Privacy policy

User note: This privacy policy is for the website https://notar-heinze.de/ and can therefore only be used in a legally compliant manner. Please note the comments in this document. Additions or functions (especially in the form of links) that cannot be prefabricated by the GDI mbH should be added here.
The text at the bottom of the privacy policy is highlighted. This highlighting must also be shown on the website (e.g. in bold), as legal requirements demand a separate reference to the rights of website users stored there.

Privacy policy
Below we inform you about the details of data protection when visiting our website.
The use of our website is generally possible without providing personal data.
Insofar as personal data is collected when you visit our website, we process it exclusively in accordance with the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
The processing of personal data takes place exclusively in accordance with this privacy policy.
This privacy policy applies to the use of the website at the address https://notar-heinze.de/. For linked content from other providers, the data protection declaration on the linked website is authoritative.
We would like to point out that security gaps can occur during data transmission via the Internet, which cannot be prevented by the technical design of this website. Complete protection of personal data is not possible when using the Internet.

Definitions
The legislator requires that personal data be processed lawfully, fairly and in a manner that is comprehensible to the data subject ("lawfulness, fairness and transparency"). To ensure this, we inform you about the individual legal definitions that are also used in this privacy policy:

1. personal data
"Personal data" means any information relating to an identified or identifiable natural person (hereinafter referred to as "data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

2. processing
"Processing" means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

3. restriction of processing
"Restriction of processing" is the marking of stored personal data with the aim of restricting its future processing.

4. profiling
"Profiling" means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location or movements.

5. pseudonymization
"Pseudonymization" means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.

6. file system
"File system" means any structured collection of personal data that is accessible according to specific criteria, regardless of whether this collection is managed centrally, decentrally or according to functional or geographical aspects.

7. responsible person
"Controller" means a natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.

8. processors
"Processor" means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

9th recipient
"Recipient" means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing.

10. third party
"Third party" means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorized to process personal data.

11. consent
Consent" of the data subject is any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

Responsible body, Art. 13 para. 1 lit. a GDPR
Notary Dr. Stefan Heinze
Gereonshof 2
50670 Cologne
T +49 221 179360
F +49 221 1793666
E-Mail: info@notar-heinze.de

Data Protection Officer
Mr. Dipl.-Inform. Olaf Tenti
GDI Gesellschaft für Datenschutz und Informationssicherheit mbH
Körnerstraße 45, 58095 Hagen
Phone: +49 (0)2331/356832-0
E-mail: datenschutz@gdi-mbh.eu
Internet: www.gdi-mbh.eu

Collection of personal data when visiting our website
When you visit our website, data is automatically collected and stored in log files on our host's server. This data may have a personal reference. The data collected includes
- IP address [in anonymized form]
- Date and time of the request
- Time zone difference to Greenwich Mean Time (GMT)
- Content of the request (specific page)
- Access status/HTTP status code
- Amount of data transferred in each case
- Website from which the request comes
- Browser
- Operating system and its interface
- Language and version of the browser software.
The hoster uses the collected data to ensure the trouble-free operation of the website as well as to ensure IT security and to improve our offer. If there are concrete indications, the log data may be subsequently analyzed. The temporary storage of the IP address by the hoster is necessary to enable the website to be delivered to the user's computer. For this purpose, your IP address must remain stored for the duration of the session.
This data is not merged with other data sources.
The legal basis for data collection is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest in data collection arises from the aforementioned purposes.
The data is deleted by the host as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.
If the data is stored in log files, this technical information is deleted or made unrecognizable after seven days at the latest.
The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, you do not have the option to object.

Use of cookies
In addition to the aforementioned data, cookies are used on your computer when you use and visit our website.
When you visit our website for the first time, you will be asked whether you consent to the use of cookies and, if so, which categories you consent to.
Cookies are small text files that are stored by your browser on your end device to store certain information. Furthermore, these cookies are used to make the use of our website more pleasant and convenient for you or for analytical purposes.
Most of the cookies we use are so-called "session cookies". They are used to make the services of our website technically available to you. After your visit, these cookies are automatically deleted by your browser.
Other cookies remain on your computer and enable us to recognize your end device on your next visit (so-called persistent or permanent cookies).
The next time you visit our website with the same end device, the information stored in cookies will be read either by our website ("first party cookie") or by another website to which the cookie belongs ("third party cookie").
These cookies are automatically deleted from your system after a preset period of time, which differs depending on the cookie.
Through the stored and returned information, the respective website recognizes that you have already accessed and visited it with the browser of your end device.
We use this information to optimize the design and display of the website according to your preferences. Only the cookie itself is identified on your end device.
Any further storage of personal data will only take place with your express consent or if this is absolutely necessary in order to be able to use the service offered and accessed by you accordingly.
This website uses the following types of cookies, the scope and function of which are explained below:
- Essential cookiesStrictly necessary cookies guarantee functions without which you cannot use our websites as intended. These cookies are used exclusively by us and serve, for example, to ensure that you as a registered user always remain logged in when accessing various subpages of our website and thus do not have to re-enter your login data each time you access a new page. The legal basis for their use is our legitimate interest within the meaning of Art. 6 para. 1 sentence 1 lit. f) GDPR.
- Functional cookiesEnable our website to store information you have already provided and to offer you improved functions based on this. The legal basis for the use of these cookies is your consent pursuant to Art. 6 para. 1 sentence 1 lit. a) GDPR.
- Marketing or tracking cookies: These cookies are used to collect information about the websites visited by the user, to create target group-oriented and more effective advertising for the user and to enable us to identify the interests of website visitors in order to make our website even more interesting in the future.

