Data protection - Alpers Maack & Wessel

Privacy policy

Responsible body

Thank you for visiting our website. First of all, we would like to introduce ourselves to you as the responsible body within the meaning of data protection law:

Alpers Maack & Wessel GmbH
Wirtschaftsprüfungsgesellschaft Steuerberatungsgesellschaft
represented by the managing directors
StB Dipl.-Finw. (FH) Thomas Maack
WP/StB Dipl.-Kfm. Christian Wessel
StB Dipl.-Kfm. Marvin Feldmann
StBin/RAin FA f. StR Alena Grin
StBin Dipl.-Finwin (FH) Diana Krüger
StBin/RAin Dipl.-Finwin (FH) Stefanie Loos
WP/StB Dipl.-Kfm. Marcel Meyer
StBin/RAin Pia Schleder
WPin/StBin Dipl.-Kffr. Susanne Schmuck
StBin Sandra Wichern
StB Xun Zhang, LL.M.

Gänsemarkt 45
20354 Hamburg

Phone: +49 (0) 40 35 53 36 – 50
E-mail: info@alpers-maack-wessel.de

Data Protection Officer

sdw consulting Stefan Droß
Fichtenweg 2
30900 Wedemark (Bissendorf-Wietze)
E-Mail: dross@sdw-consulting.de
Phone: +49 151 21931404

General information

We would like to inform you about the collection and use of your personal data in accordance with our legal obligations.

When you use our website, personal data about you is collected. This can be done by you entering the data yourself – such as your e-mail address. However, our system also collects data from you automatically, such as your visit to our website. This takes place regardless of the device or software you use to access our website.

Any input of data by you on our website is voluntary; you will not suffer any disadvantages if you do not disclose your data. Without certain data, however, it is not possible for us to provide services or conclude contracts. We will draw your attention to such mandatory information in each case.

On this website, personal data of the user is only collected within the framework of the applicable data protection law, in particular the General Data Protection Regulation (GDPR). The technical terms used in the text are explained in more detail in Art. 4 of the GDPR.

Data processing is permitted under the GDPR in three cases in particular:

in accordance with Art. 6 para. 1 lit. a and 7 GDPR, if you have consented to data processing by us; in each case, we will inform you in advance in this data protection declaration and on the occasion of the consent in accordance with Art. 4 No. 11 GDPR exactly for what purpose and under what circumstances your data will be processed by us;
pursuant to Art. 6 para. 1 lit. b GDPR, if the processing of your personal data is necessary for the initiation, conclusion or execution of a contractual relationship;
in accordance with Art. 6 para. 1 lit. f GDPR, if, after a balancing of interests, the processing is necessary to safeguard our legitimate interests; this includes in particular our interests in analyzing, optimizing and securing the offer on our website – this includes in particular an analysis of user behavior, the creation of profiles for advertising purposes and the storage of access data as well as the use of third-party providers.

Inventory data

We collect inventory data insofar as it is necessary for the establishment, content or modification of a contractual relationship (including free of charge) between us and the user. This may include Customer data (e.g. name, address), contact data (e.g. e-mail address, telephone number), service data (e.g. service ordered, term, fee). When establishing the user relationship, we will request this data from you (e.g. name, address and e-mail address) and also inform you to what extent the information is required to establish the user relationship.

Usage data

We also collect usage data to enable the user to make use of the services on our website. This may include Usage data (e.g. web pages or areas accessed, duration of visit, interest in services), content data (e.g. data entered or uploaded by you, texts, images, sounds, videos), metadata (e.g. identity of your device, location, IP address).

We will only combine usage data if and insofar as this is necessary for billing purposes. Otherwise, we will only create usage data pseudonymously and only if you have not objected to this. You can send this objection at any time to the address given in the legal notice or to the controller named in this privacy policy.

The legal basis for this data processing is, on the one hand, our legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR in the analysis of the website and its use and, if applicable, also the legal permission to store data in the context of the initiation of a contractual relationship pursuant to Art. 6 para. 1 lit. b GDPR.

