1. Name and contact details of the controller and the company data protection officer

The controller responsible for data processing on this website (www.park-wirtschaftsstrafrecht.de or www.park-compliance.de) within the meaning of the General Data Protection Regulation (GDPR) is:

PARK | Wirtschaftsstrafrecht PartG mbB, Rheinlanddamm 199, 44139 Dortmund, Germany
E-mail: kanzlei@park-wirtschaftsstrafrecht.de
Tel. +49 231 9580680
Fax +49 231 95806899

The company data protection officer at PARK | Wirtschaftsstrafrecht. can be contacted at the above address with the addition “For the attention of the data protection officer” or at datenschutz@park-wirtschaftsstrafrecht.de.

2. Processing of personal data and the type and purpose of its use

When you visit our websites www.park-wirtschaftsstrafrecht.de and www.park-compliance.de, the browser used on your device automatically sends information to our website server. This information is temporarily stored in a so-called log file.

The following information is collected without your intervention and stored until it is automatically deleted (after 30 days):

• IP address of the requesting computer,
• Date and time of access,
• Name and URL of the file accessed,
• Amount of data sent in bytes,
• Website from which access is made (referrer URL),
• Browser used and version,
• HTTP protocol, and
• status code

We process the aforementioned data for the following purposes:

• Ensuring smooth connection establishment to the website,
• Ensuring comfortable use of our website,
• Evaluation of system security and stability, and
• for other administrative purposes.

The legal basis for data processing is Art. 6 (1) (f) GDPR. Our legitimate interest follows from the purposes listed above for data collection. Under no circumstances do we use the collected data for the purpose of drawing conclusions about your person. Unless expressly stated, your data will not be transferred to third countries.

3. Contact

If you contact us using the contact details provided here, e.g. by e-mail (for contact via Microsoft Teams, see section 5), we will use the personal data you provide in the message to respond to your enquiry. If your enquiry relates to an assignment (pre-contractual contract initiation), we will process your data in accordance with Art. 6 (1) (b) GDPR. If a client relationship is established, you will receive separate information about the processing of your data in our law firm. In other cases, we process your data in accordance with Art. 6 (1) (f) GDPR, as responding to incoming enquiries constitutes a legitimate interest within the meaning of the aforementioned provision.

4. Cookies

We use cookies on our website. These are small files that your browser automatically creates and that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause any damage to your device and do not contain viruses, Trojans or other malware. Information relating to the specific device used is stored in the cookie. However, this does not mean that we immediately become aware of your identity. The use of cookies serves, on the one hand, to make the use of our website more pleasant for you. We use so-called session cookies (“php session ID cookie”) to recognise that you have already visited individual pages on our website. These are automatically deleted when you leave our site. In addition, we also use temporary cookies to optimise user-friendliness, which are stored on your device for a specific period of time. If you visit our site again to use our services, it will automatically recognise that you have already been with us and what entries and settings you have made so that you do not have to enter them again. The data processed by technically necessary cookies is necessary for the purposes mentioned to safeguard our legitimate interests and those of third parties in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. The legal basis for non-technically necessary cookies is Art. 6 para. 1 sentence 1 lit. a GDPR (consent). You can revoke your consent to cookies in the Cookie Centre.

Most browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your computer or so that a message always appears before a new cookie is created. However, completely deactivating cookies may mean that you cannot use all the functions of our website.

5. Plugins and Tools

Google
We have integrated the external map service “Google Maps” from “Google” into our websites. “Google Maps” enables the convenient use of the map function on our website. When using the map function, information stored on users’ end devices is also processed. When visiting the website, “Google” receives information that users have accessed the corresponding subpage of our website. In addition, access data such as the IP address, browser information, the previously visited website and the date and time of the server request are transmitted to Google. This occurs regardless of whether Google provides a user account through which users are logged in or whether no user account exists. If users are logged in to Google, the user data is directly assigned to the respective Google account. Google stores the usage data as usage profiles and processes it for its own purposes of statistical analysis and online advertising, regardless of whether a user account exists with Google.

Legal Basis:
Google Maps is deactivated when you visit our website. Personal data is only processed once you have actively consented to this. Data processing is therefore based on your consent in accordance with Art. 6 (1) (a) GDPR, provided that you have given your consent via our banner. You can revoke your consent at any time. Please make the appropriate settings via our banner.

Recipients:
Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland and Google, LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

Storage period:
We do not store any data when using Google Maps. For more information on how long Google stores data, please visit https://policies.google.com/privacy.

