Privacy Policy

Privacy Statement for Tax Consultancy Website

1. Name and contact details for the controller responsible for processing, as well as the Data Protection Officer

This data protection information applies to data processing by:

SBM Steilen Brenner Mester Partnerschaft Steuerberater,
Bonner Landstrasse 91,
D-50996 Cologne,
Phone: +49 (0)2236 – 30904-0
Fax: +49 (0)2236 – 30904-99

The in-house Data Protection Officer at SBM Steilen Brenner Mester Partnerschaft Steuerberater is available under the above-mentioned address and

2. Collection and storage of personal data, as well as the type and purpose of its use

a) When visiting the website

When calling up our website,,,,, information generated on your device’s browser is automatically sent to the server of our website. This information is saved for 14 days in a so-called log file. The following information is saved without your interaction and stored until it is automatically deleted:

  • IP address of the requesting server,
  • Date and time of the access,
  • Name and URL of the file retrieved,
  • Website from which the access occurs (referrer URL),
  • Browser used and, where applicable, the operating system of your computer, as well as the name of your access provider.

The specified files are processed by us for the following purposes:

  • Guaranteeing trouble-free connection of the website,
  • Guaranteeing convenient use of our website,
  • Guaranteeing convenient use of our website,
  • for additional administrative purposes.

The legal ground for data processing is Art. 6 Section 1 p. 1 lit. f GDPR. Our legitimate interest is derived from the above-listed purposes for data collection. Under no circumstances do we use the data collected for the purpose of drawing conclusions about your identity.

In addition, we use cookies as well as analytics services for visitors of our website. You can obtain further explanations on this under Item 4 and 5 of this Privacy Statement.

3. Disclosure of data

A transfer of your personal data to third parties for purposes other than those listed below does not occur.

We provide your personal data to third parties only if:

  • You have provided your express consent to this according to Art. 6 Section 1 p. 1 lit. a GDPR,
  • Disclosure is required according to Art. 6 Section 1 p. 1 lit. f GDPR for asserting, exercising or defending legal claims and no reason exists to assume that you have compelling legitimate interest in the non-disclosure of your data,
  • In case a statutory obligation exists for disclosure according to Art. 6 Section 1 p. 1 lit. c GDPR, and
  • This is legally permissible and required according to Art. 6 Section 1 p. 1 lit. b GDPR for the handling of contractual relationships with you.

4. Cookies

We use cookies on our website. They involve small files created automatically by your browser and saved on your device (laptop, tablet, smartphone etc.) if you visit our website. Cookies do not inflict any damage on your device, contain no viruses, Trojans or other malware.

A cookie stores information generated in association with the specific device used. This does not mean, however, that we can obtain direct knowledge of your identity.

The use of cookies on the one hand serves to make the use of our service more pleasant for you. Thus, we use so-called session cookies to detect whether you have already visited individual pages on our website. These are automatically deleted when you leave our website.

In addition, we also use temporary cookies for optimization of user-friendliness, saved for a particular specified time on your device. If you revisit our website to use our services, the website automatically detects that you have already been there, along with which inputs and settings you have made in order not to have to repeat them.

In addition, we use cookies to statistically track the use of our website and to evaluate it for the purpose optimizing our service for you (see Item 5). When you revisit our website, these cookies enable us to detect that you have already visited us. These cookies are automatically deleted after a certain defined time.

The data processed through cookies are for the specified purposes to uphold our legitimate interests as well as the interests of third parties according to Art. 6 Section 1 p. 1 lit. f GDPR.

Most browsers accept cookies automatically. You can configure your browser in such a way, however that no cookies will be stored on your computer or a notice will always appear before a new cookie is saved. Completely disabling cookies, however, may result in your not being able to use all the functions of our website.

5. Analysis Tools

a) Tracking Tools

The tracking measures stated and used by us are carried out based on Art. 6 Section 1 p. 1 lit. f GDPR. With the tracking measures used, we seek to ensure a needs-based design and continuous optimization of our website. In addition, we deploy tracking measures to statistically track the use of our website and to evaluate it for the purpose optimizing our service for you. These interests are always considered legitimate in terms of the aforementioned regulation.

