The following data protection declaration and the imprint apply to the use of our website, the processing of applicant data, the initial contact with our law firm and the social network services used by us, insofar as we link to this website in the services used.
Attorney Dr. Tony Rostalski
Lindenallee 43
50968 Cologne
Phone: 0221 29265840
Fax: 0221 29265849
E-mail: kanzlei@rostalski.legal
Webflow
We host the content of our website with the provider Webflow, Inc, 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA (hereinafter referred to as "Webflow"). When you visit our website, Webflow collects various log files, including your IP addresses. Webflow is a tool for creating and hosting websites. Webflow stores cookies for the user or other technologies for recognition, which are necessary for the presentation of the page, the provision of certain functions of the website and to ensure security (necessary cookies). Further information can be found in Webflow's privacy policy: https://webflow.com/legal/eu-privacy-policy.
Webflow is used on the basis of Art. 6 para. 1 lit. f GDPR, as we have a legitimate interest in a reliable presentation of our website. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device within the meaning of the TTDSG. Consent can be revoked at any time.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://webflow.com/legal/eu-privacy-policy. Webflow is certified according to the "EU-US Data Privacy Framework" (DPF), an agreement between the EU and the USA, which is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information can be found at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000TT9jAAG&status=Active.
We have concluded a data processing agreement (DPA) for the use of Webflow's services. This contract ensures that Webflow only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.
Amazon Web Services / Cloudfront CDN
In addition, the Content Delivery Network (CDN) Cloudfront from Amazon Web Services Inc, 410 Terry Avenue North, Seattle, WA 98109-5210, is used to operate this website. This service provides duplicates of our website data on various Amazon Web Services (AWS) servers distributed around the world. This ensures faster loading times, greater reliability and better protection against data loss. Some images and videos embedded on this website are retrieved by Cloudfront CDN as soon as the page is accessed. Information about your use of our website (e.g. your IP address) is transferred to Amazon servers in other EU countries and stored there. This takes place as soon as you enter our website.
Amazon Web Services and Cloudfront CDN are used to achieve greater reliability of the website, better protection against data loss and improved loading speed. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. In this way, we can analyze your visit without storing personal data in a form that would be readable by us or third parties. We use the results of this analysis to improve the efficiency of our website, which also constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. We have concluded an order processing contract with Amazon Web Services Inc.
You can find more information about Amazon Web Services' privacy policy here: https://aws.amazon.com/de/compliance/gdpr-center/. Amazon Web Services Inc., based in the USA, is certified in accordance with the US-European data protection agreement "Privacy Shield", which guarantees compliance with the data protection standards applicable in the EU.
Uploadcare
We use the service "Uploadcare", provided by the provider Uploadcare Inc, located at 2711 Centerville Road, Suite 400, City of Wilmington, County of New Castle, 19808, USA. Uploadcare is a cloud delivery network (CDN) that is used to provide files. Files uploaded by the owners of this website (e.g. vCards) are stored on Uploadcare servers, from where users can download them to their computers or phones.
Uploadcare processes your personal data when you use this website. To ensure compliance with data protection regulations, we have concluded an order processing contract with Uploadcare. The use of the service corresponds to our legitimate interest pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR not to operate our own content delivery network. You have the right to object to the processing of your data. The justification for this objection will be examined as part of a balancing of interests.
The transfer of your data to the USA takes place on the basis of the standard contractual clauses of the EU Commission. You can find further details on this at: https://uploadcare.com/about/gdpr/ and at https://uploadcare.com/about/privacy-policy/.
Weglot
This website uses the Weglot translation service, located at 138 rue Pierre Joigneaux, 92270 Bois-Colombes, France. When loading the website (if you have consented to the use of personalization cookies), Weglot is activated to allow you to change the language from German to English using the language icon at the top of the website. This allows a direct connection to be established between your browser and the Weglot server when you visit this website. Weglot receives the information that your IP address has accessed this website. The data is processed in accordance with Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in displaying the website in English for non-German-speaking visitors. If a corresponding consent has been obtained (e.g. for the storage of cookies), the processing is carried out exclusively in accordance with Art. 6 para. 1 lit. a GDPR; this consent can be revoked at any time. Further information on this can be found in Weglot's privacy policy at: https://weglot.com/privacy/. We have concluded an order processing contract with Weglot.