Marketing and/or tracking cookies will only be set after your active consent.
The legal basis for data processing here is Art. 6 para. 1 sentence 1 lit. a GDPR.

Opt-out for marketing cookies
You can also manage cookies used for online advertising via the tools developed in many countries as part of self-regulatory programs, such as the US-based https://www.aboutads.info/choices/ or the EU-based https://www.youronlinechoices.com/de/praferenzmanagement/.

Deleting/revoking cookies
Change cookie settings
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, e.g. third-party cookies (cookies that are set by a third party, i.e. not by the actual website on which you are currently located), exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. You can use your web browser to delete stored cookies at any time.
You have the option of deactivating cookies in your browser at any time.
If cookies are deactivated, however, the functionality of this website may be restricted.

Deleting cookies
Cookies are stored on your end device until you delete them, which you can do at any time. Furthermore, expired cookies are automatically deleted by your browser if you have configured your browser accordingly. Expired cookies are no longer sent to our servers by your browser and can therefore no longer be used by us.
Here you will find information on how to delete cookies in your browser and manage cookie settings for the most common browsers:
Desktop PC / Laptop
- Microsoft Edge
- Mozilla Firefox
- Apple Safari
- Google Chrome
Mobile devices
- Google Chrome (Android)
- Google Chrome (iOS)
- Apple Safari (iOS)
- Samsung Internet (Android)
- Mozilla Firefox (Android)
If you have not made or do not make any different settings, cookies that enable or ensure the necessary technical functions will remain on your end device until you close the browser; other cookies may remain on your end device for longer (maximum 6 months).
To safeguard your privacy, you should regularly check the cookies on your end device and your browser history and delete them yourself.

SSL or TLS encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data that you transmit to us cannot be read by third parties (end-to-end encryption). The protocols authenticate the communication partner and ensure the integrity of the transmitted data.

Contact options (e-mail)
You can contact us by e-mail on our website.
In this context, your details from the e-mail, including the contact details you provide there, will be stored and processed by us for the purpose of processing the request and in the event of follow-up questions. This data ([e.g. name, address, telephone number, e-mail address, IP address]) will not be passed on to third parties without your consent.
The data is not merged with other data collected on this website.
The data may be stored as part of the notarial activity, provided that an appointment or commissioning has taken place.
This data is processed on the basis of Art. 6 para. 1 sentence 1 lit. b) GDPR if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries addressed to us (Art. 6 para. 1 sentence 1 lit. f) GDPR).
We will retain the data you provide in the email until you request its deletion, object to its processing or the purpose for its storage no longer pertains (e.g. after your request has been processed). Mandatory statutory provisions - in particular retention periods - remain unaffected.

Online forms
Our website is linked to a button for online data collection, which gives you the opportunity to send us data via an online form. If you use this online service from NotarNow (LegalNow GmbH, Lena-Christ-Straße 2, 82031 Grünwald, Germany), your details, including the contact details you provide there, will be automatically stored on the NotarNow servers for a short time for the purpose of processing the request and in the event of follow-up questions and then forwarded to us. Data transmission is encrypted using transport encryption via Secure Socket Layer (SSL/TLS).

The data is stored solely for the purpose of processing or contacting the data subject. The data will not be passed on to other third parties. The legal basis for the processing of the data is Art. 6 para. 1 lit. b GDPR, provided that your request is related to the fulfillment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR), if this has been requested.

We will retain the data you provide on the online form until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer pertains (e.g. after fulfilling your request). Mandatory statutory provisions - in particular retention periods - remain unaffected.

When using the "cache" function, your online form entries are encrypted and stored anonymously for 30 days. If the online form is not sent to us within these 30 days, the form entries will be deleted automatically. A request for deletion on your part is not necessary in this case.

Google Maps
On this website we use the offer of "Google Maps", operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, or if you have your registered office or place of residence in the EU, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").
This allows us to show you interactive maps directly on the website and enables you to use the map function conveniently. When you visit the website, Google receives the information that you have accessed the corresponding sub-page of our website. In addition
- the IP address,
- Date and time of the request,
- Time zone difference to Greenwich Mean Time (GMT),
- Content of the request (specific page),
- Access status/HTTP status code,
- the amount of data transferred,
- the website from which the request originates (so-called referrer),
- Type and version of the browser used together with the language version used and
- Type and version of the operating system and the interface used
transmitted. This information (including your IP address) is transmitted directly from your browser to a Google server in the USA and stored there.
The transmission takes place regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your data to be associated with your Google profile, you must log out of your Google profile before using our website. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.
Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the provider's privacy policy. There you will also find further information on your rights in this regard and setting options to protect your privacy: http://www.google.de/intl/de/policies/privacy.
The data transfer to the USA is based on your consent in accordance with Art. 6 para. 1 sentence 1 lit. a in conjunction with Art. 49 para. 1 lit. a GDPR.
You can revoke your consent to data processing at any time with effect for the future. To do so, please contact our data protection officer using the contact details provided, delete the cookies in your browser or use the link to manage your consent, which you can find in the "Cookies" section of this privacy policy. The withdrawal of consent does not affect the lawfulness of the data processing carried out up to the time of withdrawal.

