Privacy Policy

1. Contact person, general information and terminology

Person in Charge

Responsible within the meaning of Art. 4 sentence 7 GDPR
Kilian Kilian & Partner mbB Patent Attorneys
Represented by Christoph Kilian
Zielstattstraße 23a
D-81379 München
Deutschland
Tel: +49 89 780 72 99 – 0
Fax: +49 89 780 72 99- 12
E-mail: info@kilian-patent.de

General information and terminology

Personal data

Personal data include all information related to an identified or identifiable natural person (‘the data subject’); an identifiable person is one who can be identified, directly or indirectly. All it takes is an assignment to an identifier such as a name or pseudonym, to an identification number, to location data or to an online identifier. However, special characteristics such as the expression of physical, physiological, genetic, psychological, economic, cultural or social identity suffice.

This includes, for example, name, address, telephone number, e-mail address, but also the IP address, even if it is assigned to a certain person only indirectly or temporarily.

Inventory data are personal data that are required for the establishment and content of or alteration of a legal relationship such as name, address or telephone number. Usage data and traffic data are personal data on the use of Internet sites such as IP address and information about the browser used. Content data is data concerning the content of a communication.

Browser

A browser is a computer program for displaying web pages. Well-known browsers are Internet Explorer, Google Chrome, Firefox and Safari.

Webfonts

Web fonts are fonts for the uniform presentation of the website. A web font can be loaded into the browser and then used as a system font (font of your operating system). The webfont is either already present in your browser; if not, it can usually be downloaded from the respective website or another server. If a browser does not support webfonts, a default font is used; this can lead to undesirable behavior of the design in appearance.

Hyperlinks and external references

Hyperlinks (colloquially a link) are a cross-reference in a document. They are comparable to references in a printed document; However, unlike in a book, you can call up these cross-references by clicking on the link. Typical are references in a web document like this one. References can link multiple documents and websites from different providers. In their entirety, these references reflect the World Wide Web (WWW). Internal hyperlinks link several text passages or documents under one domain. External hyperlinks lead to servers of other providers.

The destination of the hyperlink can be viewed by your browser. Please inform yourself about this in the manual of your browser; In many web browsers it is sufficient if you cross the hyperlink without clicking with the mouse to display the specific link. Please note: Other privacy policies may apply on other web servers

Embed foreign content

Sometimes it may be useful to embed content from other websites in your own website.

Technically, this works, for example, by inline frames (short: IFrames). This displays other web content as stand-alone documents in a defined area of the browser, the browser address line only shows the address of the surrounding page. Parts of our website are embedded as a technical framework (IFrame). Similarly, this also works with applications that can be integrated via external servers on our website. This is useful, for example, when retrieving videos hosted by other providers such as YouTube or Vimeo.

Cookies (data files)

A cookie is a small data file that contains a string that is generated and stored on your device while visiting our website (eg desktop PC, smartphone or tablet). A cookie can only contain the information that we send to your client; Further data on your device can not be extracted. With the help of these cookies, your device is – but not necessarily its users – recognizable.

There are different types of cookies:

Transient cookies are automatically deleted when the browser is closed. An example of transient cookies are session cookies. Session cookies contain a randomly generated, unique identification number. On the basis of this, our server can recognize whether the user has already visited pages of the website during the respective “session”. They are usually automatically deleted after the session has ended. Alternatively, the session ID can be stored on the server or transmitted in Uniform Resource Identifier (URI).

Persistent cookies are stored on the client for a specific period of time. A previous visit to the website will be recognized by the cookie and the previous settings will be retained.

The use of cookies can be limited or blocked completely in the security settings of your browser. You can configure your browser in such a way that you reject cookies, accept cookies or decide on acceptance in individual cases. The cookie settings vary depending on the browser you are using. Cookies can be deleted at any time. Please refer to the user manual of your browser or contact the manufacturer of the browser.

2. Data processing operations

Provision of the website

Already at the first call of our web pages your web browser transmits usage data to our web server. This is the only way our web server can display the web page to your web browser. These usage data are contained in the HTTP / S header, are automatically sent by you and used during the duration of the page call. They include, among others:

  • Date, time and duration of the call
  • Name of the retrieved web page or file
  • Message about successful retrieval (HTTP status code)
  • Referrer URL (previously visited page)
  • Browser type including version, language and operating system
  • Resolution of the monitor
  • IP address and the requesting provider
  • Time Zone Difference to Greenwich Mean Time (GMT)
  • transferred amount of data

Further information about the HTTP header can be found on Wikipedia as well as in the specification RFC 2616, there in chapter 14. Legal basis is Art. 6 para. 1 sentence 1 lit. b and f GDPR. Without usage data, it is not possible to display the website on your browser. The above-mentioned data serve the following purpose:

  • Establishment of the connection to the website
  • Evaluation of system security and stability
  • Administrative purposes

Our websites are stored at a hosting service provider. This covers infrastructure and platform services, computing capacity, storage space and database services, additional security, including technical maintenance. This ensures the accessibility of our website.