Google Analytics/Google Tag Manager 360
We use Google Analytics to regularly record and analyze user behavior on our website. This information helps us to better tailor the content of our website to your needs, increase user-friendliness and make continuous improvements. With the help of Google Tag Manager, tags are integrated into IT scripts for web analysis.
Google Analytics and Tag Manager 360 are web analytics services provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").
The following categories of personal data are processed when using the services:
By using technologies such as cookies, Google Analytics makes it possible to analyze your use of our website. The usage data collected by Google is generally transmitted to servers in the USA and stored there. However, due to the IP anonymization activated on our website, your IP address will be truncated within the European Union or in other contracting states of the European Economic Area prior to transmission. Only in rare cases is the full IP address transmitted to Google servers in the USA and only anonymized there. The anonymized IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.
Google processes the data collected on our behalf in order to compile usage reports and offer other services in connection with web usage. In this context, Google acts as our processor in accordance with Art. 28 GDPR. Google relies on the EU-US Privacy Shield(https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active) for the transfer of personal data to the USA.
Google Analytics will only be used with your express consent. The legal basis for the use of this service is Art. 6 para. 1 lit. a) GDPR, which permits data processing with your consent.
You have the option to withdraw your consent to the use of Google Analytics at any time, which will prevent the further collection of your data. You can find more information on the terms of use of Google Analytics at http://www.google.com/analytics/terms/de.html. Google's privacy policy can be viewed at https://policies.google.com/privacy?hl=de.
You can also prevent the collection and processing of data generated by cookies as part of Google Analytics by using a browser add-on to deactivate Google Analytics. A special browser add-on is available for this purpose, which you can download and install: https://tools.google.com/dlpage/gaoptout?hl=de
Cookiebot
We use Cookiebot. This is a so-called cookie banner with which we inform you comprehensively and clearly about the use of cookies on our website. You receive a cookie notice that complies with data protection regulations and can decide for yourself which cookies you wish to accept and which you wish to reject.
Cookiebot is provided by the provider Usercentrics A/S Havnegade 39 1058 Copenhagen Denmark
By using this function, your data can be sent to Cookiebot Usercentrics, stored and processed.
When using Cookiebot, the following data of the controller's users are processed:
Before consent is granted by the end user
When loading the consent banner from consent.cookiebot.com or consent.cookiebot.eu, Cookiebot receives and processes the following data:
This data that Usercentrics receives is only processed to show the consent banner to the end user and none of this data is retained after processing. After the consent banner is returned and displayed to the visitor, the end user usually makes a decision about consent, which may include either refusal of all consent, full consent or partial consent.
After consent has been granted by the end user
This consent decision is sent to Usercentrics, where Usercentrics receives the following data:
The data that Usercentrics receives is processed in order to document the end user's consent decision. In order to document the consent for possible verification purposes, Usercentrics generates a Consent ID and stores it together with the Consent State on behalf of the customer in Usercentrics' Consent Log database. Storing the Consent ID together with the Consent State is necessary to exercise the end user's right to obtain proof of consent from the controller at any time.
After storing the consent, Usercentrics returns the generated Consent ID to the website. The Consent ID is stored together with the Consent State on the client side in a first-party cookie. Usercentrics assures that the use of first-party cookies as a technology prevents the consent cookie from being tracked across multiple websites.
In the cookie declaration at https://www.cookiebot.com/de/cookie-declaration/ you can see which other cookies may be used.
Cookiebot enables us to operate our website efficiently and in compliance with the law by managing and obtaining your cookie consents, which constitutes a legitimate interest pursuant to Article 6(1)(f) GDPR. The provider, Usercentrics, acts for us as our processor in accordance with Art. 28 GDPR.
If you would like more details about the privacy policy of "Cookiebot" and the company behind it, Usercentrics, please visit the privacy policy at https://www.cookiebot.com/de/privacy-policy/.
