The protection of your privacy is important to us! With the following information, we would therefore like to inform you about how we handle your data that is collected when you use our website.
This privacy policy applies to the website www.goehmann.de. and also explains the processing of your personal data on our Facebook and Instagram company profiles.
1 Controller
1.1 Name and address of the controller responsible for processing
Göhmann Rechtsanwälte Abogados Advokat Steuerberater Partnership mbB
Partnership register Berlin
Charlottenburg Local Court PR 512 B
Tauentzienstraße 11
D-10829 Berlin
T +49 30 88 72 89 0
F +49 30 88 24 16 5
berlin@goehmann.de
Represented by its partners with sole power of representation
1.2 Name and address of the data protection officer
Mr. Dietmar Niehaus
IDD GmbH – Institute for Data Protection and Data Security
Anne-Conway-Straße 1
28359 Bremen
Telephone: +49 421 59863 50
Fax: +49 421 59863 55
E-mail: niehaus@institut-datensicherheit.de
2 Joint responsibility for corporate social media profiles
We also operate a Facebook and Instagram company profile. Facebook and Instagram are offered in Europe by Facebook Ireland Ltd. Further information on related processing can be found below in this privacy policy.
With regard to Instagram and Facebook Insights data, we are joint controllers together with Meta Platforms Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland (“Meta“). The corresponding data processing is carried out on the basis of an agreement between joint controllers pursuant to Art. 26 GDPR, which you can access here.
You can contact Meta’s data protection officer using this form.
The data protection authority responsible for Meta is the Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland, www.dataprotection.ie.
3 Processing of data by GÖHMANN (controller)
3.1 Use of the website
You can visit our website without having to provide any personal details. However, information about your visit to the site is collected as standard without any action on your part.
3.1.1 Provision of the website, log files
Each time you visit our website, the following data (access data) is collected and stored in a log file on our provider’s server until it is automatically deleted:
- the IP address of the requesting computer;
- Date and time of access;
- Name and URL of the data retrieved;
- Website from which the access was made;
- name of the Internet service provider;
- amount of data transferred;
- Notification of whether the retrieval was successful;
- Identification data of the browser and operating system used.
The temporary processing of the IP address by the system is necessary and mandatory to enable the website to be delivered to your computer. For this purpose, your IP address must remain stored for the duration of the session. The data is also processed for technical reasons so that you can access the content and display the website. Our legitimate interest in data processing pursuant to Art. 6 para. 1 clause 1 lit. f GDPR also lies in the purposes described above. The log files are deleted after 7 days and used exclusively for the purpose of ensuring the general functionality of the website, in particular to track abusive access. You can object to the storage of log files. You can find more information about your right to object in section 6.6.
3.1.2 Cookies
Cookies are used on our website.
A cookie is a small data file that is stored on your end device. Cookies are used to analyze user interest and to make our website more user-friendly. In principle, you can also use our website without cookies. However, if you want to use the full functionality of our website in the most user-friendly way possible, you should accept the cookies that enable the use of certain functions or offer convenience features. The purpose of the cookies we use is shown in the following list.
By using our website, you agree to the use of those cookies that your browser accepts based on your browser settings. However, you can set your browser to notify you before accepting cookies, to accept or reject only certain cookies or to reject all cookies. You can also delete cookies from your storage medium at any time.
You can view and deactivate the cookies currently activated in the cookie settings on our website. The following types of cookies are used:
3.1.2.1 Technically necessary cookies
These cookies are technically necessary to provide the following core functions of the website and cannot be deactivated by you:
- Displaying the content of the website
- Anonymization of IP addresses in log files
- Cookie consent status
- Verification and identification of users
- Front-end login for subpages with access restrictions
The specific technically necessary cookies used can be found in the cookie settings on our website.
The legal basis for the storage of technically necessary cookies is Section 25 (2) No. 2 TDDDG. The legal basis for the associated processing of personal data, if applicable, is Art. 6 para. 1 clause 1 lit. f GDPR and a legitimate interest on our part in providing you with the functions of our website.
3.1.2.2 Other cookies that are not technically necessary
Other, non-technical cookies are used to provide you with certain convenience functions, to measure the performance of the website and user behavior or to use third-party services. However, these are not absolutely necessary for the provision of the website and must therefore be activated by you independently in the cookie settings of our website. The legal basis for the storage of non-technical cookies is Section 25 (1) TDDDG.
