With the following data protection information, CHATHAM PARTNERS PartG mbB (Chatham Partners) provides information on the processing of personal data in the aforementioned data processing operations and on the associated rights of data subjects in accordance with the provisions of data protection law, in particular the General Data Protection Regulation (GDPR) and the Federal Data Protection Act
(BDSG).
The general information that applies to all data processing operations can be found in Section I:
Section II contains detailed information on the following data processing operations:
Section III contains a description of the
Chatham Partners PartG mbB, represented by the partner authorized to represent (see: Legal Notice)
New Wall 50
20354 Hamburg, Germany
Phone: +49 (0)40 303 963 0
E-mail: info@chatham.partners
https://chatham.partners/
PROLIANCE GmbH
Leopoldstr. 21
80802 Munich, Germany
E-mail: datenschutzbeauftragter@datenschutzexperte.de
www.datenschutzexperte.de
Chatham Partners processes personal data for a specific purpose and only if Chatham Partners can rely on a legal basis for doing so. In this respect, the legal bases of the GDPR (in particular Art. 6 GDPR and Art. 9 GDPR) and the BDSG (in particular
§ 26 BDSG) come into consideration.
If Chatham Partners involves service providers in the processing of personal data, these are carefully selected. Service providers either work for Chatham Partners within the framework of order processing relationships in accordance with Art. 28 GDPR or are otherwise obliged to maintain confidentiality with regard to the processing of personal data.
Otherwise, personal data will only be passed on if there is also a legal basis for this. In this respect, too, the legal bases of the GDPR (in particular Art. 6 GDPR) and the BDSG (in particular Section 26 BDSG) come into consideration.
In the context of automated data processing and the use of services of globally operating software providers, personal data may also be transferred to third countries outside the EU. Chatham Partners has taken the precautions required by current standards to prevent access to personal data in the best possible way by carefully selecting the providers and structuring the contractual relationships with them in accordance with current standards.
Automated decision-making - including profiling - within the meaning of Art. 22 GDPR does not take place.
If the processing of personal data is based on consent within the meaning of Art. 6 para. 1 sentence 1 lit. a GDPR, Chatham Partners processes the data as long as the data subject has not withdrawn consent. If the processing is based on Art. 6 para. 1 sentence 1 lit. b GDPR, Chatham Partners processes the data as long as this is necessary for the fulfillment of the relevant contract or for the implementation of pre-contractual measures. If the data processing is based on Art. 6 para. 1 sentence 1 lit. c GDPR and thus on a legal obligation, Chatham Partners processes the data as long as the legal obligation to retain the data applies. If the data processing is based on Art. 6 para. 1 sentence 1 lit. f GDPR and thus for the protection of legitimate interests, Chatham Partners processes the data as long as Chatham Partners can assert the legitimate interest in this.
Chatham Partners regularly checks whether the aforementioned requirements are still met. If there is no longer a legal basis for further processing, the data concerned will be blocked or deleted for the processing in question.
Chatham Partners has implemented state-of-the-art technical and organizational measures to ensure compliance with the principles of data protection law and to protect personal data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorized access by third parties. The security measures are continuously reviewed in line with technological developments and adapted where necessary.
This data protection information is currently valid and was last updated in August 2024.
Chatham Partners reserves the right to adapt it to the legal requirements if necessary in compliance with the applicable data protection regulations and to update the services concerned in the event of changes. The current version of the data protection information can be accessed at any time on the website and viewed and/or requested from Chatham Partners.
Chatham Partners operates the website https://chatham.partners/, which can be accessed via the internet. The related data processing is carried out for the purpose of ensuring a smooth connection to the website and enabling convenient use of the website. The log file is also used to evaluate system security and stability as well as for administrative purposes. The legal basis for the temporary storage of personal data or log files is Art. 6 para. 1 lit. f GDPR ("legitimate interest").
The data is not analyzed except for statistical purposes in anonymized form. Chatham Partners does not merge this data with data from other data sources. Chatham Partners does not process the data collected for the purpose of drawing conclusions about data subjects, unless this should exceptionally be necessary for the prosecution of legal violations.
