Privacy policy
Privacy policy
1. Name and contact details of the controller
This data protection information applies to data processing by:
GERPASS - Elmar Esser Law Offices
Kurfürstendamm 50
10707 Berlin
E-mail: elmar@gerpass.de
Tel: +49-30 - 38 30 8881
Fax: +49-30 - 38 30 8882
The person responsible within the meaning of TDDDG, the General Data Protection Regulation and all data protection laws applicable in the member states of the European Union is
Rechtsanwalt Elmar Esser (Attorney)
Kurfürstendamm 50
10707 Berlin
2. Collection and storage of personal data and the nature and purpose of their use
a. Collection of data when visiting our website
When you visit our website www.gerpass.de, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is collected without any action on your part and stored until it is automatically deleted:
- IP address of the requesting computer,
- Date and time of access,
- Name and URL of the retrieved file,
- Website from which the access is made (referrer URL),
- the browser used and, if applicable, the operating system of your computer and the name of your access provider.
We process the aforementioned data for the following purposes:
- Ensuring a smooth connection to the website,
- Ensuring a comfortable use of our website,
- Evaluation of system security and stability
- and for other administrative purposes.
The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest follows from the purposes for data collection listed above. Under no circumstances do we use the data collected for the purpose of drawing conclusions about your person.
b. Collection of data when contacting us electronically or otherwise
If you contact us electronically, by telephone or in person, the personal data you provide will be stored by us for the purpose of processing and responding to your enquiry. The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. b GDPR. Your personal data will be deleted after we have responded to your enquiry, unless we are entitled to store it for a longer period of time - e.g. due to a subsequent client relationship - in accordance with Art. 6 para. 1 GDPR. In these cases, we will inform you separately about further data processing.
c. Collection of data for applications and in the application process
If personal data is transmitted to us as part of an application, we store it for the purpose of processing the application procedure. The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. b GDPR.
If an employment contract is concluded with the applicant, we store the personal data transmitted for the purpose of processing the employment relationship in compliance with the statutory provisions. We will inform the applicant of this separately when the employment contract is concluded.
If no employment contract is concluded with the applicant, we will automatically delete the application documents three months after notification of the rejection decision, unless we are authorised to retain them for a longer period - e.g. due to a burden of proof incumbent on us in proceedings under the General Equal Treatment Act (AGG) - in accordance with Art. 6 para. 1 GDPR.
3. Disclosure of data
Your personal data will not be transferred to third parties for purposes other than those listed below. We only pass on your personal data to third parties,
- if you have given your express consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR,
- the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR is necessary for the assertion, exercise or defence of your legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,
- in the event that there is a legal obligation for disclosure pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR, and
- this is legally permissible and necessary for the processing of contractual relationships with you in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR.
4. Cookies and analysis tools
4.1 General information
Our website does not use any analysis tools or social media plug-ins. Furthermore, your personal data is not used in the context of automated decision-making - in particular not for profiling purposes.
We use cookies on our website. These are small files that your browser automatically creates and that are stored on your end device (PC, laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause any damage to your end device and do not contain any viruses, Trojans or other malware.
Information is stored in the cookie that results in each case in connection with the specific end device used. However, this does not mean that we obtain direct knowledge of your identity.
The use of cookies serves to make the use of our website more pleasant for you. For example, we use so-called session cookies to recognise that you have already visited individual pages of our website. These are automatically deleted after you leave our website.
In addition, we also use temporary cookies to optimise user-friendliness, which are stored on your end device for a specified period of time. If you visit our website again, it will automatically recognise that you have already visited us and which entries and settings you have made so that you do not have to enter them again.
The data processed by cookies is required for the purposes mentioned to protect our legitimate interests and those of third parties in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.
Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your end device or a message always appears before a new cookie is created. However, completely deactivating cookies may mean that you cannot use all the functions of our website.