For additional information on data processing in connection with individual cookies, please refer to the information in the cookie settings and the partially supplementary information in this data protection information (see section 3.3).
3.2 Google Maps
The Google Maps service is integrated into our website to illustrate and display the contact address. Google Maps is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. To display the Google Maps map, Google LLC must process your IP address. When using the map service, data about the use of the Maps functions, location and device data may be transmitted at the same time.
The cooperation with Google LLC in terms of data protection law takes place on the basis of a concluded contract on joint responsibility in accordance with Art. 26 GDPR, available at https://privacy.google.com/intl/de/businesses/mapscontrollerterms/.
Furthermore, by using Google Maps, the user enters into a direct user relationship with Google. During use, Google collects and processes data about the use of the map function by the user. Further information on data processing can be found in Google’s privacy policy (https://policies.google.com/privacy?hl=de).
The legal basis for the processing is your consent pursuant to Art. 6 para. 1 clause 1 lit. a GDPR. There is currently no adequacy decision by the European Commission for the transfer of data to companies in the USA. We would like to point out that third countries such as the USA do not offer a level of data protection comparable to the GDPR and access by third parties (e.g. public bodies such as local authorities) cannot be ruled out.
The legal basis for the transmission of your IP address to Google in the USA is your express consent in accordance with Art. 49 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future, the easiest way to do this is via our cookie settings.
3.3 Matomo
This website uses the free web analysis tool Matomo, an open source software for the statistical evaluation of visitor access, which enables us to analyze visitor behavior and, based on this, to optimize our website.
For this purpose, the usage information generated by the cookie, such as in particular the pages you have accessed, the browser you are using, your computer’s operating system, the referrer URL (previously accessed website) and an anonymized (shortened) part of your IP address, is transmitted to our server and stored for usage analysis purposes. Your IP address is anonymized immediately during this process, i.e. after processing and before it is stored, so that you as a user remain anonymous to us. This prevents the individual page views from being assigned to an identifiable person. The information generated by the cookie about your use of our website is also not transferred to other servers or passed on to third parties.
The legal basis for the processing of your data in this respect is Art. 6 para. 1 clause 1 lit. a GDPR, § 25 para. 1 TDDDG and your consent to the processing of your data and storage of the necessary cookies obtained for this purpose in our cookie settings. You can revoke your consent at any time and without giving reasons with effect for the future by calling up the cookie settings again.
3.4 E-mail contact
For questions of any kind, we offer you the opportunity to contact us via the e-mail addresses provided on our website. In order to process your request, we process your email address, your name and any contact details provided, including the information in your message to us.
Data processing for the purpose of contacting us is carried out in accordance with Art. 6 para. 1 clause 1 lit. b GDPR for the implementation of pre-contractual measures or on the basis of a legitimate interest in accordance with Art. 6 para. 1 clause 1 lit. f GDPR; the legitimate interest is to clarify your request and to be able to communicate with you.
If your request concerns the initiation or conclusion of a client relationship, our separate client-related data protection information applies.
3.5 Use of your personal data in our social media channels
We currently operate a Facebook and Instagram company profile.
Meta processes your personal data
- on Instagram for the purposes and on the basis of the legal bases set out in the Instagram Privacy Policy
- on Facebook for the purposes and on the legal basis set out in the Facebook Privacy Policy.
We would like to point out in particular that
- Meta can assign your activities on our Facebook and Instagram company profiles to your social media profile if you are logged in and can also use them for its own business purposes in accordance with the Facebook and Instagram Privacy Policy and create profiles of the persons concerned. You can only avoid this if you are logged out and visit our Facebook or Instagram company profile in the private mode of your browser or contact us via other communication channels.
