the BBH group

Privacy statement

We, Becker Büttner Held PartGmbB, are pleased that you are visiting our website and are interested in our law firm. We know that careful handling of your personal data is important to you. We are, of course, committed to protecting your data in compliance with the statutory provisions for the protection of personal data.

In the following Privacy Statement, we would like to inform you in particular about how we collect and process your personal data when you use our website as well as about your rights.

This Privacy Statement refers to the following websites of Becker Büttner Held PartGmbB:

www.die-bbh-gruppe.de
www.bbh-karriere.de

1. Controller

Controller within the meaning of Article 4(7) of the EU General Data Protection Regulation (GDPR) for the processing of your personal data within the meaning of the statutory provisions on data protection is:

Becker Büttner Held PartGmbB
Pfeuferstraße 7
81373 München, Germany
Phone: +49 (0)89 23 11 64 0

2. DatA Protection Officer

If you have any questions regarding data protection or require additional information on data protection-related processes on our website, please feel free to contact our data protection officer at Datenschutzbeauftragter@bbh-online.de.

3. Information on the collection and processing of data

You can visit our website without registration or logging in. We only collect, store or use personal data to the extent that this is provided for in the following provisions and we have a lawful basis to do so or you have consented to it. The provision of personal data or giving consent is, in principle, voluntary. There will, in essence, not be any negative effects for you if you do not give us your consent or provide us with personal data.

“Personal data” means any information relating to an identified or identifiable natural person. Personal data include, in particular, name, address, email address, gender, date of birth, phone number, age and bank details.

On our website, we collect and process the following data:

3.1.    Standard log files when visiting our website (server log)

When you access our website, the web server automatically collects and stores information. The automatically collected information listed in the following is collected and evaluated to produce statistics on the use of and web traffic to our website and the contents primarily retrieved by the users as well as for the purpose of monitoring our website. In addition, the information specified below is used to ensure the operability and security of our website. The knowledge gained in this context is then used for improving our services as well as optimising our website and is stored for statistical purposes.

This automatically collected data includes:

• Domain name or IP address
• Date and time of the server request
• File names and URL/web adress you have accessed
• Access status/http status code
• Referrer URL (i.e. the website you have previously accessed)
• Browser
• Operating system and its interface as well as
• Browser software version and language.

The legal basis for the collection of the above-mentioned data is Article 6(1) first sentence lit. (f) GDPR.

This information is stored separately from the further data you might have transmitted to us, in particular for the purpose of processing your enquiries. The data specified above are not linked to such further data. We cannot trace back the data to your person or your individual behaviour.

3.2. UNDER WHAT CIRCUMSTANCES AND ON WHICH LEGAL BASIS ARE FURTHER “PERSONAL DATA” COLLECTED AND PROCESSED?

We collect and process further personal data only if this is permissible under the applicable provisions regarding the protection of personal data or if you have given us your consent to do so.

If we collect personal data based on your consent, you may withdraw consent at any time notifying the controller (see section 1. above) or our data protection officer (see section 2. above) without the withdrawal of consent affecting the lawfulness of processing based on consent before its withdrawal.

3.2.1. Processing of personal data after contacting us

We process the information and personal data that you provide us with via email for the purpose of making contact or within the context of an enquiry (e.g. email address, name etc.) in order to be able to advise and/or assist you according to your enquiry.

The legal basis for processing your personal data which are provided to us via email and used to respond to and process your email is Article 6(1) first sentence lit. (f) GDPR.

3.2.2. PROCESSING OF PERSONAL DATA IN CASE OF A JOB APPLICATION BY WAY OF THE RECRUITMENT APPLICATION FORM ON OUR CAREER WEBSITE

You may apply for various vacancies (e.g. lawyer, tax advisor, office management etc.) at our law firm via our career website www.bbh-karriere.de/.

To this end, we integrated a recruitment application form into our website which you may use to submit your application electronically.

If you fill in the recruitment application form and transmit your data to us using the respective button, we will process your personal data (e.g. your email address, name and address, professional qualification) in order to deal with your application. For further details as to the specific information we request in this respect, we kindly ask you to refer to the recruitment application form available at our website. To process your application, we need the information marked as mandatory in the recruitment application form. If, in the context of your application, you provide us with further information on a voluntary basis, we will, as the case may be, process and respond to your application also on the basis of these data.

In this respect, we process your personal data exclusively for the purpose of processing and responding to your application.You agree to the above-mentioned processing of your data by putting a check mark on the respective box of the contact form. The legal basis for the collection and processing of your personal data which you provide to us by submitting your recruitment application form is established by Article 6(1) first sentence lit. (a) GDPR.

