1 Name and Contact Details of the Controller

This privacy policy informs you about the processing of personal data on the law firm website www.kws-steuerberater.de, operated by:

Controller within the meaning of the GDPR

KWS Steuerberatungsgesellschaft mbH

Auf dem Hunsrücken 3, 53545 Linz am Rhein, Germany

Phone: +49 (0)2635 – 921 36 0

Fax: +49 (0)2635 – 921 36 20

E-mail: service@kws-steuerberater.de

Website: www.kws-steuerberater.de

Privacy-related requests: Requests to exercise your data protection rights (access, rectification, erasure, etc.) should be sent to service@kws-steuerberater.de. We will process your request within one month of receipt (Art. 12(3) GDPR). This period may be extended by a further two months for complex or numerous requests; in that case, we will inform you in advance.

2 Hosting and Data Processing on Our Behalf

This website is hosted by:

Hosting provider

ALL-INKL.COM – Neue Medien Münnich

Proprietor: René Münnich

Hauptstraße 68, 02742 Friedersdorf, Germany

https://all-inkl.com

Our hosting provider processes data on our behalf that is generated when this website is visited (in particular server logs and IP addresses). Processing takes place exclusively on servers located in Germany. We have concluded a data processing agreement with ALL-INKL.COM pursuant to Art. 28 GDPR.

Further Processors

In addition to our hosting provider, we use the following further service provider as a processor, with whom a data processing agreement pursuant to Art. 28 GDPR has been concluded:

Cookie consent management

Really Simple Plugins B.V. (provider of Complianz)

Dieselstraat 6, 7903 SG Hoogeveen, Netherlands (EU)

Data processed: consent decisions, timestamps, anonymised IP address

Purpose: lawful management of cookie consent pursuant to the GDPR/TTDSG

3 Access to This Website / Server Log Files

When you access this website, your internet browser automatically transmits data to the server, which is stored temporarily in log files. The following data is processed without any further input from the visitor:

IP address of the device used (anonymised shortly after collection)
Date and time of access
Name and URL of the page accessed
Referrer URL (the website from which access was made)
Browser used, operating system, and name of the visitor's internet service provider

Legal basis: Art. 6(1)(f) GDPR (legitimate interest). The legitimate interest lies in ensuring the proper operation of the website, system security and administration.

Retention period: Log files are automatically deleted after 7 days at the latest, unless a longer retention period is required due to security-relevant events.

4 Contact Form

This website provides a contact form that you can use to contact us electronically. The form is provided using the WordPress plugin Contact Form 7.

If you use the contact form, the data you enter (at least your e-mail address and your message; all other details are voluntary) is processed in order to handle your enquiry. The data collected via the contact form is not passed on to third parties.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in handling incoming enquiries) and, where applicable, Art. 6(1)(b) GDPR, insofar as your enquiry is aimed at establishing an engagement with us.

Retention period: The data transmitted via the contact form is deleted once your enquiry has been fully processed. If no engagement is established, the data is deleted no later than three months after the correspondence has ended. If an engagement is established, the statutory retention periods for tax purposes of up to 10 years apply (Section 147 of the German Fiscal Code (Abgabenordnung – AO) / Section 257 of the German Commercial Code (Handelsgesetzbuch – HGB)).

5 Cookies and Cookie Consent (Complianz)

What Are Cookies?

Cookies are small text files that are stored on your device when you visit a website. They make it possible to save certain settings and data and to reuse them on your next visit. Cookies cannot run programs or transmit viruses.

Consent Management via Complianz

This website uses the WordPress plugin Complianz to manage cookie consent. Complianz displays a cookie banner on your first visit and stores your consent decision locally in a cookie on your device. Non-essential cookies are technically blocked and are only activated after you have given your express consent — these cookies cannot be set before you have given your consent.

You can withdraw or change your consent at any time with effect for the future by clicking on "Cookie Settings" at the bottom of this page.

Legal basis: Art. 6(1)(c) GDPR in conjunction with Section 25 of the German Telecommunications-Telemedia Data Protection Act (Telekommunikation-Telemedien-Datenschutz-Gesetz – TTDSG), as well as Art. 6(1)(f) GDPR (legitimate interest in the lawful management of consent).

Retention period: The consent cookie is stored for a maximum of 12 months.

Cookie Categories

We distinguish between the following categories. A complete, up-to-date overview of all cookies used, including provider, purpose and retention period, is available at any time via our Cookie Settings (link in the footer).

