Information on Data Processing According to the GDPR
Below, we would like to inform you about how we process your personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR). This privacy policy applies to all processing of personal data conducted via our website, within the scope of our mandate relationships, and in connection with our collaboration with business partners. Our objective is to ensure that your data is always processed and protected in compliance with the applicable data protection regulations.
Controller and Contact Information
The controller under the GDPR is:
Law Firm KADICHA LEGAL
Attorney Mohamed Amen Afhim
Oranienstraße 43, 10969 Berlin
Email: info@kadicha.com
Phone: +49 030 405 177 27
Fax: +49 030 138 809 17
Your Rights as a Data Subject
According to the provisions of the GDPR, you have the right to request comprehensive information from us at any time about the personal data we process concerning you, in accordance with Article 15 GDPR. Additionally, you have the right to request the rectification of incorrect data (Article 16 GDPR), the deletion of your data (Article 17 GDPR), restriction of processing (Article 18 GDPR), the right to be informed (Article 19 GDPR), and the right to data portability (Article 20 GDPR). Furthermore, you are entitled to object to the processing of your data at any time under Article 21 GDPR. You also have the right to withdraw your consent to data processing at any time. Moreover, you have the right to lodge a complaint with a supervisory authority, as outlined in Article 77 GDPR.
Browser-Server Interaction, Log Files, Web Hosting
If you use our website solely for informational purposes and do not actively transmit any further information to us (e.g., through the use of a contact form), we process the data that is automatically exchanged between your browser and our server. This data processing is necessary to display the website and ensure communication between your device and our server. The data processed includes, but is not limited to:
IP address, Date and time of the request, Time zone difference from Greenwich Mean Time (GMT), The specific page requested, Access status/HTTP status code, Amount of data transmitted, Referrer website (from which the request originates), Browser type, Operating system and its interface, Language and version of the browser software.
This processing is necessary to provide the website technically, to detect and resolve potential technical issues, and to prevent misuse of the website. The legal basis for this processing is Article 6(1)(f) GDPR, as our legitimate interest lies in ensuring the security and functionality of our website.
To provide our website, we store its data and content on the servers of our web hosting provider. This provider not only offers the necessary storage space but also maintains the servers, ensures data security, and guarantees that the website is available and can load quickly. For the smooth operation of our website, we rely on the storage resources, computing power, and software provided by our web hosting provider, ALL-INKL.COM – Neue Medien Münnich, located in Neusalza-Spremberg, Germany.
To manage our website, we use the WordPress content management system, which is operated by Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA. WordPress acts as an independent data processor and processes personal data collected during the use of our website, such as IP addresses, metadata, communication data, and technical information. This data processing ensures the proper functionality and provision of the website.
Use of Cookies
Our website uses cookies and similar technologies to ensure its functionality and to provide specific services. Cookies are small text files stored on your device that exchange data with our server. These files allow us to save your preferences and enhance the user-friendliness of the website. The information contained in the cookies is not combined with other personal data.
You can disable or restrict the storage of cookies in your browser settings at any time. However, this may affect the functionality of our website. Details on the cookies used and their storage duration can be found in our cookie banner, where you can also revoke your consent or adjust your cookie settings. The legal basis for processing cookies is Article 6(1)(f) GDPR, where legitimate interests exist, or Article 6(1)(a) GDPR if you have provided your consent.
Contact Forms
If you send inquiries via a contact form on our website, we process the data you provide solely for the purpose of handling your inquiry. Typically, this includes your title, first and last name, email address, and the subject and content of your message. You may also voluntarily provide additional information.
The processing of this data is based on Article 6(1)(f) GDPR, as it is necessary for the processing of your request and in our legitimate interest to efficiently handle customer inquiries. Your data will be deleted once the purpose of processing has been fulfilled, unless there are legal obligations to retain it.
Mandate Relationship
In the context of an existing or prospective mandate relationship, we process your personal data to the extent necessary for the establishment, execution, and handling of the mandate. This includes your contact details, such as your first and last name, address, telephone number, and email address, as well as any mandate-related information, such as your professional activity, income and asset details, and other data necessary for legal evaluation and proper advice and representation. The legal basis for this processing is Article 6(1)(b) GDPR, as the processing is necessary for fulfilling the mandate agreement or taking pre-contractual measures. Where special categories of personal data under Article 9(1) GDPR are involved, the processing is based on Article 9(2)(f) GDPR for the establishment, exercise, or defense of legal claims.