Please note that all documents and information submitted to us within the context of the application process will be treated strictly confidential and, unless you have given us your explicit consent to do so, they will not be passed on in any form to any third parties.

3.3. Cookies

We use cookies on our website in order to be able to provide you with services and website functions that are as convenient and personalised as possible. Cookies are files that are created on your computer by a web server when you use your browser to visit a website. Cookies are used in order to clearly identify your computer for a certain period of time. You can set your browser so that it will inform you about the placement of cookies. This way, the use of cookies will be made transparent for you.

We use necessary cookies on the basis of Article 6(1) first sentence lit. (f) GDPR. These cookies help make a website usable by enabling basic functions like page navigation and access to secure areas of the website. The website cannot function properly without these cookies and the operation of a functioning website constitutes our legitimate interest.

4. Links to YouTube videos

On our website, you will also find links to YouTube videos which are stored at https://www.youtube.com and can be accessed via our website.

YouTube is a streaming service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter “Google”).

The YouTube videos linked on our website cannot be played directly from our website. For data protection reasons, we have decided to only provide you with access to the YouTube videos by linking to the respective website of YouTube where you can play the videos. This means that no data concerning you will be transferred to YouTube if you do not play the YouTube videos linked on our website. However, as soon as you click a link we have placed to one of our YouTube videos, you will be forwarded to the website of YouTube. There, data will be processed by YouTube. We have no influence on such processing and collection of data by YouTube. We also have no knowledge of the individual purposes of the processing activities or their scope and duration of storage. Whether YouTube performs any erasures or renders data anonymous is not known to us either, and it is not within our control. If you click the link and are, simultaneously, logged in to YouTube, YouTube will directly assign the data collected during the visit of its website to your YouTube account.

For further information on the purpose and scope of the collection and processing of data by YouTube, please refer to the data protection policy of YouTube. There, you will also find further information on your rights and how to adjust your settings to protect your privacy (https://policies.google.com/privacy?hl=en&gl=en). YouTube processes your personal data also in the USA and has subjected itself to the US-EU Privacy Shield. For further information please see https://www.privacyshield.gov.

Please note that clicking the link to our YouTube videos will cause you to leave the area of protection and responsibility of our website and will lead to YouTube collecting and processing your data, which is not subject to our control.

5. Social-Media-Plug-Ins

On our website, we use social media plug-ins from Facebook, Twitter, Xing and LinkedIn (hereinafter: “providers”).

By clicking on the respective plug-in button, the aforementioned plug-ins will allow you to establish a direct connection to the website of the provider of the respective plug-in and to directly use its web services. By moving the mouse cursor over the respective plug-in, you will be able to identify the provider of each plug-in. In addition, the plug-ins show the logos of the individual services.

In order to ensure that as little data as possible is collected when embedding the aforementioned social media plug-ins, we offer on our website the so-called Shariff solution to activate these plug-ins. This means that the providers of the individual plug-ins cannot automatically collect personal data from you while you are visiting our website. The button with implemented Shariff solution will only establish the direct contact to the respective social network site of the aforementioned providers once you have actively clicked on the respective social media plug-in. It is only with this click that you will open the connection to and establish a direct connection with the respective provider of the plug-in, which is relevant under data protection law.

We use social media plug-ins for the sake of an attractive presentation of our online presence and thus for the purpose of a legitimate interest. The legal basis for the processing is Article 6(1) first sentence lit. (f) GDPR.

Please note that, depending on the provider of the plug-in, data can be transferred also to the USA. All of the aforementioned providers have, however, subjected themselves to the EU-US Privacy Shield (https://www.privacyshield.gov/EU-US-Framework)  that serves the promotion of data protection.

We have no influence on the collection and processing of your personal data by the respective providers of the plug-ins. We also have no knowledge of the individual purposes of such processing activities or their scope and duration of storage. Likewise, it is not known to us nor within our control whether the plug-in provider performs any erasures or renders data anonymous.

If you are logged in with a provider via a user profile or if you log in at a later time, the provider will be able to assign your visit to our website and your action performed by activating the plug-in (e.g. sharing) to your user profile with the provider. Even if you do not have any user profile with the provider of the respective plug-in, it is possible that the provider will record and store your IP address or register your visit to our website via cookies.

For details regarding the purpose and scope of data collection and the further processing and use of the personal data by the providers as well as your corresponding rights and setting options in order to protect your privacy, please see the respective provisions on data protection of the providers.

Below, you will find the addresses of the providers of Facebook, Twitter, Xing and LinkedIn as well as the associated data protection notices for use of the individual services.

• Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA
Data protection notice: https://www.facebook.com/policy.php and https://www.facebook.com/help/186325668085084

• Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA
Data protection notice: https://twitter.com/privacy?lang=eng

• XING SE, Dammtorstraße 30, 20354 Hamburg, Germany
Data protection notice: https://privacy.xing.com/en/privacy-policy

• LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
Privacy policy: https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy

Please note that clicking one of the social media plug-ins will cause you to leave the scope of protection and responsibility of our website and that activating the plug-ins will lead to the individual providers collecting and processing your data, which is not subject to our control.

6. Links to social media networks / social media buttons

We have integrated the social media buttons of Twitter and LinkedIn (hereinafter: “providers”) in our online presence as links. These links will take you to our respective profile with these providers, enabling you to follow us there. Twitter is a service of Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland. LinkedIn is a service of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.

For data protection reasons, we have decided to embed the social media buttons only as links to our respective profile with the provider. This means that no data concerning you will be transferred to the providers unless you click the respective button. However, as soon as you click the link that we have placed to our respective profile, you will be forwarded to the website of the provider. There, data are transferred to the respective provider. We have no influence on the potential transfer of personal data to and collection of personal data by the providers. We also have no knowledge of the individual purposes of such processing activities or their scope and duration of storage. Whether the providers perform any erasures, generate or assign profiles, or render data anonymous is not known to us either, and is not within our control.

If you click the respective link on our website and are, simultaneously, logged in to the service of one of the aforementioned providers, such provider will directly assign the data collected during the visit of its website to your profile with such provider.

For further information on the purpose and scope of collecting and processing data by the aforementioned providers, please refer to the data protection policy of these providers. There, you will also find further information on your rights and how to adjust your settings to protect your privacy (https://twitter.com/en/privacy and https://www.linkedin.com/legal/privacy-policy?trk=uno-reg-guest-home-privacy-policy). The providers process your personal data in the USA and have subjected themselves to the EU-US Privacy Shield. For further information please see https://www.privacyshield.gov.

Please note that clicking the link to Twitter and, respectively, LinkedIn will cause you to leave the scope of protection and responsibility of our website and that activating the link will lead to Twitter and, respectively, LinkedIn collecting and processing your data, which is not subject to our control.

7. Duration of the storage of personal data

Your personal data, which we are allowed to process on a lawful basis or to the processing of which you have given your consent, are principally only stored for the period of time required for the purposes specified under section 3. above or, alternatively, until you withdraw your previously given consent to the processing of your personal data or you object to such processing.

Your web server log files (cf. section 3.1. above) are deleted by us after three months.

The personal data that you provide us with on our career website within the context of a job application are stored for one year for the purpose of evaluating suitable vacancies. Upon expiration of this period, such data including all documents provided to us with your application are deleted.

8. Data backup and location of processing activities

All our systems on which personal data are stored are password-protected and only accessible to a limited group of persons. Processing and use of the data will take place exclusively in the territory of the Federal Republic of Germany, in a Member State of the European Union or another contracting state of the Agreement on the European Economic Area.

9. Forwarding of data

We will not forward your personal data to any third parties, except if we are authorised to do so or if you have given us your consent. Forwarding of personal data to any public bodies and/or public authorities shall only take place when we are required to do so by mandatory statutory provisions or official or judicial orders. If the aforementioned requirements are not met, we only forward your personal data to third parties if you have consented thereto (Article 6(1) first sentence lit. (a) GDPR).

10. Your rights

You have the following rights vis-à-vis us regarding your personal data:

• Right to access (Article 15 GDPR),
• Right to rectification and right to erasure (Articles 16 and 17 GDPR),
• Right to restriction of processing (Article 18 GDPR),
• Right to data portability (Article 20 GDPR).

11. Right to lodge a complaint with the data protection supervisory authority

If you believe that our processing of your personal data is not in compliance with the provisions described herein and/or the applicable data protection laws, you also have the right to lodge a complaint with one of the competent data protection supervisory authorities.

12. Right to object

According to Article 21(1) GDPR, you have the right to object at any time to the processing of your personal data within the meaning of Article 6(1) first sentence lit. (e) or (f) GDPR. We kindly ask you to indicate in your objection the reasons why we should no longer process your personal data. You may address your objection to the controller (see section 1.) or to our data protection officer (see section 2.). In case of a substantiated objection, we shall no longer use your personal data for the respective purposes and erase them from our system unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or if processing is necessary to establish, exercise or defend legal claims.

AS AT DECEMBER 2019

How can we help you?

BBH – Solutions for companies and their infrastructuresBerlin, Munich, Cologne, Hamburg, Stuttgart, Erfurt, Brussels

bbh@bbh-online.de