Data Privacy Statement and data protection Information in accordance

In this Section 1 we would first like to give you some general information about our processing of your personal data that applies to all of our data processing activities.

In Section 2 you will find information that only applies to specific processing activities.

The controllers are the following legal persons (collectively referred to as the "ESCHE Companies"):

• Esche Schümann Commichau Rechtsanwälte Wirtschaftsprüfer Steuerberater Partnerschaftsgesellschaft mbB
• Esche Restructuring GmbH
• ESC Wirtschaftsprüfung GmbH Wirtschaftsprüfungsgesellschaft
• ESC Steuerberatungsgesellschaft mbH
• ESC Unternehmensberatung GmbH
• ESC Beteiligungsgesellschaft mbH
• ESC – Esche Schümann Commichau Stiftung

Please note that only individual ESCHE Companies are responsible for specific data processing activities. We explain which companies are responsible for which activities in Section 2.

All ESCHE Companies can be reached using the following contact information:
Am Sandtorkai 44
20457 Hamburg
Telephone: +49 (0)40 36805-0
Fax: +49 (0)40 36805-333
Email: esche@esche.de

The Data Protection Officer of Schümann Commichau Rechtsanwälte Wirtschaftsprüfer Steuerberater Partnerschaftsgesellschaft mbB can be reached using the following contact information:
Datenschutzbeauftragter der
Esche Schümann Commichau
Partnerschaftsgesellschaft mbB
c/o beck Service GmbH
Ericusspitze 4
20457 Hamburg
Email: datenschutz.esche.pg@beckservice.gmbh

The Data Protection Officer of ESC Wirtschaftsprüfung GmbH can be reached using the following contact information:
Datenschutzbeauftragter der
ESC Wirtschaftsprüfung GmbH
c/o beck Service GmbH
Ericusspitze 4
20457 Hamburg
Email: datenschutz.esche.wp@beckservice.gmbh

The Data Protection Officer of Esche Restructuring GmbH can be reached using the following contact information:
Datenschutzbeauftragter der
Esche Restructuring GmbH
c/o beck Service GmbH
Ericusspitze 4
20457 Hamburg
Email: datenschutz.esche.rs@beckservice.gmbh

No data protection officer has been appointed for other ESCHE companies.

Information about the respective controllers, the purposes, and legal basis of the data processing as well as the criteria for the period of storage for individual data processing activities can be found in:

• Section 2.a.: Data processing during the use of this website,
• Section 2.b.: Data processing relating to a mandate,
• Section 2.c.: Data processing relating to our events,
• Section 2.d.: Data processing relating to our publications,
• Section 2.e.: Data processing relating to applications,
• Section 2.f.: Data processing relating to the awarding of sponsorships,
• Section 2.g.: Data processing relating to suppliers, service providers, and visitors, and
• Section 2.h.: Data processing relating to our video surveillance.

We also transfer your personal data to third parties, insofar as it is desired by you, it is for the processing of a mandate, it is for the performance of another contract, or we have a legitimate interest in the data transfer. In any event, we only transfer these data within the context of the mandate work if this is occupationally permitted.

In some cases we use external service providers to process personal data. These are carefully selected and contracted by us, are bound to our instructions, and are regularly checked.

These can be the following categories of recipients:

• courts, tax offices, public employment services, patent and trademark offices within the framework of legal disputes, tax matters, and other legal matters,
• lawyers, auditors, tax advisers,
• service providers such as collection agencies, credit reporting agencies, detective agencies, IT service providers, banking services, communications services, services in the area of our financial administration and the destruction of data storage media, couriers, forwarding agents and freight carriers, interpreters and translators, print shops, letter shops, envelope service providers, travel agencies, advertising agencies, and photographers, for example.
• recruiters and recruitment consultants who support us in the recruitment of personnel and potentially the decision to establish an employment relationship.

Insofar as it is desired by you, it is for the processing of a mandate, or it is for the performance of another contract, we transfer your personal data to countries outside of the European Union.