We do not store server log files beyond the time of the delivery process.

Storage of cookies

We store cookies.

Legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR. Some cookies are stored only with your explicit consent; In these cases, the legal basis is Art. 6 para. 1 sentence 1 lit. a) GDPR.

Cookies also serve the purpose of personalizing the use of the website. For example, settings already made must not be entered again when you visit again. The data processed by cookies are required for the user-specific design of the website and for its optimization. Predominant interests or fundamental rights and fundamental freedoms of third parties are not apparent.

Cookies can also be used to statistically record the use of the website and to evaluate it for the purpose of optimization. The number of visitors to the website and the frequency with which each page is accessed will then reveal whether interest in other content of a comparable nature could exist. If processed for this purpose, we will inform you separately.

Contact

You can contact us by phone, fax, e-mail or other means of communication.

Your information is voluntary. With your voluntary information, we also process the time of the request and, for technical reasons, your usage data sent in connection with the respective means of communication, such as telephone number or e-mail address. Please note that we can not respond to your request without providing contact details.

The legal basis is Art. 6 para. 1 sentence 1 lit. b GDPR, if you contact us as part of a contractual relationship or to initiate a contract. In all other cases, we process your data based on our legitimate interest in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.

The purpose of the data processing is the individual communication with you, for the contract initiation or execution or the other processing of your request. Our legitimate interest is to process your request, depending on the content and purpose of the message you submit.

The personal data collected by us in connection with your contact will be deleted after your request for deletion, after revoking the consent or after completion of the request you have made, as far as there are no statutory storage obligations or rights. In the latter case we limit the processing. The storage period ends at the latest after expiry of statutory limitation periods; this is calculated according to § 199 BGB.

Note on communication via e-mail

Despite extensive technical and organizational measures to protect your data, communication via e-mail has security gaps. If you want to provide confidential information, we advise you to encrypted transmission. For this purpose, we provide PGP as encryption technology, but also a document exchange server.

For our e-mail services, we use an external provider. This covers infrastructure and platform services, computing capacity, storage space and database services, additional security, including technical maintenance. This ensures our e-mail communication.

Document Exchange Server and eKKP Patent Renewal System

The use of our document exchange server and the eKKP Renewal system is voluntary. You can use additional functions on our website. Both are used for the secure exchange of files and information.

Communication with the server is SSL-encrypted.

Functions of the Document Exchange Server:
  • Individual access data (client or file specific)
  • Notification functions (notification emails for information about uploads, downloads, file deletions etc.)
  • Pooling (central access to individual files by several persons, meaningful for example with common applicants)
  • As an alternative to web browser access, WebDAV access with compatible applications can also be enabled.
Functions of the eKKP
  • Individual access data (client-specific)
  • Optional security methods: TAN procedure, access only via static IP address
  • Enter renewal instructions directly through the portal
  • Processing status of the protection rights extensions can be viewed, in particular payment status
  • Notification functions (notification e-mails for information / confirmation about given instructions)

Legal basis is Art. 6 para. 1 sentence 1 lit. b GDPR.

The purpose is platform-based communication with you. Our legitimate interest is in secure communication with our clients.

The storage of the data is governed by the respective mandate contract and the applicable tax retention periods.

Data transmission to third parties

We only transfer your personal data to third parties under the following conditions:

  • You have given your consent to this, Art. 6 para. 1 sentence 1 lit. a GDPR.
  • The transfer is required for the execution of a contract or the initiation of an agreement, Art. 6 para. 1 sentence 1 lit. b GDPR.
  • There is a legal obligation that we are subject to, Art. 6 para. 1 sentence 1 lit. c GDPR,
  • for the protection of vital interests of a natural person, Art. 6 para. 1 sentence 1lit. d GDPR,
  • The processing is necessary for the performance of a task which is in the public interest or in the exercise of official authority, provided that such has been entrusted to us, Art. 6 (1) sentence 1 lit. e GDPR.
  • Processing is necessary for the protection of our legitimate interests or a third party, unless the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data prevail, Art. 6 (1) sentence 1 lit. f GDPR. This includes, for example, the assertion, exercise or defense of legal claims.
Google Maps

As far as we use a map service, this is done as an extended website for displaying maps and routes as well as for route planning. We embed this application only with us. For technical reasons, usage data, including your IP address, are transmitted to a server of the provider for the use of the map service.

Legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR. The use of Google Maps pursues the purpose and our legitimate interest to visualize map-dependent information or describe routes with a simple map display.

