§ 1 General information and Data Controller
(1) In the following I inform you about the processing of personal data when using my website vvlaw.de. When accessing the internet address vvlaw.eu, an automatic redirection to the domain vvlaw.de takes place. Personal data are all data that can be related to you personally, e.g. name, address, email addresses, user behaviour.
(2) The controller pursuant to art. 4 point 7 of the EU General Data Protection Regulation (GDPR) is Georg Varentsov, lawyer (law firm name: Anwaltskanzlei Varentsov), Bleichstraße 27, 66111 Saarbrücken, datenschutz@vvlaw.de.
(3) In addition to providing my website for purely informational use, I may also offer various other services on my website that you can use if you are interested. To do so, you will generally have to provide additional personal data that will be used to provide the respective service and to which the data processing principles stated in this declaration apply.
(4) When you contact me (for example by e-mail), the data you provide (in particular your email address, your name and, if applicable, your telephone number) will be stored by me in order to answer your questions. I delete the data arising in this context after storage is no longer necessary or restrict processing if there are statutory retention periods.
(5) I partially use external service providers to process your data. The service providers I commission are carefully selected and monitored by me and are bound by my instructions. If my service provider or partner is based in a country outside the European Economic Area (EEA), I will inform you of the consequences of this circumstance in this declaration.
§ 2 Your rights
(1) You have the following rights vis-à-vis me with regard to the personal data concerning you:
Right of access,
Right to rectification,
Right to erasure,
Right to restriction of processing,
Right to object to processing,
Right to data portability
(2) You also have the right to complain to a data protection supervisory authority about the processing of your personal data by me.
(3) If you have given your consent to the processing of your data, you can revoke this at any time. Such a revocation affects the permissibility of the processing of your personal data after you expressed it towards me.
(4) Insofar as I base the processing of your personal data on a weighing of interests, you can object to the processing. This is the case if, in particular, the processing is not necessary for the fulfilment of a contract with you, whereat the necessity is explained by me in the description of the functions in this declaration. When exercising such an objection, I ask you to explain the reasons why I should not process your personal data as I have done. In the event of your substantiated objection, I will examine the situation and will either discontinue or adapt the data processing or point out to you my compelling and legitimate reasons, on the basis of which I will continue the processing.
(5) You can object to the processing of your personal data for the purposes of advertising and data analysis at any time, if and insofar as this takes place. You can inform me about your objection in this regard at datenschutz@vvlaw.de.
§ 3 Processing of personal data when visiting my website
(1) When using the website for information purposes only, i.e. if you do not transmit any specific information, I only collect the personal data that your browser transmits. If you wish to visit my website, I collect the following data, which is technically necessary for me to display my website to you and to ensure its stability and security (legal basis is art. 6 para. 1 sentence 1 point f GDPR):
IP address
Content of the request (specific page)
Date and time of the request
Time zone difference to Greenwich Mean Time (GMT)
Access status/HTTP status code
Amount of data transferred in each case
Website from which the request originates
Browser
Operating system and its interface
Language and version of the browser software.
The aforementioned data is processed temporarily for the duration necessary for the purposes mentioned in sentence 2 until its automated deletion.
(2) In addition to the aforementioned data, website cookies may be stored on your computer when you use the website, without prejudice to subsection 4. Cookies are small text files that are stored on your hard drive – assigned to the browser you are using – and through which certain information flows to the party that sets the cookie (i.e. me as the website operator). Cookies cannot execute programs or transfer viruses to your computer. They serve to make the website more user-friendly and effective overall.
(3) Use of cookies:
Without prejudice to subsection 4, this website may use the following types of cookies, the scope and function of which are explained below: transient cookies (see next bullet point), persistent cookies (see next but one bullet point).
Transient cookies are automatically deleted when you close the browser. These include session cookies in particular. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This allows your computer to be recognised when you return to my website. The session cookies are deleted when the website visitor closes the browser.
Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete cookies at any time in the security settings of your browser.
You can configure your browser settings according to your wishes and, for example, refuse to accept cookies or only third-party cookies.
(4) The website uses the technically necessary cookie __cf_bm of the CDN provider mentioned in subsection 6. This cookie is used for bot defense and the security of my website. Otherwise, this website does not use cookies.
(5) The website vvlaw.de is hosted externally by a website hoster and domain provider based in the European Union. The external hosting is in the interest of a fast, secure and efficient provision of my website by a professional provider (art. 6 para. 1 sentence 1 point f GDPR) and for the purpose of contract fulfilment towards potential and existing customers (Art. 6 para. 1 sentence 1 point b GDPR). The personal data collected on this website is processed on the servers of the company mentioned in sentence 1. When you access the internet address vvlaw.eu, you are automatically redirected to the internet address vvlaw.de, which is also facilitated by the company mentioned in sentence 1. The legal basis for this data processing is my legitimate interest in the easy discoverability and accessibility of my website under different domains pursuant to art. 6 para. 1 sentence 1 point f GDPR. The processed data is the data referred to in subsection 1. The website hoster and domain provider named in sentence 1 will only process your data to the extent and as long as necessary to fulfil its contractual obligations. I have concluded a Data Processing Agreement with the latter in accordance with Art. 28 GDPR, which encompasses the data processing associated with visiting this website and the redirection.
(6) I use the services of Cloudflare Inc. (101 Townsend St., San Francisco, CA 94107, USA) in the form of the Content Delivery Network (CDN) provided by Cloudflare Inc. as well as other services such as WAF, DDoS protection and bot defense. The CDN provided by Cloudflare Inc. makes it possible to improve loading times by using regionally and globally distributed servers and also serves the stability and reliability of the provision of my website. The other services of Cloudflare Inc. such as WAF, DDoS protection and bot defense serve the security of the provision and the operation of my website. Cloudflare Inc. acts for me as a processor within the meaning and in accordance with Art. 28 GDPR on the basis of the Data Processing Agreement concluded with me. In this context, Cloudflare Inc. processes the data mentioned in subsections 1 to 4. The legal basis for the data processing mentioned in this subsection is my legitimate interest in the functionality and security of my website pursuant to art. 6 para. 1 sentence 1 point f GDPR. Cloudflare Inc. processes your data only to the extent and as long as necessary to fulfil the service obligations of this company. Cloudflare Inc. is an active participant in the EU-U.S. Data Privacy Framework (list entry available at: https://www.dataprivacyframework.gov/list). Consequently, the level of data protection required in accordance with the relevant adequacy decision of the European Commission is to be regarded as ensured by Cloudflare Inc. The data protection declaration of Cloudflare Inc. is available at: https://www.cloudflare.com/privacypolicy.