Data protection notice

1. Name and contact details of the data processing controller and the company data protection officer

This data protection information applies to data processing, as the controller, by:

BANSBACH GmbH
Auditors
Tax consultancy
Löffelstraße 40
70597 Stuttgart
Telephone: +49 711 1646-6
Telefax: +49 711 1646-800
Email:

and its subsidiaries

Pariser Ring 1
76532 Baden-Baden

Balinger Strasse 36
72336 Balingen

Grunaer Weg 30
01277 Dresden

Heinrich-von-Stephan-Strasse 25
79100 Freiburg

Leutragraben 2 – 4
07743 Jena

Industriestraße 95
04229 Leipzig

Ganghoferstraße 66
80339 München

Seepromenade 19
88662 Überlingen

and the following companies:

BANSBACH Recht & Steuern GmbH
Auditors
Tax consultancy
Löffelstraße 40
70597 Stuttgart

BANSBACH ECONUM Unternehmensberatung GmbH
Löffelstraße 40
70597 Stuttgart

KRESTON BANSBACH GmbH
Auditors
Löffelstraße 40
70597 Stuttgart

The BANSBACH data protection officer can be contacted at the address above: Löffelstrasse 40, 70597 Stuttgart or at .

2. Gathering and storing of personal data and the nature and purpose of its use

a) When visiting the website

When you go to our website at www.bansbach-gmbh.de, your device’s browser automatically sends information to our website’s server. This information is saved temporarily in a so-called log file.

The following information is recorded without your intervention and stored until it is deleted automatically:

• anonymised IP address of the requesting computer,
• date and time of access,
• name and URL of the file retrieved,
• website from which access takes place (referrer URL),
• browser used, and where applicable your computer’s operating system and the name of your access provider.

We process the data specified for the following purposes:

• to ensure smooth connection to the website,
• to ensure ease-of-use of our website,
• to assess systems security and stability as well as
• for further administrative purposes.

The legal basis for data processing in Art. 6(1)(f) DSGVO. Our legitimate interest arises from the data collection purposes listed above. We will never use the data we have collected about you for the purpose of drawing conclusion about you as an individual.

Furthermore, when you visit our website, we use cookies as well as analytical services. Further explanations in this respect can be found under points 5 and 6 of this data protection statement.

b) When you subscribe to our newsletter

If you have expressly signed up pursuant to Art. 6(1)(1)(a) GDPR, we will use your email address to regularly send you our newsletter. To receive our newsletter, all we need is your email address and your first name and surname.

You can unsubscribe at any time, including by clicking on the link at the end of the newsletter.

Please be aware that when we send you our newsletter, we will evaluate your user behaviour. We sometimes use an external service provider to send you our newsletter and for the data processing specified below. We will have carefully selected and assigned this service provider, they will be required to follow our instructions, and will be regularly reviewed by us.

To allow us to evaluate user behaviour, the emails we send contain so-called web beacons and tracking pixels, which represent single-pixel image files which are stored on our external service provider’s website. For the purposes of evaluation, we link the web beacons to your email address and an individual ID. Links and/or QR codes contained in the newsletter also contain this ID. We use the data gathered in this way to compile a user profile that enables us to tailor the newsletter to your individual interests. As part of this, we record when you read our newsletter, which links in the newsletters you click on, and so deduce your personal interests. We link this data to actions you have taken on our website.

You can object to this tracking at any time by clicking on the separate link provided in each email, or by contacting us via any other channel. This information will be saved until you unsubscribe from the newsletter. If you unsubscribe, we will keep this data anonymously and purely for statistical purposes. Furthermore, such tracking is not possible if you have disabled the display of images in your e-mail programme by default. In this case, you will not be able to see the full newsletter and may not be able to use all the functionalities. If you select manual display of the images, the tracking referred to above will take place.

c) When you use our contact form

If you have any questions whatsoever, you can contact us via the contact form on our website. You will need to provide is with a valid email address and name so that we know who the enquiry is from and so that we can respond. Further information may be provided on voluntary basis.

Data processing for the purpose of contacting us is carried out in accordance with Art. 6(1)(1)(a) GDPR based on your voluntary consent.

d) In the event of a mandate

If you mandate us, we collect the following information, among others:

• Salutation, first name, last name;
• valid contact details (telephone number, e-mail, etc.);
• address;
• Information necessary for the assertion and defense of your rights under the mandate.

