Privacy Statement

The protection of your personal data is important to us, including with respect to your visit to our website. Your data will be protected in accordance with the legal regulations.

Above and beyond the non-disclosure obligation resulting from contract and client relationships, dhpg attaches great importance to data privacy. This is done in order to not only meet legal obligations relating to confidence and trust, discretion and quality assurance, but also to set a good example for clients, interested parties and employees. It is with this in mind that dhpg has committed itself to protection of data privacy and to achieving optimal results with the assistance of a company data protection officer.

Below you will find information on which data will be collected during your visit to our website and how it will be used, as well as legal information requirements applying to data processing in the client relationship:

1. Name and contact details of the controller in charge of the processing as well as the company data protection officer

This data protection information applies to data processing by the following controllers:

dhpg Wirtschaftsprüfer Rechtsanwälte Steuerberater GmbH & Co. KG

dhpg Audit GmbH

dhpg IT-Services GmbH

dhpg Tax & Management Services GmbH

Marie-Kahle-Allee 2
53113 Bonn
T +49 228 81000 0
F +49 228 81000 20

dhpg Berlin GmbH

Jean-Monnet-Straße 2
10557 Berlin
T +49 30 203015 0
F +49 30 203015 20

dhpg Stössel, Schmitz & Blattner GmbH

Lurgiallee 16
60439 Frankfurt
T +49 69 57005 0
F +49 69 57005 190

dhpg Steutax GmbH

Kreuzberger Ring 7a
65205 Wiesbaden
T +49 611 99930 0
F +49 611 99930 30

The company data protection officer for the aforementioned companies (hereinafter referred to as: dhpg) can be contacted at the adress dhpg IT Services GmbH, Bunsenstr. 10a, 51647 Gummersbach, c/o René Manz, or at and +49 2261 8195 0.

2. Rights of data subjects

You have the right:

  • to request information about your personal data processed by us in accordance with Art. 15 of the GDPR. In particular, you may request information on the purposes of processing, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right of rectification, cancellation, restriction of processing or opposition, the existence of a right of appeal, the origin of your data if such have not been collected by us, and the existence of automated decision-making, including profiling and, if applicable, useful details regarding such data;
  • to demand the correction of incorrect or incomplete personal data stored by us without undue delay in accordance with Art. 16 of the GDPR;
  • to demand deletion of your personal data stored with us, unless the processing of such is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims in accordance with Art. 17 of the GDPR;
  • to demand restriction of the processing of your personal data in accordance with Art. 18 of the GDPR if you dispute the accuracy of the data, if the processing is unlawful but you reject its being deleted and we no longer require the data, but you require it for the assertion, exercise or defence of legal claims or if you have lodged an objection to the processing pursuant to Art. 21 of the GDPR;
  • to receive your personal data that you have provided us with in a structured, common and machine-readable format or to request that it be transferred to another responsible party in accordance with Art. 20 of the GDPR;
  • to revoke consent you have previously granted us at any time in accordance with Art. 7 (3) of the GDPR. If you do so, we may no longer continue to process the data which have been based on this consent in the future and
  • complain to a supervisory authority in accordance with Art. 77 of the GDPR. As a rule, you can contact the supervisory authority in charge of your usual place of residence or workplace or to our office.

3. Right to object

If your personal data are processed on the basis of legitimate interests in accordance with Art. 6 (1) (1) (f) of the GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 of the GDPR if there are reasons for doing so emanating from your particular situation or if the objection is directed against direct marketing. In the latter case, you have a general right of objection, which we shall abide by without your having to state any particular reason. If you wish to exercise your right of revocation or objection, simply send an e-mail to

4. Disclosure of data

Your personal data will not be transferred to third parties for purposes other than those listed below. We will only pass on your personal data to third parties if:

  • you have provided your express consent to such in accordance with Art. 6 (1) (1) (a) of the GDPR,
  • disclosure in accordance with Art. 6 (1) (1) (f) of the GDPR for the purpose of assertion, exercise or
  • defence of legal claims is necessary and there is no reason to assume that you have an overriding interest worthy of protection by not disclosing your data,
  • in the event that there is a legal obligation to pass on the data pursuant to Art. 6 (1) (1) (c) of the GDPR, and
  • this is legally permissible and required under Art. 6 (1) (1) (b) of the GDPR for the processing of contractual relationships with you.

In addition, our contract processors receive your personal data for processing in accordance with your instructions, insofar as this is necessary to perform the contract. Our contract processors do not have a right of their own to use your data.

5. Data security

We perform up-to-date technical measures to ensure data security, in particular to protect your personal data from dangers during data transmission and from third parties gaining knowledge of such. These measures are adapted to the current state of the art.

6. Third countries

Data will be transmitted by us to third countries solely in accordance with legal regulations.

The admissibility of data transmission to third countries is governed by Art. 44 et seq. of the GDPR. If we transmit your data to a third country, you will be informed of this in the special data protection information relating to the respective processing procedure. The respective legal arrangements applying will also be stated.


Specific data protection information for processes involving data processing on the website

1. When visiting the website

When you call up our website, the browser used on your terminal device automatically sends information to our website's server. This information is temporarily stored in a so-called log file. The following information is recorded without your performing any action and stored until it is automatically deleted:

  • IP address of the requesting computer,
  • Date and time of access,
  • Name and URL of the retrieved file,
  • Website from which the access takes place (referrer URL),
  • The browser used and, if applicable, the operating system of your computer and the name of your access provider.

