Privacy Policy
1. Name and Contact Details of the Controller
This privacy policy provides information about the processing of personal data on the firm's website of:
Controller:
Stefan Neunzig, Steuerberater (Tax Consultant)
Kanzlei Neunzig & Partner, Steuerberatungsgesellschaft, PartmbB
Ludwigstr. 27, 83435 Bad Reichenhall
Telephone: 086517667-0
Email: kanzlei@stb-neunzig-partner.de
2. Scope and Purpose of the Processing of Personal Data
2.1 Accessing the Website
When this website www.stb-neunzig-partner.de is accessed, the internet browser used by the visitor automatically sends data to the server of this website, where it is stored for a limited period in a log file. Until it is automatically deleted, the following data is stored without any further input from the visitor:
- the IP address of the visitor's end device,
- the date and time of the visitor's access,
- the name and URL of the page accessed by the visitor,
- the website from which the visitor reached the firm's website (the so-called referrer URL),
- the browser and operating system of the visitor's end device, as well as the name of the access provider used by the visitor.
The processing of this personal data is justified pursuant to Art. 6(1)(1)(f) GDPR. The firm has a legitimate interest in the data processing for the purpose of:
- establishing a connection to the firm's website quickly,
- enabling a user-friendly use of the website,
- detecting and ensuring the security and stability of the systems, and
- facilitating and improving the administration of the website.
The processing is expressly not carried out for the purpose of gaining insights into the identity of the visitor to the website.
2.2 Contact Form
Visitors can send messages to the firm via an online contact form on the website. In order to be able to receive a reply, it is necessary at least to provide a valid email address. The person making the enquiry may provide all further information voluntarily. By sending the message via the contact form, the visitor consents to the processing of the personal data transmitted. The data processing is carried out exclusively for the purpose of handling and responding to enquiries submitted via the contact form. This takes place on the basis of the consent freely given pursuant to Art. 6(1)(1)(a) GDPR. The personal data collected for the use of the contact form is automatically deleted as soon as the enquiry has been dealt with and there are no grounds for further retention (e.g. a subsequent engagement of our firm).
3. Disclosure of Data
Personal data is transmitted to third parties where:
- the data subject has expressly consented thereto pursuant to Art. 6(1)(1)(a) GDPR,
- the disclosure is necessary pursuant to Art. 6(1)(1)(f) GDPR for the establishment, exercise or defence of legal claims and there is no reason to assume that the data subject has an overriding interest worthy of protection in the non-disclosure of their data,
- there is a legal obligation for the data transfer pursuant to Art. 6(1)(1)(c) GDPR, and/or
- this is necessary pursuant to Art. 6(1)(1)(b) GDPR for the performance of a contractual relationship with the data subject.
In other cases, personal data is not disclosed to third parties.
4. Cookies
So-called cookies are used on the website. These are data packets that are exchanged between the server of the firm's website and the visitor's browser. They are stored on the respective devices used (PC, notebook, tablet, smartphone, etc.) when the website is visited. In this respect, cookies cannot cause any damage to the devices used. In particular, they do not contain any viruses or other malicious software. The cookies store information arising in each case in connection with the specific end device used. The firm cannot thereby in any way gain direct knowledge of the identity of the visitor to the website.
Under the default settings of browsers, cookies are for the most part accepted. The browser settings can be configured so that cookies are either not accepted on the devices used, or that a special notice is given in each case before a new cookie is created. It should be pointed out, however, that the deactivation of cookies may result in not all functions of the website being able to be used to their best advantage.
The use of cookies serves to make the use of the firm's online offering more convenient. For example, session cookies can be used to determine whether the visitor has already visited individual pages of the website. After leaving the website, these session cookies are automatically deleted.
Temporary cookies are used to improve user-friendliness. They are stored on the visitor's device for a temporary period. When the website is visited again, it is automatically recognised that the visitor has already accessed the site at an earlier point in time and which entries and settings were made at that time, so that these do not have to be repeated.
These cookies make it possible to recognise automatically, upon a repeat visit, that the website has already been accessed previously by the visitor. Here, the cookies are automatically deleted after a period determined in each case.
The data processed by means of cookies is justified for the aforementioned purposes, in order to safeguard the legitimate interests of the firm, pursuant to Art. 6(1)(1)(f) GDPR.
5. No Web Analytics and No Tracking
We do not use any web analytics service. This website does not analyse user behaviour, does not create usage profiles and does not use tracking or advertising cookies. A web analytics service previously used on this website was removed entirely on 30 July 2026.
Two external services are embedded on our contact page only: Google Maps and Google reCAPTCHA. They are loaded exclusively after your explicit consent (Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG). Until you consent, no data is transmitted to Google. You may grant or withdraw your consent at any time; a link to reopen the consent banner is available on every page.