Hosters

DomainFactory

We have created this website with the modular system of DomainFactory GmbH, Oskar-Messter-Str. 33, 85737 Ismaning, Germany, as part of our legitimate interest in a technically flawless online offer and its economically efficient design and optimization in accordance with Art. 6 para. 1 lit. f GDPR. In addition, our website is hosted on the servers of DomainFactory on the basis of Art. 6 para. 1 lit. f GDPR. DomainFactory collects usage data like any other hoster. This is identified and non-identifiable data when you visit our website. The non-identifiable data are so-called server log files that are automatically transmitted by your browser. This includes inventory data, content data, usage data, meta and communication data, such as the type and version of your browser, the page from which you visited our site, the time and duration of your visit to our homepage and the amount of data transferred. The hosting services are provided for the purpose of operating this online service. DomainFactory will not combine your data with other information in order to identify you. Your IP address is usually deleted within 7 days at the latest. It may be necessary to store your log data for a longer period of time and to check it at a later date in order to investigate possible cases of misuse.
As a website construction kit system, DomainFactory also collects personal data that you enter when using the website. This may include contact data (e.g. email address or telephone number), billing data (name, billing address, payment method and bank details), data relating to associated third-party accounts (such as the email address or username for an associated PayPal, Google or Facebook account), data relating to a browser or usage session (IP address, geographical location and/or unique identifier of the end device and any other personal data.

For more information on DomainFactory’s privacy policy, please visit: https://www.df.eu/de/datenschutz/.
The basis for the transfer of your data to DomainFactory is our legitimate interest in a technically flawless online offer and its economically efficient design and optimization in accordance with Art. 6 para. 1 lit. f GDPR. DomainFactory uses cookies to provide you with an optimized online presence tailored to your needs. If you do not wish data to be transmitted to DomainFactory’s services, you can prevent DomainFactory from setting cookies. Please refer to the “Cookies” section at the top of this privacy policy.

Initial contact via electronic request

If you contact us in electronic form (e.g. email, fax, telephone, messenger, etc.), we store and process the data that you have provided to us (e.g. name, contact information, content of the inquiry). The legal basis for this is our legitimate interest in effective customer communication in accordance with Art. 6 Para. 1 lit. a GDPR and, insofar as it concerns an inquiry to enter into or fulfill a contract, also Art. 6 Para. 1 lit. b GDPR.

We will only pass this data on to third parties if it is necessary (in accordance with Art. 6 para. 1 lit. b GDPR) for the fulfillment of the contract, if this corresponds to the overriding interest in an effective service (in accordance with Art. 6 para. 1 lit. f GDPR) or if your consent (in accordance with Art. 6 para. 1 lit. a GDPR) or another legal permission or obligation exists.

You can request information from us at any time and free of charge about the purpose of the processing, the origin and, if applicable, the recipient of your personal data. You can also request the rectification, erasure and restriction of the processing of your personal data. You can object to the (further) processing of your data at any time and have a right to data portability and a right to lodge a complaint with the competent supervisory authority.

Your data will only be stored for as long as required for the purpose of the respective data processing. Further storage may be considered in particular if this is still necessary for legal prosecution or for legitimate interests or if there is a legal obligation to retain the data (e.g. tax retention periods, statute of limitations).

Consent

Where we ask for your consent to process your data, we will inform you in clear and easily accessible language about the cases for which you are giving your consent. Any consent we ask for is voluntary, any benefit you wish to obtain by giving consent can be obtained without consent, just ask us.

You have the right to withdraw any consent you have given us to process your personal data at any time. This can be done by sending an informal message, e.g. via our contact form, an e-mail to the e-mail address given in the legal notice or an unsubscribe link (if offered by us). Your revocation does not affect the legality of the data processing carried out up to that point.

Storage duration

For your inventory data that was required to fulfill a contractual relationship (even free of charge), this means that we store it until the complete fulfillment or termination of the contractual relationship plus the limitation period (which is generally 2 or 3 years) plus a reasonable surcharge for any interruption of the limitation period.

