Skip to content Skip to footer
HomePrivacy Policy

Privacy Policy

Close
Privacy Policy – KWS International
Legal Information

Privacy Policy

KWS International Steuerberatungsgesellschaft mbH
As of: March 2026
Legal basis: GDPR · BDSG · TTDSG
Scope: kws-international.de

1 Name and Contact Details of the Controller

This Privacy Policy informs you about the processing of personal data on the law firm website www.kws-international.de by:

Controller within the meaning of the GDPR

KWS International Steuerberatungsgesellschaft mbH

Kaufmannstraße 52, 53115 Bonn

Phone: +49 (0)228 63 2000

Fax: +49 (0)228 63 0854

E-Mail: info@kws-international.de

Website: www.kws-international.de

Data protection enquiries: To exercise your data protection rights (access, rectification, erasure, etc.), please contact info@kws-international.de. We will respond within one month of receipt (Art. 12(3) GDPR). For complex or numerous requests, this period may be extended by up to two further months; we will notify you in advance if this applies.

2 Hosting and Data Processing Agreements

This website is hosted by:

Hosting Provider

ALL-INKL.COM – Neue Medien Münnich

Owner: René Münnich

Hauptstraße 68, 02742 Friedersdorf, Deutschland

https://all-inkl.com

Our hosting provider processes data generated when visiting this website (in particular server logs and IP addresses) on our behalf. Processing takes place exclusively on servers located in Germany. A data processing agreement with ALL-INKL.COM is in place as required under Art. 28 GDPR. All processing takes place exclusively on servers located within Germany, under our instructions.

Further Processors

In addition to our hosting provider, we engage the following service providers as sub-processors. A data processing agreement compliant with Art. 28 GDPR is in place with each of them:

Cookie Consent Management

Really Simple Plugins B.V. (Anbieter von Complianz)

Dieselstraat 6, 7903 SG Hoogeveen, Niederlande (EU)

Data processed: Consent decisions, timestamps, anonymised IP address

Purpose: Legally compliant management of cookie consents pursuant to GDPR / TTDSG

Privacy policy: https://complianz.io/legal/privacy-statement/

3 Website Access / Server Log Files

Each time this website is accessed, your browser automatically transmits certain technical data to our server, stored temporarily in server log files. The following data is collected without any active input on your part:

  • IP address of the end device (anonymised after a short period)
  • Date and time of access
  • Name and URL of the page accessed
  • Referrer URL (website from which access was made)
  • Browser used, operating system and name of the access provider
Legal basis: Art. 6(1)(f) GDPR (legitimate interests). Our legitimate interests consist in maintaining stable website operations, upholding system security and enabling efficient technical administration.
Retention period: Server log files are automatically deleted after a maximum of 7 days. Longer retention applies only where a specific security incident requires further investigation.

4 Contact Form

This website provides a contact form through which you can contact us electronically. The form is provided using the WordPress plugin Contact Form 7.

Data entered into the contact form (at minimum your email address and message; additional details are voluntary) is used solely to handle your enquiry. Information collected via the contact form is not disclosed to third parties.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in handling incoming enquiries). Where your enquiry is directed towards establishing a professional engagement, Art. 6(1)(b) GDPR additionally applies.
Retention period: Contact form data is erased once your enquiry has been conclusively handled. Where no professional mandate results, data is deleted within three months of the final exchange. If a mandate is awarded, we retain the relevant data for up to ten years as required by German fiscal law (§ 147 AO — Fiscal Code; § 257 HGB — Commercial Code).

5 Cookies and Cookie Consent (Complianz)

What are Cookies?

Cookies are small text files stored on your device when you visit a website. They enable certain settings and data to be saved and reused on your next visit. Cookies cannot execute programs or transmit viruses.

Consent Management via Complianz

This website uses the WordPress plugin Complianz to manage cookie consents. Complianz displays a cookie banner on your first visit and stores your consent decision locally in a cookie on your device. Non-essential cookies are blocked by default at a technical level and activated only following your active, freely given consent. Setting such cookies prior to your consent is technically impossible — enforced at system level, not merely by policy.

You may withdraw or adjust your consent at any time with future effect by clicking "Cookie Settings" at the bottom of the page.

Legal basis: Art. 6(1)(c) GDPR in conjunction with § 25 TTDSG and Art. 6(1)(f) GDPR (legitimate interest in the legally compliant management of consents).
Retention period: The consent cookie is stored for a maximum of 12 months.

Cookie Categories

We distinguish the following categories. A complete, up-to-date overview of all cookies in use, including provider, purpose and retention period, is available at any time via our Cookie Settings (link in the footer).

Necessary

Technically Necessary Cookies

Essential for the operation of the website (e.g. session, cookie consent). Set without consent (§ 25(2) TTDSG). Retention: session or max. 12 months.

Optional

Functional Cookies

Enable enhanced functionality (e.g. language settings). Only set after your consent. Retention: max. 12 months.

Not used

Analytics Cookies

This website does not currently use analytics cookies (e.g. Google Analytics).

Not used

Marketing Cookies

This website does not use marketing cookies.

6 Google Maps

This website uses Google Maps to display interactive maps and provide directions. The service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Maps is only loaded on this website after your explicit consent via our cookie banner. Until you consent, a static preview image is displayed instead of the interactive map. Only after your consent does your browser establish a direct connection to Google's servers, enabling the map content to be transmitted directly from Google to your browser. In particular, your IP address and location information may be transferred to Google. We have no influence over the scope of data processed by Google.

