privacy policy

data protection

The operators of these sites take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration.

When you use this website, various personal data is collected. Personal data is data that can be used to personally identify you. This data protection declaration explains what data we collect and what we use it for. It also explains how and for what purpose this happens.

We would like to point out that data transmission over the Internet (e.g. when communicating via email) can have security gaps. Complete protection of data from access by third parties is not possible.

Note on the responsible body / implementation of the EU General Data Protection Regulation

Mandatory information in accordance with Art. 12 ff. GDPR

The responsible body for data processing on this website is:

Tax consultant Reich & Weber Partnership Company mbB

Rommelstr. 1

70376 Stuttgart

Represented by:

René Reich

Telephone: +49 711-168-69-0

Fax: +49 711-168-69-20

Email: stuttgart@reich-weber.de

Robert-Bosch-Str. 21

72810 Sonnenbühl

Represented by:

Jan Weber

Telephone: +49 7128-38-05-60

Fax: +49 7128-32-73

Email: sonnenbuehl@reich-weber.com

The responsible body is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g. names, email addresses, etc.).

Where do we get your personal data from?

The collection of your data generally takes place on your own behalf. The processing of the personal data you provide is necessary to fulfill the contractual obligations arising from the contract concluded with us. Due to your obligation to cooperate, it is essential that you provide the personal data requested by us, otherwise we cannot fulfill our contractual obligations. Otherwise, accounting and/or tax disadvantages for you can no longer be ruled out. As part of pre-contractual measures (e.g. master data collection in the interested party process), the provision of your personal data is necessary. If you do not provide the requested data, a contract cannot be concluded. In order to provide our services, it may be necessary to process personal data that we receive from other companies or other third parties, e.g. B. tax offices, your business partner or similar have received lawfully and for the respective purpose. We may also process personal data from publicly accessible sources, e.g. B. Internet sites that we use permissibly and only for the respective contractual purpose

Due to legal requirements (according to Art. 6 para. 1 lit. c GDPR) or in the public interest (according to Art. 6 para. 1 lit. e GDPR) The purposes of data processing result from or lie in legal requirements in the public interest (e.g. compliance with retention obligations, proof of compliance with the tax advisor’s notification and information obligations).

Purposes and legal basis of processing

The personal data you provide will be processed in accordance with the provisions of the European Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG):

Based on consent (according to Article 6 Paragraph 1 Letter a GDPR) The purposes of processing personal data result from the granting of consent. You can revoke your consent at any time with future effect. Consent that was given before the GDPR came into effect (May 25, 2018) can also be revoked. Processing that took place before the revocation remains unaffected by the revocation. Example: Sending a newsletter, release from professional confidentiality to pass on the data you have provided to third parties at your request (e.g. banks, insurance companies, shareholders, etc.). To fulfill contractual obligations (according to Article 6 Paragraph 1 Letter b of the GDPR) The purposes of data processing arise, on the one hand, from the initiation of pre-contractual measures that precede a contractually regulated business relationship and, on the other hand, to fulfill the obligations arising from the contract concluded with you.

As part of the balancing of interests (according to Article 6 Paragraph 1 Letter f of the GDPR) the purposes of processing arise from safeguarding our legitimate interests. It may be necessary to process the data you provide beyond the actual fulfillment of the contract. Our legitimate interest can be used to justify further processing of the data you have provided, provided that your interests or fundamental rights and freedoms do not outweigh this. In individual cases, our legitimate interest can be: asserting legal claims, defending against liability claims, preventing criminal offenses.

Who receives the personal data you provide?

Within our company, those areas that need it to fulfill contractual and legal obligations and that are authorized to process this data will have access to the personal data you provide. In fulfillment of the contract concluded with you, only those departments that need it for legal reasons will receive the data you provide, e.g. E.g. tax authorities, social security institutions, responsible authorities and courts. As professional secrecy holders, we are obliged to comply with and implement professional confidentiality. Other recipients will only receive the data you have provided at your request if you release us from professional confidentiality.

As part of our service provision, we commission processors who contribute to the fulfillment of contractual obligations, e.g. E.g. data center service providers, IT partners, document shredders, etc. We contractually oblige these processors to maintain professional confidentiality and to comply with the requirements of the GDPR and the BDSG.

Will the data you provide be transferred to third countries or international organizations?

Under no circumstances will the data you provide be transferred to a third country or an international organization. If, in individual cases, you wish the data you have provided to be transferred to a third country or an international organization, we will only do this with your written consent and release from professional confidentiality.

Does automated decision-making including profiling take place?

