General Privacy Notice


The purpose of this data protection notice is to inform you about the processing of your personal data by Sheng Heng Partnerschaft von Rechtsanwälten und Lü shi mbB ("Sheng Heng Law Firm" or the "law firm"). This data protection notice is intended for any natural person (in particular, representatives, contact persons or employees of our clients or other business partners) with whom we have (or will imminently have) an attorney-client relationship, or a contract, service or business relationship or any other relationship of communication.

 

We take the confidentiality and the protection of your personal data very seriously. Therefore, we process your personal data only to the extent permissible under statutory provisions, in particular, under the EU General Data Protection Regulation ("GDPR") and the German Federal Data Protection Act (Bundesdatenschutzgesetz).

 

If you have any questions about this data protection notice or our policies regarding the processing of your personal data, you can always address any of the contact details below.

I. Responsibilities and contact details

The person responsible for processing your personal data (data controller) is:

 

Sheng Heng Partnerschaft von Rechtsanwälten und Lü shi mbB

Am Hauptbahnhof 10

60329 Frankfurt am Main

Germany

Our data protection officer is available by email at:

 

dataprotection@shenghengls.eu

 

or by mail at:

 

Sheng Heng Partnerschaft von Rechtsanwälten und Lü shi mbB

Datenschutzbeauftragter (Data Protection Officer)

Am Hauptbahnhof 10

60329 Frankfurt am Main

Germany

 

Telephone: +49 69 85093455

II. Processing of your personal data

Subject matter of our data processing are your contact details as well as, if applicable, other personal data required for the provision of our services or our communication with you.

 

We process your personal data to the extent that this is necessary for the purposes of the legitimate interests pursued by Sheng Heng Law Firm (Art. 6 (1) lit. f GDPR), in particular,

  • In order to enter into or execute engagement letters, contracts and other business relationships (including the processing of purchase orders, deliveries or payments) or in order to prepare or reply to quotation requests and to determine the conditions of the contractual relationship, namely with our clients, business partners, service providers or cooperation partners for whom you act as representative or employee, as the case may be;
  • For internal administrative purposes of the law firm (for instance, for accounting purposes);
  • In order to provide you – to the extent relevant for your business activity – with our client information, such as newsletters informing about current legal topics or events organized by our law firm;
  • For any other communication purposes;
  • In order to ensure IT security and IT operations at our law firm;
  • In order to engage service providers (for instance, external IT service providers) who support our business processes; or
  • In order to conduct compliance investigations in individual cases.

Moreover, personal data is processed in order to perform contracts entered into or to fulfil orders placed by individuals (natural persons) with whom we have business relationships (Art. 6 (1) lit. b GDPR).

 

If you choose not to provide us with your personal data, we are unable to perform the contractual relationship and/or cannot fulfil the above stated communication purposes.

 

In addition, we are in part required by law to process personal data (Art. 6 (1) lit. c) GDPR). For example, pursuant to the provisions of the German Anti-Money Laundering Act (Geldwäschegesetz, "GWG"), we are obliged to identify our clients and, hence, need you to provide us with the necessary information (Sec. 11 (6) sentence 1 GWG). According to Sec. 50 of the German Federal Lawyers' Act (Bundesrechtsanwaltsordnung), we are obliged under professional law (Berufsrecht) to keep and manage attorneys' reference files; to this purpose, we may use electronic data processing.

 

If you have not provided us with your personal data yourself, we received such data from our clients or business partners or obtained them from publicly available sources, in particular from company websites or industry directories.

III. Confidentiality and erasure of your personal data

Each of our employees as well as all staff members of third-party service providers who have access to personal data are obliged to treat such data confidentially.

 

We will delete your personal data after termination of our attorney-client, contract or service relationship or our contact if the storage is not necessary for the fulfilment of our (post) contractual obligations or the legitimate interests cited in this data protection notice anymore and if there are no statutory retention obligations. If there are statutory retention obligations, we will restrict the processing of the data.

IV. Disclosure of your personal data

We will transmit your personal data only on the basis of (and in accordance with) the statutory provisions or if and to the extent that you have consented to such transmission in the individual case.

 

To the extent required for the purposes outlined under II. above, your personal data may be disclosed to service providers within and outside the European Union (EU) who perform specific services for us such as, for example, IT services (processors). We will commit the service providers to secrecy; the service providers will process personal data only in accordance with our instruction.

 

In the course of our law firm's usual work processes and for the purposes specified under II. above, it is possible that we disclose your data to third parties within and outside the EU, for example to our business partners or to law firms with whom we work together on a client matter, to translators, opponents or to other third parties.

 

In addition, we can – to the extent legally permissible – disclose your data to authorities (such as social security institutions, tax authorities or law enforcement agencies), public register and domestic and foreign courts in order to comply with statutory duties or in order to act in the interests of our law firm. This may include foreign authorities and courts.

 

Countries located outside the EU may not have data protection laws and regulations comparable to the ones applicable in the EU. To the extent that no statutory level of security comparable to the European data protection laws exists in such countries, we will adopt appropriate measures to ensure that your personal data will be adequately protected in these countries. In particular, we may apply the standard contractual clauses published by the European Commission. You may contact our data protection officer for further information, and, in particular, request inspection of the contracts concluded.

V. Your rights

Subject to the statutory requirements, the fulfilment of which must be assessed on a case-by-case basis, you have the right to receive information about your personal data, to require rectification or erasure of your personal data or the restriction of the processing and to receive your personal data in a structured, commonly used and machine-readable format (data portability).

 

Under the statutory requirement, the fulfilment of which must be assessed on a case-by-case basis, you also have the right to object to the processing of your personal data.

 

To the extent that we process your personal data in order to inform you about our advisory services and current developments to the extent this is relevant for your business activity, you can object to a processing of your personal data at any given time and without stating any reasons.

 

Furthermore, with respect to the processing of your personal data, you are entitled to contact a supervisory authority regarding your complaint.

Update: February 2019