Protection of data privacy

Privacy policy

Declaration according to DSGVO

I. Responsible

The person responsible within the meaning of the Basic Data Protection Regulation (hereinafter referred to as “DSGVO”) and other national data protection laws and other data protection regulations is

OVH Steuerberater Overhage Villwock Heinze Legal PartGmbB

as well as

OVH Rechtsanwälte Overhage Villwock Heinze Tax PartGmbB

(OVH Steuerberater Overhage Villwock Heinze Legal PartGmbB and

OVH Rechtsanwälte Overhage Villwock Heinze Tax PartGmbB hereinafter also jointly referred to as “OVH”)

50672 Cologne
Antwerp Str. 35
phone: 0049 221 / 99 99 34 – 66
E-Mail: info@ovh-legal.de

You can also reach our data protection officer via the above-mentioned contact details.

II General information on data processing

OVH attaches particular importance to data protection. For this reason, we collect and use personal data of our users only to the extent necessary to provide a functional website and our contents and services. Personal data means any information relating to an identified or identifiable natural person (hereinafter ‘data subject’).

The collection and use of personal data of our users is always in accordance with the DSGVO and the applicable country-specific data protection regulations. If it is necessary to process personal data and such processing is not permitted by legal regulations, we always obtain the consent of the person concerned.

A transfer of personal data to third parties does not take place on principle. Data will only be transmitted if you have expressly consented to it (Art. 6 para. 1 sentence 1 lit. a DSGVO); if there is a legitimate interest in the transmission and no reason to assume that you have an overriding interest worthy of protection in not transmitting your data (Art. 6 para. 1 sentence 1 lit. f DSGVO); there is a legal obligation to disclose the data (Art. 6 para. 1 sentence 1 lit. c DSGVO); or disclosure is permissible in the context of fulfilling a contract with you (Art. 6 para. 1 sentence 1 lit. b DSGVO)

III. collection and storage of personal data when visiting the website

Whenever you call up our websites www.ovh-legal.de, www.ovh-legal.de and www.ovh-tax.de, information is automatically transmitted to the server of our website by the browser you use. The following information is recorded and stored until automatic deletion:

  • IP address of the requesting computer,
  • Date and time of access,
  • Name and URL of the retrieved file,
  • the referrer URL, i.e. the website from which the access was made
  • Information about the type of browser used,
  • the operating system of your computer,
  • the name Internet Service Provider.

This data is only stored temporarily in a so-called log file. Not affected by this are the IP addresses of the user or other data that enable the assignment of data to a user. This data is not stored together with other personal data of the user. When using this data, we do not draw any conclusions about the person concerned.

The legal basis for this processing is Article 6(1). 1 p. 1 lit f DSGVO. Our legitimate interest lies in providing a functional website with correctly delivered content, in optimizing our systems and in providing law enforcement agencies with the information they need in the event of a cyber attack. As soon as there is no longer a legitimate interest and there is no legal obligation to retain the data, it is routinely deleted.

Furthermore, we use cookies and employ analysis and marketing services. You will find more detailed information on this in sections IV, V and VI of this data protection declaration.

IV. Cookies

We use cookies on our website. Cookies are small text files which your browser automatically creates and which can be stored on your end device. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again. This does not mean that we obtain direct knowledge of your identity.

On the one hand, the use of cookies serves to make the use of our offer more pleasant for you. In addition, we use cookies to optimize the user-friendliness and our offer and for statistical purposes.

We use so-called session cookies to recognize that you have already visited individual pages of our website. These cookies are automatically deleted after leaving our site. In addition, we use temporary cookies that are stored on your end device for a certain fixed period of time. If you visit our site again, it is automatically recognized that you have already been with us and which entries and settings you have made so that you do not have to enter them again. The data collected includes the frequency of page views, search terms entered and the use of website functions.

The use of cookies for statistical recording and evaluation of our offer is described in more detail in section V. These cookies enable us to automatically recognize that you have already been with us when you visit our site again. These cookies are automatically deleted after a defined time.