Information in connection with cookies:
Chatham Partners also uses cookies on the website. Cookies are text files that are stored on the computer used. Cookies are used to make a website more user-friendly, effective and secure. Most of the cookies used by Chatham Partners are so-called session cookies, which are automatically deleted after the browser is closed. Other cookies remain stored on the end device used to access the website until the user deletes them or the storage period expires. These cookies enable Chatham Partners to recognize the browser on the next visit. In some cases, cookies are used to simplify website processes by storing settings (e.g. the provision of already selected options). If personal data is also processed by individual cookies implemented by Chatham Partners, the processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR to safeguard the legitimate interests of Chatham Partners in the best possible functionality of the website and a user-friendly and effective design of the page visit. In any case, if a standard browser is used, it can be set in such a way that the user
Most browsers also offer a so-called "do-not-track function". If this function is activated, the respective browser informs advertising networks, websites and applications that the user does not wish to be "tracked" for the purpose of behavior-based advertising and the like.
In addition, the loading of so-called scripts can be prevented by default. NoScript only allows the execution of JavaScripts, Java and other plug-ins on trusted domains of choice. Information and instructions on how to use and edit this function are available from the browser provider.
Please note that the functionality of the website may be restricted if cookies are deactivated.
When the website https://chatham.partners/ is accessed, information is automatically sent to the website server by the browser used on the end device used to access the website. This information is temporarily stored in a so-called log file:
For reasons of technical security, in particular to defend against attempted attacks on the web server used, this data may be stored temporarily. It is therefore not possible for Chatham Partners to draw conclusions about individual persons.
The recipients of the data are those service providers who enable and guarantee the operation of the website, so that the transfer of the data is in the legitimate interest of Chatham Partners (see Art. 6 para. 1 lit. f GDPR).
Otherwise, data will only be passed on to third parties if there is a legal obligation to do so in individual cases (Art. 6 para. 1 lit. c GDPR).
Information on linking to Google Maps:
The Chatham Partners website contains a link to Google Maps: Clicking on the link opens a new browser window in which the destination is preset. This takes the data subject directly to Google's interactive maps and allows them to use the map function. Chatham Partners asks the data subject to inform themselves directly on the Google website about their data protection.
After seven days at the latest, the IP address transmitted when the website is accessed is anonymized by shortening it at domain level; otherwise, the data and information collected when the website is visited is processed for four weeks and then generally deleted automatically by the web host. The data will then only be processed in narrow exceptional cases, namely if Chatham Partners can assert a legitimate interest in this, in particular in the case of official or legal proceedings.
When Chatham Partners receives a request by email or other means of communication, Chatham Partners collects and processes the information received, including the personal data provided, for the purpose of processing the request.
The legal basis for the processing of the relevant personal data is the legitimate interest of Chatham Partners pursuant to Art. 6 para. 1 lit. f GDPR and, if applicable, Art. 6 para. 1 lit. b GDPR in responding to the request in question, provided that the request is aimed at concluding a contract (e.g. a mandate or employment relationship).
Note: Without a written confirmation from Chatham Partners, neither an attorney-client relationship nor an employment relationship or any other contract comes into existence.
The following data and data categories are processed if and insofar as Chatham Partners receives them:
There is no requirement to provide Chatham Partners with certain data. However, if Chatham Partners does not receive the data required to process the respective request or does not receive it in full, Chatham Partners may not be able to examine and/or process the request or may not be able to conclusively examine the conclusion of a possible contract, so that it cannot be concluded.
Recipients of personal data when processing inquiries are, in particular, service providers and third parties to whom the transfer is necessary for the processing of the respective inquiry (see Art. 6 para. 1 sentence 1 lit. f and lit. b GDPR).
Otherwise, data will only be passed on to third parties if there is a legal obligation to do so in individual cases (Art. 6 para. 1 lit. c GDPR).
The relevant personal data will be blocked if and insofar as it is no longer required for the purposes of processing the respective request. They will be deleted if they are not (or no longer) required for the performance of a contract, there is no obligation to retain them and Chatham Partners cannot rely on consent or a legitimate interest in further processing.
Chatham Partners processes personal data for the purpose of handling the mandate and preparing and following up on the mandate, thus in particular in the context of out-of-court legal advice, correspondence with contractual partners, courts and opposing parties as well as invoicing and related actions. The legal basis for this is Art. 6 para. 1 sentence 1 lit. b GDPR. Chatham Partner also processes personal data in this context for the purpose of fulfilling legal obligations (e.g. obligations under the Money Laundering Act (GwG) or due to EU sanctions); the legal basis is then Art. 6 para. 1 sentence 1 lit. c GDPR in conjunction with the respective special provision, e.g. Sections 10, 11, 12 para. 1 and para. 2 GwG.