6 Google Maps

This website uses Google Maps to display interactive maps and provide directions. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Maps is only loaded on this website after you have given your express consent via our cookie banner. Until you consent, a static preview image is displayed instead of the interactive map. Only after you have given your consent does your browser establish a direct connection to Google's servers, so that the map content is transmitted directly from Google to your browser. In doing so, your IP address and information about your location, in particular, may be transmitted to Google. We have no influence on the scope of the data processed by Google.

Legal basis: Art. 6(1)(a) GDPR (your consent). You can withdraw your consent at any time with effect for the future.

Transfer to a third country: Google is certified under the EU-US Data Privacy Framework (DPF) (adequacy decision of the European Commission of 10 July 2023), which ensures an adequate level of data protection.

Further information on data protection at Google: https://policies.google.com/privacy

7 Disclosure of Personal Data

Your personal data is only transferred to third parties if:

you have given your express consent pursuant to Art. 6(1)(a) GDPR,
the disclosure is necessary pursuant to Art. 6(1)(f) GDPR for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in the data not being disclosed,
there is a legal obligation to disclose the data pursuant to Art. 6(1)(c) GDPR, or
this is necessary pursuant to Art. 6(1)(b) GDPR for the performance of a contractual relationship with you.

In all other cases, your personal data will not be disclosed to third parties without your express consent.

Insofar as we use service providers as processors (e.g. hosting by ALL-INKL.COM), data processing agreements pursuant to Art. 28 GDPR have been concluded with them, ensuring that your data is processed exclusively on our instructions and only for the agreed purpose.

8 Links to External Websites

This website contains links to external websites of third parties, the content of which is beyond our control. The respective provider or operator of the linked pages is always responsible for their content. The linked pages were checked for possible legal violations at the time they were linked; no unlawful content was identifiable at that time. This privacy policy does not extend to linked external websites.

9 Your Rights as a Data Subject

Insofar as your personal data is processed, you have the following rights. Click on a right to learn more:

Right of Access Art. 15 GDPR

You may request confirmation as to whether and which personal data we process about you, as well as information on the purposes of processing, recipients, retention period, origin of the data and, where applicable, the existence of automated decision-making. The right of access may be restricted pursuant to Section 57(1) of the German Tax Consultancy Act (Steuerberatungsgesetz – StBerG), which imposes a professional duty of confidentiality on tax advisors.

Right to Rectification Art. 16 GDPR

You may request the immediate rectification of inaccurate personal data or the completion of incomplete personal data.

Right to Erasure Art. 17 GDPR

You have the right to request the erasure of your personal data, provided the statutory requirements are met and no statutory retention obligations apply.

Right to Restriction of Processing Art. 18 GDPR

You may request the restriction of processing if you contest the accuracy of the data, the processing is unlawful, we no longer need the data, or you have objected to the processing.

Right to Data Portability Art. 20 GDPR

Insofar as processing is based on your consent or on a contract and is carried out using automated means, you may receive your data in a structured, commonly used and machine-readable format.

Right to Object Art. 21 GDPR

You have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data that is based on Art. 6(1)(e) or (f) GDPR.

Withdrawal of Consent Art. 7(3) GDPR

You may withdraw any consent given at any time with effect for the future. This does not affect the lawfulness of processing carried out on the basis of the consent before its withdrawal. You may notify us of the withdrawal informally by phone, e-mail, fax or post to the address given above.

Right to Lodge a Complaint with a Supervisory Authority Art. 77 GDPR

If you believe that the processing of your personal data is unlawful, you have the right to lodge a complaint with the competent data protection supervisory authority:

The Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate (LfDI RLP)
Hintere Bleiche 34, 55116 Mainz, Germany
Phone: +49 (0)6131 8920-0 · E-mail: poststelle@datenschutz.rlp.de
www.datenschutz.rlp.de

10 Automated Decision-Making, Profiling and Data Protection Officer

No Automated Decision-Making and No Profiling

This website does not engage in any automated decision-making, including profiling, within the meaning of Art. 22 GDPR. No automated processing is carried out that produces legal effects concerning you or similarly significantly affects you.

Data Protection Officer

Pursuant to Section 38 of the German Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG) in conjunction with Art. 37 GDPR, we are not currently required to appoint an in-house data protection officer, as the statutory thresholds are not met. If you have any data protection queries, please contact us directly using the contact details given in Section 1.

11 Currency and Amendment of this Privacy Policy

This privacy policy is current as of August 2026 and is currently in effect. It may become necessary to amend this privacy policy as this website is further developed or as a result of changes to statutory or regulatory requirements. The current version of this privacy policy can be accessed on this website at any time at www.kws-steuerberater.de/datenschutzerklaerung.

Privacy Policy