The data processed by cookies are processed for the aforementioned purposes in order to safeguard our legitimate interests and the third-party rights of third parties in accordance with art. 6 paragraph. 1 p. 1 lit f DSGVO required. Our legitimate interest lies in providing a functional and user-friendly website.

Most browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your computer or so that a message always appears before a new cookie is created. However, completely deactivating cookies may mean that you will not be able to use all the functions of our website.

V. Use of analysis services (Google Analytics)

We use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as “Google”) (https://www.google.de/intl/de/about/) for the purpose of customising and continuously optimising our website.

We use Google Analytics on the basis of article 6 paragraph. 1 p. 1 lit f DSGVO. In this way, we want to ensure that our website is designed to meet the needs of our customers and is continuously optimised. On the other hand, we use the tracking measures to record the use of our website statistically and evaluate it for the purpose of optimizing our offer for you. These interests are to be considered legitimate within the meaning of the aforementioned provision.

In this context, pseudonymised user profiles are created and cookies (see section IV.) are used. The information generated by the cookie about your use of this website such as

  • Browser type/version,
  • the operating system used,
  • Referrer URL (the previously visited page),
  • Host name of the accessing computer (IP address),
  • Time of the server request,

are generally transferred to a Google server and stored there. Under certain circumstances, the data may also be transferred to Google’s servers in the USA. Due to Google’s certification under the EU-US Privacy Shield, the European Commission has determined an adequate level of data protection for Google.

The above-mentioned information may also be transferred to third parties if this is required by law or if third parties process this data on our behalf. Under no circumstances is the IP address transmitted by your browser merged with other data from Google. The IP addresses are made anonymous, so that an assignment is not possible (IP masking). Only in exceptional cases is the full IP address transferred to a Google server in the USA and shortened there.

On our behalf, Google will use this information to evaluate your use of the website, to compile reports on the website activities and to provide us with further services related to the use of the website and the Internet.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de). An opt-out cookie is set to prevent future collection of your information when you visit this site. The opt-out cookie is placed on your device and is valid only in that browser and only for our website. If you delete the cookies in this browser, you must set the opt-out cookie again.

Further information on data protection in connection with Google Analytics can be found in the Google Analytics Help: https://support.google.com/analytics/answer/6004245?hl=de.

VI. use of marketing services (Google Ads)

On our website we have integrated the service Google Ads. Google Ads is an internet advertising service that allows you to display ads in Google’s search engine results as well as in the Google advertising network. The operating company of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads will be subject to the provisions of Article 6(6) 1 p. 1 lit f DSGVO is used. In this way, we want to ensure that our website is advertised in a targeted and needs-based manner. In connection with the tracking measures described in section V., the use of the advertising offers on our website is statistically recorded and evaluated for the purpose of optimizing our offer for you. Diese Interessen sind als legitim im Sinne der vorgenannten Bestimmung anzusehen.

The purpose of Google Ads is to promote our website by displaying advertising on the websites of third parties and in Google’s search results, as well as to display third-party advertising on our website.

For statistical evaluation and improvement of our offer, the Google Ads ads are evaluated with the help of Google Conversion Tracking. Google Ads will set a cookie (see section IV.) on your computer if you have reached our website via a Google ad. These cookies lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of the advertiser’s website and the cookie hasn’t expired, Google and the advertiser can tell that the user clicked on the ad and was directed to that page.

Every Ads customer receives a different cookie. Cookies can therefore not be tracked via the websites of Ads customers. The information collected using the conversion cookie is used to compile conversion statistics for ad customers who have opted in to conversion tracking. Ads customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, you will not receive information that can be used to identify users personally. If you do not wish to participate in the tracking process, you can also refuse the necessary setting of a cookie – for example, via browser settings that generally deactivate the automatic setting of cookies. You can also disable cookies for conversion tracking by setting your browser to block cookies from the domain “www.googleadservices.com”.

