deen
Nexia Ebner Stolz

Privacy Policy

This pri­vacy policy informs visi­tors to our web­site and atten­dees at our events about the pro­ces­sing of per­so­nal data. If you have app­lied for emp­loy­ment with Ebner Stolz, please click here for furt­her infor­ma­tion on data pro­tec­tion.

I. Who is res­pon­si­ble for data pro­ces­sing and whom can I con­tact?

We are jointly res­pon­si­ble for the pro­ces­sing of your data on this web­site:

  • Ebner Stolz Mön­ning Bachem Wirt­schafts­prü­fer Steu­er­be­ra­ter Rechts­an­wälte Part­ner­schaft mbB
  • Ebner Stolz GmbH & Co. KG Wirt­schafts­prü­fungs­ge­sell­schaft Steu­er­be­ra­tungs­ge­sell­schaft
  • Ebner Stolz Mana­ge­ment Con­sul­tants GmbH
  • Dr. Ebner, Dr. Stolz Mana­ge­ment Sup­port GmbH

The con­tact details of these com­pa­nies ("Ebner Stolz") can be found on the legal noti­ces page of our web­site. To regu­late our data pro­tec­tion res­pon­si­bi­li­ties, these com­pa­nies have ente­red into an agree­ment, the essen­tial con­tent of which we will send to you by email upon requ­est.

If you have any ques­ti­ons about data pro­tec­tion, please con­tact our data pro­tec­tion offi­cer using the con­tact details below:

Ebner Stolz, Daten­schutz­be­auf­trag­ter, Kro­nen­straße 30, 70174 Stutt­gart, Email: daten­schutz­be­auf­trag­ter@eb­ner­stolz.de

II. What sorts of data pro­ces­sing do you do?

1. Trans­mis­sion of data via the Inter­net

When you visit this web­site, we pro­cess your IP address, the date and time of your visit, infor­ma­tion about your brow­ser, inclu­ding lan­guage set­tings, and, if app­lica­ble, your ope­ra­ting sys­tem, the address of the web­site from which you acces­sed our web­site (refer­rer URL) and infor­ma­tion about the files you have acces­sed. Your brow­ser auto­mati­cally trans­mits this data to your Inter­net pro­vi­der, which in turn trans­mits it to us.

Why is this data pro­ces­sed?

We pro­cess this data so that you can load our web­site, and for pur­po­ses of moni­to­ring and, if necessary, res­to­ring sys­tem secu­rity and sta­bi­lity, as well as for sta­tisti­cal pur­po­ses (see Sec­tion II.3.). We can­not attri­bute this data to a spe­ci­fic per­son. The legal basis for such pro­ces­sing is Art. 6 (1)(f) of the Gene­ral Data Pro­tec­tion Regu­la­tion ("GDPR"). Accor­ding to that Arti­cle, pro­ces­sing is law­ful if it is necessary to pro­tect the legiti­mate inte­rests of the data con­trol­ler or a third party, except where such inte­rests are over­rid­den by your inte­rests or fun­da­men­tal rights and free­doms that require pro­tec­tion of data. We have a legiti­mate inte­rest in ensu­ring that our web­site is dis­played cor­rectly on your screen and that we can iden­tify and remedy the cau­ses of mal­func­ti­ons.

How long is this data sto­red?

This data is sto­red in log files for a maxi­mum of three months.

Do I have to pro­vide this infor­ma­tion?

The pro­vi­sion of this data is not requi­red by law or by con­tract and is not requi­red for ente­ring into a con­tract with us. Howe­ver, tech­ni­cal rea­sons make it impos­si­ble to visit our web­site wit­hout this data being pro­ces­sed.

2. Sto­rage of coo­kies

We use coo­kies on our web­site. Coo­kies are small files that con­tain an iden­ti­fi­ca­tion num­ber. Coo­kies are sto­red on your com­pu­ter or mobile device when you visit our web­site. If you visit our web­site again, your com­pu­ter or mobile device can be recog­ni­zed by this iden­ti­fi­ca­tion num­ber.

Why are coo­kies crea­ted?