If data is transferred to recipients outside of the European Union, we will ensure that the recipient possesses an adequate level of protection, appropriate safeguards are in place, you have granted your consent, or the transfer is permissible for other reasons, e.g. if it is necessary for the preparation or performance of contract at your request. If we base a transfer to countries outside of the European Union on appropriate safeguards, you can request a copy of these using the contact information specified in Section 1.a.

Furthermore, due to cooperations based on the division of labor, e.g. in the area of IT service providers, in particular with regard to service providers in the area of maintenance, upkeep, and securing of IT systems, there is the possibility that employees of a service provider in a country outside of the European Union may gain knowledge of your personal data. If there is no data protection level in that country comparable to the level of the European Union and accordingly no adequacy decision by the European Commission relating to that country, we will protect your data privacy interests through the conclusion of what are known as EU standard data protection clauses which were adopted by the European Commission and agreed to with the recipient or through other appropriate means. You can request a copy of the EU standard data protection clauses as well as any other guarantees from us using the contact information specified in Section 1.a.

There is no intention for any further transfer of your personal data to other countries outside of the European Union but this is not excluded either, provided that it is lawful.

Please note that we must taken into consideration any overriding rights of third parties as well as any existing statutory or contractual obligations to maintain secrecy that can bar the disclosure of information in the individual case with regard to the provision of the copies of guarantees specified above.

(1) Right of access, right to rectification, right to erasure, right to restriction of processing, and right to data portability
As a data subject, you have the following rights, among others in accordance with the GDPR:

• Art. 15 GDPR: Right of access of the data subject
  You have the right to obtain information about which data concerning you we are processing. Please note that we may not be able to fulfill requests for information in every case, in particular if the secrecy obligation that we must observe within the client-lawyer relationship prevents us from disclosing the information in accordance with Section 29 of the FDPA.
• Art. 16 GDPR: Right to rectification
  If the data concerning you is incorrect or incomplete, you can obtain the correction of incorrect data or the completion of incomplete data.
• Art. 17 GDPR: Right to erasure
  Under the conditions of Article 17 of the GDPR, you can obtain the erasure of your personal data. Your entitlement to erasure depends upon whether we require the data concerning you in order to fulfill contractual and legal obligations.
• Art. 18 GDPR: Right to restriction of processing
  Under the conditions of Article 18 of the GDPR, you can obtain the restriction of the processing of your personal data.
• Art. 20 GDPR: Right to data portability
  Under the conditions of Article 20 of the GDPR, you can obtain in a structured, current and machine-readable format the personal data concerning you which you have provided to us or to obtain the transfer of the data to another controller. Please note that we may not be able to fulfill such requests in every case, in particular if the secrecy obligation that we must observe within the client-lawyer relationship prevents this in accordance with Section 29 of the FDPA.

(2) Withdrawal of consent
If you have granted consent to the processing of your data, you can withdraw this consent at any time without affecting the legality of the processing carried out before the withdrawal. The legality of the processing of the data on any other legal bases shall also remain unaffected. If your consent was the sole legal basis for the processing of your data, in particular if we do not possess any legitimate interest in the processing in accordance with Article 6(1) sentence 1(f) of the GDPR, we will erase the data immediately after you withdraw your consent.

(3) Objection against certain processing in accordance with Article 21 of the GDPR
If we base the processing of your personal data on a balancing of interests (Article 6(1) sentence 1(e) and (f) of the GDPR), you can object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you. If you exercise this right to object, we request an explanation of the reasons why we should not process your personal data in the way that we do. In the event of a legitimate objection from you we will review the matter and either cease or adjust the data processing or present you with the compelling reasons worth being protected why we must continue the processing of the data.

You can object at any time to the processing of your personal data for the purposes of marketing and data analysis without incurring any costs other than the basic transmision costs.