Google’s further information and privacy policy on conversion tracking can be found here: https://support.google.com/google-ads/answer/1722022?hl=de and https://policies.google.com/privacy?hl=de

Furthermore we use the Google Tag Manager on our website. Google Tag Manager is a solution that allows marketers to manage website tags through one interface. The Tag Manager tool itself (which implements the tags) is a cookie-less domain and does not collect any personal information. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If deactivation is made at the domain or cookie level, it will persist for all tracking tags implemented with Google Tag Manager.

Our website also uses the remarketing function of Google. This technology is used to present visitors to the website within the Google Partner Network with interest-based advertisements. The display of advertising is achieved through the use of cookies, which can be used to analyze user behavior when visiting the website and then used for targeted product recommendations and interest-based advertising. These pages may then display ads to the visitor based on content that the visitor has previously viewed on sites that use Google’s remarketing technology. According to its own information, Google does not collect any personal data during this process. Further information can be found here https://www.google.de/tagmanager/use-policy.html and here https://policies.google.com/technologies/ads?hl=de.

If you do not wish to receive interest-based advertising through Google Remarketing technology, you can disable Google’s use of cookies for these purposes by selecting the appropriate settings at the following link:

https://adssettings.google.com/anonymous?sig=ACi0TCgMFcf7FpekvHUqS-mPHxN1gZpfvDSpUrN9mSa8V9nxDdenZ-3K4xcFepsHZ35FPiNdD0SeRFM2chd1zi7uP3IDoR8jvBQbn63Xn0KVL5FnADEnJaI&hl=de

VII. contacting via the website

Due to legal regulations, our site contains information that enables a quick electronic contact to our company (especially e-mail address). If you contact us by e-mail, your voluntarily submitted personal data is automatically stored for the purpose of processing or contacting you. This data will not be passed on to third parties.

The data will be deleted if there is no longer a legal retention period and if they are no longer required for the fulfilment or initiation of a contract. The legal basis for the processing of data transmitted in the course of sending an e-mail is Article 6 paragraph. 1 p. 1 lit f DSGVO. The legitimate interest within the meaning of the DSGVO is the processing and answering of your contact.

The data will be deleted as soon as it is needed to achieve the purpose for which it was collected, which will be the case when the respective conversation with the user has ended. The conversation ends when it is clear from the circumstances that the matter in question has been conclusively clarified. You have the possibility to object to the storage of your personal data at any time. To do so, contact the person in charge mentioned in point I. (in writing, by e-mail or by telephone). The data from the previous communication is then deleted and no further conversation is possible.

VIII Contact form

Users of our website have the possibility to contact us via a contact form (“contact” or “become a partner”). If you take this opportunity, the data entered in the input mask will be transmitted to us and stored. These dates are:

  • Name,
  • Phone number,
  • Postcode
  • e-mail address,
  • if applicable, your personal data in the subject or free text.

At the time the message is sent, the following data is also stored:

  • IP address of the calling computer,
  • Date and time of registration.

The legal basis for this data processing is Article 6 paragraph 1 p. 1 lit a DSGVO. For the processing of this data, your consent will be obtained during the sending process and reference will be made to this privacy policy. Sending the contact form without this declaration of consent is not possible. Alternatively, it is possible to contact us via the provided e-mail address. In this case, the user’s personal data transmitted with the e-mail will be stored.

We need the collected data only to answer your contact request. The data stored at the time of sending is used to ensure the security of our systems and prevent misuse of the contact form. This data will not be used or passed on in any other way.

The data is deleted as soon as it is no longer necessary for the purpose for which it was collected. This is the case for the personal data from the input mask of the contact form when the respective conversation with the user has ended. The conversation ends when it is clear from the circumstances that the matter in question has been conclusively clarified.

If the contact request results in a contractual or contract initiation relationship, the legal basis for further data processing is Art. 6 para. 1 p. 1 lit b DSGVO.