Legal basis: Art. 6(1)(a) GDPR (your consent). You may withdraw your consent at any time with future effect.
Third-country transfer: Google is certified under the EU-US Data Privacy Framework (DPF) (European Commission decision of 10 July 2023), which ensures an adequate level of data protection.

Further information on data protection at Google: https://policies.google.com/privacy

7 Links to Social Networks (Facebook and Instagram)

This website contains links to the firm's profiles on the following social networks:

  • Facebook – Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Irland
  • Instagram – Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Irland

The links on this website are simple hyperlinks (no embedded plugins or social buttons with tracking functionality). Merely visiting this website does not result in any data being transmitted to Meta.

Only when you actively click one of these links and are redirected to Meta's platform can Meta collect your data. If you are logged into your Facebook or Instagram account at that time, Meta may be able to associate your visit with your profile. We have no influence over this process.

Legal basis for providing the links: Art. 6(1)(f) GDPR (legitimate interest in presenting the firm on social networks).

Privacy policies of Meta:
https://www.facebook.com/privacy/policy/
https://help.instagram.com/519522125107875

8 Disclosure of Personal Data

Your personal data is only disclosed to third parties if:

  • you have expressly consented pursuant to Art. 6(1)(a) GDPR,
  • disclosure is necessary pursuant to Art. 6(1)(f) GDPR for the establishment, exercise or defence of legal claims and no overriding interests worthy of protection on your part preclude this,
  • a legal obligation to disclose exists pursuant to Art. 6(1)(c) GDPR, or
  • it is necessary pursuant to Art. 6(1)(b) GDPR for the performance of a contract with you.

In all other cases, your personal data will not be disclosed to third parties without your explicit consent.

Where we engage service providers as data processors (e.g. hosting by ALL-INKL.COM), data processing agreements pursuant to Art. 28 GDPR have been concluded with them, ensuring that your data is processed solely in accordance with our instructions and only for the agreed purpose.

9 Links to External Websites

This website contains links to external third-party websites over whose content we have no control. Responsibility for the content of linked pages rests solely with the respective provider or operator. Linked pages were checked for possible legal violations at the time of linking; no unlawful content was apparent at that time. This Privacy Policy does not extend to linked external websites.

10 Your Rights as a Data Subject

To the extent your personal data is processed, you have the following rights. Click on a right to learn more:

Right of Access Art. 15 GDPR
You have the right to obtain confirmation as to whether we process personal data concerning you and, if so, to access that data together with details of processing purposes, categories of data, recipients, retention periods, the origin of the data and — where applicable — the existence of automated decision-making. This right may be restricted pursuant to § 57(1) of the German Tax Consultancy Act (Steuerberatungsgesetz — StBerG), which establishes mandatory professional confidentiality obligations for tax advisers.
Right to Rectification Art. 16 GDPR
You may request the immediate rectification of inaccurate personal data or the completion of incomplete personal data.
Right to Erasure Art. 17 GDPR
You have the right to request the erasure of your personal data, provided the legal requirements are met and no statutory retention obligations preclude this.
Right to Restriction of Processing Art. 18 GDPR
You may request restriction of processing if you contest the accuracy of the data, the processing is unlawful, we no longer need the data, or you have objected to processing.
Right to Data Portability Art. 20 GDPR
Where processing is based on your consent or a contract and is carried out by automated means, you may receive your data in a structured, commonly used and machine-readable format.
Right to Object Art. 21 GDPR
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Art. 6(1)(e) or (f) GDPR.
Withdrawal of Consent Art. 7(3) GDPR
You may withdraw a given consent at any time with future effect. The lawfulness of processing carried out prior to withdrawal is not affected. Withdrawal may be communicated informally by telephone, email, fax or post to the address stated above.
Right to Lodge a Complaint Art. 77 GDPR
If you believe that the processing of your personal data is unlawful, you have the right to lodge a complaint with the competent data protection supervisory authority:

State Commissioner for Data Protection and Freedom of Information NRW (LDI NRW)
Kavalleriestraße 2–4, 40213 Düsseldorf, Germany
Phone: +49 (0)211 38424-0 · Email: poststelle@ldi.nrw.de
www.ldi.nrw.de

11 Automated Decision-Making, Profiling and Data Protection Officer

No Automated Decision-Making or Profiling

This website does not carry out automated decision-making including profiling within the meaning of Art. 22 GDPR. No automated processing is undertaken that produces legal effects concerning you or similarly significantly affects you.

Data Protection Officer

Pursuant to § 38 of the German Federal Data Protection Act (Bundesdatenschutzgesetz — BDSG) in conjunction with Art. 37 GDPR, we are not currently required to appoint a Data Protection Officer (DPO), as fewer than 20 persons at our firm are regularly engaged in automated personal data processing. For all data protection enquiries, please contact us directly using the details provided in Section 1.

12 Currency and Amendment of this Privacy Policy

This Privacy Policy is current as of March 2026. We reserve the right to update it at any time to reflect developments in our website, changes in applicable law, or updated guidance from supervisory authorities. The current version is always available at www.kws-international.de/en/privacy-policy/.

As of: March 2026