If your personal data is transmitted to us by third parties—such as authorities, courts, or parties involved in proceedings—in the course of handling the mandate, the data is also processed for the purpose of executing the mandate. In cases where our client intends to assert claims against you or anticipates that you may assert claims against them, the processing of your personal data is carried out for the purpose of asserting, exercising, or defending legal claims. In these cases, the processing is based on Article 6(1)(f) GDPR, as it serves the legitimate interests of our client.
Personal data may also be obtained from publicly accessible sources, such as public registers or internet searches. This processing occurs solely to the extent necessary for the proper handling of the mandate and is based on Article 6(1)(b) GDPR and Article 6(1)(f) GDPR, where the legitimate interests of our client or ourselves are involved.
In certain cases, it may be necessary to transfer personal data to recipients in third countries outside the European Union or the European Economic Area if this is required for the processing of the mandate. Such transfers only occur if adequate safeguards for the protection of your personal data are in place, such as the conclusion of data protection agreements based on standard contractual clauses in accordance with Article 46(2)(c) GDPR. You can obtain further information about these safeguards from our data protection officer.
The processing of your personal data only takes place for as long as necessary to fulfill the stated purposes and in compliance with legal retention periods.
Business Partners
In the context of our collaboration with service providers, suppliers, and other business partners (hereinafter referred to as “business partners”), we process personal data from both the business partners themselves and their employees, where necessary for the initiation, execution, and completion of the contractual relationship. This includes:
The personal data we process generally comes directly from the individuals concerned, for example, through correspondence with business partner contacts. In some cases, we receive the data from the business partner itself as part of the business relationship.
Contact information such as first and last name, title if applicable, address, telephone number, and email address, Information about professional activity, Bank account details.
The legal basis for processing personal data is Article 6(1)(b) GDPR, to the extent that this is necessary to fulfill a contract with the business partner. In all other cases, especially when processing employee data of the business partner, the processing is based on the legitimate interest of KADICHA LEGAL in accordance with Article 6(1)(f) GDPR, to ensure efficient and compliant business operations.
The processing of personal data serves the following purposes:
To establish and conduct the contractual relationship with our business partners, To fulfill contractual obligations and manage claims, To facilitate communication within the business relationship.
Use of Microsoft Teams
When using Microsoft Teams for communication and collaboration, we process your personal data to the extent necessary to provide and facilitate communication services. This includes your first and last name, your contact information, and other data necessary for communication and collaboration via Microsoft Teams, such as your professional details or technical data like IP addresses. The legal basis for this processing is Article 6(1)(b) GDPR, as the processing is necessary to fulfill the mandate agreement or to take pre-contractual measures.
If your personal data is transmitted to us by third parties in the course of Microsoft Teams communication, the processing also serves the purpose of communication or collaboration. This may occur when other participants in the conference or collaboration, such as your colleagues, consultants, or business partners, are involved. The processing of this personal data is also based on Article 6(1)(b) GDPR.
Your audio and video data generated during a Microsoft Teams conference or meeting are processed only for the duration of the event unless you have expressly consented to further storage. Text-based communication and other collaboration-related data are retained only as long as necessary to fulfill the respective purposes.
Disclosure of Personal Data
In the course of our processing of personal data, it may be necessary to disclose this data to various external recipients or transfer it to them. Recipients of such personal data include external service providers tasked with providing technical services, such as IT support, server hosting, or database maintenance. Providers of services or content integrated into our website may also receive personal data where required for the provision of specific functionalities.
In all cases, we ensure strict compliance with legal data protection requirements. We specifically enter into contracts with recipients, such as data processing agreements in accordance with Article 28 GDPR, to ensure that your personal data is processed solely in accordance with our instructions and under strict consideration of high data protection and security standards. We also ensure that these service providers are bound by confidentiality and do not use your data for any other purpose. This is especially the case when personal data is shared with third parties who have specialized expertise in certain fields, such as tax auditors or external consultants. In these cases, the data is shared only to fulfill contractual obligations or based on legitimate interests and always in compliance with the applicable data protection regulations.
Storage and Deletion of Personal Data
In compliance with legal requirements, we delete the personal data we process as soon as the legal grounds for processing cease to exist. This may occur, for example, when the original purpose of the processing no longer applies or the data is no longer needed. If deletion is not possible due to legal reasons, the processing of the data is restricted to permissible purposes. This may include data that must be archived due to commercial or tax law obligations or data necessary for the establishment, exercise, or defense of legal claims or to protect the rights of other natural or legal persons.
Adjustment and Updates to the Privacy Policy
If our website or services are further developed or if new legal or regulatory requirements arise, it may become necessary to amend this privacy policy. The current version of the privacy policy can always be accessed here.