(4) Lodging a complaint with the supervisory authority
You have the right to lodge a complaint with the supervisory authority if you consider that the processing of personal data concerning you infringes regulations (Art. 77 GDPR). The address of our competent supervisory authority is:
Der Hamburgische Beauftragte
für Datenschutz und Informationsfreiheit
Ludwig-Erhard-Str 22
20459 Hamburg
Tel.: 040 / 428 54 - 4040
Fax: 040 / 428 54 - 4000
Email: 

mailbox@datenschutz.hamburg.de

Unless otherwise specified for individual data processing activities in Section 2, the following applies for the duration of the storage of your personal data:

We will erase your personal data as soon as it is no longer necessary for the purpose of its storage. We can store data beyond this time if required by the union regulations, national laws, or other regulations of the EU or national legislature to which we are subject. Exceptions to the principle of erasure after fulfillment of purpose can result from things such as the provisions of the GDPR and the provisions of German federal law, in particular from the FDPA. Furthermore, the data will not be erased as long as there are obligations to preserve the data under trade law, tax law, or the rules of professional conduct.

Storage for a longer period of time may also be required in an individual case due to the assertion or potential assertion of claims against us relating to a contract or pre-contractual measures. This would be the case if there are indications that you will assert claims against us, for example. The same applies if we assert claims, intend to assert claims, or consider asserting claims due to specific circumstances in the individual case. The data will then be stored as long as necessary for the processing of the data for the establishment, exercising, or defense of legal claims plus the duration of any existing statutory obligation to preserve data.

If a statutory obligation to preserve data bars the erasure then your data will first be stored by us in a way that it can only be processed by a limited group of individuals and will not be erased until after the obligatory data preservation period has passed.

You are neither legally nor contractually obligated to provide personal data. However, if you intend to conclude a contract with one of our ESCHE companies, in particular a contract of mandate, an employment relationship, or a contract as our service provider or supplier, you will be required to provide personal data. If you do not provide any personal data in the individual case then you will not be able to conclude any contract with us.

The same applies in the event that you attend one of our events, receive one of our publications, enter our premises as a visitor, or would like to apply for a sponsorship from us. You can only make use of these services if you provide us with the respective necessary personal data, which includes your name and address in any event and potentially your email address if publications are to be transferred online. For other data we will indicate whether it is mandatory or voluntary to provide the data for each respective case.

Below you will find information about specific individual data processing activities.

We will provide you with information about the respective controllers, purposes, and legal basis of the data processing as well as the criteria for the period of storage of your personal data.

(1) Controller
The controller is:
Esche Schümann Commichau
Rechtsanwälte Wirtschaftsprüfer Steuerberater
Partnerschaftsgesellschaft mbB.

The contact information of the controller can be found above in Section 1.a.

(2) Type and purposes of the data processing
(a) Processing of data transmitted in the background
The type and scope of the processing of your personal data differs depending on whether you visit our website merely to obtain information or to make use of services offered by us on the website.
If you are merely using the website to obtain information, i.e. if you do not register or send us other information, we will collect the following data and store the data in the log files of our system. This includes the following data:

• your IP address,
• the date and time of the access request,
• the time zone difference to Greenwich Mean Time (GMT), 
• the content of the request (specific page),
• the access status/HTTP status code,
• the respective data volume transferred,
• the requesting website,
• the operating system and its interface,
• the browser, language, and version of the browser software.

The anonymous data from the log files are stored separately from all personal data provided by you. These anonymously collected data and information are therefore evaluated statistically by us, for one, and are otherwise evaluated with the aim of improving data protection and data security so as ultimately to ensure the best level of protection for the personal data we process.

(b) Use of cookies
In addition to the collection of data specified above, cookies will be placed on your computer when you use our website. Cookies are small text files which are stored on your hard drive associated with the browser you are using and through which certain information is sent to the party which placed the cookie (in this case us). Cookies cannot run programs or transfer viruses to your computer. They serve to make the website more user-friendly and more effective overall.

