In order to fulfill legal notification obligations, your personal data may be transmitted to other recipients not named here. This particularly affects authorities (finance authorities, social security institutions, supervisory authorities, law enforcement authorities, etc.).

6. Transfer of personal data to countries outside the European Economic Area

In principle, your data will only be passed on to third parties if you have given us your consent to do so or if this is permitted by law. This is e.g. This is the case, for example, if these are external service providers of ours who we have carefully selected and commissioned and who are bound to our instructions and are regularly checked (e.g. web hosting providers) or if this is to fulfill a legal obligation obligation to which we are subject.

If we transfer personal data to service providers outside the European Economic Area (EEA), the transfer will only take place if the third country has been confirmed by the EU Commission as having an adequate level of data protection or other appropriate data protection guarantees (e.g. binding internal company data protection regulations or EU standard contractual clauses). available.

7. Duration of storage
   a) Your personal data will be deleted or blocked as soon as this is no longer necessary for processing to comply with legal obligations and the purpose of storage no longer applies.

   b) Please note that even after termination of a contract, there may be a need to store personal data in order to comply with contractual or legal obligations, e.g. b

   i) to fulfill commercial or tax retention obligations (e.g. according to the Commercial Code and the Tax Code) with retention periods of up to ten years, calculated from the end of the calendar year, or

   ii) to assert or exercise claims or rights or to defend against rights or claims that are within the scope of the statutory provisions on limitation, which can be up to 30 years from the start of the respective statutory limitation period.

8. Your rights

You have the following legal rights towards us with regard to personal data relating to you:

1. a) Right to information (Article 15 GDPR): You have the right to request confirmation as to whether we process personal data that concerns you. If this is the case, you have the right to access this personal data as well as further information, e.g. B. the processing purposes, the recipients and the planned duration of storage or the criteria for determining the duration.

   b) Right to correction and completion (Art. 16 GDPR): You have the right to immediately request the correction of incorrect data. Taking into account the purposes of the processing, you have the right to request the completion of incomplete data.

   c) Right to deletion (“right to be forgotten”) (Article 17 GDPR): You have the right to deletion unless processing is necessary. This is the case, for example, if your data is no longer necessary for the original purposes, you have revoked your data protection declaration of consent or the data was processed unlawfully.

   d) Right to restriction of processing (Article 18 GDPR): You have the right to restriction of processing, e.g. B. if you believe that the personal data is incorrect.

   e) Right to data portability (Art. 20 GDPR): You have the right to receive the personal data concerning you in a structured, common and machine-readable format.

   f) Right to revoke your data protection consent (Art. 7 Para. 3 GDPR): You can revoke your consent to the processing of your personal data at any time with effect for the future. However, this does not affect the lawfulness of the processing carried out until the revocation.

9. Right to object

In the case of processing personal data to carry out tasks in the public interest (Art. 6 Para. 1 S. 1 lit. e GDPR) or to pursue legitimate interests (Art. 6 Para. 1 S. 1 lit. f GDPR), You can object to the processing of your personal data at any time with future effect. In the event of an objection, we must refrain from any further processing of your data for the aforementioned purposes, unless

1. a) there are compelling, legitimate reasons for processing that outweigh your interests, rights and freedoms, or
2. b) processing is necessary to assert, exercise or defend legal claims.

10.Right to complain to the supervisory authority

If you are of the opinion that the data processing is not in accordance with data protection regulations, you have the option of contacting our data protection officer named under section 2 with a complaint. You can also lodge a complaint with a responsible data protection supervisory authority at any time. The data protection supervisory authority responsible for us is:

The State Commissioner for Data Protection and Freedom of Information
, Dr. Imke Sommer
Arndtstraße 1
27570 Bremerhaven

11. Source of personal data

The personal data processed is collected either directly from the data subject or from third parties (e.g. a credit reference agency) and may also come from publicly available sources, such as: B. the telephone book, the press, the Internet.

12. Obligation to provide personal data

The provision of personal data is necessary for the conclusion and implementation of the consulting contract; Both are not possible without processing your personal data. In addition, according to anti-money laundering regulations, we are obliged to identify you using your identification document before establishing the business relationship and to collect and store your name, place of birth, date of birth, nationality, address and identification data, so you must provide us with the necessary information and documents for this purpose and immediately report any changes that arise in the course of the business relationship. If you refuse to provide it, we may not begin or continue the business relationship with you.

13. No automated decision making

You will not be subject to a decision based exclusively on automated processing of your data, including profiling (Art. 13 Para. 2 lit. f GDPR, Art. 22 Para. 1 to 4 GDPR, Art. 4 No. 4 GDPR in conjunction with Section 37 BDSG). that would have legal effect on you or similarly significantly affect you.

14. Further information and service

For further information, requests for information or objections to data processing, please contact the address given under 1. In addition, we refer to the full text of the GDPR and the BDSG.