Data Privacy Statement (as of 29 April 2020)
I. Name and Address of the Controller / Data Protection Officer
The controller as defined by the General Data Protection Regulation (GDPR) and other national data protection laws of the EU Member States as well as other provisions of data protection law is
PKF WULF TREUHAND GmbH
represented by its Executive Directors and shareholders
- Dipl.-Betriebswirt (BA) Christoph Kalmbach, chartered accountant/tax adviser
- Dipl.-Oekonom Ralph Setzer, chartered accountant/tax adviser
- Dipl.-Finanzwirt Martin Wulf, chartered accountant/tax adviser
Telephone: +49 (711) 69767-0
Telefax : +49 (711) 69767-133
The controller's data protection officer is:
KUHN IT GmbH
II. Collection and Storage of Personal Data and Purpose of the Data Processing
1. Use of our online presence at www.pkf-wulf-gruppe.de
When a visitor accesses our aforementioned web pages, the browser (e.g. Firefox, Chrome, Safari etc.) used on the visitor's device (e.g. PC, laptop, smartphone) automatically sends information to the server of our firm's website. This information is temporarily stored in a so-called log file. In this respect, the following information will be recorded without any action on your part and be stored until it is automatically deleted:
- the IP address of the computer making the request,
- the date and time of access,
- the name and URL of the retrieved file,
- the website from which access takes place (referrer URL),
- the browser used and, if applicable, your computer's operating system and the name of your access provider.
The aforementioned data are processed by us for the following purposes:
- ensuring a smooth connection to the website,
- ensuring that our website is easy to use,
- analysing system security and stability.
The legal basis for the data processing is Art. 6 (1), sentence 1, f) GDPR. Our legitimate interest ensues from the data collection purposes listed above. Under no circumstances shall we use the collected data for the purpose of identifying you.
2. Subscription to the PKF newsletter
If you click on the "Subscribe to the PKF newsletter" button, enter your email address and click on a consent option, our firm will use the email address for regularly sending you our newsletter. To receive the newsletter, simply provide an email address. The subscriber's name is provided on a voluntary basis and merely serves personalisation. The newsletter subscriber's data are used exclusively for sending our firm's newsletter and are not passed on.
Unsubscription is possible at any time, for example via a link at the end of every newsletter. Alternatively, please feel free to send your unsubscription request to the aforementioned email address at any time.
3. Use of the contact form
Various entries can be made in the contact form "Contact us!"; the fields marked with (*) are for the provision of mandatory information that enables us to contact you and process your request. The other entries are voluntary. We view these voluntary entries as being consent to the collection of these data. All data collected via the contact form will be deleted no later than 3 months after the processing of your request, unless you have expressed in your request a wish that your data be included in our client database. The time limit for the storage of these data for the specified period is for quality assurance purposes for determining whether your request has been fully processed.
4. Use of the online application / electronic applications by third-party providers
If you use the contact form "Speculative application" and file an online application via the PKF WULF GROUP website, you can make various entries; the fields marked with (*) are for the provision of mandatory information that enables us to properly process your application. The data collected will be deleted no later than 3 months after the submission of your application, unless we have asked you for permission to store your data for longer.
If you apply for a specific position at a member company of the PKF WULF GROUP, your application will be forwarded to this company in accordance with your application request. Where you indicate a speculative application without requesting a location, your application will be forwarded to a company with a corresponding vacancy on the basis of your consent.
We need your personal data in order to carry out an application process and possibly enter into an employment relationship. You are not legally obliged to disclose these data. However, the conclusion of an employment contract requires that personal data be provided, and the employee or applicant be identified. The collection of these data is expressly justified on the basis of Art. 6 (1), b) GDPR in conjunction with Section 26 (1) and (2) BDSG [German Federal Data Protection Act].
If you do not provide your personal data, we shall not be able to enter into the application process or into a subsequent employment relationship with you. However, you have the choice of whether to provide us with your application by post or electronically.
III. Passing-on of Personal Data
As a rule, no personal data are transferred to third parties for purposes other than those listed in II.
We pass on personal data to third parties by way of exception only if
- the data subject has expressly consented thereto in accordance with Art. 6 (1), sentence 1, a) GDPR,
- the passing-on of personal data is required under Art. 6 (1), sentence 1, f) GDPR for the assertion, exercise or defence of legal claims, and there is no reason to assume that you have an overriding legitimate interest in not having your data passed on,
- the passing-on of personal data is ordered under Art. 6 (1), sentence 1 c) GDPR on the basis of a legal obligation, and
- this is permissible by law and is required under Art. 6 (1), sentence 1, b) GDPR for the processing of contractual relations.
Our website uses so-called cookies. Cookies are text files stored in the web browser or by the web browser on the user's computer system. When a user accesses our website, a cookie may be stored on the user's device.
The data processed using cookies are necessary for the aforementioned purposes in order to protect our and your legitimate interests as well as those of the member companies of the PKF WULF GROUP in accordance with Art. 6 (1), sentence 1, f) GDPR.
Most browsers automatically accept cookies. However, you can configure your browser in such a way that no cookies are stored on your computer, or a notice always appears before a new cookie is created. Complete deactivation of cookies may, however, result in you not being able to use all features of our website.
2. Analysis tool / Use of Google Analytics
For the purpose of demand-orientated design and continuous optimisation of our web pages, we use Google Analytics, a web analysis service from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, IRELAND; hereinafter "Google"). In this context, pseudonymised usage profiles are created, and cookies (see under subsection 1) are used. The information generated by the cookie concerning your use of this website, such as
- browser type/version,
- operating system used
- referrer URL (the website visited beforehand),
- host name of the accessing computer (IP address),
- time of the server request,
is transferred to a Google server, possibly also in the USA, and stored there. The information is used to analyse the use of our website, compile reports on the website activity and provide other services relating to website and Internet usage for the purposes of market research and demand-oriented design of these web pages. This information may also possibly be transferred to third parties insofar as this is prescribed by law, or third parties process these data on our behalf. Under no circumstances will your IP address be merged with other Google data. IP addresses are anonymised to make it impossible to associate them with their owners.