You can configure your browser settings as you wish and reject the acceptance of third-party cookies or all cookies, for example. Please note that if you do so then you may not be able to use all of the functions of this website.

(c ) Analytics tools
This website uses the web analytics tool Matomo (formerly PIWIK) in order to be able to analyze and regularly improve the use of our website. We can use the statistics obtained to improve our offerings and make our website design more interesting to you the user.

Cookies (see above for further details) are installed on your computer for this analysis. The information thereby collected is stored exclusively on our server in Germany. You can prevent the analysis by deleting any existing cookies and preventing the installation of cookies. If you prevent the installation of cookies by adjusting your browser settings then please note that you may not be able to make full use of this website. It is possible to prevent the installation of cookies by adjusting your browser settings. It is possible to prevent the use of Matomo by removing the following check mark and thereby opting out of the plug-in:

TRACKING

This website uses Matomo with the add-on "AnonymizeIP". IP addresses are thereby shortened for further processing so that any direct association with a particular person can be ruled out. The IP address transmitted by your browser by Matomo will not be merged with other data collected by us. The Matomo program is an open source project. Information from this third-party service provider on data protection can be found at https://matomo.org/privacy-policy/.

(d) Events
You can use this website to register for a forum or another event held by ESC Unternehmensberatung GmbH. Further information can be found in Section 2.c.

(e) Newsletter
With your consent you can subscribe to our newsletter which we use to inform you about our current interesting offers. You can also order information about our client information publications "compact" and "compact Special". Further information about this can be found in Section 2.d.

(3) Legal basis
The legal basis for the processing is Article 6(1) sentence 1(f) of the GDPR: The processing of personal data in the event of the use of our website purely to obtain information serves the presentation of our website to you and ensuring the stability and security of this website. The use of cookies serves to make the website more user-friendly and more effective overall. The use of the web analytics tool Matomo also serves enable the analysis and regular improvement of the use of our website. Herein lies our legitimate interest in the processing of this data.

(4) Criteria for the period of storage
In the event of the use of our website purely to obtain information, we store the data specified above for seven days. However, it is possible for data to be stored beyond this period. In this case the IP addresses of users will be deleted or disassociated so that it is no longer possible to associated it with the accessing client.

This website uses the following types of cookies, whose period of storage and functions are explained below.

(aa) Transient cookies are automatically deleted when you close the browser. These include session cookies in particular. These store what is known as a session ID, which is used to associate various access requests of your browser with the same session. This enables your computer to be recognized again if you return to our website. The session cookies are deleted when you log out or close the browser.

(bb) Persistent cookies are deleted automatically after a set period which can vary depending on the cookie. You can delete the cookies at any time using the security settings of your browser.

The information in Section 1.g. also applies.

(1) Controller
The controller for the data processing is the respective ESCHE company to which you direct your request or with which you have concluded a contract of mandate. Insofar as personal data relating to you is transmitted to us, the controller is the ESCHE company which is the recipient of your personal data. The contact information of the controller can be found above in Section 1.a.

(2) Purposes of the data processing
If you contact us within the context of a client relationship or in order to enter into a client relationship, the personal data transmitted with your request will be stored with us. We process the personal data necessary for the establishment and execution of the client relationship. In particular, this involves your first name, last name, contact information, and further data necessary for the execution of the mandate, depending on the type and scope of the issued or yet to be issued mandate.
Insofar as your personal data is transmitted to us by third parties relating to an existing or future mandate, the data processing serves the execution of the mandate. If your personal data is transmitted because our client ventures to assert claims against you or because our client expects that claims could be asserted against him/her, the data processing also serves the establishment, exercise, or defense of legal claims.