If you contact us electronically, by telephone or in person, the personal data you provide will be stored for the purpose of processing and responding to your inquiry. Your data will not be passed on to third parties. The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. b GDPR. Your data will be deleted after we have responded to your inquiry, unless we are entitled or obliged to store it for a longer period of time in accordance with Art. 6 para. 1 GDPR - for example due to a subsequent mandate. In these cases, you will be informed separately and personally about further data processing by employees of our law firm.
Personal data of applicants is stored and processed by us for the purpose of handling the application process. Processing may also be carried out electronically. This is particularly the case if an applicant submits the relevant application documents to us electronically. The legal basis for data processing is § 26 para. 1 sentence 1 BDSG.
If an employment contract is concluded with the applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. The applicant will be informed of this separately when the employment contract is concluded.
If no employment contract is concluded with the applicant, the application documents will be automatically deleted three months after notification of the rejection decision, provided that deletion does not conflict with any other legitimate interests of the controller. Other legitimate interest in this sense is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG)
We only process or store personal data of the respective data subjects for the period required to achieve the purpose of storage or as required by law. The criteria for the duration of storage are, in particular, statutory retention periods.
If the storage purpose no longer applies or if a legally prescribed storage period expires, the personal data will be routinely deleted in accordance with the statutory provisions.
Your personal data will not be transferred to third parties for purposes other than those listed below. We will only pass on your personal data to third parties if:
- you have given your express consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR,
- the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR is necessary for the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,
- there is a legal obligation for the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR, and
- this is legally permissible and necessary for the processing of contractual relationships with you in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR.
Our websites use so-called "cookies". Cookies can be stored on your device either temporarily for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted as soon as you leave the website, while permanent cookies remain on your device until you remove them manually or your browser automatically deletes them. Cookies fulfill different functions. Some are technically necessary to ensure basic functions of our websites, while others are used to analyze user behavior or for advertising purposes. These applications may originate either directly from us (first-party cookies) or from third-party providers (third-party cookies). Third-party cookies enable the use of certain third-party services on our websites. You can configure your browser so that you are informed about the setting of cookies and then only allow them in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. Please note that deactivating cookies may impair the functionality of our websites.
Cookies that are required for the performance of electronic communications transactions, the provision of functions requested by you or the optimization of the website (e.g. visitor analysis) are based on Art. 6 para. 1 lit. f GDPR. The legitimate interest of the website operator in this case is the technically error-free and optimized provision of services. If consent to the storage of cookies and similar technologies has been obtained, the processing is carried out exclusively on the basis of this consent (Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG). This consent can be revoked at any time.
The cookies and services used on this website can be found in this privacy policy.
You have the right:
- in accordance with Art. 15 GDPR, to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
- in accordance with Art. 16 GDPR, to immediately request the correction of incorrect or the completion of your personal data stored by us;
- in accordance with Art. 17 GDPR, to demand the deletion of your personal data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
- in accordance with Art. 18 GDPR, to demand the restriction of the processing of your personal data if 1) the accuracy of the data is disputed by you, 2) the processing is unlawful, 3) you refuse to delete the data, 4) we no longer need the data and 5) you need it to assert, exercise or defend legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR;
- in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller
- in accordance with Art. 7 para. 3 GDPR, to withdraw your consent once given to us at any time. As a result, we may no longer continue the data processing that was based on this consent in the future and
- to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or the registered office of our law firm.
To exercise your rights as a data subject, simply send an e-mail to kanzlei@rostalski.legal or contact any employee of the law firm.
If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for this arising from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right to object, which will be implemented by us without specifying a particular situation.
If you wish to exercise your right of revocation or objection, simply send an e-mail to kanzlei@rostalski.legal.
We use the widespread SSL (Secure Socket Layer) method in conjunction with the highest level of encryption supported by your browser when you visit our website. As a rule, this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser.
We also use suitable technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorized access by third parties. Our security measures are continuously updated in accordance with the state of the art.
Status: 01.08.2024