Ses­sion coo­kies allow you to avoid having to re-enter infor­ma­tion on our web­site, even if you visit other web­si­tes in bet­ween. The pur­pose of these ses­sion coo­kies is the­re­fore to faci­li­tate the use of our web­site. In addi­tion, we use per­ma­nent coo­kies to sta­tisti­cally record the use of our web­site and to eva­luate it for the pur­pose of opti­mi­zing our web­site (see II.3.).

The legal basis is Art. 6(1)(f) of the GDPR. We have a legiti­mate inte­rest in enab­ling you to use our web­site in a user-fri­endly man­ner and in opti­mi­zing our web­site.

How long is this data sto­red?

Ses­sion coo­kies are dele­ted you close your brow­ser. Per­ma­nent coo­kies are valid for up to 24 months and are dele­ted after­wards.

Do I have to pro­vide this infor­ma­tion?

You can visit our web­site wit­hout coo­kies. There is no obli­ga­tion to use coo­kies. Most brow­sers auto­mati­cally accept coo­kies. You can set your brow­ser so that no coo­kies are per­mit­ted. You must make the set­tings sepa­ra­tely for each brow­ser and for each device that you use.

3. Web ana­ly­sis by Google Ana­lytics

We use Google Ana­lytics. This is an ana­ly­sis ser­vice of Google LLC ("Google"). Pseud­ony­mous user pro­fi­les of visi­tors to our web­site are crea­ted. Google uses per­ma­nent coo­kies (see Sec­tion II. 2.). The infor­ma­tion gene­ra­ted by the coo­kie about your use of our web­site is pro­ces­sed by Google in the Uni­ted Sta­tes. This infor­ma­tion is the data men­tio­ned in Sec­tion II.1. above. Google also pro­ces­ses the search term you used to find our web­site via a search engine. We use Google Ana­lytics with IP anony­miza­tion enab­led. Google will shor­ten your IP address wit­hin the Euro­pean Union or the Euro­pean Eco­no­mic Area. Only in excep­tio­nal cases will the full IP address be trans­mit­ted to and anony­mi­zed in the Uni­ted Sta­tes. Furt­her infor­ma­tion on Google Ana­lytics can be found on the fol­lo­wing Google web­site: https://sup­port.google.com/ana­lytics/ans­wer/6004245?hl=en.

Why is this data pro­ces­sed?

The data are pro­ces­sed for the pur­pose of mar­ket rese­arch and demand-ori­en­ted design of our web­site. Google pro­ces­ses this data on our behalf in order to eva­luate the use of our web­site and to com­pile reports on the acti­vi­ties on our web­site.

The legal basis is Art. 6 (1)(f) of the GDPR. We have a legiti­mate inte­rest in using the sta­tistics pro­vi­ded by Google to adapt our web­site to the needs of visi­tors to our web­site and to use these sta­tistics for inter­nal mar­ket rese­arch.

How long is this data sto­red?

The data agg­re­ga­ted by Google Ana­lytics is sto­red for 14 months. Coo­kies from Google Ana­lytics are valid for 12 months.

Do I have to pro­vide this infor­ma­tion?

The pro­vi­sion of this data is not man­datory and is not necessary for ente­ring into a con­tract with us. You can pre­vent the sto­rage of coo­kies and thus the use of Google Ana­lytics by set­ting your brow­ser (see II.2.). You can also pre­vent the pro­ces­sing of data gene­ra­ted by the coo­kie by down­loa­ding and instal­ling the plu­gin available at the fol­lo­wing link: http://tools.google.com/dlpage/gaop­tout?hl=en. Alter­na­ti­vely, or wit­hin brow­sers on mobile devices, you can click the fol­lo­wing link: Disa­ble tra­cking. An opt-out coo­kie is set in the brow­ser you are curr­ently using to access our web­site. If you delete your coo­kies in this brow­ser, you must click on this link again. If you use several devices or brow­sers, you must click this link for each indi­vi­dual device in each indi­vi­dual brow­ser.

4. News­let­ters

If you have sub­scri­bed to a news­let­ter, we pro­cess the data you ente­red when you regis­te­red for the news­let­ter.