(3) Legal basis
The legal basis for the processing of data is Article 6(1) sentence 1(b) of the GDPR on the one hand, provided that you are our client or have transmitted your personal data to us in order to enter into a future client relationship. The processing of this data serves the performance of a contract or is necessary for the performance of pre-contractual measures.
If your personal data is transmitted to us by third parties relating to an existing or future mandate of third parties, in particular of our clients, the legal basis for the processing of the data is likewise Article 6(1) sentence 1(b) of the GDPR on the one hand, if the subject of our mandate is the conclusion of a contract with you, the assertion of claims from a contract, or consulting in relation to these subjects. The legal basis is otherwise Article 6(1) sentence 1(f) of the GDPR: The data processing serves the exercising of the legitimate interests of our client, which may involve the establishment, exercising, or defense of legal claims in particular.

(4) Criteria for the period of storage
We store your data until the end of the mandate plus the obligations to preserve data under the rules of professional conduct and other regulations.

The information in Section 1.g. also applies.

(1) Controller
The controller for the data processing is the respective ESCHE company which is specified as the event organizer in the contractual documents or on our website www.esche.de. The contact information of the respective controller can be found above in Section 1.a.

(2) Type and purposes of the data processing
You can register for a workshop, a forum, or another event through our website www.esche.de. Your first and last name, your street address, and your email address must be provided for the registration. The provision of further data marked with an asterisk is voluntary. Naturally you can also register for events by telephone, fax, letter, email, etc. Your data will be used for the execution of the event.

If you declare that you would like to be invited to events in the future by email then your personal data, including your email address, will be used for the purpose of informing you about the events which you have informed us that you are interested in.

If you are our client or an employee of one of our clients who is entrusted with the handling of legal, tax, or financial matters such as a managing director, legal advisor, head of accounting, employee in the HR department or patent and trademark department, for example, even without your explicit consent we will have information sent to you about educational events such as workshops and forums which, with regard to their thematic content, are comparable to our consulting services which are the subject of the mandate and thereby sensibly complement or expand these services, on the one hand. We will also invite you to events which serve to promote the business relationship with our clients such as client summer parties, receptions, and similar events. We store and process your first and last name, street address, and email address for this.

(3) Legal basis
The legal basis for the processing is Article 6(1) sentence 1(b) of the GDPR because the data processing is necessary for the execution of a contract.

The legal basis is furthermore Article 6(1) sentence 1(f) of the GDPR: Our legitimate interest lies in being able to offer you educational and non-educational events corresponding to your wishes and thereby promote our business relationship with our clients.

(4) Criteria for the period of storage
We store your data until the event has been held or, if you has expressed your interest in being invited to further events in the future or if you are our client or an employee of one of our clients who is entrusted with the handling of legal, tax, or financial matters, until you object to the further use of your personal data.

You can object at any time to the use of your personal data for the purpose of sending you invitation emails and event information without incurring any costs other than the basic transmission costs. You can send a letter or email with your objection to the address specified above. You can also make use of the option set up in the email sent to you to click a button to not receive any further emails.

The information in Section 1.g. also applies.

(1) Controller
The controller for the data processing is the respective ESCHE company specified as the controller in the publication. If no other controller is specified in the publication then the controller for the data processing is:
ESCHE SCHÜMANN COMMICHAU
Rechtsanwälte, Wirtschaftsprüfer, Steuerberater
Partnerschaftsgesellschaft mbB

The contact information of the controller can be found above in Section 1.a.

(2) Type and purposes of the data processing
With your consent we will sent you publications such as our newsletter, the client information publications "compact" or "compact Special", and similar publications.

We use what is known as the double opt-in procedure for registration to our newsletter and client information publications ESCHE news and ESCHE news special. This means that after your registration we send an email to the specified email address in which we ask for confirmation that you wish to receive the newsletter. If you do not confirm your registration within 48 hours then your information will be blocked and automatically erased after one month. In addition, we will store the IP address you are using and the times of the registration and confirmation. The purpose of this data processing is to substantiate your registration and to be able to resolve any potential misuse of your data.

