Privacy Policy

This privacy policy informs visitors to our website and attendees at our events about the processing of personal data.

Our clients receive further information about data protection by clicking here.

If you have applied for employment with RSM Ebner Stolz, please click here for further information on data protection.

CONTENT

I. Who is responsible for data processing and whom can I contact?

We are jointly responsible for the processing of your data on this website:

RSM Ebner Stolz Mönning Bachem Wirtschaftsprüfer Steuerberater Rechtsanwälte Partnerschaft mbB
RSM Ebner Stolz GmbH & Co. KG Wirtschaftsprüfungsgesellschaft Steuerberatungsgesellschaft
RSM Ebner Stolz Management Consultants GmbH
Dr. Ebner, Dr. Stolz Management Support GmbH
The contact details of these companies ("RSM Ebner Stolz") can be found on the legal notices page of our website. To regulate our data protection responsibilities, these companies have entered into an agreement, the essential content of which we will send to you by email upon request.

If you have any questions about data protection, please contact our data protection officer using the contact details below:

RSM Ebner Stolz, Datenschutzbeauftragter, Kronenstraße 30, 70174 Stuttgart, Email: datenschutz@ebnerstolz.de

II. What sorts of data processing do you do?

1. Transmission of data via the Internet

When you visit this website, we process your IP address, the date and time of your visit, information about your browser, including language settings, and, if applicable, your operating system, the address of the website from which you accessed our website (referrer URL) and information about the files you have accessed. Your browser automatically transmits this data to your Internet provider, which in turn transmits it to us.

Why is this data processed?

We process this data so that you can load our website, and for purposes of monitoring and, if necessary, restoring system security and stability, as well as for statistical purposes (see Section II.3.). We cannot attribute this data to a specific person. The legal basis for such processing is Art. 6 (1)(f) of the General Data Protection Regulation ("GDPR"). According to that Article, processing is lawful if it is necessary to protect the legitimate interests of the data controller or a third party, except where such interests are overridden by your interests or fundamental rights and freedoms that require protection of data. We have a legitimate interest in ensuring that our website is displayed correctly on your screen and that we can identify and remedy the causes of malfunctions.

How long is this data stored?

This data is stored in log files for a maximum of three months.

Do I have to provide this information?

The provision of this data is not required by law or by contract and is not required for entering into a contract with us. However, technical reasons make it impossible to visit our website without this data being processed.

2. Storage of cookies

We use cookies on our website. Cookies are small files that contain an identification number. Cookies are stored on your computer or mobile device when you visit our website. If you visit our website again, your computer or mobile device can be recognized by this identification number.

Why are cookies created?

Session cookies allow you to avoid having to re-enter information on our website, even if you visit other websites in between. The purpose of these session cookies is therefore to facilitate the use of our website. In addition, we use permanent cookies to statistically record the use of our website and to evaluate it for the purpose of optimizing our website (see II.3.).

The legal basis is Art. 6(1)(f) of the GDPR. We have a legitimate interest in enabling you to use our website in a user-friendly manner and in optimizing our website.

How long is this data stored?

Session cookies are deleted you close your browser. Permanent cookies are valid for up to 24 months and are deleted afterwards.

Do I have to provide this information?

You can visit our website without cookies. There is no obligation to use cookies. Most browsers automatically accept cookies. You can set your browser so that no cookies are permitted. You must make the settings separately for each browser and for each device that you use.

3. Web analysis by Google Analytics

We use Google Analytics. This is an analysis service of Google LLC ("Google"). Pseudonymous user profiles of visitors to our website are created. Google uses permanent cookies (see Section II. 2.). The information generated by the cookie about your use of our website is processed by Google in the United States. This information is the data mentioned in Section II.1. above. Google also processes the search term you used to find our website via a search engine. We use Google Analytics with IP anonymization enabled. Google will shorten your IP address within the European Union or the European Economic Area. Only in exceptional cases will the full IP address be transmitted to and anonymized in the United States. Further information on Google Analytics can be found on the following Google website: https://support.google.com/analytics/answer/6004245?hl=en.