Why is my data pro­ces­sed?

We pro­cess your email address or pos­tal address for the pur­pose of regu­larly sen­ding our news­let­ters. After you sub­scribe to the email news­let­ter, you will receive an email from us with a link to verify your email address. Further­more, anony­mous link tra­cking takes place as soon as you click on links in our emails; this ser­ves purely sta­tisti­cal pur­po­ses and does not allow any con­clu­si­ons to be drawn about the beha­vior of an indi­vi­dual per­son. The legal basis is your con­sent, which you gave us when sub­scri­bing to the news­let­ter (Art. 6(1)(a) of the GDPR).

How can I unsub­scribe from the news­let­ter? How long is the data sto­red?

If you no lon­ger wish to receive the news­let­ter, you can revoke your con­sent to receive the news­let­ter by sen­ding an email to info@eb­ner­stolz.de at any time and wit­hout giving any rea­sons (for furt­her infor­ma­tion on the right of with­dra­wal, see Sec­tion IV.). Alter­na­ti­vely, you can unsub­scribe from the news­let­ter by cli­cking on http://news­let­ter.ebner­stolz.de/News­let­ter-Abmel­dung.jsp

The data you pro­vi­ded when you sub­scri­bed to the news­let­ter will be dele­ted as soon as pos­si­ble after you have revo­ked your con­sent or unsub­scri­bed from the news­let­ter. If you are also a cli­ent, busi­ness part­ner, or an emp­loyee of ours, this data may be sto­red for a lon­ger period for other pur­po­ses, pro­vi­ded that it is necessary for the per­for­mance of a con­tract or emp­loy­ment rela­ti­onship or the ful­fil­ment of sta­tutory reten­tion obli­ga­ti­ons.

Do I have to pro­vide this infor­ma­tion?

Rece­ipt of our news­let­ter is vol­un­tary. Howe­ver, in order to receive the email news­let­ter, you must pro­vide your email address (or your pos­tal address if you sub­scribe to the print news­let­ter). No addi­tio­nal infor­ma­tion is requi­red. The indi­ca­tion of your name is vol­un­tary and allows us to address you per­so­nally. If you have sub­scri­bed to an email news­let­ter, pro­vi­ding your address is vol­un­tary and allows us to inform you of events in the vicinity of your place of resi­dence.

5. Events hos­ted by Ebner Stolz

If you have regis­te­red for an event orga­ni­zed by Ebner Stolz, we will pro­cess the data you ente­red when regis­te­ring.

Why is my data pro­ces­sed?

We pro­cess your data for the pur­pose of con­tract ful­fil­ment or to carry out pre-con­trac­tual mea­su­res in the run-up to events. In parti­cu­lar, we pro­cess your email address so that we can send you a regi­s­t­ra­tion con­fir­ma­tion, semi­nar docu­ments if necessary and, if desi­red, a "parti­ci­pant cer­ti­fi­cate". We will also inform you of any chan­ges to the date and con­tent of the event. We pro­cess your name (and com­pany name, if app­lica­ble) and your pos­tal address for the pur­pose of invoi­cing and assig­ning your regi­s­t­ra­tion to your com­pany. The legal basis for data you have ente­red in man­datory fields is Art. 6 (1)(b) of the GDPR, while the legal basis for data you have vol­un­ta­rily pro­vi­ded to us is your con­sent (Art. 6 (1)(a) of the GDPR).

We also use your data for the pur­pose of con­tac­ting you by email after an event so that you can eva­luate it. Your eva­lua­tion will be eva­lua­ted anony­mously for sta­tisti­cal pur­po­ses only. Our aim is to con­ti­nuously improve our events. We also use your data to send pos­tal or email adver­ti­sing for our events, inso­far as this is legally per­mis­si­ble. The legal basis is Art. 6(1)(f) of the GDPR. We have a legiti­mate inte­rest in sen­ding direct mail. If you do not wish to receive infor­ma­tion about our events or do not wish to eva­luate our events, you can object to this use of your data when you regis­ter for an event and at any time the­reaf­ter (see Sec­tion IV).

How long is the data sto­red?