- Meta may also transfer user data on Facebook and Instagram to a server in a third country and thus process it outside the European Union. Meta uses standard contractual clauses for this purpose or relies on the adequacy decisions issued by the European Commission with regard to certain countries. Meta is responsible for the further transfer of personal data to recipients in third countries.
| Purposes of processing | Legal basis |
| Insofar as we process your personal data on Instagram or Facebook (for example, when we share your posts on our profile, respond to your posts or carry out other social media actions provided for on Facebook Instagram), this is done solely for the purpose of presenting our law firm to users on Instagram and introducing it to a broad public via Instagram. | Art. 6 para. 1 clause 1 lit. f GDPR (legitimate interest: public relations, company presentation) |
| We use the “Page Insights” for Facebook tool provided by Meta and “Page Insights” for Instagram to find out more about our subscribers, how our posts are received and how users have interacted with them. You can find out herewhich statistics Facebook provides us with and what data they are based on . | Art. 6 para. 1 clause 1 lit. f GDPR (legitimate interest: Optimization of posts on our Facebook and Instagram company profiles, improvement of communication with customers and interested parties) |
Your rights as a data subject can be asserted at Meta and at GÖHMANN Rechtsanwälte Abogados Advokat Steuerberater Partnerschaft mbB. Further information on asserting your rights with us can be found in section 6 of this statement.
If you are logged in to Facebook or Instagram at the same time, Meta recognizes this and may merge the data with your account to create profiles in order to place personalized advertising or to optimize the social network. Meta is solely responsible for this processing within the meaning of data protection law. We have no influence on the processing.
4 Data protection information for applications
It is possible to apply for our currently advertised vacancies via our website. Applications can be sent by post or email to the respective location offering the position.
4.1 Processing to carry out the application process
We process your application data to carry out the application process in order to be able to assess whether you have the aptitude, qualifications and professional performance for the position for which you are applying and to be able to make a decision on the establishment of an employment relationship.
Legal basis: Section 26 (1) clause 1 BDSG. The provision of personal data is necessary for the application process. If your application does not contain all the personal data required for the decision, we may not be able to consider you for the advertised position.
4.2 Storage for defense against legal claims
The processing of your application data will be restricted in the event of a rejection for further storage for the defense against legal claims, for example from §§ 15 para. 4, 21 para. 5 AGG. The data will be stored exclusively for this purpose.
Legal basis: Art. 6 para. 1 clause 1 lit. f GDPR (legitimate interest: Preservation of evidence / documentation, defense against legal claims).
4.3 Processing for the fulfillment of legal requirements
We are subject to certain legal obligations. These may result in an obligation to continue storing your application data.
These are primarily legal requirements (e.g. German Social Security Code, commercial and tax laws), but may also include regulatory or other official requirements (e.g. employers’ liability insurance association). The purposes of processing may include identity verification, fraud and money laundering prevention, occupational health management, ensuring occupational safety, fulfilling tax control and reporting obligations, fulfilling data protection obligations and processing data for the purposes of audits by tax consultants/auditors, tax and other authorities. In addition, the disclosure of personal data may become necessary in the context of official/judicial measures for the purposes of gathering evidence, criminal prosecution or the enforcement of civil law claims.
Legal basis: Art. 6 para. 1 clause 1 lit. f GDPR (legitimate interest: fulfillment of a legal obligation).
4.4 Processing for talent pool
Your personal data may also be processed for certain purposes (e.g. obtaining references from previous employers or storing your application for possible future vacancies) on the basis of your consent. In this case, the data processing is based on your consent.
Legal basis: Art. 6 para. 1 clause 1 lit. a GDPR (consent). You can withdraw your consent at any time with effect for the future.
4.5 Recipients
Your application data will be forwarded to the following recipients
Internal recipients:
- Partners who are looking for a new employee
- Employees who are involved in the decision to fill the position
External recipients:
- Courts, lawyers (in the event of a legal dispute)
- Competent authorities (in the event of lawful official requests for information).
Otherwise, your data will only be passed on to external bodies
- for purposes for which we are obliged or entitled to disclose, report or pass on data in order to comply with legal requirements (e.g. tax authorities);
- if external service providers process data on our behalf as processors (e.g. credit institutions, IT service providers, data disposal companies, courier services, postal services);
- if you have given us your consent to transfer data to third parties.
4.6 Storage period
We store the personal data you send us with your application (e-mail or postal cover letter, (electronic or paper) application documents) for the duration of the application process, i.e. until you are accepted or rejected. If you are accepted, we will then process your personal data for the duration of the employment relationship. In the event of a rejection, we will delete or destroy your data unless there is a legal basis for further processing (see section 7).