You have the possibility to revoke your consent to the processing and storage of your data at any time with effect for the future. To do so, contact the person in charge mentioned in point I. (in writing, by e-mail or by telephone). The data from the previous communication is then deleted and no further conversation is possible.

IX. Integration of Social Media Components and Plugins

We set on our website on the basis of Art. 6 paragraph 1 p. 1 lit f DSGVO Social Media Plugins from the social networks Facebook, Twitter, Xing, LinkedIn and Google+ to make our website and our company better known. The advertising purpose behind this is to be regarded as a legitimate interest within the meaning of the DSGVO. The responsibility for data protection-compliant operation must be ensured by the respective provider.

  1. Facebook plugin

On our website we use components and plugins of the social network facebook.com. facebook.com is operated by Facebook Inc., Hacker Way, Menlo Park, CA 94025, USA (hereinafter referred to as “Facebook”). The person responsible for processing personal data for data subjects outside the USA or Canada is Facebook Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland.

You can recognize these plugins by the Facebook logo (white “f” on blue tile), by a “thumbs up” sign or by buttons labeled “LIKE” or “SHARE”. This is an offer from Facebook. If you call up a page on our website that contains such a plugin, your browser establishes a direct connection with the Facebook servers. The content of the plugin is transmitted by Facebook directly to your browser and integrated by it into the website. By integrating the plugins, Facebook receives the information that your browser has called up the corresponding page of our website, even if you do not have a Facebook account or are not currently logged in to Facebook. This information (including your IP address) is transmitted by your browser directly to a Facebook server in the USA and stored there. If you are logged in to Facebook, Facebook can assign your visit to our website directly to your Facebook account. If you interact with the plugins, for example by pressing the “LIKE” or “SHARE” button, the corresponding information is also transmitted directly to a Facebook server and stored there. The information is also published on Facebook and – depending on your Facebook settings – displayed to your Facebook friends.

Facebook may use this information for the purposes of advertising, market research and the design of the Facebook pages in line with requirements. For this purpose, Facebook creates usage, interest and relationship profiles, e.g. to evaluate your use of our website with regard to the advertisements displayed on Facebook, to inform other Facebook users about your activities on our website and to provide other services associated with the use of Facebook.

If you do not want Facebook to assign the data collected via our website to your Facebook account, you must log out of Facebook before visiting our website.

For the purpose and scope of data collection and the further processing and use of the data by Facebook, as well as your rights and setting options to protect your privacy, please refer to Facebook’s data protection information (https://de-de.facebook.com/privacy/explanation).

  1. Facebook pixel

Furthermore we use the so-called “Facebook Pixel” of the social network Facebook. With the help of the Facebook pixel, Facebook is on the one hand able to determine visitors to our online offer as a target group for the presentation of ads (so-called “Facebook ads”). Accordingly, we use the Facebook pixel to display the Facebook ads placed by us only to those Facebook users who have also shown an interest in our online offering or who exhibit certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited) that we transmit to Facebook (so-called “custom audiences”). With the help of the Facebook pixel, we also want to make sure that our Facebook Ads match the potential interest of the users and are not annoying. With the help of the Facebook pixel, we can further track the effectiveness of Facebook Ads for statistical and market research purposes by seeing whether users are redirected to our website after clicking on a Facebook ad (so-called “conversion”).

The purpose and scope of data collection and the further processing and use of the data by Facebook as well as your rights and setting options to protect your privacy can be found in the Facebook privacy policy (https://de-de.facebook.com/privacy/explanation).

  1. Twitter

Our website integrates components and plug-ins of the short message network of Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA (hereinafter referred to as “Twitter”). You can recognize the Twitter plugins (tweet button) by the Twitter logo.

If you call up a page on our website that contains such a plugin, a direct connection is established between your browser and the Twitter server. Twitter thereby receives information that you have visited our site with your IP address. If you click the Twitter “tweet button” while you are logged in to your Twitter account, you can link the content of our pages on your Twitter profile. This allows Twitter to associate your visit to our site with your user account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Twitter. Regardless of whether you click on a Twitter component, Twitter will know that you have visited our website if you are logged in to Twitter at the same time.

