Regulation (EU) 2016/79 of the European Parliament and of the Council of April 27, 2016 on the
protection of individuals with regard to the processing of personal data (General Data Protection
Regulation).
Personal data
any information relating to an identified or identifiable natural person [...]; (Article 4(1) of the
GDPR).
Responsible
the [...] legal person [...] who alone or jointly with others determines the purposes and means of the
processing of personal data [...]; (Article 4(7) of the GDPR).
Third party
means a natural or legal person, public authority, agency or other body, other than the data subject,
the controller, the processor and the persons who, under the direct responsibility of the controller
[...], are authorised to process the personal data; (Article 4(10). of the GDPR).
The terms used in this Privacy Policy are used, insofar as they are determined in Article 4 of the GDPR, according to the definition given there.
You can visit our website anonymously at any time. We respect your freedom to decide for yourself what
information you wish to provide. We therefore only process personal data if the processing is necessary (e.g.
to provide our services) and/or you have given us your consent. Personal data will be deleted as soon as
possible and never used or passed on for advertising purposes without your consent.
If the information here is not sufficient or not understandable, please do not hesitate to contact our data
protection officer.
Personal data such as name, address, telephone number, e-mail address or other individual details are kept
secure by us. This also includes that the persons who come into contact with such data at our company are
obligated to data protection and are instructed in it. Personal data that is not required to be made public by
law or contract will be treated confidentially. Confidential data will only be passed on to third parties if
such disclosure is necessary for the performance of agreed services or
it has been expressly agreed to in advance, or
we are legally obliged to do so.
4 General purpose and scope of processing
Personal data is collected for a specific purpose and sparingly.
We process personal data in order to
provide and enforce services offered in accordance with the agreement;
comply with legal or statutory obligations;
to defend ourselves against claims arising from (protective) violations of the law and to avert dangers;
to prevent the illegal or abusive use of our offer and to take action against it;
to optimize our offer, to adapt it to the customers' or users' wishes and to
to inform about changes, improvements, innovations of the service offer or about events, if and as
long as consent has been given.
We process the following personal data:
Name(s), address(es), communication address(es), contact(s), contract and usage data, if
you have provided us with these voluntarily (e.g. in the contact or newsletter subscription form),
they arise in the context of the performance of a contract and
to the extent and for as long as they are required for our respective range of services or your consent
has been given.
We process the IP address (Internet protocol address) or comparable data exclusively for technically necessary
or statistical purposes, error detection and correction, improvement of usability and prevention of misuse of
our offer.
This data is processed factually and organizationally separate from other data, does not contain any elements
with a direct personal reference and can generally not be associated with personal data of an individual user.
Personal data is processed exclusively for the purpose intended. Only if you have given us your prior consent
will we use data for other purposes or link it to other data.
5 Data storage - server log files
The provider* of the pages automatically collects and stores information that your browser automatically
transmits to us in so-called server log files. These are essentially:
Browser type and browser version
Operating system used
Referrer URL
Host name of the accessing computer
Time of the server request
IP address
*) The service provider who provides us with the technology to operate this website.
This data is not merged with other data sources.
The IP address is automatically anonymized after seven days (e.g. deletion of the last octet in the case
of an IPv4), unless the continued storage of individual IP addresses is necessary for a defense against
unlawful use.
The processing is carried out on the basis of Art. 6 (1) lit. f GDPR in order to ensure the security of our
systems and to prevent or take action against their improper use.
6 Third country
When communicating via the Internet, it cannot be guaranteed that the data will remain within the EU/EEA. Due
to the way the Internet works, it may be technically possible for a message to be routed via a server in an
insecure third country on its way from us to you or vice versa. As far as possible, we have therefore taken
appropriate technical and organizational measures to ensure the security of the processing.
7 Data security
We have taken technical and organizational measures to ensure that our data processing systems are protected
against unauthorized access. Personal data is also protected against unauthorized access by third parties.
Our Internet offering is located on servers in Germany, in some cases also in certified cloud environments.
Personal data is always transferred using secure protocols. To protect the security of your data during
transmission, we use state-of-the-art encryption methods (e.g. TLS) via HTTPS.