Your e-mail address is required for sending the newsletter and the client information compact or compact Special by e-mail. The provision of further data, such as your title and first and last name, is voluntary. If you wish to order our client information ESCHE news or ESCHE news spezial as a print publication, we require your address as mandatory information in addition to your first and last name. After your confirmation, we will process your e-mail address and any data you have voluntarily provided for the purpose of sending you the newsletter. If you wish to receive our client information ESCHE news or ESCHE news spezial by mail, we will process your first and last name as well as the address you have provided for the purpose of sending it by mail. 

If you are our client or an employee of one of our clients who is entrusted with the performance of legal, tax, or financial matters such as a managing director, legal advisor, head of accounting, employee in the HR department or patent and trademark department, for example, even without your explicit consent we will have our newsletter and our client information publications such as compact and compact Special sent to you if the contact of these publications is comparable to our consulting services which are the subject of the mandate and thereby sensibly complement or expand these services. In addition, we will send you Christmas cards and similar messages following the usual business practice. For this we will store and process your title, your first and last name, your street address, and – if the publication is to be sent by email – your email address.

You can withdraw your consent at any time as well as object to the use of your personal data for the purpose of sending you our newsletter or our client information publications such as compact and compact Special at any time without incurring any costs other than the basic transmission costs. You can send a letter or email with the withdrawal of your consent or with your objection to our address specified above in Section 1.a. You can also make use of the option set up in our newsletter email to click a button to not receive any further emails.

(3) Legal basis
The legal basis for the processing is Article 6(1) sentence 1(b) of the GDPR because the data processing is necessary for the execution of a contract.

The legal basis is furthermore Article 6(1) sentence 1(f) of the GDPR if you are our client or an employee of one of our clients who is entrusted with the handling of legal, tax, or financial matters. Our legitimate interest lies in sending you publications coordinated to your need for advice as well as messages following the usual business practice such as Christmas cards and to thereby promote our business relationship with you.

(4) Criteria for the period of storage
If the data processing is carried out on the basis of your consent then we will store your data until you withdraw your consent. We will then erase your data. The same applies if you object to the further use of your personal data in order to send you publications.

You can send your withdrawal of consent or your objection to the address specified in Section 1.a. at any time without incurring any costs other than the basic transmission costs. You can communicate your withdrawal of consent or objection to us by telephone, mail, fax, or email. If the publication is being sent to you electronically then you can also make use of the option set up in the email sent to you to click a button to not receive any further emails.

The information in Section 1.g. also applies.

(1) Controller
The controller for the data processing is the respective ESCHE company to which you send your application. The contact information of the controller can be found above in Section 1.a.

(2) Purposes of the data processing
Your personal data will be collected processed by us for the decision on whether to establish the contractual relationship for which you have applied (employment, apprenticeship, trainee relationship or other contractual relationship).

(3) Legal basis
The legal basis for the processing is Article 6(1) sentence 1(b) of the GDPR in connection with Section 26 of the FDPA. If the contractual relationship for which you have applied is not an employment relationship within the meaning of Section 26(8) of the FDPA (i.e. in particular, not an employment relationship or employment for vocational training) then the legal basis is Article 6(1) sentence 1(b) of the GDPR. The processing of your personal data may potentially also be carried out on the basis of further provisions of labor law, vocational training law and social law. If the processing of your personal data is necessary in order to fulfill a legal obligation to which we are subject then this processing is based on Article 6(1) sentence 1(c) of the GDPR.

(4) Criteria for the period of storage
Personal data which we process for the decision on whether to establish a contractual relationship will generally be erased by us when the processing is longer necessary for the decision on whether to establish a contractual relationship. In this respect, the period of storage depends on the duration of the decision-making process.

If you have sent us an unsolicited application, i.e. an application that does not relate to a specific position advertised by us, then we will also process your personal data in order to decide whether to establish an employment relationship. The information above applies accordingly, whereby we will generally erase your data if, in our assessment, it is not foreseeable that your personal data could potentially be used to decide whether to establish a contractual relationship.