Google is a processor as defined by the GDPR, and we have concluded a contract with Google in this regard in order to ensure the European level of data protection by processing in a European third country and to comply with the requirements of the GDPR.
As described above, you can prevent the installation of cookies by setting the browser software accordingly. Please note however that you may then possibly be unable to fully use all features of this website.
By downloading and installing a browser add-on at the following link, you can also prevent the collection of data generated by the cookie and relating to your use of the website (including your IP address) and the processing of these data by Google: (https://tools.google.com/dlpage/gaoptout?hl=en).
In addition or as an alternative to the browser add-on, you can prevent the recording of data by Google Analytics by clicking on the following link: Disable Google Analytics.
An opt-out cookie that prevents your data being recorded in future when you visit this website will be set. The opt-out cookie will be valid only in this browser and only for our website and will be stored on your device. If you delete the cookies in this browser, you will have to re-set the opt-out cookie.
Further information on data privacy in connection with Google Analytics can be found in the Google Analytics Help (https://support.google.com/analytics/answer/6004245?hl=en) for example.
V. Use of Social Media Plug-ins
The use of so-called social media plug-ins from social networks serves to make our firm better known. This constitutes a legitimate interest in accordance with the applicable data protection regulations. The respective providers of these plug-ins are responsible for the processing of personal data. On our website, these are:
- Facebook and Instagram, which are both operated by Facebook Ireland Limited, 4 Grand Canal Square, Dublin, Ireland;
- Twitter, which is operated by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA;
- LinkedIn, which is operated by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA;
- XING, which is operated by Xing AG, Gaensemarkt 43, 20354 Hamburg, Germany.
These social plug-ins are marked with the respective logo of the aforementioned companies, so-called placeholders. Only when you click on these placeholders will they be activated and establish a direct connection with the servers of Facebook, Instagram, Twitter, Xing or LinkedIn via your browser. As a result, Facebook, Instagram, Twitter, Xing and LinkedIn will be informed that you have accessed the page of our website that contains the social plug-in. This will happen even if you are not logged into Facebook, Instagram, Twitter, Xing and LinkedIn or do not have a corresponding account.
However, if you have a corresponding account with the aforementioned companies, and you are logged into Facebook, Instagram, Twitter, Xing or LinkedIn at that time, your visit to our web pages and all of your interactions in connection with the social plug-ins (e.g. creation of a comment, etc.) will be able to be associated with your profile there and be stored by Facebook, Instagram, Twitter, Xing or LinkedIn.
For further information on the purpose and scope of the data collection, on the processing and use of the data by Facebook, Instagram, Twitter, Xing and LinkedIn as well as on your rights in this regard and setting options for the protection of your privacy, please refer to the privacy notices of Facebook (http://www.facebook.com/policy.php), Instagram (https://www.instagram.com/about/legal/terms/api/), Twitter (https://twitter.com/privacy), Xing (https://www.xing.com/privacy), LinkedIn (https://www.linkedin.com/legal/privacy-policy).
To prevent Facebook, Instagram, Twitter, Xing or LinkedIn collecting the aforementioned data as a result of your visit to our website, log out of Facebook, Instagram, Twitter, Xing or LinkedIn before you visit our site.
VI. Your Rights as the Data Subject
1. Legal bases
You have the following rights under the GDPR:
- under Art. 15 GDPR the right to obtain access to your personal data processed by us; in particular, you can request information on the purposes of the processing, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data where these have not been collected by us, as well as information on the existence of any automated decision-making, including profiling, and, if applicable, meaningful information regarding the details thereof;
- under Art. 16 GDPR the right to obtain without delay the rectification of inaccurate, or completion of incomplete, personal data concerning you that are stored with us;
- under Art. 17 GDPR the right to obtain the erasure of your personal data stored with us, except where the processing is necessary for exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims;
- under Art. 18 GDPR the right to obtain restriction of the processing of your personal data where you contest the accuracy of the data, or the processing is unlawful, but you oppose their erasure and we no longer need the data, but you need the data for the assertion, exercise or defence of legal claims, or you have objected to the processing in accordance with Art. 21 GDPR;
- under Art. 20 GDPR the right to receive in a structured, commonly used and machine-readable format your personal data that you have provided to us, or the right to have these data transferred to another controller;
- under Art. 7 (3) GDPR the right to withdraw your previously granted consent at any time in relation to us, the consequence being that we shall no longer be permitted to continue in future the data processing based on this consent, and
- under Art. 77 GDPR the right to lodge a complaint with a supervisory authority. To do so, you can ordinarily contact the supervisory authority at the place of your habitual residence or place of work or where our firm is based.
2. Right to object
Where your personal data are processed on the basis of legitimate interests in accordance with Art. 6 (1), sentence 1, f) GDPR, you have the right under Art. 21 GDPR to object to the processing of your personal data insofar as there are grounds for doing so relating to your particular situation, or the objection relates to direct marketing. In the latter case, you have a general right to object, which we shall implement without you having to specify any particular situation.
If you wish to exercise your right of revocation or objection, simply send an email to our email address stated above.
VII. Data Security / IT Security
Within the website visit, we use the widespread SSL (Secure Socket Layer) procedure in conjunction with the respective highest encryption level supported by your browser. This is ordinarily 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser.
We also use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.