Privacy policy
Data protection information for websites of KPMG Law Rechtsanwaltsgesellschaft mbH (KPMG LAW)
Our business is based on trust. For KPMG LAW as a law firm, the protection of personal data (data privacy) is a high priority. KPMG LAW complies with all applicable data protection laws and also strives to continuously improve data protection. KPMG LAW is the responsible party for the processing of personal data on these websites within the meaning of the European Data Protection Regulation (the “GDPR”) and the German Federal Data Protection Act (“BDSG”).
With the following data protection information we inform about the processing of personal data on the websites of KPMG LAW as well as about the rights of data subjects.
General data protection information on the processing of personal data within the scope of our general business activities and for the purpose of providing legal advice to our clients is available here.
1. who is responsible for data processing on these web pages?
KPMG LAW Rechtsanwaltsgesellschaft mbH
Theodor-Heuss-Strasse 5
70174 Stuttgart
Phone: +49 711 781923-400
Fax: +49 711 781923-455
E-mail: information@kpmg-law.com
2. how can the data protection officer be reached?
Either at the postal address mentioned under 1. or by e-mail (address: de-datenschutz@kpmg.com).
3. for what purpose do we process your data on these websites and on what legal basis? Who is the recipient of the data?
KPMG LAW collects and uses personal data to provide the websites and our content and services in accordance with the provisions of Art. 6 para. 1 a to f DS-GVO, i.e. insofar as the DS-GVO or another legal provision permits this or the user has consented to the processing.
In order to fulfill the purposes listed in this section, personal data may be disclosed to the following recipients:
- member firms of the global KPMG network (“KPMG International”).
- subsidiaries or associated companies of KPMG, e.g. KPMG IT Service GmbH, which operates and controls the KPMG IT infrastructure.
- As far as necessary, authorities, courts or other public bodies at home and abroad.
- Other IT service providers and other processors strictly for a specific purpose, such as hosting, cloud services, public relations (e.g. sending newsletters, client information, studies).
Legally standardized data protection contracts are agreed with all service providers that we use on our websites as processors in accordance with Art. 28 EU GDPR, and the service providers are subjected to an appropriate IT security assessment in advance.
A transfer of personal data to countries outside the European Economic Area (EEA) only takes place under the guarantee of an adequate level of data protection within the meaning of Art. 44 et seq. DS-GVO.
Each member firm of KPMG International is committed to complying with minimum data protection standards. The main obligations in this regard are contained in the KPMG Data Protection Policy and in the contractual clauses on data protection (Inter-Firm Data Transfer Agreement – IFDTA) of KPMG International. In particular, the IFDTA also contains all modules of the current EU Standard Contractual Clauses (EU Model Clauses), which were adopted by the EU Commission on June 4, 2021 pursuant to Art. 46 para. 2 lit. c GDPR have been published. Accordingly, the IFDTA obliges KPMG member firms worldwide to comply with these regulations for non-EU/EEA data transfers.
Also in the case of KPMG-external service providers (including the use of cloud services) outside the EU/EEA, the appropriate level of data protection required under EU data protection law is ensured by compliance with the requirements of Art. 45 et seq. EU GDPR – as a rule by agreeing the EU standard contractual clauses within the meaning of Art. 46 para. 2 lit. c) EU GDPR – ensured.
Specifically, KPMG LAW processes personal data when you visit this website as follows:
a) Log files
Every time you visit our website, data is collected on the basis of our legitimate interest pursuant to Art. 6 para. 1f EU DS-GVO automatically stores so-called log files, which contain information about the computer accessing our websites, e.g. information about the browser type, the operating system used, the Internet service provider, the IP address, date and time of access.
Storage of this data is necessary in order to provide users with our websites for the duration of the session. We also use this data to optimize our websites and to ensure the security of our IT systems. The data from the log files are deleted as soon as they are no longer required for the named purposes.
b) Newsletter, mailings, downloads
On the websites of KPMG LAW, we provide personal data on the basis of the user’s consent pursuant to Art. 6 para. 1a EU DS-GVO, if applicable in conjunction with § 7 para. 2 No. 3 UWG provides a wide range of newsletters, mailings and downloads. Also on the basis of a legal permission according to § 7 para. 3 UWG, we may send certain information to affected parties by e-mail.
To register for topic-related newsletters and mailings and to download certain documents (e.g. studies) from KPMG LAW, you must provide your name and e-mail address. After registering for newsletters, mailings or downloads on the KPMG-LAW websites, each user receives a confirmation e-mail to the e-mail address provided (so-called double opt-in procedure). Only after clicking on the link contained in this e-mail is the registration completed.
Once granted, consent to receive newsletters, mailings or downloads can be revoked at any time via a link at the end of each e-mail or by sending a message to the mailbox de-digitalmarketing@kpmg.com.