However, it must be borne in mind that data transmission via the Internet is not (absolutely) secure and it
cannot be ruled out that, for example, third parties may gain unauthorized knowledge of the transmitted data
during data transmission via the Internet.
Various security measures are used to protect data from loss, misuse and manipulation. If you have any
questions about this, please contact our data protection officer.
Incorrect or invalid data can be changed at any time.
Within the framework of the applicable legal provisions, you have the right at any time to have your personal
data stored with us changed, deleted or its processing restricted (blocked). If there is no legal or statutory
obligation to the contrary, data to be deleted will be deleted, otherwise blocked.
If personal data is no longer required for the purposes for which it was collected, it will be deleted by us,
unless there is a legal obligation to retain it, otherwise it will be blocked (unless you have also expressly
consented to a different type of use).
We carry out regular data backups; data is therefore not completely deleted until the next data backup.
Access to data that, instead of being deleted, is blocked can only be made within the framework of the
regulations that made blocking necessary (i.e., if data may not be deleted, for example, due to a tax retention
period, the blocked data may only be used for this tax purpose).
Deviating storage periods for newsletters (registration, consent and unsubscription) can be found under point
10 Newsletter.
9 Information, revocation and objection
Upon request, we will provide information at any time in accordance with Art. 15 i. In conjunction with Art.
12 (5) and (6) GDPR, we will provide information on whether and, if so, which personal data we process / have
processed.
Consent given can be revoked at any time without giving reasons with effect for the future.
If the processing is based on Art. 6 (1) lit. f GDPR (legitimate interest), you have the right to object in
accordance with Article 21 GDPR.
Please address information requests, revocation and objection declarations to:
Exercising the right of revocation or objection by telephone does not incur any charges other than those of
the basic rates.
10 Newsletter
We send subscribed newsletters to inform you about news.
If you would like to receive the newsletter offered on the website, we require an e-mail address from you as
well as information that allows us to verify that you are the owner of the e-mail address provided and that
you agree to receive the newsletter. Further data is not collected or only on a voluntary basis. We use this
data exclusively for sending and personalizing the requested information and do not pass it on to third parties.
After registration for the newsletter on the RAW Partner website, we send a confirmation e-mail to the e-mail
address provided (so-called double opt-in procedure). Only after clicking on the link contained in this e-mail
is the registration completed.
Consent to receive newsletters can be revoked at any time via a link at the end of each email or by sending a
message to info@raw-partner.de.
Registration, consent and unsubscription are processed in accordance with Art. 7 para. 1 i. V. m. Art. 5 para.
2 GDPR logged. According to established case law, the logs must be kept for three years after unsubscription
and are then deleted.
11 Web statistics (Matomo)
We use the software "Matomo", which is installed locally on our server, for the statistical evaluation of
website visits. A data transfer to third parties or outside the EU therefore does not take place. The software
sets/uses cookies (see point 13) on/from your computer, with which your browser can be recognized. The
following data is processed:
The anonymized IP address of the user (the last two bytes are deleted)
the page called up and the time of the call-up
if applicable, the page of origin (referrer)
browser type and version
operating system and version
screen resolution and window size
the (approximate) time spent on the website
the pages that are accessed from the page called up
Technical and organizational measures ensure that this statistical data cannot under any circumstances be
linked to or enriched with personal data, e.g. the entries made in forms. Neither profiling nor recording of
individual visits (visit logs) nor data export to/into customer databases or similar systems takes place.
We use the statistical data to obtain qualified information about the region from which the streams of visitors
come (in order to be able to offer further language options, for example), which pages are well visited or
which pages need to be improved (e.g. high number of so-called page breaks). Such statements are only
meaningful when larger numbers of visits are assessed in aggregate. We are not interested in the behavior of
individuals.
In order to be able to recognize typical movement patterns within the website, the individual page visits are
linked to a session cookie. To determine whether it is a first visit or a revisit, the software uses a
persistent cookie if your consent is given. You can revoke this consent with effect for the future by
deleting all cookies,
deleting the consent cookie,
removing any check mark in the following selection box (tick the box), or
activate the "Do-not-Track" signal in your browser, if it offers this function.