No fully automated decision-making (including profiling) is used to process the data you provide in accordance with Article 22 of the GDPR.

Duration of processing (criteria for deletion)

The data you provide will be processed for as long as it is necessary to achieve the contractually agreed purpose, in principle as long as the contractual relationship with you exists. After termination of the contractual relationship, the data you provide will be processed to comply with legal retention obligations or based on our legitimate interests. After the statutory retention periods have expired and/or our legitimate interests no longer apply, the data you provided will be deleted. Expected deadlines for our retention obligations and our legitimate interests:

Fulfillment of commercial, tax and professional law retention periods. The periods specified there for storage and documentation are two to ten years.

Preservation of evidence within the statute of limitations. According to Sections 195 ff. of the Civil Code (BGB), these limitation periods can be up to 30 years, with the regular limitation period being three years.

Information about your rights

Right to information in accordance with Art. 15 GDPR:

You have the right to receive information free of charge upon request as to whether and what data about you is stored and for what purpose it is stored.

· Right to rectification in accordance with Art. 16 GDPR: You have the right to immediately request that the person responsible correct your incorrect personal data. Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data, including by means of a supplementary statement.

· Right to deletion (“right to be forgotten”) in accordance with Art. 17 GDPR: You have the right to request that the person responsible delete your data immediately. The person responsible is obliged to delete personal data immediately if one of the following reasons applies:

a) The purposes for which the personal data were collected no longer apply

b) You revoke your consent to the processing. There is no other legal basis for processing.

c) You object to the processing. There is no other legal basis for processing.

d) The personal data was processed unlawfully.

e) The deletion of the personal data is necessary to fulfill a legal obligation under Union law or the law of the Member States to which the controller is subject.

f) The personal data were collected in relation to information society services offered in accordance with Article 8(1).

· Right to restriction of processing in accordance with Art. 18 GDPR &. § 35 BDSG:

You have the right to request that processing be restricted if one of the following conditions applies:

a) You doubt the accuracy of the personal data.

b) The processing is unlawful; However, you refuse deletion.

c) Personal data is no longer required for the purposes of processing; However, you need the data to assert, exercise or defend legal claims.

d) You have lodged an objection to the processing in accordance with Article 21 Para. 1 GDPR.

As long as it is not yet clear whether the controller’s legitimate reasons outweigh you, processing will be restricted.

· Right to data portability in accordance with Art. 20 GDPR:

You have the right to receive the data you have provided in a structured, common and machine-readable format from the person responsible. We may not hinder forwarding to another person responsible.

· Right to object in accordance with Art. 21 GDPR:

To do this, please contact the person responsible for processing (see above).

· Right to lodge a complaint with the supervisory authority in accordance with Article 13 Paragraph 2 Letter d, 77 GDPR in conjunction with V. m § 19 BDSG: If you are of the opinion that the processing of your data violates the GDPR, you have the right to lodge a complaint with the supervisory authority. To do this, please contact the responsible supervisory authority

· Withdrawal of consent in accordance with Article 7 Paragraph 3 GDPR: If the processing is based on your consent in accordance with Article 6 Paragraph 1 Letter a or Article 9 Paragraph 2 Letter a (processing of special categories of personal data) , you are entitled to withdraw the appropriately bound consent at any time, without affecting the lawfulness of the processing carried out based on the consent until its revocation.

Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You can revoke any consent you have already given at any time. All you need to do is send us an informal email. The lawfulness of the data processing carried out until the revocation remains unaffected by the revocation.

Right to lodge a complaint with the responsible supervisory authority

In the event of data protection violations, the person affected has the right to lodge a complaint with the responsible supervisory authority. The responsible supervisory authority for data protection issues is the state data protection officer of the federal state in which our company is based. A list of data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Right to data portability

You have the right to have data that we process automatically based on your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the data to be transferred directly to another person responsible, this will only be done if it is technically feasible.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator, this site uses an SSL or. TLS encryption. You can recognize an encrypted connection by the browser address line changing from “http://” to “https://” and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Information, blocking, deletion

Within the framework of the applicable legal provisions, you have the right to free information at any time about your stored personal data, its origin and recipient and the purpose of data processing and, if necessary, a right to correct, block or delete this data. You can contact us at any time at the address given in the legal notice for this purpose or for further questions on the subject of personal data.

Objection to advertising emails

The use of contact details published as part of the imprint obligation to send unsolicited advertising and information materials is hereby objected to. The operators of the pages expressly reserve the right to take legal action in the event of unsolicited advertising information being sent, such as spam emails./