Data Protection

Protecting your data and handling it responsibly is important to us.

1. The controller within the meaning of the General Data Protection Regulation (GDPR), other data protection laws applicable in the Member States of the European Union, and other provisions of a data protection nature is the law firm:

Name: Kanzlei Ding und Kollegen

Address: Frankfurter Straße 720, 51145 Cologne

E-mail: nanyanding2@gmail.com

2. Collection and storage of personal data as well as the nature and purpose of

its use

a) When visiting the website

When you access our website, the browser used on your device automatically sends information to our website's server. This information is temporarily stored in a so-called log file. The following information is recorded without any action on your part and stored until automatic deletion:

- IP address of the requesting computer,

- Date and time of access,

- Name and URL of the accessed file,

- Website from which access originated (referrer URL),

- Browser used and, if applicable, your computer's operating system as well as the

- Name of your access provider.

We process the aforementioned data for the following purposes:

- Ensuring a smooth connection setup for the website,

- Ensuring comfortable use of our website,

- Evaluating system security and stability, and

- For other administrative purposes. The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our

legitimate interest arises from the data collection purposes listed above. Under

no circumstances do we use the collected data for the purpose of drawing conclusions about

your person.

b) When using our contact form

To initiate a consultation, we offer you the opportunity to contact us via a form provided on the website. Your personal data will be used exclusively for the proper processing of your inquiry. Providing a valid email address is required so that we know the source of the inquiry and can respond to it. Additional information may be provided voluntarily.

Data processing for the purpose of contacting us is carried out in accordance with Art. 6(1)(a) GDPR based on your voluntarily given consent. Personal data collected by us through the contact form will be automatically deleted once your inquiry has been resolved, provided you do not request further processing of the matter.

3. Disclosure of Data

Your personal data will not be transmitted to third parties for purposes other than those

listed below. We only disclose your personal data to third parties if:

- you have given your express consent to do so pursuant to Art. 6(1)(a) GDPR,

- disclosure is necessary pursuant to Art. 6(1)(f) GDPR for the establishment, exercise,

or defense of legal claims and there is no reason to assume that you have an

overriding legitimate interest in the non-disclosure of your data,

- there is a legal obligation to disclose the data pursuant to Art. 6(1)(c) GDPR, and

- this is legally permissible and necessary pursuant to Art. 6(1)(b) GDPR for the

performance of contractual relationships with you.

4. Cookies

We use cookies to operate the website. These are files that your browser stores on your device when you visit our website. They serve to store data regarding your visit and to recognize you, as well as for statistical analysis, improvement, and ensuring the operation of our website. The legal basis for this is Article 6(1)(f) of the GDPR. Temporary cookies are deleted after you leave the website. Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or so that a notification always appears before a new cookie is created. Please note, however, that completely disabling cookies may prevent you from using all the functions of our website.

5. Analysis Tools

We use Google Analytics on our website, a web analytics service provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter referred to as "Google"). In this context, pseudonymized usage profiles are created and cookies (see Section 4) are used.

The information generated by the cookie regarding your use of this website—such as:

- browser type/version,

- operating system used,

- referrer URL (the previously visited page),

- hostname of the accessing computer (IP address),

- time of the server request,

is transmitted to a Google server in the USA and stored there. This information is used to evaluate website usage, compile reports on website activity, and provide other services related to website and internet usage for the purposes of market research and tailoring the design of these web pages to user needs. This information may also be transferred to third parties where required by law or where third parties process the data on our behalf. Under no circumstances will your IP address be combined with other data held by Google.

IP addresses are anonymized so that they cannot be linked to a specific user (IP masking). You can prevent the installation of cookies by adjusting your browser software settings accordingly; however, please note that doing so may mean you cannot fully utilize all the functions of this website. Furthermore, you can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=en). Further information regarding data protection in connection with Google Analytics can be found, for example, in the Google Analytics Help Center (https://support.google.com/analytics/answer/6004245?hl=de).

When using the Google AdWords Conversion Tracking service, a cookie is placed on your device if you arrived at this page via a Google advertisement. This serves to analyze and statistically evaluate website usage. The cookie remains valid for 30 days. No personal identification takes place; however, it is possible to observe whether the user arrived at the page via a Google advertisement. You can prevent this usage by refusing the placement of such cookies in your browser settings.

6. Social Network Plug-ins: Based on Art. 6 Para. 1 Sentence 1 lit. f GDPR, plug-ins, links, and buttons for social media websites are used for advertising and informational purposes. By integrating these elements, data is transmitted to the respective social media providers—potentially including transfers to third countries—when our page is accessed. This data is stored and processed by the providers; in particular, a provider may recognize your visit to our website if you are simultaneously logged into that social media provider's service. Even if you "share" posts from our website on a social network or otherwise pass them on (e.g., via a "Like" button), this information is transmitted to and stored by the provider, potentially being linked to your user profile. Social networks use this data for business purposes, marketing, advertising, and other objectives—specifically for creating profiles about you and delivering personalized advertising. For details regarding the purpose and scope of data collection and the further processing and use of data by Facebook, as well as your rights and privacy settings, please refer to Facebook’s privacy policy (https://www.facebook.com/about/privacy/).

7. Rights of the Data Subject

You have the right:

- to request information about your personal data processed by us, in accordance with Art. 15 GDPR. In particular, you may request information regarding the purposes of processing, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the source of your data (if not collected by us), as well as the existence of automated decision-making, including profiling, and—where applicable—meaningful information about the details thereof;

- to request the immediate rectification of incorrect personal data or the completion of personal data concerning you that is stored by us, in accordance with Art. 16 GDPR;

- to request the erasure of personal data concerning you that is stored by us, in accordance with Art. 17 GDPR, unless processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims;

- to request the restriction of processing of your personal data, in accordance with Art. 18 GDPR, if you contest the accuracy of the data, if the processing is unlawful but you oppose erasure, if we no longer need the data but you require them for the establishment, exercise, or defense of legal claims, or if you have objected to processing pursuant to Art. 21 GDPR;

- to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format, or to request its transmission to another controller, in accordance with Art. 20 GDPR;

- to withdraw your previously given consent at any time, in accordance with Art. 7(3) GDPR. This means that we may no longer continue the data processing based on this consent for the future, and

- to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. Generally, you may contact the supervisory authority at your habitual residence, your place of work, or the location of our firm’s registered office;

- to object to the processing of your personal data in accordance with Art. 21 GDPR, provided there are grounds arising from your particular situation or the objection is directed against direct marketing. In the latter case, you have a general right to object, which we will implement without requiring you to specify a particular situation. You may submit your objection informally by telephone, e-mail, fax, or by mail to our firm’s postal address listed at the beginning of this privacy policy.

8. Data Security

To ensure data security, the transmission of content on our website is encrypted using the SSL method in accordance with the state of the art. To safeguard the data, we and the commissioned service providers—with whom appropriate contractual agreements have been concluded—employ suitable measures reflecting the state of the art; these measures are designed, in particular, to restrict access to the

data and to ensure protection against alteration and loss, as well as to maintain confidentiality in line with current technical standards.

9. Status and Updating of this Privacy Policy

This privacy policy is current as of May 25, 2018. We reserve the right to update the privacy policy in due course in order to improve and/or adapt our data protection practices.