§ 1 Information on the collection of personal data
(1) In the following we inform about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, IP address, user behavior.
(2) The responsible party pursuant to Art. 4 (7) of the EU General Data Protection Regulation (GDPR) is OD Vaic & Dvornicic d.o.o., Krizaniceva 5, 51000 Rijeka, Croatia, Tel.: +385-51-373-608, e-mail info@vaic.hr
(3) When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, name and telephone number, if applicable) will be stored by us in order to answer your questions. We delete the data accruing in this context after the storage is no longer required or restrict the processing if there are legal retention obligations.
(4) If we use contracted service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail about the respective processes below. In doing so, we also state the specified criteria for the storage period.
§ 2 Your rights
(1) You have the following rights against us regarding the personal data concerning you:
– Right to information,
– Right to rectification or deletion,
– Right to restriction of processing,
– Right to object to processing,
– Right to data portability.
(2) You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.
§ 3 Collection of personal data when visiting our website
(1) In the case of mere informational use of the website, i.e. if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6 para. 1 p. 1 lit. f DS-GVO):
– IP address
– Date and time of the request
– Time zone difference from Greenwich Mean Time (GMT)
– Content of the request (concrete page)
– Access status/HTTP status code
– Website from which the request comes
– Browser
– Operating system and its interface
– Language and version of the browser software.
Purpose of the data processing of IP addresses
The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session.
The storage in log files is done to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
These purposes are also our legitimate interest in data processing according to Art. 6 para. 1 lit. f GDPR.
Duration of the storage of IP addresses
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. In the case of storage of data in log files, deletion takes place after 7 days at the latest.
(2) In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive associated with the browser you are using and through which the entity that sets the cookie (in this case by us) receives certain information. Cookies cannot execute programs or transfer viruses to your computer. They serve to make the Internet offer as a whole more user-friendly and effective.
(3) Use of cookies:
(a) This website uses the following types of cookies, the scope and functionality of which are explained below:
– Transient cookies (for this b)
– Persistent cookies (in addition c).
(b) Transient cookies are automatically deleted when you close the browser. These include in particular the session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This allows your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.
(c) Persistent cookies are automatically deleted after a specified period of time, which may vary depending on the cookie. You can delete the cookies in the security settings of your browser at any time.
(d) You can configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies. Please note that you may not be able to use all the features of this website.
(e) [We use cookies to identify you for subsequent visits if you have an account with us. Otherwise, you would have to log in again for each visit].
(f) [The Flash cookies used are not collected by your browser, but by your Flash plug-in. Furthermore, we use HTML5 storage objects that are stored on your terminal device. These objects store the required data regardless of the browser you use and have no automatic expiration date. If you do not want Flash cookies to be processed, you must install an appropriate add-on, such as Better Privacy for Mozilla Firefox(https://addons.mozilla.org/en/firefox/addon/betterprivacy/) or the Adobe Flash Killer Cookie for Google Chrome. You can prevent the use of HTML5 storage objects by using private mode in your browser. In addition, we recommend that you manually delete your cookies and browser history on a regular basis].
§ 4 Web Analytics
Use of Google Analytics
(1) This website uses Google Analytics, a web tracking service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The purpose of our use of the tool is to enable the analysis of your user interactions on websites and in apps and to use the statistics and reports obtained to improve our offer and make it more interesting for you as a user.
(2) We collect the interactions between you as a user of the Website and our Website primarily using cookies, device/browser data, IP addresses, and Website or App activity. Google Analytics also collects your IP addresses to ensure the security of the service and to provide us, as the website operator, with information about the country, region or location from which the respective user originates (so-called “IP location determination”). For your protection, however, we naturally use the anonymization function (“IP masking”), i.e. Google truncates the IP addresses by the last octet within the EU/EEA.
