Mon - Fri 09:00-18:00
Mon - Fri 09:00-18:00
Mon - Fri : 09:00-18:00
Contact

CYBERLEGIS – Website Privacy Policy

Name and Contact Data of the Controller as well as of the Data Protection Officer

The controller according to the data protection laws is:

Cyberlegis RA GmbH, Maximilianstr 13, 80439 München, Germany

The Data Protection Officer (DPO) is:

Severine Petersen
PHONE +49 (0) 89 203 00 64 22
FAX +49 (0) 89 6600 2036

Email:  petersen@db5.io (for messages that do not include highly confidential contents)

 

Information we collect through this website

When you visit one of the Cyberlegis websites (“website”), we automatically collect information about those visits.
In particular, your browser automatically sends us certain Internet-related information, such as the IP address of the computer you are using.
We also collect information by using cookies to better understand how visitors use the Cyberlegis website, to identify problems with our servers, to compile aggregate demographic information and other information about the use of the Cyberlegis website, and to improve the functions of the Cyberlegis  website. Cookies do not collect any information that allows you to be identified as a person.

 

Use of cookies and plug-ins

Cookies are small text files that Web website often store on the hard drives of visitors to their Web website. They are often used to make the website work or more efficient and to provide information to website owners.
A cookie contains a unique number that is used to recognize your computer when a user of your computer returns to a previously visited Web site. We use cookies to improve the online experience of our visitors, for statistical purposes and to better understand how our websites are used. For example, cookies may tell us whether you have visited our website before or whether you are a new visitor.
There are two broad categories of cookies – “First Party Cookies” and “Third Party Cookies”. First party cookies are cookies sent directly to your computer by the site operator and are used only by the site operator to recognize your computer when it revisits the site. Third party cookies are provided by a service provider on behalf of the website operator and may be used by the service provider to recognize your computer when it visits other website. Third party cookies are most commonly used for website analysis or advertising purposes.
This site only serves the following first-party cookies on your computer:

 

Cookies:

  • Necessary
    Name: CookieConsent
    Provider: https://cyberlegis.legal
    Typ: HTTP
    Expiry: 1 year
    First URL found: https://cyberlegis.legal
    Cookie Purpose Description: Stores the user’s consent status for cookies on the current domain.
    Initiator: Script tag, page source line number 1
    Quelle: https://consent.cookiebot.com/uc.js
    Data sent to: Ireland (appropriate)
    Appropriate country according to GDPR (EU)

 

  • Name: tusSupport
    Provider: https://cyberlegis.legal/services/
    Typ: HTTP
    Expiry: Session
    First URL found: https://cyberlegis.legal/services/>
    Cookie Purpose Description: Maintains the state of the user on all page requests.
    Initiator: Script Tag,
    Source: https://widget.taggbox.com/widget/static/js/main.eef8d911.js
    via https://widget.taggbox.com/embed-lite.min.js
    Data sent to: Data sent to: United States (appropriate)
    Appropriate country according to GDPR (EU)

 

  • Name: PHPSESSID
    Provider: cyberlegis.legal
    Typ: HTTP
    Expiry: Session
    First URL found: https://cyberlegis.legal/gdpr-privat-data/
    Cookie Purpose Description: Maintains the state of the user on all page requests.
    Initiator: Script Tag,
    Quelle: https://cyberlegis.legal/gdpr-privat-data/
    Data sent to: Data sent to: Germany (appropriate)
    Appropriate country according to GDPR (EU)

 

  • Category: Preferences
    Preference cookies enable a website to remember information that affects the way a website behaves or looks, such as: Your preferred language or the region you are in.Name: lang
    Provider: linkedin.com
    Typ: HTTP
    Expiry: Session
    First URL found: https://cyberlegis.legal/services/
    Cookie purpose description: Registers a unique ID that is used to generate statistical data on how the visitor uses the website.
    Initiator: Skript-Tag
    Source: https://cyberlegis.legal/services/
    Data sent to: United States (appropriate)
    Appropriate country according to GDPR (EU)

 

  • Category: Marketing (5)
    Marketing cookies are used to follow visitors to the website. The intent is to show ads that are relevant and engaging to the individual user and therefore more valuable to publishers and third party advertisers.