Beyond the provision of the website, we do not store usage data for this application.

The provider of the mapping service described here is Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA, www.google.com. In third countries, ie countries outside the European Union, data protection rights comparable to EU data protection legislation may not apply. However, Google is subject to EU-US. Privacy Shield and the Swiss-U.S. Privacy Shield, which is to ensure a comparable protection. For more information about how to handle user data on Google, please see the Google Privacy Policy: https://www.google.de/intl/de/policies/privacy

jQuery

We use external code from the JavaScript framework “jQuery” – a free javascript library that provides enhanced functionality on our website. For this purpose, the scripts used (program routines) are partially downloaded by third-party servers. This happens the first time the web page is called, if the scripts are not already in your browser’s memory. The retrieval is made by servers of the jQuery Foundation.

Legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR.

The use of jQuery pursues the purpose and our legitimate interest in designing the website and loading required program routines faster from the network.

Beyond the provision of the website, we do not store usage data for this application.

The provider of the service described here is the jQuery Foundation. In third countries, ie countries outside the European Union, data protection rights comparable to EU data protection legislation may not apply.

Analysis of the website visitors(Tracking)

To analyze website visitors, we collect data that is processed in tables and graphics for better presentation.

Legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR.

The data processing for the analysis of the website visitors (tracking) takes place in the interest of a statistical collection of website visits and a needs-based design and continuous optimization of the website.

You can contradict this measure at any time (opt out).

In individual cases, we obtain a separate consent for data processing. In this case, you will receive a prior request for your consent (Opt In). The legal basis is then Art. 6 para. 1 sentence 1 lit. a GDPR.

The tracking method is described in more detail below

Tracking with Google Analytics

The analytics service Google Analytics works by means of pseudonymised usage profiles and cookies. The latter contain information about the use of this website including

  • Browser type/version
  • Operating System
  • Referrer URL (address of previously visited website)
  • Host name of the accessing computer (IP address)
  • Time of server request

The IP address is not merged with other data. It is anonymized, so that an assignment is no longer possible (IP masking). This will remove the last octet of the user’s IP address before using and saving it. This results in less precision in creating geographic reports and anonymizing the website user.

The linked data will be deleted automatically after 14 months at the latest. The deletion of data whose retention period has been reached is done automatically once a month.

This way you can prevent the evaluation

The storage of cookies can be prevented by settings of your browser. The collection of the data generated by the cookie and related to the use of the website as well as the processing of this data can be prevented by a plugin which can be retrieved under the following link (https://tools.google.com/dlpage/gaoptout?hl=de)

The registration can also be prevented by clicking on the following link. An opt-out cookie is set, which should prevent the future collection of data when visiting the website on this device, as long as the cookie is present on the device; if you want to delete the cookie and continue to prevent tracking, you must set it again:
Deactivate Google Analytics.

We follow the recommendations of the data protection authorities for the use of this web analysis service. For this we have also concluded a contract for order processing with the provider.

Google Analytics is a web analytics service provided by Google LLC, 1600 Amphitheater Parkway Mountain View CA 94043, USA (“Google”). The data is transmitted to a Google server in the USA. In third countries, ie countries outside the European Union, data protection rights that are comparable to EU data protection legislation may not apply. However, Google is subject to EU-US. Privacy Shield and the Swiss-U.S. Privacy Shield. This is to ensure a comparable protection. For more information about Google Terms of Use and Privacy, please visit: https://www.google.com/analytics/terms/de.html bzw. unter: https://www.google.com/analytics/learn/privacy.html.

3. Rights as Affected

As the person affected, you have the following rights with respect to the personal data concerning you:

  • Right to individual information about the personal data processed by us according to Art. 15 GDPR
  • Right to correction or completion according to Art. 16 GDPR
  • Right to cancellation according to Art. 17 GDPR
  • Right to restriction of processing according to Art. 18 GDPR
  • Right to object to the processing
  • Right to data portability according to Art. 20 GDPR
  • Right to revoke consent according to Art. 7 para. 3 DSGVO

In the event that you have given consent to the data processing, you can revoke them at any time.

In the case of processing the data on the basis of legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR you can object to the processing of personal data. Please tell us the reasons that arise from your particular situation, or the objection is directed against advertising and data analysis, Art. 21 GDPR.

In the latter case, those affected have a general right to objection that can be implemented without specifying a particular situation.

You can also complain to a data protection supervisory authority about the processing of your personal data. The supervisory authority of your usual place of residence or workplace or our company headquarters is responsible. These can be found here: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

4. Other

The declaration serves to comply with the statutory information requirements of Article 12 et seq. of the European General Data Protection Regulation (GDPR), which will apply from 25 May 2018.