If your browser is configured to send a "Do-not-Track" signal, the statistics data will not be processed.
12 Using script and font libraries
In order to display our content correctly and graphically appealing across browsers, we use script and font
libraries on this website.
Script and font libraries are called up from our own server, so that no data is transmitted to third parties.
13 Cookies
Like many other websites, we also use so-called "cookies". Cookies are small text files that are stored on
your terminal device. Through this, we automatically receive the data stored in the cookie, such as a session
ID.
Cookies cannot be used to start programs or transfer viruses to a computer. Based on the information contained
in cookies, we can facilitate your navigation and enable the correct display of our web pages.
If you refuse the use of cookies in the cookie consent banner on our website, we will only use two technically
necessary cookies, one of which will store your selection in this regard. If you delete this cookie or have
completely disabled cookies via browser settings, you will have to make your selection in this regard again
each time.
Of course, you can also view our website without cookies. Internet browsers are regularly set to accept cookies.
In general, you can deactivate the use of cookies at any time via your browser settings. Please use the help
functions of your Internet browser to find out how to change these settings. Please note that individual
functions of our website may not work if you have completely disabled the use of cookies.
We also want to use cookies to measure when your browser last visited our site. This allows us to see if it is
a return visit (return visitors typically have a different, usually very specific, interest in content). We
also want to measure whether the content on our pages is interesting enough for you and whether or where we
should increase our engagement with it.
Please also note the information above under point 11 Web statistics.
We use the following cookies:
Cookie Name(s)
Purpose
Server
Runtime
_pk_testcookie
Matomo statistics
raw-partner.de
< 1 second
_pk_id.1.d2a4
Matomo statistics
raw-partner.de
13 months
_pk_ses.1.d2a4
Matomo statistics
raw-partner.de
30 minutes
PHPSESSID*
Security (Authentication)
raw-partner.de
Session
mtm_consent...*
consent status
raw-partner.de
1 year
* technically necessary cookie in the sense of § 25 para. 2 no. 2. TTDSG
You have the possibility to decide yourself at any time whether and which cookies are allowed or not allowed
on your computer. You can control this in the cookie consent banner or use the settings of your web browser to
do so. In the latter case, however, there may be functional restrictions or error messages in exceptional
cases if you disable cookies completely.
14 Data subject rights
You have the following rights as a "data subject" whose data we process:
Right to information according to Art. 15 GDPR,
Right to rectification according to Art. 16 GDPR,
Right to erasure ("being forgotten") according to Art. 17 GDPR,
Right to restriction of processing according to Art. 18 GDPR,
Right to data portability according to Art. 20 GDPR,
Right of objection according to Art. 21 GDPR.
Insofar as we process your personal data for certain purposes on the basis of your consent, you have the right
to revoke your consent at any time pursuant to Art. 7 (3) GDPR. Upon receipt of your revocation, we will
stop processing data for the purposes for which you gave us your consent. The lawfulness of the processing
prior to receipt of your revocation remains unaffected.
Right to object: If we process your personal data to protect legitimate interests within the
meaning of Article 6 (1) subparagraph 1 lit. f GDPR, you have the right under Article 21 (1) GDPR to
object to this processing on grounds relating to your particular situation. According to Art. 21 (2) GDPR,
you may object to processing for direct marketing purposes at any time without giving reasons. To exercise your
right of objection, it is sufficient to send us an informal message stating which data processing you object
to - and, if applicable, on what grounds.
Please address information requests, revocation and objection declarations to:
RAW Partner
Elsenheimerstrasse 43
80687 Munich
or by e-mail contact to: muc@raw-partner.de
Exercising the right of revocation or objection by telephone does not incur any charges other than those of
the basic rates.