(3) Google acts as a processor and we have concluded a corresponding contract with Google. The information generated by the cookie and the (usually shortened) IP addresses about your use of this website are usually transmitted to a Google server in the USA and processed there. For these cases, Google says it has imposed a standard on itself that is equivalent to the former EU-US Privacy Shield and has pledged to comply with applicable data protection laws when transferring data internationally. We have also agreed so-called standard contractual clauses with Google, the purpose of which is to ensure compliance with an appropriate level of data protection in the third country.
(4) The legal basis for the collection and further processing of the information (which takes place for a maximum of 14 months) is your given consent (Art. 6 para. 1 p. 1 lit. a DS-GVO). The revocation of your consent is possible at any time without affecting the permissibility of the processing until the revocation. In apps, you can reset the advertising ID under Android or iOS settings. The easiest way to revoke your consent is to use our Consent Manager or to install Google’s browser add-on, which is available via the following link: tools.google.com/dlpage/gaoptout?hl=en/.
(5) More detailed information on the scope of services provided by Google Analytics is available at marketingplatform.google.com/about/analytics/terms/en/. Google provides information on data processing when using Google Analytics at the following link: support.google.com/analytics/answer/6004245?hl=en/. General information on data processing, which Google claims should also apply to Google Analytics, can be found in Google’s privacy policy at www.google.de/intl/de/policies/privacy/.
§ 5 Social Media Plug Ins, Google Maps
(1) Use of social media plug-ins
(a) We currently use the following social media plug-ins: [Facebook, Google +, Xing]. We use the so-called two-click solution. This means that when you visit our site, no personal data is initially passed on to the providers of the plug-ins. You can recognize the provider of the plug-in by the mark on the box above its initial letter or logo. We open the possibility for you to communicate directly with the provider of the plug-in via the button. Only if you click on the marked field and thereby activate it, the plug-in provider receives the information that you have called up the corresponding website of our online offer. In addition, the data mentioned under § 3 of this declaration will be transmitted. In the case of Facebook and Xing, according to the respective providers in Germany, the IP address is anonymized immediately after collection. By activating the plug-in, your personal data is transmitted to the respective plug-in provider and stored there (in the case of US providers, in the USA). Since the plug-in provider collects data in particular via cookies, we recommend that you delete all cookies via your browser’s security settings before clicking on the grayed-out box.
(b) We have no control over the data collected and data processing operations, nor are we aware of the full extent of the data collection, the purposes of the processing, the storage periods. We also have no information about the deletion of the collected data by the plug-in provider.
(c) The plug-in provider stores the data collected about you as usage profiles and uses them for purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) for the display of tailored advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. Through the plug-ins, we offer you the opportunity to interact with the social networks and other users, so that we can improve our offer and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Art. 6 para. 1 p. 1 lit. f GDPR.
(d) The data transfer takes place regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in to the plug-in provider, the data we collect is directly assigned to your account with the plug-in provider. If you click the activated button and link to the page, for example, the plug-in provider also saves this information in your user account and shares it publicly with your contacts. We recommend that you log out regularly after using a social network, but especially before activating the button, as this allows you to avoid an assignment to your profile with the plug-in provider.
(e) For further information on the purpose and scope of data collection and processing by the plug-in provider, please refer to the data protection declarations of these providers provided below. There you will also receive further information about your rights in this regard and setting options for protecting your privacy.
(f) Addresses of the respective plug-in providers and URL with their privacy notices:
(aa) [Facebook Inc, 1601 S California Ave, Palo Alto, California 94304, USA; www.facebook.com/policy.php; additional information on data collection: www.facebook.com/help/186325668085084, www.facebook.com/about/privacy/your-info-on-other, and www.facebook.com/about/privacy/your-info. Facebook has submitted to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework.
(bb) Twitter, Inc, 1355 Market St, Suite 900, San Francisco, California 94103, USA; twitter.com/privacy. Twitter has submitted to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework.
(cc) Xing AG, Gänsemarkt 43, 20354 Hamburg, DE; www.xing.com/privacy.