Why is this data processed?

The data are processed for the purpose of market research and demand-oriented design of our website. Google processes this data on our behalf in order to evaluate the use of our website and to compile reports on the activities on our website.

The legal basis is Art. 6 (1)(f) of the GDPR. We have a legitimate interest in using the statistics provided by Google to adapt our website to the needs of visitors to our website and to use these statistics for internal market research.

How long is this data stored?

The data aggregated by Google Analytics is stored for 14 months. Cookies from Google Analytics are valid for 12 months.

Do I have to provide this information?

The provision of this data is not mandatory and is not necessary for entering into a contract with us. You can prevent the storage of cookies and thus the use of Google Analytics by setting your browser (see II.2.). You can also prevent the processing of data generated by the cookie by downloading and installing the plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=en. Alternatively, or within browsers on mobile devices, you can click the following link: Disable tracking. An opt-out cookie is set in the browser you are currently using to access our website. If you delete your cookies in this browser, you must click on this link again. If you use several devices or browsers, you must click this link for each individual device in each individual browser.

4. Newsletters

If you have subscribed to a newsletter, we process the data you entered when you registered for the newsletter.

Why is my data processed?

We process your email address or postal address for the purpose of regularly sending our newsletters. After you subscribe to the email newsletter, you will receive an email from us with a link to verify your email address. Furthermore, anonymous link tracking takes place as soon as you click on links in our emails; this serves purely statistical purposes and does not allow any conclusions to be drawn about the behavior of an individual person. The legal basis is your consent, which you gave us when subscribing to the newsletter (Art. 6(1)(a) of the GDPR).

How can I unsubscribe from the newsletter? How long is the data stored?

If you no longer wish to receive the newsletter, you can revoke your consent to receive the newsletter by sending an email to info@ebnerstolz.de at any time and without giving any reasons (for further information on the right of withdrawal, see Section IV.). Alternatively, you can unsubscribe from the newsletter by clicking on http://newsletter.ebnerstolz.de/Newsletter-Abmeldung.jsp

The data you provided when you subscribed to the newsletter will be deleted as soon as possible after you have revoked your consent or unsubscribed from the newsletter. If you are also a client, business partner, or an employee of ours, this data may be stored for a longer period for other purposes, provided that it is necessary for the performance of a contract or employment relationship or the fulfilment of statutory retention obligations.

Do I have to provide this information?

Receipt of our newsletter is voluntary. However, in order to receive the email newsletter, you must provide your email address (or your postal address if you subscribe to the print newsletter). No additional information is required. The indication of your name is voluntary and allows us to address you personally. If you have subscribed to an email newsletter, providing your address is voluntary and allows us to inform you of events in the vicinity of your place of residence.

5. Events hosted by RSM Ebner Stolz

If you have registered for an event organized by RSM Ebner Stolz, we will process the data you entered when registering.

Why is my data processed?

We process your data for the purpose of contract fulfilment or to carry out pre-contractual measures in the run-up to events. In particular, we process your email address so that we can send you a registration confirmation, seminar documents if necessary and, if desired, a "participant certificate". We will also inform you of any changes to the date and content of the event. We process your name (and company name, if applicable) and your postal address for the purpose of invoicing and assigning your registration to your company. The legal basis for data you have entered in mandatory fields is Art. 6 (1)(b) of the GDPR, while the legal basis for data you have voluntarily provided to us is your consent (Art. 6 (1)(a) of the GDPR).

We also use your data for the purpose of contacting you by email after an event so that you can evaluate it. Your evaluation will be evaluated anonymously for statistical purposes only. Our aim is to continuously improve our events. We also use your data to send postal or email advertising for our events, insofar as this is legally permissible. The legal basis is Art. 6(1)(f) of the GDPR. We have a legitimate interest in sending direct mail. If you do not wish to receive information about our events or do not wish to evaluate our events, you can object to this use of your data when you register for an event and at any time thereafter (see Section IV).