Third country transfer:
Consent to Google also includes consent to the possible transfer of data to the USA. The use of Google requires third country transfer. If you do not wish to consent to third country transfer, you must deselect Google. On 10 July 2023, the European Commission adopted the adequacy decision for the EU-U.S. Data Privacy Framework (successor to the Privacy Shield). The adequacy decision now serves as the basis for data transfers to certified organisations in the USA. Google is one such certified organisation.

YouTube
Videos can be played directly on our website via plug-ins from the streaming platform “YouTube.de” or “YouTube.com” integrated into our website. When using the streaming function, information stored on users’ end devices is also processed. The purpose of data processing is to embed visual content (“videos”) that we have published on “YouTube.de” or “YouTube.com” on this website. The videos are embedded in “extended data protection mode”, which means that no data about users is transferred to “YouTube” if no videos are played. When videos are played on our website, YouTube receives the information that the corresponding subpage of our website has been accessed. In addition, access data, in particular the IP address, browser information, the previously visited website and the date and time of the server request, is transmitted to Google. This occurs regardless of whether YouTube provides a user account through which users are logged in or whether no user account exists. If users are logged in to Google, the user data is directly assigned to the respective YouTube account. YouTube stores the data as usage profiles and processes it independently of the existence of a user account with Google for statistical analysis and advertising purposes.

Legal basis:
YouTube is deactivated when you visit our website. Personal data is only processed once you have actively consented to this. Data processing is therefore based on your consent in accordance with Art. 6 (1) (a) GDPR, provided that you have given your consent via our banner. You can revoke your consent at any time. Please make the appropriate settings via our banner.

Recipient:
YouTube LLC (Hauptgeschäftssitz in 901 Cherry Avenue, San Bruno, CA 94066, USA; Verantwortlicher innerhalb der EU: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland; Google, LLC 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.

Storage period:
We do not store any data when using YouTube. For more information on the storage period for YouTube, please visit https://policies.google.com/privacy.

Third country transfer:
Consent for YouTube also includes consent to the possible transfer of data to the USA. The use of YouTube requires third-country transfer. If you do not wish to consent to third-country transfer, you must deselect YouTube. On 10 July 2023, the European Commission adopted the adequacy decision for the EU-U.S. Data Privacy Framework (successor to the Privacy Shield). The adequacy decision now serves as the basis for data transfers to certified organisations in the USA. As a subsidiary of Google, YouTube is such a certified organisation.

Microsoft Teams
Microsoft Teams is part of Microsoft Office 365. Microsoft Office 365 is software from Microsoft Ireland Operations Limited. Microsoft Teams is a productivity, collaboration and communication platform for individual users, teams, communities and networks that is used across business associations. Among other things, it includes a video conferencing function. On our website, you have the option of contacting us via Microsoft Teams (chat and video conferencing function).

When you contact us via Microsoft Teams, we use the personal data you provide in your message to respond to your enquiry. We also process the following personal data:

• User and profile data (e.g. first name, surname, user name, email address),
• metadata (e.g. IP address, time of participation, log files, log data, telephone number when dialling in by telephone, etc.),
• · screen content, presentation material and other documents that may be used during the online meeting when sharing the screen.
• The personal data you provide via the chat function will be processed in order to display it in the online meeting and, if necessary, to log it. In order to enable the display of video and the playback of audio, the data from the microphone of your end device and from any video camera of the end device will be processed for the duration of the meeting. You can switch off or mute the camera or microphone yourself at any time via the Teams applications.

Legal basis:
If your enquiry relates to an assignment (pre-contractual contract initiation), we process your data in accordance with Art. 6 (1) (b) GDPR. If the client relationship is established, you will receive separate information about the processing of your data in our law firm.

In other cases, we process your data in accordance with Art. 6 (1) (f) GDPR, as responding to incoming enquiries constitutes a legitimate interest within the meaning of the aforementioned provision.

The legal basis for data processing when conducting online meetings is Art. 6(1)(a) GDPR, provided that you have given your consent to participate in an online meeting. Without your voluntary consent, which can be revoked at any time, no online meeting will take place and we will resort to alternative forms of communication.

Online meetings will only be recorded and photos will only be taken if the data subject has given their consent at the beginning of the event, Art. 6 (1) (a) GDPR.

Recipient:
Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland

Storage period:
Login data and IP addresses will be deleted after 180 days at the latest. We also refer to section 3 regarding the storage period. Further information can be found at https://learn.microsoft.com/de-de/microsoftteams/teams-privacy.

Third country transfer:
Data processing with Office 365 takes place on servers in data centres in the European Union (EU) in Ireland and the Netherlands. Data processing outside the EU does not take place as a matter of principle. However, we cannot rule out the possibility that data may be routed via Internet servers located outside the EU. This may be the case in particular if participants in “online meetings” are located in a third country. However, the data is encrypted during transport via the Internet and is therefore protected against unauthorised access by third parties.