In individual cases a period of storage can result which extends beyond the establishment of a contractual relationship. This would be the case if there are indications that you will assert claims against us, for example. The data will then be stored as long as necessary for the processing of the data for the establishment, exercising, or defense of legal claims. The criteria for the period of storage can thereby include the limitation periods in accordance with Section 15(4) sentence 1 of the the General Law on Equal Treatment (AGG) and Section 61b of the Law on the Organization of Labor Courts (ArbGG).

The information in Section 1.g. also applies.

(1) Controller
The controller is:
ESC – Esche Schümann Commichau Stiftung.

The contact information of the controller can be found above in Section 1.a.

(2) Purposes of the data processing
You have the ability to apply for a sponsorship from the foundation. In particular, this involves your first and last name, your contact information, and your CV. Your personal data will be collected and processed by us for the decision on whether to establish a sponsorship. If you are awarded a sponsorship, we will also require your account data in order to transfer the award money.

We will process the personal data of the winner of the sponsorship from ESC – Esche Schümann Commichau Stiftung for the purpose of holding of the award ceremony (invitations, programs, etc.). We will publish your name and the title of the dissertation in the overview of sponsorship winners on our website.

You have the option to donate to ESC – Esche Schümann Commichau Stiftung. In this case we will process the personal data you provide, in particular your payment data. We receive your payment data from the bank in charge of your account when you transfer a donation to us.

(3) Legal basis
The legal basis for the processing of your personal data within the context of the selection process and for the awarding of the sponsorship is Article 6(1) sentence 1(b) of the GDPR (performance of pre-contractual measures or performance of a contract).

The legal basis for the processing within the context of the creation of the overview of sponsorship winners and its publication is the safeguarding of legitimate interests (Article 6(1) sentence 1(f) of the GDPR). Our legitimate interests lie in providing information about the sponsorship winners of the foundation as well as about the respective subjects of the dissertations, professorial dissertations, and diploma theses and to thereby promote the purpose of our foundation. The publishing of the sponsorship winners serves the reputation of the foundation and is intended to draw the attention of applicants and donors.

The legal basis for the processing of the personal data of donors is Article 6(1) sentence 1(b) of the GDPR as well as Article 6(1) sentence 1(f) of the GDPR. Our legitimate interest lies in the collection of donations for the promotion of the purpose of our foundation.

(4) Criteria for the period of storage
Personal data processed for the decision about the awarding of the sponsorship of the foundation will generally be erased when the processing is no longer necessary for the decision and the foundation has decided against sponsoring you. In this respect, the period of storage depends on the duration of the decision-making process.

The publication of the names of the sponsorship winners as well as the titles of the dissertations, professorial dissertations, and diploma theses will be carried out as long as necessary to promote the purpose of the foundation ESC – Esche Schümann Commichau Stiftung.

Donor data will be erased after the processing of the donation as well as the expiration of any existing obligations to preserve data, in particular on the basis of tax regulations.

The information in Section 1.g. also applies.

(1) Controller
If you contact us or we contact you as an existing or future supplier or service provider, the controller for the data processing is the ESCHE company which you are contacting or which is contacting you.

If you enter our premises or drive into our parking garage as a visitor then the controller for the data processing is:
Esche Schümann Commichau
Rechtsanwälte Wirtschaftsprüfer Steuerberater
Partnerschaftsgesellschaft mbB.

The contact information of the controller can be found above in Section 1.a.

Please note that if video recordings are made of you, including recordings of your license plate when you drive into our underground garage, the information below in Section 2.f. applies.

(2) Purposes of the data processing
If you contact us in order to initiate, conclude or perform a contract, we will process the personal data you provide to us in order to decide whether we would like to conclude such a contract with you as well as for the conclusion and performance of such a contract. This applies in equal measure if we contact you in order to initiate, conclude or perform a contract because we would like to use you as a supplier or service provider.