We may also store your data after the event has been held at least until pay­ment of any requi­red fee for the event. For the adver­ti­sing pur­po­ses descri­bed above, we may store your data for up to four years, pro­vi­ded that you have not objec­ted to the use for adver­ti­sing pur­po­ses. In order to assert or defend legal claims, we may store data wit­hin the regu­lar limi­ta­tion period of three years, and in excep­tio­nal cases, until the expiry of the maxi­mum limi­ta­tion periods. If we are requi­red to store cer­tain data, we are entit­led to do so until the expi­ra­tion of the periods spe­ci­fied in § 257 of the Ger­man Com­mer­cial Code (HGB) and § 147 of the Ger­man Tax Code (AO). These periods are up to 10 years.

Do I have to pro­vide this infor­ma­tion?

Our events are vol­un­tary. Howe­ver, in order to regis­ter, you must pro­vide at least your email address, your name (and com­pany name, if app­lica­ble), and, in the case of paid events, your bil­ling address; other­wise we will not be able to send you a regi­s­t­ra­tion con­fir­ma­tion and invoice. Your name is requi­red; other­wise we will not be able to print a name tag for the event and will not be able to address you per­so­nally. No addi­tio­nal infor­ma­tion is requi­red for parti­ci­pa­tion in an event.

6. Use of reCAPT­CHA

When you regis­ter for our events using our web­site, we emp­loy Google reCAPT­CHA.

We use Google's reCAPT­CHA ser­vice to pro­tect our web­site from wrong­ful com­pu­ter-gene­ra­ted regi­s­t­ra­ti­ons for our events. This ser­vice uses coo­kies. The infor­ma­tion col­lec­ted by the coo­kie about your use of this web­site, such as your IP address, is gene­rally trans­mit­ted to and pro­ces­sed by Google ser­vers. On behalf of Ebner Stolz, Google will use this infor­ma­tion to pro­vide the reCAPT­CHA ser­vice. This infor­ma­tion may be dis­c­lo­sed to third par­ties where requi­red by law or where such third par­ties pro­cess the infor­ma­tion on Google's behalf.

Pro­ces­sing is car­ried out on the basis of Art. 6 (1)(f) of the GDPR. We have a legiti­mate inte­rest in deter­mi­ning whe­ther regi­s­t­ra­ti­ons for events have actually been made by a per­son in order to pre­vent fraud. You can pre­vent the sto­rage of coo­kies by set­ting your brow­ser accor­din­gly (see Sec­tion II.2). For more infor­ma­tion about Google's pri­vacy practi­ces, please visit: https://poli­cies.google.com/pri­vacy?hl=en

7. Career Day regi­s­t­ra­tion

If you apply for parti­ci­pa­tion in one of Ebner Stolz's career days, Sec­ti­ons II.5 and II.6 will apply. In addi­tion, we pro­cess your data in order to select parti­cu­larly sui­ta­ble parti­ci­pants from the many app­li­cants. We pro­cess your address so that we can send you a regi­s­t­ra­tion con­fir­ma­tion. The legal basis is your con­sent (Art. 6 (1)(a) of the GDPR).

If you upload files with your app­li­ca­tion that con­tain spe­cial cate­go­ries of data (Art. 9 (1) of the GDPR), you con­sent to the pro­ces­sing of this data as well. The legal basis is Art. 9(2)(a) of the GDPR and, if app­lica­ble, Art. 9(2)(f) of the GDPR. We ask you not to trans­mit such data to us.

III. Will my data be pas­sed on to third par­ties?

We pass your data on to these con­trac­tors for the fol­lo­wing rea­sons:

  • Vod­a­fone GmbH, Fer­di­nand-Braun-Platz 1, 40549 Düs­sel­dorf (data secu­rity)
  • von Affen­fels GmbH, Kro­nen­str. 40, 70174 Stutt­gart (main­tenance of our web­site)
  • Google LLC, 1600 Amphi­theatre Park­way Moun­tain View, CA 94043, USA (Google Ana­lytics)
  • Inx­mail GmbH, Went­zin­ger­str. 17, 79106 Frei­burg (email news­let­ters)
  • Sol­vAct GmbH, Dorn­rö­schen­weg 69, 70567 Stutt­gart (print news­let­ters)
  • other con­trac­tors in the fields of IT ser­vices and data media destruc­tion