If (potential) clients are natural persons or if a firm allows direct conclusions to be drawn about natural persons, Chatham Partners processes personal data of the (potential) clients themselves. In any case, Chatham Partners processes personal data of the natural persons associated with the clients in the course of initiating and processing mandates. Such persons are, for example, shareholders / beneficial owners, managing directors or employees.
In the context of client initiation and processing, the following data and data categories are processed, which the client or the data subject provides to Chatham Partners and/or which Chatham Partners may additionally obtain from publicly accessible sources (e.g. commercial register):
In addition, the following data and data categories, for example, may be processed by Chatham Partners in the context of client initiation and processing:
Certain data is required for the establishment of a client relationship and the effective processing of the mandate. In particular, it is imperative that Chatham Partners receives the data required for the review and fulfillment of legal obligations, in particular:
Recipients of personal data in the context of processing the mandate are in particular
Otherwise, the data will only be passed on to recipients if there is a legal obligation to pass it on (Art. 6 para. 1 sentence 1 lit. c GDPR).
Note: The attorney-client privilege remains unaffected.
The personal data concerned will be blocked if and insofar as it is no longer required for the purposes of initiating and processing the mandate. They will be deleted if there is no obligation to retain them (retention obligations may apply for up to ten years after the end of the mandate) and there is no longer a legitimate interest in retaining them (a legitimate interest may exist for a period of up to 30 years after the end of the mandate).
From time to time, Chatham Partners informs existing contacts about current legal developments, invites them to Chatham Partners events or sends Christmas and/or greeting cards or other information. The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR and thus the legitimate interest of Chatham Partners in personal and trusting contact with third parties and in the implementation of marketing measures for the services of Chatham Partners. If consent has been given for data processing, the legal basis is Art. 6 para. 1 sentence 1 lit. a GDPR; this legal basis therefore also applies, for example, if interested parties have given their express consent to receive a Chatham Partners newsletter. In addition, processing operations may also be carried out on the basis of legal obligations (in particular in the case of hospitality or similar); the legal basis is then Art. 6 para. 1 sentence 1 lit. c GDPR or if Chatham Partners can assert a legitimate interest in data processing; the legal basis is then Art. 6 para. 1 sentence 1 lit. f GDPR.
In the context of marketing measures and contact management, Chatham Partners typically processes the following data and data categories that the data subject has provided to Chatham Partners for this purpose:
The provision of data for contact management or marketing measures and any consent to its use for the purposes of contact management and marketing measures is - of course - voluntary.
Recipients of personal data for marketing measures and in the context of maintaining contact are in particular service providers of Chatham Partners as well as third parties to whom the disclosure is in the legitimate interest of Chatham Partners (see Art. 6 para. 1 sentence 1 lit. f GDPR).
Otherwise, data will only be passed on to third parties if there is a legal obligation to do so (Art. 6 para. 1 lit. c GDPR).
The personal data concerned will be blocked if and insofar as it is no longer required for the purposes of the marketing/contact management measure(s). It will be deleted if Chatham Partners can no longer rely on a legitimate interest or consent and there is no longer an obligation to retain it.
In the context of recruiting measures, i.e. in particular when Chatham Partners receives an application, Chatham Partners processes the relevant personal data for the purpose of deciding on the establishment of a possible employment relationship.
The legal basis for the processing of personal data in the context of recruiting measures is primarily Section 26 (1) BDSG. In addition, Chatham Partners bases the data processing in individual cases on legitimate interests in the implementation of the recruiting measure or, in addition, with regard to special categories of personal data within the meaning of Art. 9 para. 1 GDPR, on Art. 9 para. 2 lit. b GDPR. If Chatham Partners has the express consent of the data subject to process the data for the purposes of recruiting measures, the legal basis for the processing is Art. 6 para. 1 lit. a GDPR or, if applicable, Art. 9 para. 2 lit. a GDPR (e.g. for inclusion in the "recruitment database").
With regard to any cost accounting in connection with recruiting measures. Recruiting measures, processing may be required by law (Art. 6 para. 1 sentence 1 lit. c GDPR).
In the context of recruiting measures, Chatham Partners typically processes the following data and data categories that the data subject has provided to Chatham Partners for this purpose:
The provision of personal data for recruiting measures is, of course, voluntary. If Chatham Partners does not receive certain information, in particular if the data makes it impossible to contact you, Chatham Partners will not be able to carry out the recruiting measures and the provision of such data will be necessary.