Google Fonts
By integrating "Google Maps", "Google Fonts" are loaded, operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, or if you have your registered office or place of residence in the EU, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").
We have no influence on this.
By visiting the website, Google receives the information that you have accessed the corresponding subpage of our website. In addition
- the IP address,
- Date and time of the request,
- Time zone difference to Greenwich Mean Time (GMT),
- Content of the request (specific page),
- Access status/HTTP status code,
- the amount of data transferred,
- the website from which the request originates (so-called referrer),
- Type and version of the browser used together with the language version used and
- Type and version of the operating system and the interface used
is transmitted. This information (including your IP address) is sent directly from your browser to a Google server. According to its own information, Google does not store this information and only uses it to deliver the requested fonts and to recognize and, if necessary, ward off attacks on the IT system.
If you have given your consent for us to use Google Fonts, the legal basis for data processing is this consent (Art. 6 para. 1 sentence 1 lit. a in conjunction with Art. 49 para. 1 lit. a GDPR).
We use Google Web Fonts to optimize our website and present it in an appealing way.
Google processes personal data in the USA, among other places. According to the European Court of Justice, there is currently no adequate level of data protection for the transfer of data to the USA. This may entail various risks for the rights and freedoms of data subjects.
Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the provider's privacy policy. There you will also find further information on your rights in this regard and setting options to protect your privacy: http://www.google.de/intl/de/policies/privacy.

Twitter timeline
On the homepage of our website we show the Twitter timeline of our account ("Embedded User Timeline").
The embedded timeline is offered by Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland or Twitter, Inc, 1355 Market St, Suite 900, San Francisco, CA 94103, USA (hereinafter referred to as: Twitter).
It is used to [please specify the purpose].
To display the tweets, a connection is established between your browser and the Twitter servers and Twitter stores cookies on your end device. We have activated the Do Not Track function when integrating the Twitter plug-in on our website so that, according to Twitter, the personal data transmitted is not used for personalization.
Otherwise, we have no influence on the further processing of your data by Twitter.
Twitter processes personal data in the United States and therefore in a third country outside the EU. We have concluded a contract with Twitter for order processing and the standard contractual clauses of the EU Commission.
Insofar as personal data is processed, this is done on the basis of your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR, provided that you have given us your consent to do so when you first access the site.
Further information on how Twitter handles your data can be found at https://help.twitter.com/de/twitter-for-websites-ads-info-and-privacy and in the Twitter privacy policy.
You can decide for yourself to what extent Twitter uses your personal data for personalization purposes. You can make the corresponding settings and thus also - if necessary - declare your objection to the use of the data at https://twitter.com/personalization (opt-out).

Rights of data subjects
You are entitled to the rights listed below. You can assert these rights against us. To assert your rights, please use the above data or contact us by e-mail at: info@notar-heinze.de.
Information:
In accordance with Art. 15 GDPR, you have the right to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
Correction:
In accordance with Art. 16 GDPR, you have the right to demand the immediate correction of incorrect or incomplete personal data stored by us;
Deletion:
In accordance with Art. 17 GDPR, you have the right to request the deletion of your personal data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
Restriction of processing:
In accordance with Art. 18 GDPR, you have the right to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful but you refuse to delete it and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR;
Data portability:
In accordance with Art. 20 GDPR, you have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transferred to another controller;
Withdrawal of your consent:
In accordance with Art. 7 (3) GDPR, you have the right to withdraw your consent at any time. As a result, we may no longer continue the data processing that was based on this consent in the future.
Please send your revocation to the data given above or by e-mail to: info@notar-heinze.de

Right of objection
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR, including profiling based on those provisions.
The controller will no longer process the personal data concerning you unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.
If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing.
If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.
Notwithstanding Directive 2002/58/EC, you have the option of exercising your right to object in connection with the use of information society services by means of automated procedures using technical specifications.

Automated decision in individual cases including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision is necessary for entering into, or performance of, a contract between you and the controller, is authorized by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests, or is based on your explicit consent.
However, these decisions may not be based on special categories of personal data pursuant to Art. 9 para. 1 GDPR, unless Art. 9 para. 2 lit. a) or g) GDPR applies and appropriate measures have been taken to protect the rights and freedoms as well as your legitimate interests.

Complaint to a supervisory authority:
In accordance with Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or the registered office of our notary's office.

Status of the privacy policy
The constant development of the Internet makes it necessary to adapt our privacy policy from time to time. We reserve the right to make corresponding changes at any time.
Status: September 2024