15 Right of complaint
In case of complaints, data protection violations or if you are of the opinion that the processing of personal
data concerning you violates the GDPR, you can contact the specialist department(s), the management or our
data protection officer at any time.
effiZERT GmbH
Herr Michael Schlagintweit
Amselweg 3
D-82335 Berg
We will answer your request as soon as possible. Of course, you also have the option to complain to a
supervisory authority in accordance with Art. 77 GDPR. The supervisory authority responsible for us is:
On external social networks - for example Xing, LinkedIn, Kununu, Facebook, slide share and/or YouTube - we
may have created profiles that can be used in particular to find out about us and news there. These networks
are merely used by us; please note the terms of use and data protection conditions applicable there in each
case. We have no influence on the behavior of the individual providers.
Individual pages of our offer are linked to external social networks. The link is indicated by a clickable
button, but is not yet activated when the website is loaded. Only when you click on the button, the connection
to the external network is established.
This ensures that personal data such as your IP address only reaches the external network if you expressly
request this. Keep in mind that the IP address of your browser session can be linked to your own profile on the
respective social network if you are logged in there at that time. Likewise, your visit to our website may be
linked to your profile with the social network if it recognizes you via a social network cookie that was
previously set and is still present on your computer.
17 Links to external offers
We refer to external offers via links. These websites are not subject to our responsibility. Please note that
the offers to which we link here may change at any time without our intervention or knowledge.
At the time of the first linking, we have carefully checked the linked site for legal violations. At a later
point in time, however, a different result may be applicable. If you notice any (later) infringements, please
inform us (e.g. by e-mail to: muc@raw-partner.de). We will check this
immediately and either remove the offending reference or, if we consider the reference necessary, point out
the risk separately.
18 Automated decision-making
Automated decision-making, including profiling* with your personal data, does not take place at RAW Partner.
However, we do use so-called spam or junk filters in electronic communications to protect our systems. This
involves using information such as the sender, time, content, character set and origin to automatically sort
out unwanted e-mails. If you feel that your e-mails have not arrived or are being rejected, please contact us
via another communication channel (telephone, fax or letter).
*) Merging of individual data in order to gain insights into essential aspects of personality.
19 Changes to our privacy policy
We reserve the right to adapt this data protection declaration so that it always complies with the current
legal requirements or in order to implement changes to our services in the data protection declaration, e.g.
when introducing new services. The new data protection statement will then apply to your next visit.
20 Questions for the data protection officer
If you have any questions about data protection or believe that your data is not being processed correctly,
please write us an e-mail or contact our data protection officer directly:
effiZERT GmbH
Herr Michael Schlagintweit
Amselweg 3
D-82335 Berg
RAW-Partner appreciates your visit to the careers page and your interest in our company. The protection of
your privacy when processing personal data is an important concern for us, which we take into account in our
business processes.
We process personal data in the employment context exclusively for the following purposes with us:
to meet your request e.g. processing and distribution of your application internally within the company;
for administrative processing, e.g. invitation;
to track the status of your application
To communicate with you regarding matters relating to your application;
for contract preparation;
to comply with our legal and regulatory obligations, to respond to legal process or to provide
information to governmental agencies or other third parties, or to detect or prevent unlawful or
fraudulent activities and to protect your and our rights and the rights of others.
Legal bases for data processing are
Art. 6 para. 1 lit. b GDPR in conjunction with § 26 para. 1 BDSG (implementation of (pre-)contractual measures),
for data to be stored for longer than six months at your request (application pool), Art. 6 para. 1 lit. a GDPR (consent),
Art. 6 para. 1 lit. f GDPR in the event of legal defense.
3 Types of data and data subjects
We process the following types of personal data from you.
Salutation, first and last name/s
e-mail and communication addresses
All information that you provide to us in your letter of application, resume and copies of your
references
Records of your job interview and related impressions.
The person concerned is you as the applicant.
4 Recipients
Your personal data will be forwarded to the internal departments that deal with your application. As a matter
of principle, your data will not be passed on to third parties.
5 Third country
Your personal data will not be transferred to a third country or an international organization outside the EEA.
When communicating via the Internet, it cannot be guaranteed that the data will remain within the EU/EEA. Due
to the way the Internet works, it may be technically possible for a message to be routed via a server in an
insecure third country on its way from us to you or vice versa. As far as possible, we have therefore taken
appropriate technical and organizational measures to ensure the security of processing.