 

  • Name: bcookie
    Provider: linkedin.com
    Typ: HTTP
    Expiry: 2 Years
    First URL found: https://cyberlegis.legal//services/
    Cookie purpose description: Used by the social networking service LinkedIn to track usage of embedded services.
    Initiator: Skript-Tag
    Source: https://cyberlegis.legal/services/
    Data sent to: United States (appropriate)
    Appropriate country according to GDPR (EU)

 

  • Name: bsookie
    Provider: linkedin.com
    Typ: HTTP
    Expiry: 2 Years
    First URL found: https://cyberlegis.legal/services/
    Cookie purpose description: Used by the social networking service LinkedIn to track usage of embedded services.
    Initiator: Skript-Tag
    Source: https://cyberlegis.legal/services/
    Data sent to: United States (appropriate)
    Appropriate country according to GDPR (EU)Name: lidc
    Provider: linkedin.com
    Typ: HTTP
    Expiry: 1 Day
    First URL found: https://cyberlegis.legal/services/
    Cookie purpose description: Used by the social networking service LinkedIn to track usage of embedded services.
    Initiator: Skript-Tag
    Source: https://cyberlegis.legal/services/
    Data sent to: United States (appropriate)
    Appropriate country according to GDPR (EU)Name: lissc
    Provider: linkedin.com
    Typ: HTTP
    Expiry: 1 Year
    First URL found: https://cyberlegis.legal/services/
    Cookie purpose description: Used by the social networking service LinkedIn to track usage of embedded services.
    Initiator: Skript-Tag
    Source: https://cyberlegis.legal/ervices/
    Data sent to: United States (appropriate)
    Appropriate country according to GDPR (EU)Name: rtc
    Provider: linkedin.com
    Typ: HTTP
    Expiry: 1 Day
    First URL found: https://cyberlegis.legal/services/
    Cookie purpose description: Used by the social networking service LinkedIn to track usage of embedded services.
    Initiator: Skript-Tag
    Source: https://cyberlegis.legal/services/
    Data sent to: United States (appropriate)
    Appropriate country according to GDPR (EU)Name: trkCode
    Provider: badges.linkedin.com
    Typ: HTTP
    Expiry: 1 Day
    First URL found: https://cyberlegis.legal/services/
    Cookie purpose description: Facilitates website sharing – The cookie also allows website to track and target the user with advertisements based on the likes and sharing of the user.
    Initiator: Skript-Tag
    Source: https://cyberlegis.legal/services/
    Data sent to: Ireland (appropriate)
    Appropriate country according to GDPR (EU)

 

  • Name: trkInfo
    Provider: badges.linkedin.com
    Typ: HTTP
    Expiry: 1 Day
    First URL found: https://cyberlegis.legal/services/
    Cookie purpose description: Facilitates website sharing – The cookie also allows website to track and target the user with advertisements based on the likes and sharing of the user.
    Initiator: Skript-Tag
    Source: https://cyberlegis.legal/services/
    Data sent to: Ireland (appropriate)
    Appropriate country according to GDPR (

 

 

Wordfence-Security
wfwaf-authcookie-(hash) This cookie is used by the Wordfence firewall to perform a capability check of the current user before WordPress has been loaded.
wf_loginalerted_(hash)
This cookie is used to notify the Wordfence admin when an administrator logs in from a new device or location.
wfCBLBypass
Wordfence offers a feature for a site visitor to bypass country blocking by accessing a hidden URL. This cookie helps track who should be allowed to bypass country blocking.

