Privacy

Responsible data controller

The responsible data controller is Rechtsanwalt (German attorney-at-law) Baltasar Cevc, Fichtestr. 42, 91054 Erlangen, baltasar@legaltech-nuernberg.de; furthder contact details are available on the imprint page.

In case you want to exercise any rights towards us, please us via one of the ways mentioned above; you may also write us an email to baltasar@legaltech-nuernberg.de.

Overview over our data processing

In conjunction with our online presence, we process your data as follows:

• Website
  Our web server collects and saves information about page access including their status for a few days for the purpose of error correction and attack analysis.
  (further information)
• Website (usage statistics)
  We create anonymous statistics about the use or our site. As we want to use relations between the pages for that purpose, we use cookies to re-identify you as a previous user (we just do that if you have given your consent).
  (further information)
• Newsletter
  Our newsletter system is not active yet. We will therefore initially manually process your data in a table if you wish to receive our newsletter. As soon as we have chosen a newsletter processor, we will inform you accordingly and hand over the data after two weeks unless you recall your processing consent. We intend to use a European provider. For the newsletter, we require your email address but kindly ask you to provide us with your name and company as to enable us to address you personally. The processing is based on your consent which you can naturally withdraw anytime.

Your rights

You can ask for information about your data we process, including transmission to third parties; you may also ask for correction and for deletion or restriction of processing of the data. We hereby inform you that for data saved in conjunction with our website, we regularly do not have the possibility to attribute the data to you ourselves and we may hence need further information from you to fulfil the request; in such cases we will inform you accordingly and provide you with the requested information as soon as we have received the necessary further information. Please contact us directly in all such cases (you find the contact paths in the imprint).

For data we process based on your consent or to fulfill a contractual relationship, you can request a copy of such data. However, we will exclude data whose handover would infringe rights and freedoms of third parties.

In case we process your data based on legitimate interest, you have the right to object based on grounds relating to your particular situation.

You can revoke your cookie consent at any time by clicking on the following button: [cookies_revoke]

Furthermore, you have the statutory right to address a responsible data protection authority.

Website and tracking

Encryption

Your communication will in all regular cases be encrypted (TLS/SSL), so data cannot be read by third parties with reasonable effort (we cannot completely exclude it, though). You will see your browsers marking for encrypted sites.

Server logs of IP addresses and requests

Our system saves access log. They generally contain:

• The requested address (URL)
• Your browser type, version and operating system used (as transmitted by your browser)
• The page from which the URL has been access (referrer, as and insofar transmitted by your browser)
• The timestamp of accessing the page
• Your IP Address
• The result of the request (status-code) (e.g. whether the page has successfully been loaded, has been redirected to another page or whether/which error has occurred)
• We cannot attribute this data to any person; the IP address could potentially be resolved to the owner of the internet contract by your provider (we will not ask for that). Solely for cases of illegal usage (such as hacking) we reserve the right to verify the data at a later stage and to take further action.

The data processing including saving is based on legitimate interest for the purpose of error and attack diagnosis.

Logfiles are being saved for seven days.

Contact form

When you send us messages via the contact form, the server will process the data to send us an email on your behalf. This email will be processed accordingly to other emails we receive and will be saved as necessary under applicable laws.

What are cookies?

Internet sites are stateless by default. That is, the server basically does not know who you are, where you come from and whether you have already visited the site. Cookies help to establish a status. Thanks to them, the server may, for example, identify whether you have logged in as a user or whether you have recently visited the page. This is done by sending your browser tiny text files, which your software saves and sends to the server together with the next request. Further information can be found in Wikipedia. You may change your preference at any time (please see chapter “Your rights“).

As far as you have made your cookie choice, one single cookie will be set in any case. This cookie named cookie_notice_accepted does not store any personal data, just your choice whether you want cookies or not (that is technically necessary).

Usage statistics

We create statistics about your use of our website. We cannot attribute this information to you as a person, especially we do not correlate them with any personal data you may have entered such as your name or email address. Hence, no personal data should be created. We use the statistics tool matomo with privacy friendly settings, for example we anonymize your IP address before saving it. The cookies used by the system are used to identify whether a person has earlier visited the page. The corresponding data is pseudonymous and we do not have any possiblity to attribute it to you concretely. The statistics system uses cookies with names beginning with _pk_ref, _pk_cvar, _pk_id, _pk_ses.

The data processing is based on our legitimate interest which lies in adapting our page to your needs and interests. You may object such processing, for further information see section your rights. In that case we will set a cookie stating that you do not want to be tracked and our system will not set any tracking cookies.

We use the following data for creating statistics:

• Cookies
• IP address (anonymized by dropping half of the address and only using the first two bytes of IPv4 addresses)
• User ID
• Custom Dimensions
• Custom Variables

And also:

• Date and time
• Title of the page being viewed
• URL of the page being viewed
• URL of the page that was viewed prior to the current page
• Screen resolution
• Time in local timezone
• Files that were clicked and downloaded
• Link clicks to an outside domain
• Pages generation time
• Country, region, city
• Main Language of the browser
• User Agent of the browser

Embedding of the newsletter subscription

The newsletter pages embed content from the server of our newsletter service. That means that information such as the IP address and the details of your request (as described in the “server log” section) will be disclosed to the provider.

Login

Any login is reserved to a closed circle of persons, hence no further public information is provided here.

Newsletter

This section is only relevant for newsletter subscribers.

We use a third party newsletter system provided by Mailjet. Mailjet is a French company which processes data on our behalf (commissioned data processing). We track which emails are opened (however, this is technically not very reliable) and whether certain links in emails have been clicked. We save your email address and optionally also your name to personalize your messages. Furthermore, we save the subscribing IP address (we need to do that to document your consent).

We save your data as long as you are a subscriber.

You can unsubscribe at any time and thereby withdraw your consent to use the data. By that, you can trigger the removal of your data.

The subscription forms on the website will directly include code by our commissioned data processor.

Social media

We currently run a social media presence on Twitter and LinkedIn as well as (Legal Hackers only:) Facebook and Instagram  which is however a predominantly German language offering. Therefore we only explain the details on our German privacy policy.

Meetup.com

As meetup will represent our local German speaking group, the description of data processing can be found in our German privacy policy.

Dudle

The event registration with Dudle is for our local guests only and in German, hence, the description is only in our German privacy policy.

Events: Video recording and streaming

We strive to stream our events regularly via video and also to make recordings available. We discuss and agree about this with the speakers in advance. We only do so if everybody involved is happy with such publication.

If we stream events, we will explicitly point this out to you as guests/participants. If you do not agree with the filming, we will take care not to film you; we will agree a procedure with you on site so that you can also ask questions or make comments without being recorded (e.g. a short break from the recording or a written handover of the question). However, we would ask you to make sure that you use this method yourself. We base this processing of your data on our legitimate interest in making the contents available to the public in order to inform them about the topics and to advertise our network.