We recommend using the postal service for particularly sensitive data.
6 Storage period
The data will be stored for the duration of the application process and deleted after six months. In the event
of your consent, your data will be stored by us in the applicant pool for a maximum of 18 months.
7 Data subject rights
You have the following rights as a "data subject" whose data we process:
Right to information according to Art. 15 GDPR,
Right to rectification according to Art. 16 GDPR,
Right to erasure ("being forgotten") according to Art. 17 GDPR,
Right to restriction of processing according to Art. 18 GDPR,
Right to data portability according to Art. 20 GDPR,
Right of objection according to Art. 21 GDPR.
Insofar as we carry out processing for certain purposes of your personal data on the basis of your consent,
you have the right to revoke your consent at any time in accordance with Art. 7 (3) GDPR. Upon receipt of
your revocation, we will cease processing data for the purposes for which you gave us your consent. The
lawfulness of the processing prior to receipt of your revocation remains unaffected.
Right to object: If we process your personal data to protect legitimate interests within the
meaning of Article 6 (1) subparagraph 1 lit. f GDPR, you have the right under Article 21 (1) GDPR to
object to this processing on grounds relating to your particular situation. According to Art. 21 (2) GDPR,
you may object to processing for direct marketing purposes at any time without giving reasons. To exercise
your right of objection, it is sufficient to send us an informal message stating which data processing you
object to - and, if applicable, on what grounds.
Please address information requests, revocation and objection declarations to:
RAW Partner
Elsenheimerstrasse 43
80687 Munich
or by e-mail contact to: muc@raw-partner.de
Exercising the right of revocation or objection by telephone does not incur any charges other than those of
the basic rates.
8 Right of complaint
In case of complaints, data protection violations or if you are of the opinion that the processing of personal
data concerning you violates the GDPR, you can contact the specialist department(s), the management or our data
protection officer at any time.
effiZERT GmbH
Herr Michael Schlagintweit
Amselweg 3
D-82335 Berg
We will answer your request as soon as possible. Of course, you also have the option to complain to a
supervisory authority in accordance with Art. 77 GDPR. The supervisory authority responsible for us is:
The provision of requested data is necessary for an examination for an employment relationship. You are
therefore obliged to provide this personal data. Failure to provide it in whole or in part will result in the
invalidity of the application.
10 Automated decision-making
Automated decision-making including profiling* with your personal data does not take place at RAW Partner.
However, we do use so-called spam or junk filters in electronic communications to protect our systems. This
involves using information such as the sender, time, content, character set and origin to automatically sort
out unwanted e-mails. If you feel that your e-mails have not arrived or are being rejected, please contact us
via another communication channel (telephone, fax or letter).
*) Merging of individual data in order to gain insights into essential aspects of personality.
Privacy policy status: January 2023
Data protection information for communication partners
1 Responsible party
Responsible or service provider according to § 5 Telemediengesetz (TMG) is:
Rath, Anders, Dr. Wanner & Partner mbB Auditing company
Tax Consultants Auditors Lawyers
The personal data is used for communication with you. As a rule, this involves the performance or initiation
of a contract, i.e. answering your inquiries or carrying out communication in accordance with the contract.
In these cases (contractual communication), the legal basis of the processing is Art. 6 (1) lit. b GDPR.
In all other cases (voluntary communication), you share personal data voluntarily, i.e. with your consent
pursuant to Art. 6 (1) (a).
If you violate our rights or the rights of third parties during communication, we may process the data in
accordance with Art. 6 (1) (f) for legal defense.
3 Types of data and data subjects
The following personal data is processed during contractual communication: Name/s, contact details, server
and IP addresses as well as all information that you provide us with or that is necessary for performance.
Data subjects: You as our communication partner, other recipients and, if applicable, other persons through
whom we communicate with you.
In the case of voluntary communication, you yourself determine the scope of the personal data. You are also
free to use data that does not reveal your identity.
4 Recipients
All persons/entities involved in the communication according to its purpose. In e-mail communication, all
servers used in message transport receive at least sender and recipient information; however, the content is
only readable if it is not encrypted. This data is also received by all persons who also receive the e-mail
(AN, CC and BCC fields).