If you do not want Twitter to be able to track visits to our site, please log out of your Twitter account. For more information, please refer to the Twitter privacy policy: https://twitter.com/privacy

  1. Xing

On our website we use components and plugins of the social network xing.com. xing.com is operated by Xing SE, Dammtorstraße 30, 20354 Hamburg, Germany (“Xing”). Xing is a social network especially for business contacts.

You can recognize Xing plugins by the buttons with the Xing logo or by the name “XING”. This is an offer from Xing. By calling up pages on this website on which Xing plug-ins have been integrated, your browser establishes a direct connection with the Xing servers. The content of the plugin is transmitted by Xing directly to your browser, which integrates it into the website. By integrating the plugins, Xing receives the information that your browser has called up the corresponding page of our website. If you are logged in to Xing with your own profile, Xing can directly assign your visit to our website, the sub-pages you visit and the duration of your stay to your Xing account. This happens regardless of whether you use a Xing button. When you interact with the plugins, for example by pressing the “Share” button, the corresponding information is also sent directly to a Xing server and stored there. The information is also published on Xing and – depending on your Xing settings – displayed to your Xing contacts.

If you do not want Xing to associate the data collected via our website with your Xing account, you must log out of Xing before visiting our website.

Information on the collection, processing and use of personal data by Xing can be found at https://privacy.xing.com/de/datenschutzerklaerung

  1. LinkedIn

We have also included components of the linkedin.com website on our website. Linkedin.com is operated by LinkedIn Corporation, 2029 Stierlin Court Mountain View, CA, 94043, USA, and LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (hereinafter referred to as “LinkedIn”) is responsible for the operation of the website and data protection matters outside the USA. LinkedIn is a social network especially for business contacts.

You can recognize LinkedIn plugins by the buttons with the LinkedIn logo or by the label “in”. This is an offer from LinkedIn.

By calling up pages on this website on which LinkedIn plug-ins have been integrated, your browser establishes a direct connection with the LinkedIn servers. The content of the plugin is transmitted by LinkedIn directly to your browser, which integrates it into the website. Through the integration of the plugins LinkedIn receives the information that your browser has called the corresponding page of our website.

If you are logged in to LinkedIn with your own profile, LinkedIn can directly associate your visit to our website, the sub-pages you visit, and the length of your stay with your LinkedIn account. This happens regardless of whether you use a LinkedIn button. When you interact with the plugins, for example by pressing the “tell” button, the corresponding information is also sent directly to a LinkedIn server and stored there. The information can also – depending on your settings – be published on linkedin.com and displayed to your contacts.

If you do not want LinkedIn to associate information collected through our website with your LinkedIn account, you must log out of LinkedIn before visiting our website. The applicable LinkedIn privacy policy with the ability to disable LinkedIn cookies can be found at www.linkedin.com/legal/privacy-policy.

X. Rights of the parties concerned

As a data subject, you are entitled to the following rights in relation to the person responsible. If you wish to exercise any of these rights, please contact the person responsible using the contact details given in point I.

  1. Right to information (Art. 15 DSGVO)

You may request information from the data controller as to whether personal data concerning you is being processed by him.

