Privacy policy

1. Data protection at a glance

General information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally.

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You will find the operator's contact details in the section “Controller” in this privacy policy.

How do we collect your data?

When you visit the website, the hosting provider automatically records technical data (e.g. web browser, operating system, time of access and IP address). We only receive further data if you provide it to us yourself, for example by email or phone.

What do we use your data for?

The technical data is collected to ensure that the website is provided without errors and securely. We use data from your enquiry solely to handle your request.

No cookies, no analytics tools

This website does not use cookies and does not use any analytics or tracking tools. There is no contact form. Fonts and images are loaded exclusively from our own web server; no third-party content is embedded.

What rights do you have regarding your data?

You have the right at any time to receive free information about the origin, recipients and purpose of your stored personal data and to request its rectification or erasure. Details can be found in the section “Your rights”. You can contact us at any time about this and any other questions on data protection.

2. Hosting and provision of the website

IONOS

We host the content of our website with IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany (“IONOS”). When you visit our website, IONOS records various log files (server log files), including your IP address. These include in particular:

• browser type and version
• operating system used
• referrer URL (the previously visited page)
• time of the server request
• IP address

This data is not combined with other data sources. For details, please refer to the IONOS privacy policy: www.ionos.de/terms-gtc/terms-privacy.

IONOS is used on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in a technically error-free, secure and reliable presentation of our website.

Locally hosted fonts

The fonts used on this website (EB Garamond and Inter) are loaded locally from our web server. No connection is made to servers of Google or other third parties.

Links to other websites

This website contains links to external services, e.g. to LinkedIn or to our Swiss website. This content is not embedded: data is only transferred when you click on a link. The respective provider is responsible for processing on the linked websites.

SSL/TLS encryption

For security reasons, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the browser's address bar starting with “https://” and a padlock symbol being displayed. When SSL/TLS encryption is active, the data you transmit to us cannot be read by third parties.

3. General information and mandatory disclosures

Privacy

We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy. As a public auditor, I am also bound by professional secrecy.

Please note that data transmission over the internet (e.g. when communicating by email) may have security gaps. Complete protection of data against access by third parties is not possible.

Controller

The controller responsible for data processing on this website is:

Jonas Kisskalt
Public auditor
Entenseestraße 18
90607 Rückersdorf
Germany

Phone: +49 160 406 9353
Email: info@passion-revision.de

The controller is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (e.g. names, email addresses or similar).

Storage period

Unless a more specific storage period is stated in this privacy policy, your personal data will remain with us until the purpose for processing no longer applies. If you assert a legitimate request for erasure or withdraw your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing it (e.g. retention periods under tax, commercial or professional law); in the latter case, deletion takes place once these reasons no longer apply.

Legal bases for data processing

If your data is required to perform a contract or to carry out pre-contractual measures, we process it on the basis of Art. 6(1)(b) GDPR. If it is required to comply with a legal obligation, processing is based on Art. 6(1)(c) GDPR. Data may also be processed on the basis of our legitimate interest under Art. 6(1)(f) GDPR. If you have consented to data processing, it is based on Art. 6(1)(a) GDPR. The individual sections of this privacy policy state the relevant legal basis in each case.

Recipients of personal data

We only pass on personal data to external bodies if this is necessary to perform a contract, if we are legally obliged to do so (e.g. disclosure of data to tax authorities), if we have a legitimate interest in the disclosure under Art. 6(1)(f) GDPR or if another legal basis permits the disclosure. When using processors, we only pass on personal data on the basis of a valid data processing agreement.

4. Your rights

Withdrawal of your consent to data processing

Many data processing operations are only possible with your express consent. You can withdraw consent you have already given at any time. The lawfulness of the processing carried out before the withdrawal remains unaffected.

Right to object to data collection in special cases and to direct marketing (Art. 21 GDPR)

If data processing is based on Art. 6(1)(e) or (f) GDPR, you have the right to object at any time to the processing of your personal data on grounds relating to your particular situation; this also applies to profiling based on these provisions. If you object, we will no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims (objection under Art. 21(1) GDPR).

If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing; this also applies to profiling to the extent that it is related to such direct marketing. If you object, your personal data will no longer be used for direct marketing purposes (objection under Art. 21(2) GDPR).

Right to lodge a complaint with the competent supervisory authority

In the event of infringements of the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement. This right is without prejudice to any other administrative or judicial remedy.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a commonly used, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done where technically feasible.

Access, rectification and erasure

Within the framework of the applicable statutory provisions, you have the right at any time to free information about your stored personal data, its origin and recipients and the purpose of the data processing and, where applicable, a right to rectification or erasure of this data.

Right to restriction of processing

You have the right to request the restriction of the processing of your personal data. This right applies in particular in the following cases:

• If you contest the accuracy of the personal data we hold about you, for the duration of the verification.
• If the processing of your personal data was or is unlawful and you request restriction instead of erasure.
• If we no longer need your personal data but you need it for the exercise, defence or establishment of legal claims.
• If you have objected under Art. 21(1) GDPR, as long as it has not yet been determined whose interests prevail.

If you have restricted the processing of your personal data, this data – apart from its storage – may only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.

5. Enquiries by email or phone

If you contact us by email or phone, your enquiry, including all resulting personal data (name, request), will be stored and processed by us for the purpose of handling your request. We do not pass on this data without your consent.

This data is processed on the basis of Art. 6(1)(b) GDPR if your enquiry relates to the performance of a contract or is necessary for pre-contractual measures. In all other cases, processing is based on our legitimate interest in effectively handling the enquiries addressed to us (Art. 6(1)(f) GDPR).

The data you send us remains with us until you ask us to delete it or the purpose for storing it no longer applies (e.g. once your request has been dealt with). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.

6. Information for persons in Switzerland

Where the Swiss Federal Act on Data Protection (FADP/DSG) applies, the above information applies accordingly. You can exercise your rights under the FADP, in particular the right of access, rectification and erasure, using the contact details given above.

The competent supervisory authority in Switzerland is the Federal Data Protection and Information Commissioner (FDPIC), www.edoeb.admin.ch.