(dd) Google Inc, 1600 Amphitheater Parkway, Mountainview, California 94043, USA; www.google.com/policies/privacy/partners/. Google has submitted to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework.
(2) Integration of Google Maps
(a) On this website we use the offer of Google Maps. This allows us to show you interactive maps directly in the website and enables you to use the map function comfortably. The legal basis for the use of the cards is Art. 6 para. 1 p. 1 lit. a DS-GVO, i.e. the integration only takes place after your consent.
(b) By visiting the website, Google receives the information that you have accessed the corresponding sub-page of our website. In addition, the above-mentioned basic data such as IP address and timestamp are transmitted. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data is directly assigned to your account. If you do not want the assignment with your profile at Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) for the provision of tailored advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right.
(c) The information collected is stored on Google servers, including in the USA. For these cases, the provider says it has imposed a standard on itself that is equivalent to the former EU-US Privacy Shield and has pledged to comply with applicable data protection laws when transferring data internationally. We have also agreed so-called standard data protection clauses with Google, the purpose of which is to ensure compliance with an appropriate level of data protection in the third country.
(d) For more information on the purpose and scope of data collection and its processing by the plug-in provider, please refer to the provider’s privacy policy. There you will also find further information about your rights in this regard and setting options for protecting your privacy: www.google.de/intl/de/policies/privacy.
§ 6 Communication by mail with business partners, newsletter
(1) Informing our business partners about our customer-specific services, using your e-mail address exclusively for our own communication.
(a) By submitting an inquiry to our business partners (lawyers and other service providers) via our inquiry form or via the email addresses provided on our website, you are making use of our mediation service for these business partners.
(b) We will receive your e-mail address when you make this use. We use this e-mail address exclusively to inform you about our own services that are similarly related to your request. This information is a newsletter dispatch at irregular intervals.
(c) When collecting your e-mail address and subsequently you have the option at any time to revoke the use of your mail address for the newsletter, among other things, via the following mail address mail@cbbl-lawyers.de.
(d) The legal basis for the processing in the form of sending the newsletter to you is Art. 6 para. 1 f DS GVO in conjunction with § 7 para. 3 UWG. The sending of a newsletter to existing own customers in the similar area of the service retrieved from us is permitted by law, from therefore the information and marketing interest of CBBL prevails over conceivable conflicting rights. This is against the background that the right to object is pointed out when using the website and the right of withdrawal is explicitly stated in every newsletter.
(e) Your e-mail address will not be passed on and will only be used for sending the newsletter. The e-mail address will be deleted for use for the newsletter dispatch as soon as the revocation is received.
b. Newsletter
(1) You can subscribe to our newsletter, which will inform you about our latest news from different countries, by giving your consent. The services advertised are named in the consent form, if applicable.
(2) For the registration to our newsletter we use the so-called double-opt-in procedure. This means that after your registration, we will send you an e-mail to the e-mail address you provided, in which we will ask you to confirm that you are the owner of the e-mail address you provided and that you wish to receive the notifications. If you do not confirm your registration within [24 Stunden], your information will be blocked and automatically deleted after one month. In addition, we store your IP addresses and times of registration and confirmation. The purpose of the procedure is to be able to prove your registration and, if necessary, to clarify a possible misuse of your personal data.
(3) The only mandatory information for sending the newsletter is your e-mail address. [The provision of further, separately marked data is voluntary and will be used to address you personally]. After your confirmation, we store your e-mail address for the purpose of sending you the newsletter. The legal basis is Art. 6 para. 1 p. 1 lit. a GDPR.
(4) You can revoke your consent to receive the newsletter at any time and unsubscribe from the newsletter. You can declare the revocation by clicking on the link provided in every newsletter e-mail or by sending an e-mail to mail@cbbl-lawyers.de or by sending a message to the contact details given in the imprint.
(5) The e-mail address for the newsletter will be deleted for use for the dispatch as soon as the revocation is received.