6. Applicants

Purposes and legal basis of processing:
Your data will be processed exclusively for the purpose of handling the application process and assessing your suitability for the advertised position. The legal basis for this processing is Art. 6 (1) (b) GDPR. If you have applied on your own initiative, the processing will also be carried out on this legal basis, as we process your data to assess your suitability for possible employment.

Categories of data processed:
We process the data you provide to us as part of your application, in particular:

• Contact details (name, address, e-mail address, telephone number)
• Application documents (CV, references, qualifications)
• Answers to questions from the application process.

Storage period and deletion:
Your application documents will be deleted after completion of the application process (rejection or recruitment). This will take place no later than six months after completion of the process, unless you have consented to longer storage. This period serves to fulfil our obligations to provide evidence in the event of legal claims under the General Equal Treatment Act (AGG).

Voluntary nature and revocation:
The provision of your data is voluntary. However, the provision of the data required for the application is a prerequisite for the application process to be carried out. If you do not consent to longer storage, this will not affect your current application.

7. Recipients of the data

We only pass on your personal data to third parties if:

• you have given your express consent in accordance with Art. 6 (1) (a) GDPR,
• the disclosure is necessary for the assertion, exercise or defence of legal claims pursuant to Art. 6 (1) (f) GDPR and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,
• there is a legal obligation to disclose the data in accordance with Art. 6(1)(c) GDPR, and

this is legally permissible and necessary for the processing of client relationships with you in accordance with Art. 6 (1) (b) GDPR.

8. Data subject rights

You have the right:

• request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, deletion, restriction of processing or objection, the existence of a right of appeal, the origin of your data, if it was not collected by us, and the existence of automated decision-making, including profiling and, if applicable, meaningful information about its details;
• to request the immediate correction of inaccurate or incomplete personal data stored by us in accordance with Art. 16 GDPR;
• to request the erasure of your personal data stored by us in accordance with Art. 17 GDPR, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;
• pursuant to Art. 18 GDPR, to request the restriction of the processing of your personal data if you dispute the accuracy of the data, the processing is unlawful but you oppose its erasure and we no longer need the data, but you need it for the establishment, exercise, or defense of legal claims, or you have objected to the processing pursuant to Art. 21 GDPR;
• pursuant to Art. 20 GDPR, to receive your personal data that you have provided to us on the basis of a contract or consent and which is processed using automated procedures in a structured, commonly used and machine-readable format or to request its transfer to another controller;
• pursuant to Art. 7(3) GDPR, to withdraw your consent at any time with effect for the future. The lawfulness of the processing of your data until withdrawal remains unaffected by this; and
• in accordance with Art. 77 GDPR, to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our law firm’s registered office (State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia, Kavalleriestr. 2-4, 40213 Düsseldorf, Tel.: +49 (0) 211/38424-0, Fax: +49 (0) 211/38424-999, Email: poststelle@ldi.nrw.de).

9. Right to object

If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, provided that there are reasons for this arising from your particular situation or the objection is directed against direct marketing. In the latter case, you have a general right of objection, which we will implement without you having to specify a particular situation.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims. If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes.

If you wish to exercise your right of withdrawal or objection, simply send an email to info@park-wirtschaftsstrafrecht.de

10. Data security

For security reasons and to protect the transmission of personal data, we use the widely used SSL (Secure Socket Layer) procedure in conjunction with the highest level of encryption supported by your browser when you visit our website. This is usually 256-bit encryption. You can tell whether an individual page of our website is being transmitted in encrypted form by the closed display of the key or lock symbol in the status bar of your browser and the character string “https://”. We also use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

11. Current status and changes to this privacy policy

This privacy policy is currently valid and was last updated in September 2025. Due to the further development of our website and offers on it, or due to changes in legal or regulatory requirements, it may be necessary to amend this privacy policy.

12. Applications

I hereby voluntarily consent to my application data, including my contact details, my CV, and my references, being included in the applicant pool of the PARK | Wirtschaftsstrafrecht PartG mbB law firm. The purpose of this processing is to contact me about future job openings that match my profile and qualifications. I understand that this consent is voluntary and that I can revoke it at any time with future effect without giving reasons. I can revoke my consent by sending a simple email to datenschutz@park-wirtschaftsstrafrecht.de or by post. The data in this applicant pool will be stored for a maximum of 12 months. After this period or after revocation of my consent, my data will be deleted immediately. The legality of the processing carried out up to the time of revocation remains unaffected. I have read the data protection information for applicants and understood my rights (in particular the right to information, correction, deletion, and objection).