For your usage data collected when you use the website, this means that we only store it for as long as is necessary for the proper functioning of our website and for as long as our legitimate interest allows. We will primarily only store statistical data in pseudonymized form.

We also store your data to the extent that we are legally obliged to do so. These are in particular the tax retention periods, which are generally 6 or even 10 years.

Rights of the users

You can request information from us at any time and free of charge about the personal data we have stored about you. In order to prevent misuse, it will be necessary to identify you personally.

Deletion, correction, restriction

You can request that we correct (including by supplementing) incorrect data at any time, restrict its processing or delete your data. This applies in particular if the purpose of the processing has expired, a required consent has been revoked and no other legal basis exists or our data processing is unlawful. We will then immediately correct, block or even delete your personal data within the legal framework.

Contradiction

ANY PROCESSING OF YOUR PERSONAL DATA THAT WE BASE ON A BALANCING OF INTERESTS IN ACCORDANCE WITH ART. 6 ABS. 1 lit. f GDPR, YOU MAY OBJECT AT ANY TIME IF THERE ARE REASONS FOR THAT ARISE FROM YOUR PARTICULAR PERSONAL SITUATION.

WE WILL THEN NO LONGER PROCESS YOUR DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENSE OF LEGAL CLAIMS ON OUR PART.

Data transmission

You can request that we transfer the data stored about you in machine-readable form.

Complaint

If you feel that your rights have been violated by our data processing, you can lodge a complaint with the competent supervisory authority( you can find a list of authoritieshere ).

Changes to the privacy policy

If it becomes necessary to change the privacy policy for legal or factual reasons, we will update this page accordingly. No changes will be made to the consent given by the user.

Social Media

Social media links

General information

We use links to refer to our social media sites. Unlike social media plugins, links do not lead to the social media platform finding out about your visit as soon as you access our site. However, like any link, they will result in your data being processed by the social media platform at the latest when you click on the link. As a rule, the social media platform will store cookies on your device or even save your usage behavior for your account, especially if you are logged in yourself. The social media platform can use your data to analyze your user behavior and use it for (interest-based) advertising. This may result in advertising being displayed to you inside and outside the social media platform. Please make it clear to yourself whether you want to accept this and only use a social media platform if you are sufficiently informed about the data processing there and agree to it (this applies in particular if you have not yet used it yourself) – we have attached links to the data protection declarations of the social media platforms.

Our site uses links to our presence on the LinkedIn social network of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, as a subsidiary of LinkedIn Corporation, 2029 Stierlin Ct. Ste. 200 Mountain View, CA 94043, USA.

It is just a normal link, so when you visit our site, Linkedin does not find out about your visit to our website. However, if you click on the link, you will be redirected to Linkedin, which will also tell Linkedin that you have visited our site.

As a result, your data may be transferred to the USA.

We have no knowledge of and no influence on the possible collection and use of your data by Linkedin after clicking on the link. For more information, please refer to Linkedin’s privacy policy at https://www.linkedin.com/legal/privacy-policy?_l=de_DE.

Security systems

We use the Wordfence security plugin from Defiant Inc, 1700 Westlake Ave N Ste 200, Seattle, WA 98109, United States, to prevent attacks on our website as part of our legitimate interest in a technically flawless online offering and its economically efficient and secure design and optimization in accordance with Art. 6 para. 1 lit. f GDPR.

Login attempts, logout requests, requests for suspicious URLs, changes to site content and password updates are recorded by the plugin and stored for a certain period of time in order to block mass requests and attacks on our website.

As a result, information about your use of this website (including your IP address) is transmitted to a server of our security plug-in in the USA.

However, we have ensured that your data is only transferred to the USA on the basis of a contract in accordance with the standard contractual clauses. According to the GDPR and the ECJ, this is a legal basis for the transfer of data to the USA. This applies in particular since the US Presidential Decree of 07.10.2022.

For more information on the use of your data by Wordfence, please refer to the privacy policy of our security plugin at https://www.wordfence.com/privacy-policy/. Our security plugin cannot be blocked, as it would then no longer be possible to protect our website.

Our current privacy policy applies 01.09.2025