Where processing is involved, you may obtain information from the controller about this personal data and about the purposes of the processing; the categories of personal data processed; the recipients or recipients of the data; the purposes of the processing; the categories of personal data processed; the recipients or recipients of the data respectively the categories of recipients to whom the personal data concerning you have been or will be disclosed; the envisaged duration for which the personal data concerning you will be kept or, if this is not possible, the criteria for determining the duration of the storage; the existence of a right of rectification or erasure of the personal data concerning you or of a right of objection to the processing by the controller; the existence of a right of appeal to a supervisory authority; if the personal data are not collected from you, all available information on the origin of the data; the existence of an automated decision making process including profiling as referred to in paragraph 1; the existence of a right of access to the personal data concerning you; the existence of a right of rectification or erasure of the personal data concerning you or of a right of opposition to the processing; the existence of a right of appeal to a supervisory authority; if the personal data are not collected from you, all available information on the origin of the data; the existence of an automated decision making process including profiling as referred to in paragraph 1. Article 22(2) 1, 4 FADP and, at least in these cases, relevant information about the logic involved and the scope and intended impact of such processing on the data subject; the transfer of personal data to a third country or to an international organisation and the appropriate safeguards in this context, in accordance with Article 1, 4 FADP. Art. 46 DSGVO; request information.

  1. Right of rectification (Art. 16 DSGVO)

You have the right to have your personal data corrected and/or completed without delay vis-à-vis the controller if the processed personal data concerning you is incorrect or incomplete.

  1. Right of cancellation (Art. 17 DSGVO)

You can demand the deletion of your data stored with us if the data is no longer necessary for the purposes for which it was collected or processed; you revoke your consent and there is no other legal basis for the processing; you object in accordance with section 3.1. Article 21(2) 1 DSGVO and there are no overriding legitimate reasons for the processing or you are not entitled to the processing pursuant to Art. according to Article 21(2) 2 DSGVO; the personal data has been processed unlawfully; the deletion is necessary to fulfil a legal obligation; or the personal data has been processed in relation to information society services offered in accordance with Art. Art. 8 Abs. 1 DSGVO were collected. This right of deletion shall not apply if the processing is necessary for the exercise of the right to freedom of expression and information; to fulfil a legal obligation; for reasons of public interest; or to assert, exercise or defend legal claims.

  1. Right to restrict processing (Art. 18 DSGVO)

You may request the restriction of the processing of the personal data concerning you if the accuracy of the personal data is disputed by you for the duration of the verification of its accuracy by the controller; if the processing is unlawful and you request the restriction of the processing instead of its erasure; if the controller no longer needs the data but you need them for the exercise, exercise or defence of legal claims; or if you object to the processing in accordance with paragraph 1. Article 21(2) 1 DSGVO and it has not yet been established whether justified reasons on the part of the person responsible outweigh your reasons.

If the processing of personal data relating to you has been restricted, such data, apart from being stored, may be processed only with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or on grounds of an important public interest of the Union or of a Member State.

If the restriction on processing has been restricted in accordance with the above conditions, you will be informed by the controller before the restriction is lifted.

  1. Right to data transferability (Art. 20 DSGVO)

You have the right to receive your personal data that you have provided us in a structured, common and machine-readable format or to request that it be transferred to another responsible party.

  1. right of appeal

Insofar as your personal data is collected on the basis of legitimate interests in accordance with Art. 6 Abs. 1 p. 1 lit f DSGVO are processed, you have the right to object to the processing of your personal data for reasons arising from your particular situation. If the objection is directed against direct advertising, you have a general right of objection, which will be implemented by us without specifying a special situation.

  1. Right to withdraw consent (Art. 7 para. 3 DSGVO)

You have the right to revoke the consent you have given us at any time, with the consequence that we may no longer continue the data processing based on this consent for the future.

  1. Right of appeal (Art. 77 DSGVO)

You have the right to complain to a regulatory body. You can contact the supervisory authority at your place of residence or workplace or the supervisory authority responsible for us.

XI. Data Security

In order to protect your data in the best possible way, we use the SSL (Secure Socket Layer) procedure on our website in conjunction with the highest encryption level supported by your browser. You can tell whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the status bar of your browser. We also use appropriate technical and organizational security measures to protect your data against manipulation, loss, destruction or unauthorized access by third parties.

XII. Up-to-dateness and amendment of this data protection declaration

This privacy policy is currently valid as of March 2020. Due to the further development of our website and offers or due to changed legal requirements, an amendment of this declaration may become necessary.

This post is also available in: Deutsch