Data protection information

With the following information, we would like to give you an overview of the processing of your personal data by our company and the rights arising for you from the GDPR.

1. Data processing controller and data protection officer

The controller responsible for data processing is

ORTHPARTNERS Rechtsanwaltsgesellschaft mbH & Co. KG
Breite Straße 3
40213 Düsseldorf

Phone: +49 211 955 869 - 0
E-mail: datenschutz@orthpartners.com

If you have any questions, requests or concerns regarding data protection, please contact our data protection officer at the above address or by e-mail at datenschutz@orthpartners.com.

1. Information on the web host/location of the web pages and display of fonts:

The websites are hosted by:
Neue Medien Münnich
Hauptstraße 68
D-02742 Friedersdorf
Phone +49 35872 353-10
Fax +49 35872 353-30

This site uses so-called Google Fonts, which are provided by Google, for the uniform display of fonts. Google Fonts are installed locally. There is no connection to Google servers. Further information on Google Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://policies.google.com/privacy?hl=de.

III. Use of the website

1. If you do not transmit any further information to us, but only visit our website, we only collect the personal data that your browser transmits to our server. These are

• Date and time of access;
• IP address of the user's device;
• Host name (Internet Service Provider or ISP) of the accessing computer;
• Website from which our website was accessed (referrer URL);
• Access to web pages via the website;
• Visited page on our websites:
• Message indicating whether the retrieval was successful;
• Amount of data transferred;
• information about the time and version of the browser used; and 
• Operating system of the user's device.

The data is also temporarily stored in so-called log files. This temporary storage is necessary for the course of a website visit in order to enable delivery of the website. For this purpose, the user's IP address must necessarily remain stored for the duration of the session. Further storage in log files takes place in order to ensure the functionality of the website and the security of the information technology systems (e.g. to detect attacks). The data is not analyzed for marketing purposes in this context.

2. Purposes of data processing and legal basis

Data processing in the context of the mere visit to the website is carried out for the purpose of pursuing our legitimate interests (legal basis Art. 6 para. 1 sentence 1 lit. f GDPR) in the provision of the content of our website accessed by you and to ensure the stability and security of our website.

3. Storage duration

We delete or anonymize your personal data as soon as it is no longer required for the purposes for which we collected or used it in accordance with the aforementioned purposes. With regard to the storage of data in log files, deletion or anonymization takes place after 14 days at the latest.

1. Data processing through the use of cookies and other tracking technologies

To improve your experience when visiting our website and to enable certain functions, we use cookies on various of our websites. These are small files that are automatically created by your browser and stored on your end device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause any damage to your end device and do not contain any viruses, Trojans or other malware.

Information is stored in these cookies that is generated in connection with the specific end device used. However, this does not mean that we obtain direct knowledge of your identity.

Some of the cookies we use are deleted again at the end of the browser session (so-called session cookies). Other cookies remain on your end device and enable us to recognize your browser the next time you visit our website (persistent cookies). The cookie data processed by us is deleted in accordance with the statutory provisions as soon as it is no longer required for the purpose for which it was collected or consent has been revoked, unless we are obliged or entitled to retain the data beyond this period due to legal obligations (e.g. retention periods under commercial or tax law) or to pursue legal claims or other legitimate interests. In this case, processing (as opposed to erasure) is restricted to these purposes in such a way that the data is blocked and not processed for other purposes. The duration of storage can be found in detail in our cookie policy and the information on third-party providers. 

You can determine yourself whether cookies can be set and retrieved using the settings in your browser. For example, you can completely deactivate the storage of cookies in your browser, restrict it to certain websites or configure your browser so that it automatically notifies you as soon as a cookie is to be set and asks you for feedback.

The following types of cookies are used on our website:

(Technically) necessary cookies
Functional and performance cookies
Advertising and targeting cookies

1. (Technically) Necessary cookies

Disclosure of personal data:

The respective cookie providers necessarily receive knowledge of the data collected by the respective cookies.

Data processing outside the European Union:

In cases where personal data is transferred to a third country, we have agreed EU standard contractual clauses with the third-party providers. These can be viewed at: https://eur-lex.europa.eu/legal-content/DE/TXT/PDF/?uri=CELEX:32021D0914&from=DE.

Purposes of data processing and legal basis

Necessary cookies are absolutely essential in order to enable you to move around the website, use basic functions and ensure the security of the website; they do not collect information about you for marketing purposes or store which websites you have visited. The legal basis for this is § 25 para. 2 no. 2 TDDDG.

Consequences of non-provision

If you deactivate the use of necessary cookies, the full functionality and usability of the website can no longer be guaranteed.

2. Functional and performance cookies

Purposes of data processing and legal basis

Functional and performance cookies improve the performance of the website for the user (e.g. improve loading times) or provide the user with additional, non-essential functionalities (e.g. remembering login data). These cookies collect information about how you use the website. The user is not identified; the information is only used to find out what interests our users and how we can possibly optimize the website. The legal basis for this is your express and active consent in accordance with Section 25 (1) TDDDG. You can withdraw your consent at any time. This does not affect the lawfulness of the processing carried out on the basis of the consent until revocation.

3. Advertising and targeting cookies

Purposes of data processing and legal basis

Advertising and targeting cookies are used to offer the website user needs-based advertising on the website or offers from third parties and to measure the effectiveness of these offers. These cookies are used to show you personalized advertising. We can also collect data on how effective this advertising is. The legal basis for this is your express and active consent in accordance with Section 25 (1) TDDDG. You can withdraw your consent at any time. This does not affect the lawfulness of the processing carried out on the basis of your consent until you withdraw it.