This data is collected, inter alia,

• to be able to identify you as our client (m/f/d);
• to be able to advise and represent you appropriately
• to correspond with you;
• to fulfil our contractual and legal rights and obligations.

In addition, we process personal data that we receive from you or third parties (m/f/d) in the course of business relations. This is mainly contact data as well as data required for the business transaction (bank and payment (traffic) data), if applicable information from public sources (e.g. Internet, commercial register) as well as further data that you voluntarily provide to us in the course of the processing of a business relationship (contractual relationship or contract initiation).

Data processing is carried out exclusively within the framework of the statutory provisions, in particular in compliance with the provisions of the General Data Protection Regulation (GDPR) and the German Data Protection Amendment and Implementation Act EU (new DSG). Data processing is carried out based on the legal bases described for the following purposes:

• upon your request for the appropriate processing of the mandate and for the mutual fulfilment of obligations arising from the mandate agreement, including the general initiation of contracts, execution of contracts and termination of contractual relationships pursuant to Art. 6(1)(1)(b) GDPR;
• on the basis of consent given in accordance with Art. 6(1)(1)(a) GDPR;
• on the basis of legal requirements in accordance with Art. 6(1)(1)(c) GDPR;
• on the basis of a legitimate interest pursuant to Art. 6(1)(1)(f) GDPR.

The personal data collected by us for the mandate will be stored until the expiry of the statutory retention obligations applicable to us, unless we are obliged to store it for a longer period of time pursuant to Art. 6(1)(1)(c) GDPR due to tax and commercial law retention and documentation obligations (e.g. from the German Commercial HGB, the German Penal Code StGB or the German Tax Code AO) or you have consented to storage beyond this pursuant to Art. 6(1)(1)(a) GDPR.

3. Transfer of data

Your personal data will not be transferred to third parties for purposes other than those listed below.

Insofar as this is necessary for the processing of the client relationship or the business relationship with you, and/or at your own request, your personal data will be passed on to third parties (m/f/d). This includes in particular the disclosure to authorities such as tax offices, social security institutions as well as to courts, companies or cooperation partners (m/f/d) of our group of companies, service providers (m/f/d) (data processing center, IT service provider, waste disposal companies etc.) and others for the purpose of correspondence as well as for the assertion and defense of your rights. The data disclosed may be used by the third party (m/f/d) exclusively for the purposes stated. Professional secrecy remains unaffected. Insofar as the data is subject to professional secrecy, it will only be passed on to third parties (m/f/d) in consultation with you.

The recipients (m/f/d) described may also be recipients (m/f/d) from third countries (countries outside the European Economic Area – EEA). The same level of data protection cannot be guaranteed in third countries as within the European Economic Area. In the case of data transfers to a third country, it is ensured that this transfer takes place exclusively in accordance with the legal provisions pursuant to Chapter V GDPR.

We only pass on your personal data to third parties if:

• you have given your express consent in accordance with Art. 6 (1)(1)(a) GDPR,
• the disclosure is necessary for the assertion, exercise or defense of legal claims in accordance with Art. 6 (1)(1)(f) GDPR and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data,
• in the event that there is a legal obligation to disclose your data pursuant to Art. 6 (1)(1)(c) GDPR, as well as
• this is legally permissible and necessary for the processing of contractual relationships with you according to Art. 6 (1)(1)(b) GDPR.

4. Hosting and collection of access data and log files

a) Hosting

The hosting services used by us serve to provide the following services: infrastructure and platform services, computing capacity, storage space and database services as well as technical maintenance services which we use for the purpose of operating this website.

This involves ourselves or our hosting provider processing file data, contact details, content data, contractual data, usage data, meta and communication data of customers, prospects and visitors to this website on the basis of our legitimate interest in the efficient and secure provision of this website pursuant to Art. 6(1)(f) GDPR in conjunction with Art. 28 GDPR (conclusion of order-processing contract).

b) Collection of access data and log files

We or our hosting provider collect, on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR, data about every access to the server on which this service is located (so-called server log files). This access data includes the name of the website accessed, the file, date and time of access, notification of successful access, browser type and version, the user’s operating system and IP address.