The respective data processing purposes and data categories are derived from the corresponding tracking tools.

i) Google Analytics1

For the purpose of needs-based design and continuous optimization of our websites, we use Google Analytics, a web analysis service of Google Inc. ( (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter referred to as “Google”). Pseudonymized user profiles are created and cookies are used (see under Item 4) in this context. The information generated by the cookie concerning your use of this website such as

  • browser type/version,
  • operating system used,
  • operating system used,
  • host name of the accessing computer (IP address),
  • time of the server request,

is transfered to a Google server in the United States and stored there. The information is used to evaluate the use of the website, to compile reports on website activities and to provide additional services associated with website use and Internet use for the purpose of market research and needs-based design of the website. This information is also transmitted to third parties where necessary, to the extent that this is mandated by law or to the extent the third parties are contracted to process these data. Under no circumstances is your IP address compiled with other data from Google. The IP addresses are anonymized so that an identification is not possible (IP masking).

You may prevent the installation of cookies through a relevant setting in your browser software; we wish to point out, however, that in this case, you may not be able to fully use all the functions of this website.

Moreover, you can prevent the collection of data generated by the cookie in relation to your use of the website (including your IP address) along with the processing of this data by Google by downloading and installing a browser add-on ( ).

As an alternative to the browser add-on, especially with respect to browsers on mobile devices, you can prevent the collection through Google Analytics by clicking on this link. An opt out cookie is placed which prevents future collection of your data when visiting this website. The opt out cookie applies only to this browser and only for our website, and is stored on your device. In case you delete the cookies in this browser, you are required to place the opt out cookie again.

You can find additional information on data protection associated with Google Analytics, for instance, in the Google Analytics help page (

6. Rights of Data Subjects

You have the right:

  • according to Art. 15 GDPR, to request information concerning your personal data processed by us. In particular, you may request information on the purposes of processing, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of process or revocation, the existence of a right of appeal, the origin of your data, to the extent they have not been collected by us, and the existence of automated decision-making, including profiling and, where applicable, meaningful information on their details;
  • according to Art. 16 GDPR, to demand the rectification of inaccurate data or completion of your personal data stored by us;
  • according to Art. 17 GDPR, to demand the erasure of your data stored by us, to the extent that the processing is not required for exercising the right of freedom of expression and information, for compliance with a legal obligation, for the assertion, performance or defense of legal claims on the grounds of public interest;
  • according to Art. 18 GDPR, to demand the restriction of the processing of your personal data, to the extent that the accuracy of the data is disputed by you, the processing is unlawful, yet you refuse their erasure and we no longer need the data, you, however, require them for asserting, performing or defencing legal claims or submitted a lodged an objection against processing according to Art. 21 GDPR;
  • according to Art. 20 GDPR, to demand to receive the personal data, which you have provided to us, in a structured, standard and machine-readable format or the transmittal to another controller;
  • according to Art. 20 GDPR, to demand to receive the personal data, which you have provided to us, in a structured, standard and machine-readable format or the transmittal to another controller;
  • to lodge a complaint with the supervisory authority according to Art. 77 GDPR. To do so, you generally allowed to consult the supervisory authority in your place of habitual abode or place of employment or the registered location of our accounting firm.

7. Right to object

To the extent your personal data are processed on grounds of legitimate interests according to Art. 6 Section 1 p. 1 lit. f GDPR, you have the right according to Art. 21 GDPR to lodge an objection against the processing of your personal data, on grounds relating to your particular situation or the objection is against direct marketing. In the latter case, you have the general right to object, which is implemented by us without citing a special situation.

If you wish to exercise your right of revocation/objection, simply send an e-mail message to

8. Data Protection

Within this website visit, we use the standard SSL procedure (Secure Socket Layer) in connection with the relevant highest encryption level supported by your browser. In general, this involves 256-bit encryption. In case your browser does not support 256-bit encryption, we instead revert to 128-bit v3 technology. You can tell whether an individual page on our website is transmitted in encrypted mode by the key or lock icon displayed in the lower status bar of your browser.

Moreover, we deploy appropriate technical and organizational safety measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are constantly being improved according to the technological state of the art.

9. Current status and amendment to this Privacy Statement

This Privacy Statement is currently valid and is effective as of May 2018.

Through further development of our website and related services or based on amended legal or official rules, it may be necessary to amend this Privacy Statement. You can review and print out the current Privacy Statement at any time on the website under


1 Data protection authorities require the conclusion of a contract data processing agreement for the permissible deployment of Google Analytics. A relevant template is offered by Google at