Privacy policy
This is a courtesy translation of our Datenschutzerklärung. Only the German version is legally binding.
1. Data protection at a glance
General information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified.
Data collection on this website
Who is responsible for data collection?
Data processing is carried out by the website operator. You will find their contact details in the section ‘Controller’.
How do we collect your data?
Your data is collected when you provide it to us (e.g. via the contact form) or automatically when you visit the website (technical data such as browser, operating system and time of access).
What do we use your data for?
Part of the data is collected to ensure that the website is provided without errors. Other data may be used to analyse user behaviour.
What rights do you have?
You have the right at any time to access, rectification, erasure and restriction of processing of your data. You also have the right to lodge a complaint with the supervisory authority.
Analytics tools and third-party tools
When you visit this website, your browsing behaviour may be statistically analysed. Details of the analytics programs used can be found in the following sections.
2. Hosting
External hosting
This website is hosted externally. The personal data collected on this website is stored on the servers of the hosting provider. This may include IP addresses, contact requests, metadata and communication data, contract data, contact details, names and website access data.
External hosting is used for the purpose of performing a contract (Art. 6(1)(b) GDPR) and in the interest of secure, fast and efficient provision of our website by a professional provider (Art. 6(1)(f) GDPR).
Our hosting provider
Hetzner Online GmbH
Industriestr. 25, 91710 Gunzenhausen, Germany
Data processing agreement
We have concluded a data processing agreement (DPA) with our hosting provider. This ensures that the hosting provider, as our processor, processes personal data only on our instructions and in compliance with the GDPR.
3. General information and mandatory information
Data protection
We take the protection of your personal data very seriously and treat it confidentially and in accordance with the statutory data protection regulations.
Please note: data transmission over the internet may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.
Controller
Steuerberatungskanzlei Klein GmbH
represented by the managing director Maximilian Klein
Kaistraße 8a, 40221 Düsseldorf
Phone: 0211 76067172
Email: steuerteam@kleinstb.de
Storage period
Your personal data will remain with us until the purpose for which it was processed no longer applies. If you request erasure or withdraw your consent, your data will be erased unless we are subject to statutory retention obligations.
Your rights
Right to object (Art. 21 GDPR)
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your data. You may likewise object at any time to processing for the purposes of direct marketing.
SSL/TLS encryption
This website uses SSL or TLS encryption to protect the transmission of confidential content. You can recognise an encrypted connection by ‘https://’ and the padlock symbol in your browser’s address bar.
4. Data collection on this website
Cookies
Our website uses cookies. These small data packets are stored on your device and do not cause any damage.
Session cookies
Are deleted automatically at the end of your visit.
Persistent cookies
Remain stored until you delete them or your browser removes them automatically.
Necessary cookies are stored on the basis of Art. 6(1)(f) GDPR. Where consent has been given, processing is based on consent (Art. 6(1)(a) GDPR) and Section 25(1) TTDSG (German Telecommunications and Telemedia Data Protection Act).
You can configure your browser so that you are informed about cookies and can allow or block them on a case-by-case basis.
Contact form
If you send us enquiries via the contact form, the information you provide in the form, including the contact details you enter, will be stored and processed by us for the purpose of handling your enquiry and in case of follow-up questions.
This processing is based on Art. 6(1)(b) GDPR where your enquiry is related to the performance of a contract or to steps taken prior to entering into a contract. In all other cases, processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), where such consent has been requested.
The data you enter in the contact form will remain with us until the purpose for storing it no longer applies, you ask us to erase it, or statutory retention obligations preclude its erasure.
Recording the campaign source (local storage)
If you reach our website via an online advertisement (e.g. Google Ads), the address you open contains campaign parameters (so-called UTM parameters and a click identifier such as ‘gclid’). We store these parameters, together with the landing page and the referring website, in your browser’s local storage for 90 days. No cookies are set and no data is transmitted to third parties; the data is stored exclusively on your device.
Only if you subsequently submit a contact form or book an appointment via Calendly will this information be transmitted, together with your enquiry, to us or to Calendly respectively, so that we can understand which advertising campaign led you to us.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in measuring the success of our advertising campaigns). You can remove the stored data at any time via your browser settings (clear website data).
Server log files
The provider of this website automatically collects and stores information in so-called server log files, which your browser transmits to us automatically. This includes in particular:
- IP address
- Date and time of the server request
- Browser type and browser version
- Operating system used
- Referrer URL
- Host name of the accessing computer
This data is not merged with other data sources.
Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest lies in the technically error-free provision, stability and security of our website.