 

Data Security

We maintain security measures to protect against unauthorized disclosure, use, alteration or destruction of the personal information you provide to us through the utilization of our Web Site. Please note, however, that there is no perfect security on the Internet. Therefore, we strive to protect your personal data, but when data is transmitted over the Internet, it may be viewed and used by unauthorized persons.

SSL and/or TLS encryption
For security reasons and to protect the transmission of confidential content, such as purchase orders or inquiries you submit to us as the website operator, this website uses either an SSL or a TLS encryption programme. You can recognise an encrypted connection by checking whether the address line of the browser switches from “http://” to “https://” and also by the appearance of the lock icon in the browser line.

If the SSL or TLS encryption is activated, data you transmit to us cannot be read by third parties.

Access and correction and deletion
We want to ensure that all information we hold about you is current and accurate. If you have any questions about your personal information that our lawfirm has about you in order to obtain a copy, or if you have any questions about these practices, please contact us via the details at the top of this document.

 

Data Privacy Regulator

If – despite our efforts to protect your rights – you wish to complain, You can do this by contacting the Bavarian State Office for data protection supervision at https://www.lda.bayern.de/de/index.html online or by post/telephone at

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Telefon: +49 (0) 981 53 1300
Promenade 27
91522 Ansbach

Internet-based transmissions
As the Internet is a global environment, the use of the Internet to collect and process personal data inevitably requires the transmission of data at international level. By visiting the Cyberlegis  pages and communicating electronically with us, you therefore acknowledge our processing of personal data. However, we endeavour to protect all personal data collected through the Cyberlegis website in accordance with strict data protection standards.

 

Data processing

We conclude conclude data processing agreements (DPA) with the respective. This is a contract mandated by data privacy laws that guarantees that they process personal data on our website visitors only based on our instructions and in compliance with the GDPR.

Changes to this privacy policy
We reserve the right to change this statement at any time and without notice to reflect future developments of the COMPANIES, the website or changes in industry or legal trends. We will publish the revised statement on the website or announce the change on the homepage of the website. You can determine when the Statement was revised by referring to the “Last Updated” date at the top of this Statement. Any changes will be effective upon posting of the revised Statement on the Website. If you continue to use the Site after such changes, you will be deemed to have agreed to those changes. If you do not agree, in whole or in part, with the terms of this statement, you will no longer be able to use the Site.

 

Social media

LinkedIn

This website uses elements of the LinkedIn network. The provider is LinkedIn Ireland Unlimited, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

Any time you access a page of this website that contains elements of LinkedIn, a connection to LinkedIn’s servers is established. LinkedIn is notified that you have visited this website with your IP address. If you click on LinkedIn’s “Recommend” button and are logged into your LinkedIn account at the time, LinkedIn will be in a position to allocate your visit to this website to your user account. We have to point out that we as the provider of the website do not have any knowledge of the content of the transferred data and its use by LinkedIn.

If your approval (consent) has been obtained the use of the abovementioned service shall occur on the basis of Art. 6 (1)(a) GDPR and § 25 TTDSG (German Telecommunications Act). Such consent may be revoked at any time. If your consent was not obtained, the use of the service will occur on the basis of our legitimate interest in making our information as comprehensively visible as possible on social media.

Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://www.linkedin.com/help/linkedin/answer/62538/datenubertragung-aus-der-eu-dem-ewr-und-der-schweiz?lang=en.

For further information on this subject, please consult LinkedIn’s Data Privacy Declaration at: https://www.linkedin.com/legal/privacy-policy.

 

Plug-ins and Tools

YouTube with expanded data protection integration

Our website embeds videos of the website YouTube. The website operator is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in the expanded data protection mode. According to YouTube, this mode ensures that YouTube does not store any information about visitors to this website before they watch the video. Nevertheless, this does not necessarily mean that the sharing of data with YouTube partners can be ruled out as a result of the expanded data protection mode. For instance, regardless of whether you are watching a video, YouTube will always establish a connection with the Google DoubleClick network.