4.2.1 Optional analysis cookies
If you give us your consent to do so, we use the open source software tool Matomo (formerly PIWIK) on www.gerpass.de to anonymously analyse the surfing behaviour of our users. Matomo stores a small text file, a so-called cookie, on your end device or in your browser. This cookie uses the IP address of your end device, shortened to the first six digits, to record how our website is used via your device (more precisely: via a device with the corresponding six initial digits in the IP address) and sends us this information. It is not possible for us to identify your device or even your person due to the shortening of your IP address. You remain anonymous. We then compile anonymous visitor statistics, which provide us with information about, for example, which topics are searched for or clicked on frequently and which topics are less frequently, or when visits are more or less frequent, which pages our visitors use to reach us and which links on our pages are clicked on and how often. This enables us to optimise the content and structure of our website so that our visitors can find the information they are looking for quickly.
4.2.2 Data collected
If you consent to web analysis using Matomo, the following data will be collected when you access individual pages of our website:
(1) 1 byte or the first six digits of the IP address of the user's accessing system (example: 192.48.210.xxx)
(2) The website accessed
(3) The website from which the user accessed the website (referrer)
(4) The subpages that are accessed from the accessed website
(5) The time spent on the website
(6) The frequency with which the website is accessed
(7) Type of end device used (desktop, tablet, mobile phone)
(8) Operating system, browser, browser plugins
(9) Screen resolutions
(10) Exit page (last page viewed)
4.2.3 Description of the analysis cookies
|
Name |
Provider |
Function |
Values (example) |
Runtime |
|
_pk_id |
Matomo / InnoCraft, 150 Willis St, 6011 Wellington, New Zealand. |
Gives the browser an ID to identify a recurring visit. |
5 HTML |
13 months |
|
_pk_ref |
Matomo / InnoCraft, 150 Willis St, 6011 Wellington, New Zealand. |
Is used to store the information |
6 HTML |
6 months |
|
_pk_ses |
Matomo / InnoCraft, 150 Willis St, 6011 Wellington, New Zealand. |
Short-term cookie to store temporary data of the visit |
7 HTML |
30 minutes |
4.2.4 Legal basis
The legal basis for the use of the Matomo analysis cookie and the user analysis is § 25 para. 1 sentence 1 TTDSG and Art. 6 para. 1 lit. a GDPR.
4.2.5 Disclosure to third parties
We use Matomo in a version hosted by our service provider, Warenform, so that we retain full control over the settings and data collection at all times. All data is stored exclusively on the server of this service provider in Germany. The data is not passed on to third parties.
4.2.6 Storage period
If your browser settings support this, the cookies are deleted at the end of their term, i.e. after 6 months in the case of the cookie_pk_ref, after 13 months in the case of the cookie pk_id and after 30 days in the case of the cookie_pk_ses. The anonymised data collected and the accumulated statistics based on it are deleted as soon as they are no longer required.
4.2.7 Possibility of elimination
Cookies are stored on the user's computer and transmitted to us by the user. As a user, you therefore have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically.
You can find more information on the privacy settings of the Matomo software at the following link: https://matomo.org/docs/privacy/.
5. Rights of data subjects
You have the right:
- to request information about your data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the purposes of processing, the category of personal data, the category of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of appeal, the origin of your data if it was not collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information on its details;
- in accordance with Art. 16 GDPR, to immediately request the correction of incorrect or incomplete personal data stored by us;
- to demand the erasure of your personal data stored by us in accordance with Art. 17 GDPR, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;
- in accordance with Art. 18 GDPR, to demand the restriction of the processing of your personal data insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it and we no longer need the data, but you need it for the assertion, exercise or defence of legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR;
- in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller;
- in accordance with Art. 7 para. 3 GDPR, to revoke your consent once given to us at any time. The consequence of this is that we may no longer continue the data processing that was based on this consent in the future, and
- to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority at your usual place of residence or workplace or at the registered office of our law firm.
To exercise your rights as a data subject, simply send an e-mail to info@gerpass.de
6. Right of objection
If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for this arising from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right to object, which will be implemented by us without specifying a particular situation. If you would like to exercise your right of cancellation or objection, simply send an email to: info@gerpass.de.
7. Data security
We use the widespread SSL (Secure Socket Layer) method in conjunction with the highest level of encryption supported by your browser when you visit our website. As a rule, this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can recognise whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser.
We also use suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continuously updated in line with technological developments.
8. Topicality and amendment of this data protection declaration
This data protection declaration is currently valid and is dated June 2025. Due to the further development of our website and offers or due to changed legal or official requirements, it may become necessary to change this data protection declaration.