How long is the data stored?

We may also store your data after the event has been held at least until payment of any required fee for the event. For the advertising purposes described above, we may store your data for up to four years, provided that you have not objected to the use for advertising purposes. In order to assert or defend legal claims, we may store data within the regular limitation period of three years, and in exceptional cases, until the expiry of the maximum limitation periods. If we are required to store certain data, we are entitled to do so until the expiration of the periods specified in § 257 of the German Commercial Code (HGB) and § 147 of the German Tax Code (AO). These periods are up to 10 years.

Do I have to provide this information?

Our events are voluntary. However, in order to register, you must provide at least your email address, your name (and company name, if applicable), and, in the case of paid events, your billing address; otherwise we will not be able to send you a registration confirmation and invoice. Your name is required; otherwise we will not be able to print a name tag for the event and will not be able to address you personally. No additional information is required for participation in an event.

6. Use of reCAPTCHA

When you register for our events using our website, we employ Google reCAPTCHA.

We use Google's reCAPTCHA service to protect our website from wrongful computer-generated registrations for our events. This service uses cookies. The information collected by the cookie about your use of this website, such as your IP address, is generally transmitted to and processed by Google servers. On behalf of RSM Ebner Stolz, Google will use this information to provide the reCAPTCHA service. This information may be disclosed to third parties where required by law or where such third parties process the information on Google's behalf.

Processing is carried out on the basis of Art. 6 (1)(f) of the GDPR. We have a legitimate interest in determining whether registrations for events have actually been made by a person in order to prevent fraud. You can prevent the storage of cookies by setting your browser accordingly (see Section II.2). For more information about Google's privacy practices, please visit: https://policies.google.com/privacy?hl=en

7. Career Day registration

If you apply for participation in one of RSM Ebner Stolz's career days, Sections II.5 and II.6 will apply. In addition, we process your data in order to select particularly suitable participants from the many applicants. We process your address so that we can send you a registration confirmation. The legal basis is your consent (Art. 6 (1)(a) of the GDPR).

If you upload files with your application that contain special categories of data (Art. 9 (1) of the GDPR), you consent to the processing of this data as well. The legal basis is Art. 9(2)(a) of the GDPR and, if applicable, Art. 9(2)(f) of the GDPR. We ask you not to transmit such data to us.

8. Google Maps

Our website includes content from Google Maps. If you visit a page on our website in which Google Maps is embedded, data about your behavior when using Google Maps will be transmitted to Google. For example, Google will be informed that you have accessed the Google Maps subpage. Your IP address will also be transmitted.

Google processes this data along with RSM Ebner Stolz. In order to provide for data protection responsibilities, we have entered into a contract with Google, which you can review here: https://privacy.google.com/intl/de/businesses/mapscontrollerterms/

Google processes this data as usage profiles to be used for market research to design Google Maps based on user needs. If you are a Google customer and are logged in to a Google service, this data will be directly connected to your Google account. If you wish to prevent this from happening, you must log out of Google before visiting our website.

The data is processed on the basis of Art. 6(1f) of the GDPR. We have an interest in showing you our locations on our website and making it easier for you to plan your journey. The provision of this data is not required and is not necessary for a contract with us. If you do not agree to have data transmitted to Google, you may not visit subpages of our website that include Google Maps. Alternatively, you can deactivate JavaScript in your browser.

9. RSM Ebner Stolz Online Surveys

If you take part in one of our online surveys, we will process the data referred to in section II.1 and your answers to the survey questions. We cannot assign this data to a specific person. The purpose of the processing is to determine the survey results. In addition to session cookies, permanent cookies are also set (see section II.2.). These permanent cookies prevent multiple participation in the online survey.

The legal basis is Art. 6(1f) of the GDPR. We have a legitimate interest in conducting market or opinion research with surveys. Sections II.1 and II.2 apply with the necessary changes.

10. Ebner Stolz TO GO

The information on data protection in Section II.1 through Section II.3 applies to our app "RSM Ebner Stolz TO GO" with the necessary changes.