In the context of recruiting measures, the disclosure of data is typically subject to the regulations of employee data protection and therefore generally only takes place if the disclosure is necessary for the decision on the establishment of an employment relationship. This applies in particular to disclosure to service providers.
The personal data concerned will be blocked if and insofar as it is no longer required for the purposes of the recruiting measure. They will be deleted if Chatham Partners can no longer rely on a legitimate interest or consent given by the data subject in individual cases and there is no longer an obligation to retain them. As a rule, the data will be deleted two months after a rejection letter has been sent.
Data processing in the context of the alumni network is carried out for the purposes of providing and maintaining this network, maintaining and carrying out network activities as well as contact and exchange with former employees of Chatham Partners.
The processing of personal data is based on the consent of the data subject; the legal basis is then Art. 6 para. 1 sentence 1 lit. a GDPR.
In the context of the Alumni Network, Chatham Partners only processes data that the data subject has provided to Chatham Partners in writing for these purposes. These are typically
The provision of personal data for the alumni network is voluntary. If Chatham Partners does not receive certain information, Chatham Partners will not be able to include you in the alumni network and/or maintain contact with the person concerned.
Recipients of personal data in connection with the alumni network are in particular service providers of Chatham Partners as well as such third parties to whom the disclosure is in the legitimate interest of Chatham Partners (see Art. 6 para. 1 sentence 1 lit. f GDPR).
Otherwise, data will only be passed on to third parties if there is a legal obligation to do so (Art. 6 para. 1 lit. c GDPR).
The personal data concerned will be blocked if and insofar as it is not (or no longer) required for the purposes of the Alumni Network. They will be deleted if no retention period applies (any longer) and Chatham Partners can no longer rely on the consent given or a then existing legitimate interest in further processing.
If (potential) contractual partners (in particular in the case of service, purchase or work contracts) are natural persons or a company allows direct conclusions to be drawn about natural persons, Chatham Partners processes personal data of the (potential) contractual partners themselves. In any case, Chatham Partners processes personal data of natural persons who act as contact persons for Chatham Partners with the Contractual Partner in the context of contract initiation and execution.
If a contract is concluded, the processing is carried out for the performance of the contract and thus on the legal basis of Art. 6 para. 1 sentence 1 lit. b GDPR) or to fulfill a legal obligation; the legal basis is then Art. 6 para. 1 lit. c GDPR. The processing of personal data is thus also based on the legitimate interests of Chatham Partners in the conclusion of the contract within the meaning of Art. 6 para. 1 sentence 1 lit. f GDPR.
In the context of such contracts, personal data of the following categories is processed, which the contractual partner or the data subject provides to Chatham Partners and/or which Chatham Partners may additionally obtain from publicly accessible sources (e.g. commercial register):
In addition, the following categories of data, for example, may be processed by Chatham Partners in the context of the initiation or performance of a contract:
Recipients of personal data in the context of processing the mandate are in particular the following third parties:
Otherwise, the data will only be passed on to recipients if there is a legal obligation to pass it on (Art. 6 para. 1 sentence 1 lit. c GDPR).
The personal data concerned will be blocked if and insofar as they are not (or no longer) required for the purposes of initiating or performing a contract. They will be deleted if they are not (or no longer) required for the performance of a contract, no retention period applies and Chatham Partners cannot rely on consent or a legitimate interest in further processing.
The persons affected by the processing of their personal data have the following rights:
Right to object pursuant to Art. 21 GDPR:
Where personal data are processed by Chatham Partners on the basis of legitimate interests, the data subject shall have the right to object at any time to processing of personal data concerning him or her on grounds relating to his or her particular situation. Insofar as the objection is directed against the processing of personal data for the purpose of direct marketing, the data subject has a general right of objection without the need to specify a particular situation.
- the accuracy of the data is contested by the data subject,
- the processing is unlawful, but the data subject opposes the erasure of the
personal data,
- Chatham Partners no longer needs the data, but the data subject needs it
for the establishment, exercise or defense of legal claims, or
- the data subject has objected to the processing
The corresponding notification on the part of Chatham Partners is based on
Art.19 GDPR.
In order to safeguard the aforementioned rights, data subjects can contact Chatham Partners at any time using the details provided in Section I (1).