As soon as you start to play a YouTube video on this website, a connection to YouTube’s servers will be established. As a result, the YouTube server will be notified, which of our pages you have visited. If you are logged into your YouTube account while you visit our site, you enable YouTube to directly allocate your browsing patterns to your personal profile. You have the option to prevent this by logging out of your YouTube account.

Furthermore, after you have started to play a video, YouTube will be able to place various cookies on your device or comparable technologies for recognition (e.g. device fingerprinting). In this way YouTube will be able to obtain information about this website’s visitors. Among other things, this information will be used to generate video statistics with the aim of improving the user friendliness of the site and to prevent attempts to commit fraud.

Under certain circumstances, additional data processing transactions may be triggered after you have started to play a YouTube video, which are beyond our control.

The use of YouTube is based on our interest in presenting our online content in an appealing manner. Pursuant to Art. 6(1)(f) GDPR, this is a legitimate interest. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TTDSG. This consent can be revoked at any time.

For more information on how YouTube handles user data, please consult the YouTube Data Privacy Policy under: https://policies.google.com/privacy?hl=en.

Google Fonts (local embedding)

This website uses so-called Google Fonts provided by Google to ensure the uniform use of fonts on this site. These Google fonts are locally installed so that a connection to Google’s servers will not be established in conjunction with this application.

For more information on Google Fonts, please follow this link: https://developers.google.com/fonts/faq and consult Google’s Data Privacy Declaration under: https://policies.google.com/privacy?hl=en.

Wordfence

We have included Wordfence on this website. The provider is Defiant Inc, Defiant, Inc, 800 5th Ave Ste 4100, Seattle, WA 98104, USA (hereinafter “Wordfence”).

Wordfence is designed to protect our website from unwanted access or malicious cyberattacks. To accomplish this, our website establishes a permanent connection with Wordfence’s servers, which check and block their databases against access to our website.

The use of Wordfence is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the most effective protection of his website against cyberattacks. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TTDSG. This consent can be revoked at any time.

Data transmission to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.wordfence.com/help/general-data-protection-regulation/.

Cookies set by the Wordfence plugin

To help you understand which cookies the Wordfence plugin sets, when installed on your WordPress site, we have provided the guide below. Wordfence currently sets three cookies and we explain what each cookie does, who will have the cookie set, and why the cookie helps secure your site.

wfwaf-authcookie-(hash)

What it does: This cookie is used by the Wordfence firewall to perform a capability check of the current user before WordPress has been loaded.
Who gets this cookie: This is only set for users that are able to log into WordPress.
How this cookie helps: This cookie allows the Wordfence firewall to detect logged in users and allow them increased access. It also allows Wordfence to detect non-logged in users and restrict their access to secure areas. The cookie also lets the firewall know what level of access a visitor has to help the firewall make smart decisions about who to allow and who to block.

wf_loginalerted_(hash)

What it does: This cookie is used to notify the Wordfence admin when an administrator logs in from a new device or location.
Who gets this cookie: This is only set for administrators.
How this cookie helps: This cookie helps site owners know whether there has been an admin login from a new device or location.

wfCBLBypass

What it does: Wordfence offers a feature for a site visitor to bypass country blocking by accessing a hidden URL. This cookie helps track who should be allowed to bypass country blocking.
Who gets this cookie: When a hidden URL defined by the site admin is visited, this cookie is set to verify the user can access the site from a country restricted through country blocking. This will be set for anyone who knows the URL that allows bypass of standard country blocking. This cookie is not set for anyone who does not know the hidden URL to bypass country blocking.
How this cookie helps: This cookie gives site owners a way to allow certain users from blocked countries, even though their country has been blocked.