Insofar as we use cookies that are not absolutely necessary for the operation of this website, we require your prior consent to the use of these cookies.

We obtain this consent via a cookie banner when you visit our site for the first time. Here you have the option of allowing or prohibiting the use of the cookies listed. You may not be able to use all the functions of our website if you do not give your cookie consent. The display of the website may also suffer as a result. 

You can view the cookies used on the Websites and reject each cookie category (except strictly necessary cookies) by clicking on the "Cookie Settings" button at the bottom of the page or manage the settings at any time via our Cookie Policy. 

1. Data processing for applications

We process personal data when you send us an application.

1. Processed data types

Various data may be processed as part of the application process:

Name, form of address, title, address, telephone number, fax number, e-mail address, date of birth, details of professional experience, metadata (e.g. IP address or hardware information), CV, references, certificate of good conduct, application photo, proof of qualifications, letter of motivation, previous employers and other data that you send us in connection with the application

2. Purposes of data processing and legal basis

The data you provide will be used to process the application, in particular to check the applicant's suitability for vacancies. The legal basis for this is generally § 26 BDSG para. 1 sentence 1 BDSG.

The legal basis for transmitted applicant photos and other data not related to the application, which you transmit to us in connection with the application, is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

3. Storage duration

The personal data will be stored for the duration of the application process. In the event of a rejection after the end of the application process, we store the data for 6 months from the date of sending the rejection letter in order to be able to respond to any queries regarding the application process and to be able to defend ourselves in the event of any allegations of a violation of the prohibition of discrimination under the Anti-Discrimination Act. If your application is successful, we will continue to process your data in connection with your employment.

VII Data processing when using Use of Microsoft 365

We use Microsoft 365, including the Office suite, Microsoft Teams, OneDrive and SharePoint applications, for internal and external communication and for managing and storing documents. Personal data is processed in compliance with the General Data Protection Regulation (GDPR).

When using Microsoft 365, personal data may be processed, in particular

• Microsoft Teams: communication content during online meetings, chat histories, video data
• OneDrive & SharePoint: Storage and shared editing of documents that may contain client or employee data
• Office applications (e.g. Word, Excel, Outlook): Processing of client documents, e-mail communication

This data is processed on the basis of Art. 6 para. 1 lit. b GDPR (performance of a contract) if it is necessary to process a mandate. In other cases, we base the processing on Art. 6 para. 1 lit. f GDPR (legitimate interest), in particular for internal administration and communication.

Data transfer to third parties and third country transfer

Microsoft Corporation, as the provider of Microsoft 365, is based in the USA. Data processing may therefore take place outside the EU/EEA. Microsoft relies on the EU Standard Contractual Clauses (SCCs) to ensure an adequate level of data protection.

You can find more information about Microsoft's privacy policy here:

https://privacy.microsoft.com/de-de

Storage duration

The data will only be stored for as long as is necessary for the respective purposes or for as long as there are statutory retention obligations.

VIII. Your rights

 As a "data subject", you have the following rights vis-à-vis us with regard to your personal data (Art. 15 ff. GDPR):

1. Right to information

The data subject has the right to obtain from us confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the information specified in Art. 15 GDPR.

2. Right to rectification

The data subject has the right to obtain from us without undue delay the rectification of inaccurate personal data concerning him or her and, where applicable, the completion of incomplete personal data (Art. 16 GDPR).

3. Right to erasure

The data subject has the right to obtain from us the erasure of personal data concerning him or her without undue delay where one of the grounds listed in Art. 17 GDPR applies, e.g. if the data is no longer required for the purposes pursued (right to erasure).

4. Right to restriction of processing

The data subject has the right to obtain from us restriction of processing where one of the conditions listed in Art. 18 GDPR applies, e.g. if the data subject has objected to processing, for the duration of the verification by the controller.

5. Right to object

The data subject has the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her. We will then no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims (Art. 21 GDPR). The revocation only takes effect in the future. Processing of personal data prior to the revocation is not affected by this.

6. Right to data portability

In accordance with Art. 20 GDPR, the data subject has the right to receive the personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller.

7. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, every data subject has the right to lodge a complaint with a supervisory authority if the data subject considers that the processing of personal data relating to him or her infringes the GDPR (Art. 77 GDPR). The data subject may exercise this right before a supervisory authority in the Member State of his or her habitual residence, place of work or place of the alleged infringement.

The contact details of the competent supervisory authority are

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia

Kavalleriestr. 2 - 4
40102 Düsseldorf
Tel.: 0211/38424-0
Fax: 0211/38424-999
E-mail: poststelle@ldi.nrw.de

1. Children

It is important to us to protect the online privacy of children. Our services and websites are not intended for children. If you believe that we have inadvertently received personal data from a child under the age of 16, please contact us at datenschutz@orthpartners.com.

1. Changes to our privacy notice and cookie policy

We undertake to post any changes to the Privacy Notice on this page, with a notice of the update to the Privacy Policy on the homepages of the Websites. You are responsible for ensuring that we have a current, active and deliverable e-mail address for you in the event of an e-mail notification, and that you visit the websites and this Privacy Notice regularly to keep yourself informed of any changes.

The date of the last revision of the data protection information is 01.04.2025.