6. Your Rights as a Data Subject
Insofar as your personal data is processed in connection with the visit to our website, you are entitled, as a "data subject" within the meaning of the GDPR, to the following rights:
6.1 Access
You can request information from us as to whether personal data concerning you is being processed by us. There is no right of access where the provision of the requested information would infringe the duty of confidentiality pursuant to § 57 StBerG (German Tax Consultancy Act) or where the information must be kept secret for other reasons, in particular on account of an overriding legitimate interest of a third party. By way of derogation from this, there may be an obligation to provide the information where, in particular taking into account any threatened damage, your interests outweigh the interest in secrecy. The right of access is furthermore excluded where the data is stored only because it may not be deleted on account of statutory or regulatory retention periods, or serves exclusively purposes of data security or data protection control, provided that the provision of the information would require a disproportionately high effort and processing for other purposes is precluded by suitable technical and organisational measures. Insofar as, in your case, the right of access is not excluded and your personal data is processed by us, you can request information from us on the following:
- the purposes of the processing,
- the categories of personal data processed concerning you,
- the recipients or categories of recipients to whom your personal data is disclosed, in particular in the case of recipients in third countries,
- if possible, the envisaged period for which your personal data will be stored or, if this is not possible, the criteria used to determine that period,
- the existence of a right to rectification or erasure or restriction of the processing of the personal data concerning you, or of a right to object to such processing,
- the existence of a right to lodge a complaint with a supervisory authority for data protection,
- where the personal data has not been collected from you as the data subject, any available information as to the source of the data,
- where applicable, the existence of automated decision-making, including profiling, and meaningful information about the logic involved, as well as the significance and the envisaged consequences of automated decision-making,
- where applicable, in the case of transfer to recipients in third countries, insofar as there is no decision by the EU Commission on the adequacy of the level of protection pursuant to Art. 45(3) GDPR, information as to which appropriate safeguards pursuant to Art. 46(2) GDPR are provided for the protection of the personal data.
6.2 Rectification and Completion
Insofar as you establish that we hold inaccurate personal data concerning you, you can request that we rectify this inaccurate data without undue delay. In the case of incomplete personal data concerning you, you can request its completion.
6.3 Erasure
You have a right to erasure ("right to be forgotten"), provided that the processing is not necessary for the exercise of the right to freedom of expression, the right to information, or for compliance with a legal obligation, or for the performance of a task carried out in the public interest, and one of the following grounds applies:
- The personal data is no longer necessary for the purposes for which it was processed.
- The justification for the processing was exclusively your consent, which you have withdrawn.
- You have objected to the processing of your personal data which we have made public.
- You have objected to the processing of personal data not made public by us and there are no overriding legitimate grounds for the processing.
- Your personal data has been unlawfully processed.
- The erasure of the personal data is necessary for compliance with a legal obligation to which we are subject.
There is no claim to erasure where, in the case of lawful non-automated data processing, erasure is not possible, or is possible only with a disproportionately high effort, on account of the particular nature of the storage, and your interest in erasure is slight. In this case, the restriction of processing takes the place of erasure.
6.4 Restriction of Processing
You can request that we restrict the processing where one of the following grounds applies:
- You contest the accuracy of the personal data. In this case, the restriction can be requested for the period which enables us to verify the accuracy of the data.
- The processing is unlawful and you request, instead of erasure, the restriction of the use of your personal data.
- We no longer need your personal data for the purposes of the processing, but you require it for the establishment, exercise or defence of legal claims.
- You have lodged an objection pursuant to Art. 21(1) GDPR. The restriction of processing can be requested for as long as it has not yet been established whether our legitimate grounds override yours.
Restriction of processing means that the personal data may be processed only with your consent, or for the establishment, exercise or defence of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of an important public interest. Before we lift the restriction, we have an obligation to inform you thereof.
6.5 Data Portability
You have a right to data portability, provided that the processing is based on your consent (Art. 6(1)(1)(a) or Art. 9(2)(a) GDPR) or on a contract to which you are a party, and the processing is carried out by automated means. The right to data portability includes in this case the following rights, provided that the rights and freedoms of other persons are not thereby adversely affected: you can request from us that you receive the personal data which you have provided to us in a structured, commonly used and machine-readable format. You have the right to transmit this data to another controller without hindrance from us. Insofar as it is technically feasible, you can request that we transmit your personal data directly to another controller.
6.6 Objection
Insofar as the processing is based on Art. 6(1)(1)(e) GDPR (performance of a task carried out in the public interest or in the exercise of official authority) or on Art. 6(1)(1)(f) GDPR (legitimate interest of the controller or of a third party), you have the right, on grounds relating to your particular situation, to object at any time to the processing of the personal data concerning you. This also applies to profiling based on Art. 6(1)(1)(e) or (f) GDPR. Following the exercise of the right to object, we will no longer process your personal data, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
You can object at any time to the processing of the personal data concerning you for the purposes of direct marketing. This also applies to profiling connected with such direct marketing. Following the exercise of this right to object, we will no longer use the personal data concerned for the purposes of direct marketing.
You have the option of communicating the objection informally by telephone, by email, or to the postal address of our firm listed at the beginning of this privacy policy.
6.7 Withdrawal of Consent
You have the right to withdraw a consent given at any time with effect for the future. The withdrawal of consent can be communicated informally by telephone, by email, or to our postal address. The withdrawal does not affect the lawfulness of the data processing carried out on the basis of the consent up to the receipt of the withdrawal. Following receipt of the withdrawal, the data processing which was based exclusively on your consent will be discontinued.
6.8 Complaint
If you are of the opinion that the processing of the personal data concerning you is unlawful, you can lodge a complaint with a supervisory authority for data protection which is competent for the place of your residence or place of work, or for the place of the alleged infringement.
7. Status and Updating of this Privacy Policy
This privacy policy has the status of 23 May 2018. We reserve the right to update the privacy policy in due course in order to improve data protection and/or to adapt it to changed administrative practice or case law.