Registrations for newsletters, mailings or downloads are logged on the basis of our legitimate interest in being able to prove the registration and consent of a user at any time (Art. 6 para. 1 lit. f EU DS-GVO).
c) Contact form
To request further information, we provide contact forms at various points on our websites that you can use to contact us directly. We process the personal data entered here (e.g. name, e-mail address) within the framework of the legal provisions for processing the request in accordance with Art. 6 para. 1b or Art. 6 para. 1f EU GDPR.
d) Use of Google Custom Search
As a central search function, this website uses “Google Custom Search”, which is provided by Google Inc. (“Google”) is provided. This search service enables a full text search for the content on this website. This search function is accessed via the search fields embedded on these web pages. If you enter one or more search words in the search field and submit the search query, this and other data such as your IP address will be transmitted to Google, usually to Google servers in the USA. If you do not wish to do so, please refrain from using the search box. By using the search function, you acknowledge that your use of the search box and the related data processing by Google are governed solely by Google’s privacy policy (available at http://www.google.de/privacy.html).
The same applies to the use of other services provided by Google, such as Google Maps.
e) Cookies
KPMG LAW uses so-called cookies for the purposes listed below. A cookie is a text file sent from the web server to the browser that processes information about the website visitor (e.g. IP address), their settings and the devices used.
In the table below we have listed the different types of cookies we use on our site:
Absolutely necessary cookies
These cookies are essential to ensure that the user can navigate and use certain features of the website. Without it, essential parts of the website cannot be used. Accordingly, these cookies are always enabled. They are only used when you visit our website and are usually deleted after you close your browser. They are also used to retrieve the optimized website display when accessed with a mobile device, so that your data volume is not unnecessarily consumed, for example. Also, the cookies facilitate the change of pages from http to https, so that the security of the transferred data remains guaranteed.
Functional cookies
Functional cookies enable the website to store information provided, such as the user name or language selection, and to offer the user improved and personalized functions based on this information. The information collected is evaluated exclusively in aggregated form.
Since we want to provide you with a website designed for optimal user experience, we recommend enabling these cookies. Functional cookies are also used, for example, to activate functions that you have requested, such as the playback of videos.
Performance cookies
These cookies collect data about user behavior. On this basis, the website is adapted to the general user behavior in terms of content and functionality. The collected information is generally processed in aggregated form, unless a user has separately and expressly consented to a personal evaluation. Performance cookies are used solely to improve the performance of the website and tailor the online experience to users’ needs.
Marketing cookies
Marketing cookies are used to offer content that is more targeted to the user, relevant and adapted to his interests. They are also used to measure and control the effectiveness of campaigns. They register, for example, whether a website has been visited or not, as well as which content has been used. This information is used to create an interest profile so that only content of interest to you is displayed. If you withdraw your consent to marketing cookies, it does not mean that you will see and receive less content as a result. Rather, it means that the content you see and receive is not customized to your needs.
Social media cookies
Social media cookies are used to offer content that is more specifically relevant to the user and adapted to his interests. They are also used to measure and control the effectiveness of campaigns. They register, for example, whether a website has been visited or not, as well as which content has been used. This information is used to create an interest profile so that only content of interest to you is displayed. If you withdraw your consent to social media cookies, it does not mean that you will see and receive less content as a result. KPMG LAW may use this data to display targeted advertising outside of its website without identifying you as a website visitor.
The legal basis for data processing through cookies can be either a legitimate interest of KPMG LAW or consent of the user.
A legitimate interest for KPMG LAW to use cookies pursuant to Art. 6 para. 1f DS-GVO & § 25 para. 2 TTDSG exists in particular with the use of absolutely necessary cookies (see above). No consent is required for this.
For the use of all other types of cookies (e.g. marketing and social media cookies), consent is required (Art. 6 para. 1a, f DS-GVO & § 25 para. 1 TTDSG), which can be given via the cookie banner displayed on our websites.
Further detailed information on the cookies used by KPMG LAW can be found in the KPMG LAW cookie settings, where the selected cookie configuration can also be adjusted by the user at any time.
Note: If you agree to a category, the cookies will be activated immediately or when you reload the website. If you revoke your already granted consent to a category, the cookies set will still remain active until the end of their term. To ensure that these cookies are blocked immediately, you must delete them manually via your browser settings after revoking them.
f) Tracking and analysis tools
KPMG LAW uses third-party tracking and analysis tools on these websites. These use so-called performance cookies, the use of which can be adjusted via the settings options of the respective third-party providers explained below or also in the KPMG LAW cookie settings. The settings can be customized on each page related to the domain.
KPMG LAW uses the following tracking and analytics tools on these websites:
(1) Google Analytics
KPMG uses Google Analytics, a web analytics service provided by Google, Inc. on websites. (“Google”).
Google Analytics uses “cookies”, which are text files placed on your browser, to help the website analyze how users use the site. The information generated by the cookie about the use of this website is usually transmitted to a Google server in the USA and stored there. In the event that IP anonymization is activated on this website, however, Google will truncate the user’s IP address beforehand within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.
The IP address transmitted by the browser used as part of Google Analytics is not merged with other Google data.
We further point out that on this website Google Analytics has been extended by the code “anonymizeIp” to ensure anonymized collection of IP addresses (so-called IP masking).