5 Recipients
Your personal data may also be transferred to the following categories of recipients:
- Third parties who provide the contractually agreed services on our behalf and support us in the provision of our services;
- Responsible contact persons in our law firm;
- Authorities (e.g. tax authorities);
- Lawyers and courts in the event of legal disputes.
6 Rights of data subjects
The GDPR grants you various rights in relation to your personal data, which we explain briefly below.
6.1 Right to information
You can request information about whether your personal data is being processed. If this is the case, you can request further information, in particular on the purposes of the processing, the categories of personal data processed, the recipients, the storage period or, if this is not possible, the criteria for determining the duration, as well as further information.
You may request a copy of your personal data, which will be made available to you in a common electronic format in the event of a request by e-mail, provided that this does not adversely affect the rights or freedoms of other persons. Please specify exactly which data you require.
6.2 Rectification
You can immediately request the correction of incorrect personal data concerning you and the completion of incomplete personal data.
6.3 Erasure
You have the right to request the erasure of your personal data, in particular if the data is no longer required for the purposes for which it was processed. Your data will be deleted immediately unless an exception applies and your data may continue to be stored. This is the case, for example, if there is an obligation to store the data for tax or commercial law reasons. In this case, processing will be restricted and will then only take place for this purpose.
6.4 Restriction
You can request the restriction of the processing of your personal data, in particular if
- you dispute the accuracy of the data and the data is verified
- the processing is unlawful and you oppose the erasure,
- the data is no longer required, but you need it for the establishment, exercise or defense of legal claims, or
- you have objected to the processing.
If the agreement is restricted, your personal data may only be stored and, in particular, only processed with your consent or for the establishment, exercise or defense of legal claims.
6.5 Data portability
You may request to receive the personal data concerning you that you have provided in a structured, commonly used and machine-readable format so that you can transmit it to another controller. You also have the right to have this data transmitted directly to another controller. However, the prerequisite for this right is that the processing of your data is based on consent, the implementation of pre-contractual measures or the fulfillment of a contract.
6.6 Objection
You may object to the processing of personal data concerning you if the processing is based on a legitimate interest (Art. 6 para. 1 clause 1 lit. f GDPR). You also have the right to object in the case of any direct advertising (e.g. sending newsletters), including any profiling associated with this. The data will then no longer be processed unless compelling reasons for the processing can be demonstrated.
6.7 Revocation of consent given for data processing
If you have consented to the processing of your personal data, you can withdraw this consent at any time. Any processing that has taken place up to the time of revocation remains unaffected by the revocation.
6.8 Assertion of your rights
If you wish to exercise the rights described above, please contact our data protection officer (section 1.2).
6.9 Right to lodge a complaint with a data protection authority
You have the right to lodge a complaint with a competent data protection authority.
If you have any questions or complaints, please contact us directly in the first instance (see section 1) – we will certainly be able to resolve your concerns to your satisfaction.
7 Storage period
Unless otherwise stated in this data protection information, we will only process your personal data for as long as the processing purposes stated in this data protection information exist. In addition, however, there may be further retention obligations or legal bases that may require or justify longer processing.
7.1 Statutory retention periods
Your personal data will be stored insofar as statutory retention periods exist, in particular within the scope of the retention periods pursuant to Section 147 of the German Fiscal Code (AO), which provides for a retention period of six years for commercial and business letters including e-mails and ten years for accounting documents (e.g. invoices), as well as within the scope of Section 257 of the German Commercial Code (HGB), which provides for a corresponding retention period of six or ten years. Legal basis: Art. 6 para. 1 clause 1 lit. c GDPR (legal obligation).
7.2 Limitation periods
Your personal data may also be stored to preserve evidence for the assertion of or defense against legal claims within the framework of the statute of limitations. According to Sections 195 et seq. of the German Civil Code (BGB), these limitation periods can be up to 30 years, whereby the regular limitation period is three years. The regular limitation period begins at the end of the year in which the claim arose and the creditor becomes aware of the circumstances giving rise to the claim and the identity of the debtor or should have become aware of them without gross negligence. Legal basis: Art. 6 para. 1 clause 1 lit. f GDPR (legitimate interest: Assertion, exercise or defense of or against legal claims).
8 Status and amendment of this privacy policy
This privacy policy has the status 2024.
Due to the further development of our website or due to changes in legal or official requirements, it may become necessary to amend this privacy policy.
You can view the current privacy policy at any time on this website.