 

 

California Consumer Privacy Act

 

1. Introduction

 
This CCPA Privacy Policy applies to Data Business Services USA, Inc. and its affiliated brands, subsidiaries, and business units (collectively referred to as “DBS USA,” “we,” “us,” or “our”). We are committed to protecting the privacy and security of personal information entrusted to us by our clients, business partners, and consumers.This notice is adopted in compliance with the California Consumer Privacy Act of 2018 (CCPA), as amended and expanded by the California Privacy Rights Act of 2020 (CPRA), and in accordance with any other applicable California privacy laws. It describes how we collect, use, disclose, and safeguard the personal information of California residents in both online and offline contexts.Unless otherwise defined in this Policy, all terms used have the meanings assigned to them under the CCPA and CPRA, including terms such as “personal information,” “sensitive personal information,” “sell,” “share,” “service provider,” and “contractor.”

This Policy is intended to provide transparency about:

  • The categories of personal information and sensitive personal information we collect.
  • The sources from which we collect that information.
  • The purposes for which we use and disclose that information.
  • Your rights under California privacy law and how to exercise them.
  • Our obligations with respect to data minimization, purpose limitation, and storage duration.
  • Your right to limit the use or disclosure of sensitive personal information.
  • Our practices regarding automated decision-making, if applicable.

We may update this Privacy Policy periodically and will indicate the date of the latest revision at the top of the policy. If material changes are made, we will notify you as required by applicable law.
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us using the contact information provided at the end of this notice.

2. Information We Collect

We collect personal information as defined in Cal. Civ. Code § 1798.140(v), which includes information that identifies, relates to, describes, or could reasonably be linked with a particular consumer or household.In the past 12 months, we may have collected the following categories:

 

Category Examples Statutory Reference
A. Identifiers Real name, alias, postal address, unique personal identifier, IP address, email address Cal. Civ. Code § 1798.140(v)(1)(A)
B. Personal Information (per § 1798.80(e)) Name, address, telephone number, employment, financial information Cal. Civ. Code § 1798.140(v)(1)(B); Cal. Civ. Code § 1798.80(e)
D. Commercial Information Records of purchases or histories Cal. Civ. Code § 1798.140(v)(1)(D)
E. Internet or Network Activity Browsing history, interactions with ads/sites/apps Cal. Civ. Code § 1798.140(v)(1)(F)
F. Employment-Related Information Resumes, job applications, evaluations Cal. Civ. Code § 1798.140(v)(1)(I)
G. Geolocation Data Device/IP-based location Cal. Civ. Code § 1798.140(v)(1)(G)
I. Professional or Employment Information Job title, employer contact info Cal. Civ. Code § 1798.140(v)(1)(I)

 
Note: We do not collect sensitive personal information unless explicitly stated at collection time. See Cal. Civ. Code § 1798.121(a) for your right to limit its use if collected.

3. Sources of Personal Information

We collect personal information from the following sources (Cal. Civ. Code § 1798.110(c)):

  • Directly from consumers (e.g., forms, inquiries)
  • Automatically from interactions with our websites or services
  • Third-party data providers or public sources
  • Clients or partners as part of service delivery

 

4. Use of Personal Information

We use personal information for business or commercial purposes defined in Cal. Civ. Code § 1798.140(e) and § 1798.140(f):

  • To provide requested services or products
  • To fulfill contracts or obligations
  • To send service updates or permitted marketing (opt-out available)
  • To detect, prevent, or investigate security incidents or fraud
  • To comply with legal obligations (Cal. Civ. Code § 1798.145(a))
  • For internal analytics, research, and service improvements
  • For merger/acquisition/restructuring transactions (Cal. Civ. Code § 1798.140(e)(4))

5. Sharing of Personal Information

We have disclosed the following categories for a business purpose (not a sale or “sharing” per § 1798.140(ad) and (ah)) within the past 12 months:

  • Identifiers
  • Commercial Information
  • Internet or Network Activity
  • Professional/Employment Info

Disclosed to:

  • Service providers and contractors (§ 1798.140(j), § 1798.140(ag))
  • Affiliates/subsidiaries
  • Authorized business partners
  • Legal authorities or regulators when required (§ 1798.145(a))

We do not sell or share personal information as defined under Cal. Civ. Code §§ 1798.140(ad) and (ah). If our practices change, we will notify you and offer opt-out rights under § 1798.120 and § 1798.135.