If you enter our premises including our underground garage as a visitor and thereby provide personal data to us, e.g. by giving your name to our employees at the reception, the processing of your personal data serves the exercising of domiciliary rights. We would like to control who enters our premises in order to rule out the entry of unauthorized persons.

(3) Legal basis
The legal basis for the processing of your personal data you provide to us for the initiation, conclusion, or performance of a contract with us is Article 6(1) sentence 1(b) of the GDPR.

The legal basis for the processing is furthermore Article 6(1) sentence 1(b) of the GDPR if we store your personal data which is necessary for contact purposes beyond the end of a specific contract. We have a legitimate interest in being able to go back to proven suppliers and service providers.

If you enter our premises or drive into our parking garage as a visitor then the legal basis for the processing of your personal data is Article 6(1) sentence 1(f) of the GDPR. We have a legitimate interest in controlling who enters our premises including who drives into our parking garage in order to rule out the entry of unauthorized persons.

(4) Criteria for the period of storage
Personal data which we process for the decision on whether to establish a contractual relationship will generally be erased by us when the processing is longer necessary for the decision on whether to establish a contractual relationship. In this respect, the period of storage depends on the duration of the decision-making process. If we have concluded a contract with you then we will store your personal data until the full performance or end of the contract plus the period of statutory obligations to preserve data.

In individual cases a period of storage can result which continues beyond the decision to establish a contractual relationship, after the conclusion of such a contract, beyond its performance, or beyond its end if there are indications that you will assert claims against us. The same applies in the event that we intent to assert claims against you. The data will then be stored as long as necessary for the processing of your personal data for the establishment, exercising, or defense of legal claims. The criteria for the period of storage can thereby include the limitation periods.

If you are a supplier or service provider with whom we repeatedly work together, we will store your personal data necessary for repeated contact beyond the end of a specific contract until the use of your services by us no longer comes into consideration.

If you have provided us with your personal data as a visitor, your personal data will generally be erased after the end of the visit unless you have explicitly requested us to continue to store your personal data, e.g. in order to be invited to future events by us or to receive information from us. A longer period of storage can also result in these cases if there are indications in the individual case that you will assert claims against us or if the assertion of such claims comes into consideration by us. The data will then be stored as long as necessary for the processing of the data for the establishment, exercising, or defense of legal claims plus the duration of any existing statutory obligations to preserve data.

The information in Section 1.g. also applies.

(1) Controller
The controller is:
Esche Schümann Commichau
Rechtsanwälte Wirtschaftsprüfer Steuerberater
Partnerschaftsgesellschaft mbB.

The contact information of the controller can be found above in Section 1.a.

(2) Purposes of the data processing
Your personal data will be processed insofar as images of you are recorded by video cameras which we have installed in order to protect our property (or third-party property) or our domiciliary rights (or the domiciliary rights of a third party).

The identifiable video surveillance is intended as a preventative measure and prevent behavior directed against us due to its identifiability. The recordings serve to investigate criminal acts and other relevant occurrences. They are also intended to enable criminal prosecution and the enforcement of claims by serving as evidence.

(3) Legal basis
The legal basis for the data processing is Article 6(1) sentence 1(f) of the GDPR. Our legitimate interests lie in the protection of our property and the property of third parties as well as in the enforcement of our domiciliary rights or the domiciliary rights of third parties.

(4) Criteria for the period of storage
The storage is based on a balancing of our interests with your interests so the continued existence and the change of the interests are the decisive criteria for the period of storage. The data will generally be erased if our legitimate interests no longer exist or no longer outweigh your interests in the erasure of the data. Recordings will generally only be stored for 72 hours. For the precise period of storage it is relevant that the recordings may potentially only be able to be evaluated after a delay due to shutdown periods (weekends, holidays, company holidays, etc.). If video recordings are necessary for the establishment, defense, and exercising of legal claims or for evidence purposes and for the establishment of facts, the data will continue to be stored until these purposes have been fulfilled.

The information in Section 1.g. also applies.