11. YouTube Videos

We have embedded YouTube videos in our website. Only when you actively activate the videos by clicking on "Load Video" will the data mentioned in the next paragraph be transmitted to Google, the operator of YouTube.

If you have activated a video, Google will receive the data mentioned in Section II.1 and will be informed that you have visited our website. This will occur even if you do not have a user account with Google or YouTube. If you are logged in to Google or YouTube, your data will be assigned directly to your user account at Google or YouTube. Google stores your data as usage profiles and uses them for advertising, market research and demand-oriented design of its website. This evaluation also occurs for users who are not logged in to Google or YouTube.

The purpose of processing this data is to display YouTube videos on our website. The legal basis is your consent, which you have given us by actively activating the videos (Art. 6(1a) GDPR). The provision of this data is not mandatory. However, your data must be transmitted to Google if you wish to view YouTube videos. You can find further information on data protection at Google here: https://policies.google.com/privacy?hl=de&gl=de

III. Will my data be passed on to third parties?

We pass your data on to these contractors for the following reasons:

Vodafone GmbH, Ferdinand-Braun-Platz 1, 40549 Düsseldorf (data security)
von Affenfels GmbH, Kronenstr. 40, 70174 Stuttgart (maintenance of our website)
Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (Google Analytics)
Inxmail GmbH, Wentzingerstr. 17, 79106 Freiburg (email newsletters)
SolvAct GmbH, Dornröschenweg 69, 70567 Stuttgart (print newsletters)
other contractors in the fields of IT services and data media destruction
Contractors process data only on our instructions and not for their own purposes

In certain cases, we pass your data on to the following recipients when we are required by law to do so (Art. 6 (1)(c) of the GDPR) or it is necessary for the purposes of legitimate interests (Art. 6(1f) of the GDPR):

other RSM Ebner Stolz companies, to the extent necessary for group management, internal communication and other administrative purposes
Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (operates Google reCAPTCHA)
Criminal prosecution authorities, courts
external auditors, lawyers or tax advisors
If contractors or other recipients are based in the United States, some of your data may also be transferred to that country. Google has submitted to the "EU-US Privacy Shield". The European Commission has decided in an adequacy decision that this will ensure an adequate level of data protection.

IV. What rights do I have with regard to my data?

Under the conditions of Art. 15 of the GDPR, you can request information from us as to whether we process from you, and if so, which data. You may request to have your data corrected and if necessary completed in accordance with Art. 16 of the GDPR. You have the right to request that we delete your data under the conditions of Art. 17 of the GDPR or block it under the conditions of Art. 18 of the GDPR. According to Art. 21 of the GDPR, you have the right to receive your data transmitted to us on the basis of a consent or a contract, provided that the processing is automated. If you so permit and it is technically possible, we transmit this data to a third party. Your rights may be limited or excluded by law under certain circumstances.

If we process data for the protection of our interests exclusively on the basis of Art. 6 (1)(f) of the GDPR, you have the right to object to the processing of your data for reasons arising from your particular situation. If you file an objection, we will no longer process the data concerned, unless we can prove compelling reasons worthy of protection for the processing that outweigh your interests, rights and freedoms, or the processing serves to enforce legal claims.

Furthermore, you can object to the processing of your data for advertising purposes at any time without incurring any costs other than the transmission costs at the basic rates. You can object to the receipt of emails for advertising purposes at any time free of charge by clicking on the unsubscribe link at the end of the email. You can also state your objection by sending an email to info@ebnerstolz.de

If you have consented to the data processing, you have the right to revoke your consent at any time. The legality of the processing until revocation is not affected until it occurs. You can revoke your consent by sending an email to info@ebnerstolz.de After revocation, we will no longer process the data unless we are legally entitled or required to do so.

You have the right to file complaints under data protection law with a data protection authority, e.g., the State Commissioner for Data Protection and Freedom of Information, Königstraße 10a, 70173 Stuttgart.

Last updated: February 15, 2019