5 Third country
When communicating via the Internet, it cannot be guaranteed that the data will remain within the EU/EEA. Due
to the way the Internet works, it may be technically possible for a message to be routed via a server in an
insecure third country on its way from us to you or vice versa. As far as possible, we have therefore taken
appropriate technical and organizational measures to ensure the security of processing.
We recommend using the postal service for particularly sensitive data.
6 Data subject rights
You have the following rights as a "data subject" whose data we process:
Right to information according to Art. 15 GDPR,
Right to rectification according to Art. 16 GDPR,
Right to erasure ("being forgotten") according to Art. 17 GDPR,
Right to restriction of processing according to Art. 18 GDPR,
Right to data portability according to Art. 20 GDPR,
Right of objection according to Art. 21 GDPR.
Insofar as we process your personal data for certain purposes on the basis of your consent, you have the right
to revoke your consent at any time pursuant to Art. 7 (3) GDPR. Upon receipt
of your revocation, we will stop processing data for the purposes for which you gave us your consent. The
lawfulness of the processing prior to receipt of your revocation remains unaffected.
Right to object: If we process your personal data to protect legitimate interests within the
meaning of Article 6 (1) subparagraph 1 lit. f GDPR, you have the right under Article 21 (1) GDPR to object
to this processing on grounds relating to your particular situation. According to Art. 21 (2) GDPR, you may
object to processing for direct marketing purposes at any time without giving reasons. To exercise your right
of objection, it is sufficient to send us an informal message stating which data processing you object to - and,
if applicable, on what grounds.
Please address information requests, revocation and objection declarations to:
RAW Partner
Elsenheimerstrasse 43
80687 Munich
or by e-mail contact to: muc@raw-partner.de
Exercising the right of revocation or objection by telephone does not incur any charges other than those of
the basic rates.
7 Right of complaint
In case of complaints, data protection violations or if you are of the opinion that the processing of personal
data concerning you violates the GDPR, you can contact the specialist department(s), the management or our
data protection officer at any time.
effiZERT GmbH
Herr Michael Schlagintweit
Amselweg 3
D-82335 Berg
We will answer your request as soon as possible. Of course, you also have the option to complain to a
supervisory authority in accordance with Art. 77 GDPR. The supervisory authority responsible for us is:
You are responsible for providing us with your data. Answering an inquiry is only possible if we process your
data.
9 Automated decision-making
Please understand that we use a so-called spam or junk filter to protect our systems. This uses the sender,
time, content, character set and origin to sort out unwanted e-mails. If you feel that your e-mails have not
arrived or are being rejected, please contact us via another communication channel (telephone, fax or letter).
Privacy policy status: January 2023
Annex to the Client Agreement Data protection notice to clients
1 Responsible party
Responsible person or service provider according to § 5 Telemediengesetz (TMG) is:
Rath, Anders, Dr. Wanner & Partner mbB Auditing Company
Tax Consultants Auditors Lawyers
We process personal data exclusively for the purposes of
Execution and processing of the client relationship including correspondence,
Fulfillment of our contractual and legal obligations as tax advisors, auditors and attorneys,
processing within the scope of mutual claims arising from the client contract (e.g.: Invoicing, claims
for performance, remuneration and liability, etc.).
Legal bases for data processing are
Art. 6 para. 1 lit. b GDPR for the fulfillment of the mandate contract,
Art. 6 (1) lit. c GDPR for the fulfillment of the legal obligations to which we are subject as tax
consultants, auditors and lawyers,
Art. 6 para. 1 lit. f GDPR, insofar as the data processing is necessary for the protection of
legitimate interests of us or a third party,
Art. 6 (1) lit. a GDPR, insofar as you have given us your consent to process the personal data
relating to you for specific purposes.
4 Types of data and data subjects
We process the following types of personal data:
First and last name/s, title, if applicable.