5. Plugins and tools
YouTube with enhanced privacy
This website embeds videos from YouTube (Google Ireland Limited, Dublin, Ireland). We use YouTube in privacy-enhanced mode which, according to YouTube, does not store any information about visitors before they watch the video.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest) or Art. 6(1)(a) GDPR (consent). Privacy Policy
Google Fonts (local)
This website uses Google Fonts for the uniform display of fonts. The fonts are installed locally – no connection to Google servers is established.
Google Maps
This website uses Google Maps (Google Ireland Limited). To use it, your IP address is transmitted to Google and usually stored on servers in the USA.
Legal basis: Art. 6(1)(f) GDPR or, where consent has been given, Art. 6(1)(a) GDPR. Privacy Policy
Google Analytics
This website uses Google Analytics to analyse user behaviour. Data such as page views, time spent on the site and the source of visits is collected and usually transmitted to servers in the USA.
Legal basis: Art. 6(1)(a) GDPR (consent). You may withdraw your consent at any time. More information
Mouseflow
This website uses Mouseflow, a web analytics tool provided by Mouseflow ApS, Flaesketorvet 68, 1711 Copenhagen, Denmark. Mouseflow records randomly selected visits (anonymised data only). This creates a log of mouse movements, clicks and scrolling activity, with the aim of replaying individual visits on a sample basis and deriving heatmaps from them in order to improve the website.
By default, Mouseflow does not record, or masks, keyboard input in form fields. The IP address is processed in truncated form; the data is stored on servers within the European Union.
Legal basis: Art. 6(1)(a) GDPR and Section 25(1) TDDDG (German Telecommunications Digital Services Data Protection Act) (consent). Mouseflow is not loaded without your consent. You may withdraw your consent at any time with effect for the future. You can also object to recording by Mouseflow on all websites that use Mouseflow: mouseflow.de/opt-out. Mouseflow Privacy Policy
Google Ads conversion tracking and remarketing
This website uses Google Ads as well as Google Ads Conversion Tracking and Google Ads Remarketing, services provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Conversion tracking enables us to see whether users have performed certain actions on our website after clicking on a Google ad (e.g. getting in touch, booking an appointment or other interactions). This allows us to measure and optimise the effectiveness of our advertising campaigns.
Through Google Ads Remarketing, visitors to our website may be shown interest-based advertisements on other websites within the Google advertising network. For this purpose, Google may use cookies or similar technologies to recognise users.
In the process, personal data – in particular the IP address, usage data and device-related information – may be processed and transmitted to Google servers in the USA. For data transfers to the USA, Google relies on the Standard Contractual Clauses of the European Commission.
Legal basis: Art. 6(1)(a) GDPR and Section 25(1) TDDDG (consent). You may withdraw your consent at any time with effect for the future. Google Privacy Policy
X Pixel / X Conversion Tracking (X Corp.)
This website uses the X Pixel (formerly Twitter Pixel), a conversion tracking and remarketing tool provided by X Corp., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. For users in the European Economic Area, the controller is Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland.
The X Pixel enables us to see whether users have performed certain actions on our website after clicking on one of our ads on X (e.g. submitting an enquiry via the crypto risk check). This allows us to measure and optimise the effectiveness of our advertising campaigns. In addition, visitors to our website may be shown interest-based advertisements on X (remarketing).
For this purpose, X uses cookies or similar technologies and processes personal data, in particular the IP address, the page visited, the time of the visit and device-related information. The data may be transmitted to X Corp. servers in the USA. For data transfers to the USA, X relies on the Standard Contractual Clauses of the European Commission.
Legal basis: Art. 6(1)(a) GDPR and Section 25(1) TDDDG (consent). The X Pixel is not loaded without your consent. You may withdraw your consent at any time with effect for the future via the cookie settings. You can also object to interest-based advertising on X in your X settings. X Privacy Policy
Calendly
We use Calendly (Calendly LLC, Atlanta, USA) for online appointment booking. When you use it, the data you enter (name, email address, appointment) as well as technical data are transmitted to Calendly. If you reached our website via an online advertisement, the campaign parameters (UTM) are also passed on to Calendly (see ‘Recording the campaign source’).
Legal basis: Art. 6(1)(a) GDPR (consent). Calendly is not loaded without your consent. Privacy Policy
We offer the option of contacting us via WhatsApp (WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland). If you contact us via WhatsApp, your message and your telephone number are transmitted to and processed by WhatsApp. WhatsApp is a service of Meta Platforms, Inc.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in efficient communication). WhatsApp Privacy Policy
We maintain a presence on Instagram (Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland). If you visit our Instagram page or interact with us, Meta processes your personal data in accordance with its privacy policy. We have no influence over this processing.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in presenting our firm to the public). Instagram Privacy Policy
We maintain a presence on LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland). If you visit our LinkedIn page or interact with us, LinkedIn processes your personal data in accordance with its privacy policy. We have no influence over this processing.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in presenting our firm to the public). LinkedIn Privacy Policy