Data protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the legal data protection regulations as well as this privacy policy. When you use this website, various personal data are collected. Personal data are data with which you can be personally identified. This privacy policy explains which data we collect and how we use them. It also explains how and for what purpose this happens. Please note that data transmission over the internet (e.g., when communicating via email) may have security vulnerabilities. A complete protection of the data from third-party access is not possible. Note on the responsible party

The responsible party for data processing on this website is:

VITAx Steuerberaterung
Sozietät
Chiemgaustraße 34a
81549 Munich
E-Mail: info@vitax.tax

The responsible party is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data (e.g., names, email addresses, etc.)

Retention period

Unless a more specific retention period is stated within this privacy policy, your personal data will remain with us until the purpose for processing the data no longer applies. If you submit a legitimate request for deletion or revoke your consent to data processing, your data will be deleted, unless we have other legally permissible reasons to store your personal data (e.g., tax or commercial retention periods); in the latter case, the deletion will occur once these reasons no longer apply..

General information on the legal grounds for data processing on this website

Where you have consented to data processing, we process your personal data based on Article 6(1)(a) GDPR or Article 9(2)(a) GDPR, if special categories of data are processed under Article 9(1) GDPR. In the case of explicit consent for the transfer of personal data to third countries, data processing is also based on Article 49(1)(a) GDPR. If you have consented to the storage of cookies or access to information on your device (e.g., via device fingerprinting), data processing also takes place on the basis of Section 25(1) TDDG. Consent can be withdrawn at any time. If your data is required for the performance of a contract or for the implementation of pre-contractual measures, we process your data based on Article 6(1)(b) GDPR. Furthermore, we process your data if required for the fulfillment of a legal obligation, based on Article 6(1)(c) GDPR. Data processing may also occur based on our legitimate interest under Article 6(1)(f) GDPR. The specific legal grounds applicable in each case will be explained in the following sections of this privacy policy.

Recipients of personal data

As part of our business activities, we work with various external entities. In some cases, it is necessary to transfer personal data to these external parties. We only share personal data with external entities when this is required for the performance of a contract, when we are legally obligated to do so (e.g., transferring data to tax authorities), when we have a legitimate interest in the transfer under Article 6(1)(f) GDPR, or when another legal basis permits the data transfer. When using data processors, we only share personal data of our customers based on a valid data processing agreement. In the case of joint processing, a joint processing agreement is concluded.

Revocation of your consent to data processing

„Many data processing operations are only possible with your explicit consent. You can revoke any consent already given at any time. The lawfulness of the data processing carried out up until the revocation remains unaffected by the revocation.

Right to object to data collection in special cases and against direct marketing (Article 21 GDPR)

If the data processing is based on Article 6(1)(e) or (f) GDPR, you have the right to object at any time, on grounds related to your particular situation, to the processing of your personal data; this also applies to profiling based on these provisions. The relevant legal basis for the processing can be found in this privacy policy. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims (objection under Article 21(1) GDPR). If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing purposes; this also applies to profiling if it is related to such direct marketing. If you object, your personal data will no longer be used for direct marketing purposes (objection under Article 21(2) GDPR).

Right to Lodge a Complaint with the Competent Supervisory Authority

In case of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the member state of their habitual residence, place of work, or the location of the alleged infringement. The right to lodge a complaint remains unaffected by other administrative or judicial remedies.

Right to Data Portability

You have the right to request the restriction of the processing of your personal data. You can contact us at any time to exercise this right. The right to restrict processing applies in the following cases:

If you dispute the accuracy of the personal data we hold about you, we generally need time to verify this. During the verification period, you have the right to request the restriction of the processing of your personal data.

If the processing of your personal data was or is unlawful, you may request the restriction of processing instead of deletion.

If we no longer need your personal data but you require it for the establishment, exercise, or defense of legal claims, you have the right to request the restriction of processing instead of deletion.

If you have lodged an objection pursuant to Article 21(1) GDPR, a balancing of interests must be carried out between yours and our interests. As long as it has not yet been determined whose interests outweigh, you have the right to request the restriction of processing your personal data.

If you have restricted the processing of your personal data, these data – except for their storage – may only be processed with your consent or for the establishment, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or a member state.

SSL/TLS Encryption

This site uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries you send to us as the site operator. You can recognize an encrypted connection by the fact that the browser’s address bar changes from „http://“ to „https://“ and the lock symbol appears in your browser bar. When SSL/TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Contact Form

If you send us inquiries via the contact form, the information from the inquiry form, including the contact details you provide, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not share this data without your consent.

The processing of this data is based on Article 6(1)(b) GDPR, if your inquiry is related to the fulfillment of a contract or is necessary for pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries addressed to us (Article 6(1)(f) GDPR) or your consent (Article 6(1)(a) GDPR), if this was requested; consent can be revoked at any time.

The data you enter in the contact form will remain with us until you request deletion, revoke your consent to storage, or the purpose for data storage ceases to exist (e.g., after your inquiry has been processed). Mandatory legal provisions – particularly retention periods – remain unaffected.