viellieber.de
We will be happy to provide you with further information on request.