Postal address/s
Telephone number(s) and, if applicable, fax number(s)
E-mail address/s
Company form
Tax number and identification number
Other information required for the appropriate execution of the mandate, such as
Tax-related information
Accounting data
Financial statements
5 Recipients
Personal data is only transferred to third parties on your behalf and with your consent. We pass on personal
data to the following recipients within the scope of the client relationship:
Tax authorities and courts
Social security institutions
Federal Gazette publishing house
Banks, credit institutions, insurance companies and professional associations
Order processors (e.g. computer centers, IT service providers, printing service providers, waste
disposal companies, etc.), whose services we only use insofar as they are obligated to maintain our
professional secrecy pursuant to Section 203 (3) of the German Criminal Code as a participating person
depending on the order, to other recipients that we agree with you in advance.
6 Third country
Data is only transferred to third countries (countries outside the EU or the European
Economic Area EEA) if this is necessary to execute the mandate agreement (e.g. payment orders) or if you have
given us your consent or if this is otherwise permitted by law. In this case, we take measures to ensure the
protection of your data, for example, through appropriate contractual arrangements. We only transfer data to
recipients who ensure the protection of your data in accordance with the provisions of the GDPR for
transfers to third countries (Art. 44 to 49 GDPR).
When communicating via the Internet, it cannot be guaranteed that the data will remain within the EU/EEA. Due
to the way the Internet works, it may be technically possible for a message to be routed via a server in an
insecure third country on its way from us to you or vice versa. As far as possible, we have therefore taken
appropriate technical and organizational measures to ensure the security of processing.
We recommend using the postal service for particularly sensitive data.
7 Storage period
We store the personal data for the duration of the statutory retention periods. As a rule,
this is 10 years plus a grace period of a further 4 years to cover cases of possible expiry suspension. After
14 years, we check whether there are reasons for further storage (e.g. ongoing proceedings).
8 Data subject rights
You have the following rights as a "data subject" whose data we process:
Right to information according to Art. 15 GDPR,
Right to rectification according to Art. 16 GDPR,
Right to erasure ("being forgotten") according to Art. 17 GDPR,
Right to restriction of processing according to Art. 18 GDPR,
Right to data portability according to Art. 20 GDPR,
Right of objection according to Art. 21 GDPR.
Insofar as we process your personal data for certain purposes on the basis of your consent, you have the right
to revoke your consent at any time pursuant to Art. 7 (3) GDPR. Upon
receipt of your revocation, we will stop processing data for the purposes for which you gave us your consent.
The lawfulness of the processing prior to receipt of your revocation remains unaffected.
Right of objection: If we process your personal data for the protection of legitimate
interests within the meaning of Art. 6 (1) subparagraph 1 lit. f GDPR, you have the right to object to this
processing on grounds arising from your particular situation in accordance with Art. 21 (1) GDPR. According
to Art. 21 (2) GDPR, you may object to processing for direct marketing purposes at any time without giving
reasons. To exercise your right of objection, it is sufficient to send us an informal message stating which
data processing you object to - and, if applicable, on what grounds.
Please address information requests, revocation and objection declarations to:
RAW Partner
Elsenheimerstrasse 43
80687 Munich
or by e-mail contact to: muc@raw-partner.de
Exercising the right of revocation or objection by telephone does not incur any charges other than those of
the basic rates.
9 Right of complaint
In case of complaints, data protection violations or if you are of the opinion that the processing of personal
data concerning you violates the GDPR, you can contact the specialist department(s), the management or our
data protection officer at any time:
effiZERT GmbH
Herr Michael Schlagintweit
Amselweg 3
D-82335 Berg
We will answer your request as soon as possible. Of course, you also have the option to complain to a
supervisory authority in accordance with Art. 77 GDPR. The supervisory authority responsible for us is:
Automated decision making including profiling* with your personal data does not take place at Rath, Anders,
Dr. Wanner & Partner mbB. However, we use so-called spam or junk filters in electronic communication to
protect our systems. Among other things, sender, time, content, character set and origin are used to
automatically sort out unwanted e-mails. If you feel that your e-mails have not arrived or are being rejected,
please contact us via another communication channel (telephone, fax or letter).
*) Merging of individual data in order to gain insights into essential aspects of personality.
RAW-Partner Cloud