Log file information is stored for security reasons (e.g. for the investigation of abuse or fraud) for a maximum period of 180 days and then deleted. Data that has to be stored for longer for use as evidence is excluded from deletion until final clarification of the respective incident.

5. Analysis tools and advertising

You have the option to prevent actions you take here from being analyzed and linked. This will protect your privacy, but will also prevent the owner from learning from your actions and improving the usability for you and other users.

6. Cookies

We use cookies on our website. These are small file that your browser creates automatically to save on your device (laptop, tablet, smartphone etc.) when you visit our website. Cookies do not cause any harm to your device and do not contain viruses, trojans or other harmful software.

The cookie stores information generated in connection with the specific device used. This does not mean, however, that we gain direct knowledge of your identity as a result.

The use of cookies serves on the one hand to make our website more pleasant for you to use. For example, we use so-called session cookies to identify that you have already visited individual pages of our website. These are deleted automatically when you leave our website.

We also place temporary cookies which are saved on your device for a specified period. If you visit our website again to use our services, the site will automatically recognise that you have visited before, what data you entered and your settings so that you do not have to enter these again.

We also use cookies to record statistical data about the use of our website, and assess this data in order to optimise our website (see point 5). When you return to our website, these cookies enable us to automatically recognise that you have visited our website previously. These cookies are deleted automatically after a specified period of time.

The data processed by cookies is required for the aforementioned purposes in order to safeguard our legitimate interests and those of third parties pursuant to Art. 6(1)(1)(f) GDPR.
Most browsers accept cookies automatically. You can, however, configure your browser so that no cookies are saved on your computer, or so that you always receive a notification before a new cookie is placed. Fully deactivating cookies may, however, mean that you are unable to use all the functions about our website.

7. Rights of the person concerned

You have the right:

• pursuant to Art. 15 GDPR to request details of your personal data which we have processed. In particular, you may request details of the purposes of processing, the category of personal data, the categories of recipients to whom your data has or will be disclosed, the proposed storage period, the existence of a right of rectification, erasure, restriction of processing or opposition, the existence of a right of appeal, the origin of your data, if not collected by us, as well as the existence of automated decision-making including profiling and, where applicable, meaningful information regarding the details;
• pursuant to Art. 16 GDPR, to request the immediate rectification of incorrect or incomplete of your personal data which have saved;
• pursuant to Art. 17 GDPR, to request the deletion of your personal data which we have saved, providing its processing is not required in order to exercise the right to freedom of speech and of information, to comply with a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
• pursuant to Art. 18 GDPR, to request the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful but you reject its deletion and we no longer require the data, but you require it in order to assert, exercise or defend legal claims, or if you have submitted an objection to the processing pursuant to Art. 21 GDPR;
• pursuant to Art. 20 GDPR, to receive the personal data you have provided to us in a structured, standard and machine-readable format or request its transfer to another responsible party;
• pursuant to Art. 7(3) GDPR, to revoke your consent at any time. The consequence of this is that we may not continue to process data subject to this consent in the future and, pursuant
• to Art. 77 GDPR, to submit a complaint to a supervisory authority. As a rule, you can submit complaints to the supervisory authority in your usual place of residence or work, or at the location of our head office.

8. Right of objection

If your personal data is processed on the basis of legitimate interests pursuant to Art. 6(1)(1)(f) GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR if there are reasons for this arising from your particular situation or if the objection is directed against direct advertising. In this latter case, you have a general right of objection which we will implemented without specifying a special situation.

To assert your right of revocation or objection, simply send an email to .

9. Data security

Within your visit to the website, we use the popular SSL (Secure Socket Layer) procedure in conjunction with the highest encryption level. You can see whether an individual page of our website is transmitted in encrypted form from the closed key or lock symbol in the bottom status bar of your browser.

We also use appropriate technical and organisational security measures to protect your data against accidental or deliberate manipulation, partial or complete loss, destruction or against unauthorised access by third parties. Our security measures are continuously improved in accordance with technical developments.

10. Updates and changes to this data protection statement

This data protection statement is currently valid, and was issued in June 2024.

 

Here you can download the data protection notice: Data protection