6. Your Rights (California Residents)

Under Cal. Civ. Code §§ 1798.100–1798.125, California residents have the following rights:

a. Right to Know – § 1798.110, § 1798.115

You can request:

  • Categories and specific data we collected
  • Sources of data
  • Business purposes
  • Categories of third parties we disclosed data to

b. Right to Delete – § 1798.105

You can request deletion of your personal data, unless retention is necessary for:

  • Completing a transaction
  • Detecting fraud or illegal activity
  • Compliance with legal obligations
  • Internal uses reasonably aligned with expectations

c. Right to Correct – § 1798.106

You can request correction of inaccurate personal information we maintain.

d. Right to Opt-Out of Sale/Sharing – § 1798.120, § 1798.135

If our practices change, we will provide a clear “Do Not Sell or Share My Personal Information” link.

e. Right to Limit Use of Sensitive PI – § 1798.121

If we collect sensitive personal information, you may restrict its use to only necessary business purposes.

f. Right to Non-Discrimination – § 1798.125

We will not:

  • Deny you goods or services
  • Charge different prices
  • Provide a different level or quality of service

7. How to Exercise Your Rights – § 1798.130

You or your authorized agent may submit a verifiable request via:

  • Email: privacy@data-business-services.us
  • Mail:
    Data Business Services USA, Inc.
    Attn: Privacy Compliance
    101 N. Tyron Street Ste 600, Charlotte, NC 28246

To be verifiable under § 1798.130(c), your request must:

  • Provide sufficient detail and identity verification
  • Include authority documentation if submitted by an authorized agent (§ 999.326 of the CCPA Regs)

8. Response Timeline and Format – § 1798.130(a)(2), § 1798.145(h)

  • Response within 45 days (extendable to 90 days with notice)
  • Delivered securely and in a portable format (e.g., PDF, JSON, CSV)
  • Free of charge unless repetitive or excessive

 

9. Data Retention and Security – § 1798.100(a)(3), § 1798.185(a)(1)(G)

  • We retain data only as long as reasonably necessary for business/legal purposes
  • We implement reasonable administrative, technical, and physical safeguards (Cal. Civ. Code § 1798.100(e))

 

10. Updates to this Notice – § 1798.130(a)(5)

We may update this notice as needed to reflect changes in data practices, legal requirements, or operational needs. When we do, we will revise the “Last Updated” date and notify you where appropriate.

 

11. CIPA § 638.51(a) Compliance Annex — Pen Registers and Trap and Trace Devices

This Annex clarifies Cyberlegis.legal compliance posture with respect to California Penal Code § 638.51(a).

Cyberlegis.legal does not install, use, operate, provide, or assist in providing any pen register or trap and trace device as those terms are defined under applicable California law. DBS is not a telecommunications carrier or provider and does not offer communications services that would require or involve the deployment of such devices in the ordinary course of business.

Cyberlegis.legal will only respond to valid and legally binding court orders or other compulsory legal processes that are consistent with applicable law. If DBS receives a judicial order lawfully compelling assistance related to pen registers or trap and trace devices, Cyberlegis.legal will review the scope and legal basis of the request, comply only to the extent required by law, and seek to limit disclosure to what is strictly necessary.

Cyberlegis.legal’s routine web operations and security practices involve standard web server logging and security monitoring (for example, IP address logging and firewall functionality) for the purposes described in our Privacy Policy. These activities do not constitute the installation or use of pen registers or trap and trace devices.

Nothing in this Annex limits Cyberlegis.legal’s ability to comply with applicable law or to protect the security and integrity of our services. If our practices change in a way that is relevant to this Annex, we will update this Annex accordingly.

GDPR