Con­trac­tors pro­cess data only on our instruc­ti­ons and not for their own pur­po­ses

In cer­tain cases, we pass your data on to the fol­lo­wing reci­pi­ents when we are requi­red by law to do so (Art. 6 (1)(c) of the GDPR) or it is necessary for the pur­po­ses of legiti­mate inte­rests (Art. 6(1f) of the GDPR):

  • other Ebner Stolz com­pa­nies, to the extent necessary for group mana­ge­ment, inter­nal com­mu­ni­ca­tion and other admi­ni­s­t­ra­tive pur­po­ses
  • Google LLC, 1600 Amphi­theatre Park­way Moun­tain View, CA 94043, USA (ope­ra­tes Google reCAPT­CHA)
  • Cri­mi­nal prose­cu­tion aut­ho­ri­ties, courts
  • exter­nal audi­tors, lawy­ers or tax advi­sors

If con­trac­tors or other reci­pi­ents are based in the Uni­ted Sta­tes, some of your data may also be trans­fer­red to that coun­try. Google has sub­mit­ted to the "EU-US Pri­vacy Shield". The Euro­pean Com­mis­sion has deci­ded in an ade­qu­acy deci­sion that this will ensure an ade­quate level of data pro­tec­tion.

IV. What rights do I have with regard to my data?

Under the con­di­ti­ons of Art. 15 of the GDPR, you can requ­est infor­ma­tion from us as to whe­ther we pro­cess from you, and if so, which data. You may requ­est to have your data cor­rec­ted and if necessary com­p­le­ted in accor­dance with Art. 16 of the GDPR. You have the right to requ­est that we delete your data under the con­di­ti­ons of Art. 17 of the GDPR or block it under the con­di­ti­ons of Art. 18 of the GDPR. Accor­ding to Art. 21 of the GDPR, you have the right to receive your data trans­mit­ted to us on the basis of a con­sent or a con­tract, pro­vi­ded that the pro­ces­sing is auto­ma­ted. If you so per­mit and it is tech­ni­cally pos­si­ble, we trans­mit this data to a third party. Your rights may be limi­ted or exclu­ded by law under cer­tain cir­cum­stan­ces.

If we pro­cess data for the pro­tec­tion of our inte­rests exclu­si­vely on the basis of Art. 6 (1)(f) of the GDPR, you have the right to object to the pro­ces­sing of your data for rea­sons ari­sing from your parti­cu­lar situa­tion. If you file an objec­tion, we will no lon­ger pro­cess the data con­cer­ned, unless we can prove com­pel­ling rea­sons wor­thy of pro­tec­tion for the pro­ces­sing that out­weigh your inte­rests, rights and free­doms, or the pro­ces­sing ser­ves to enforce legal claims.

Further­more, you can object to the pro­ces­sing of your data for adver­ti­sing pur­po­ses at any time wit­hout incur­ring any costs other than the trans­mis­sion costs at the basic rates. You can object to the rece­ipt of emails for adver­ti­sing pur­po­ses at any time free of charge by cli­cking on the unsub­scribe link at the end of the email. You can also state your objec­tion by sen­ding an email to info@eb­ner­stolz.de

If you have con­s­en­ted to the data pro­ces­sing, you have the right to revoke your con­sent at any time. The lega­lity of the pro­ces­sing until revo­ca­tion is not affec­ted until it occurs. You can revoke your con­sent by sen­ding an email to info@eb­ner­stolz.de After revo­ca­tion, we will no lon­ger pro­cess the data unless we are legally entit­led or requi­red to do so.

You have the right to file com­p­laints under data pro­tec­tion law with a data pro­tec­tion aut­ho­rity, e.g., the State Com­mis­sio­ner for Data Pro­tec­tion and Free­dom of Infor­ma­tion, Kön­ig­straße 10a, 70173 Stutt­gart.

Last upda­ted: May 23, 2018



back to top