As part of Google Analytics, we also use the Google Signals extension, which enables tracking across multiple devices. For this purpose, Google uses the data of users who are logged into a Google service at the same time as visiting a website and who have activated the “personalized advertising” option in their Google account settings(https://adssettings.google.com/authenticated). Google Signals is also only used with IP anonymization enabled.
More information on terms of use and data protection can be found at http://www.google.com/analytics/terms/de.html and https://www.google.de/intl/de/policies/, respectively.
(2) Google Remarketing
This website uses Google Remarketing technology from Google Inc. (“Google”).
For this purpose, cookies are placed on your computer, which third-party providers, including Google, use to record which of our websites have been visited with your browser. With the help of this information, our advertisements can then be presented to you at a later time on other websites, e.g. within the scope of Google search or on websites of the Google network. For more information about Google’s privacy policy and how remarketing works, please see Google’s privacy policy. Here, too, you can deactivate the storage of cookies through the settings of your browser and/or object to the collection in the context of Google Remarketing through the Google ad settings.
(3) Evaluation of calls to the job advertisements
Our website uses functions from Kanzlei-Job.de, Königsteiner Straße 6a, 65812 Bad Soden.
When you call up our job advertisements, a connection is established between your browser and the servers of Kanzlei-Job.de. In the process, data is transferred to Kanzlei-Job.de. The content is integrated via an iFrame.
Kanzlei-Job.de logs various user data for analysis purposes and for the provision of functions. Cookies are used for this purpose. These are small text files to store specific user data. This data allows Kanzlei-Job.de to analyze the use of the website offer. The data is stored on Kanzlei-Job.de servers in Germany and is not passed on to third parties. Furthermore, all data and especially the IP address are stored only in abbreviated and anonymized form. Only the first two IP blocks are stored (e.g. 192.168.x.x). The remaining two will be cut. This means that no conclusion can be drawn about your identity. Learn more at https://www.kanzlei-job.de/datenschutz.
(4) Use of JavaScript and counting pixels (web beacons)
KPMG LAW uses a JavaScript and tracking pixel to evaluate website visits. The JavaScript is embedded in all KPMG-LAW web pages. The JavaScript collects various information about the visitor’s computer (e.g. IP address, the time of the page view, the browser type, and the existence of cookies previously set by the same server). These data are transmitted to KPMG LAW via tracking pixels.
You have the option to disable JavaScript calls in your browser. In addition, you can disable tracking pixels by rejecting or disabling the cookies associated with them.
(5) Use of Hubspot
KPMG LAW uses HubSpot, a service of HubSpot Inc. for analysis purposes on its websites.
In doing so, so-called “web beacons” are used and also “cookies” are set, which are stored on your computer and which enable an analysis of your use of the website by us. HubSpot analyzes the information collected (e.g., IP address, geographic location, browser type, length of visit, and pages viewed) on behalf of KPMG LAW to generate reports about KPMG LAW’s visit and pages viewed.
If, as in para. 3b KPMG LAW e-mail news is subscribed to and studies and other documents are obtained, we can also use HubSpot to link a user’s visits to KPMG LAW websites with personal details (especially name/email address) on the basis of consent given, thus recording them on a personal basis and informing users individually and in a targeted manner about preferred subject areas.
If you generally do not want HubSpot to collect data, you can prevent the storage of cookies at any time by making the appropriate browser settings (see section 3b above).
For more information about how HubSpot works, see the privacy policy of HubSpot Inc. available at: http://legal.hubspot.com/de/privacy-policy.
(6) Locating service
Our website can determine the geographical location of your device. The sole purpose of collecting this information is to provide you with information that may be of interest to you based on your geographic location.
The use of applications for smartphones and tablet computers (so-called apps) provided by KPMG LAW is evaluated using transmitted device identifiers (device ID). The evaluation is anonymous; KPMG LAW cannot draw any conclusions about the device user.
(7) How long is data stored?
Unless expressly stated otherwise, KPMG LAW will retain personal data for as long as it is necessary to carry out the purposes set out above. This is subject to statutory retention obligations. KPMG LAW employees are instructed to regularly review the duration of the storage of personal data and to delete it if necessary.
(8) What data protection rights do data subjects have?
Data subjects are entitled to information pursuant to Art. 15 EU GDPR about the processing of their personal data by KPMG LAW (including about the purpose of the processing, any recipients and the expected duration of storage), rights to rectification of inaccurate data (Art. 16 EU GDPR), deletion (Art. 17 EU GDPR), restriction of processing and data portability of the data provided (Art. 18, 20 EU GDPR) as well as the right to object to use for marketing purposes and on the basis of processing based on a legitimate interest of KPMG LAW (Art. 21 EU GDPR).
Once given, consent can generally be revoked at any time with effect for the future vis-à-vis KPMG LAW. In order to safeguard these rights, any data subject may contact KPMG LAW’s data protection officer (see section 2). In addition, there is also a right of appeal to a data protection supervisory authority. Data subjects may address their complaint to the authority of their place of residence, but in principle also to any other data protection supervisory authority.