We process the data mentioned above for the following purposes:

  • To ensure a smooth connection set-up for the website,
  • To guarantee comfortable use of our website,
  • Evaluation of system security and stability and
  • For other administrative purposes.

The legal basis for the data processing is provided in Art. 6 (1) (1) (f) of the GDPR. Our legitimate interest lies in the operation of our website and the associated presentation of our company.

Your data will be deleted as soon as it is no longer required for the purposes stated, but at the latest after 6 months.

2. When using our contact form

If you have any questions of any kind, we offer you the opportunity to contact us using a form provided on the website. This requires you to provide a valid e-mail address and your name so that we know who the enquiry comes from and can answer it. All other information can be provided on a voluntary basis. We use the postal code and your company headquarters / place of residence so that we can assign your enquiry to an employee at a location near you. If you furnish us with your telephone number, we will call you back to answer your question if need be.

When you fill out the contact form, we only process the personal data you provide for the purpose of answering your enquiry and/or for the initiation, justification, amendment and design of possible contractual relationships unless

  • we have explicitly pointed out further-going purposes to you and you have consented to such use,
  • the processing is carried out for a purpose that is directly related to the original purpose for which the personal data were collected
  • the processing is carried out in response to a legal obligation or government or judicial order, or
  • for the justification or protection of legal claims or to defend against illegal activities.

We will not sell or market your personal data to third parties or disclose your data for any other reasons.

By sending us your message, you consent to our processing the data you provide for the purpose of processing your enquiry and/or for the initiation, justification, amendment and design of the content and substance of any contractual relationships. Data processing for the purpose of contacting us is carried out in accordance with Art. 6 (1) (1) (a) of the GDPR on the basis of your consent provided voluntarily or for the initiation or fulfilment of contractual relationships in accordance with Art. 6 (1) (1) (b) of the GDPR. The personal data collected by us for the use of the contact form will be automatically deleted after completion of the enquiry you have submitted and will only be stored for the duration of statutory periods of retention.

3. When registering for our newsletter

For the registration to our newsletter we use the so-called double-opt-in procedure. This means that after your registration, we will send you an e-mail to the specified e-mail address in which we ask you to confirm that you wish to receive the newsletter. The purpose of this procedure is to prove your registration and, if necessary, to be able to clarify a possible misuse of your personal data. If you do not confirm your registration within one month, your information will be blocked and automatically deleted after one month.

After your confirmation, we store your e-mail address as well as your name and salutation for the purpose of sending you the newsletter.
We also use the Microsoft Dynamics 365 Marketing service.  We use this tool for efficient management of prospects and the sending of newsletters. We do not evaluate the opening or click behavior in the process. 

The legal basis is Art. 6 para. 1 p. 1 lit. a DS-GVO.

You can revoke your consent to the sending of the newsletter at any time by unsubscribing. Unsubscribing is possible at any time, for example via a link at the end of each newsletter. Alternatively, you are also welcome to send your unsubscribe request at any time by e-mail to


4. When using the applicant portal

It is particularly important to dhpg to ensure the greatest possible protection of your personal data. All personal data collected and processed by dhpg in the context of an application are protected against unauthorised access and manipulation by means of technical and organisational measures. Your data will only be collected for the purpose of filling positions in the dhpg group. You hereby declare your express consent to your applicant data being passed on to the following companies within the dhpg group:

  • dhpg Wirtschaftsprüfer Rechtsanwälte Steuerberater GmbH & Co. KG
  • dhpg Audit GmbH
  • dhpg Stössel, Schmitz & Blattner GmbH
  • dhpg IT-Services GmbH
  • dhpg Berlin GmbH
  • dhpg Steutax GmbH
  • dhpg Tax & Management Services GmbH.

We require your personal data in the application documents in order to be able to consider you as an applicant in the application process and to review whether you are eligible to work for our company. If you provide information that goes above and beyond this required information, you voluntarily provide us with this information and agree to its processing.

The legal basis for the processing is thus provided by Art. 6 (1) (1) (a) and (b) of the GDPR. It is possible to revoke this consent at any time. You can send your revocation at any time by e-mail to

After completion of the application procedure, we will store your documents for another 6 months as proof.

If a contract is possibly to be concluded, it is necessary for you to provide us with your personal data in the application documents. Otherwise we will not be able to consider your application.

5. In the event you retain the services of dhpg

If you retain the services of dhpg, we will collect and store your master data as well as any other data required for the execution and processing of the client contract. The data processing is carried out for as long as it is necessary to achieve the contractual purpose, in principle for as long as the client relationship exists. Your data will be deleted after termination of the contract and expiry of retention periods and in the absence of legitimate interests. The legal basis for data processing in the client relationship is Art. 6 (1) (1) (b) of the GDPR.

6. When ordering our "exclusive downloads”

You have the possibility to download "exclusive downloads" from our website as a thank you for your newsletter registration. To do so, you need to enter your e-mail address and name in the order form. After submitting your data, you will receive an e-mail sent to the specified e-mail address, in which you must confirm your order by clicking on a link. After this confirmation, we will send you the "Exclusive Download" by e-mail as soon as possible. We process your data in accordance with Art. 6 (1) (1) (b) of the GDPR to fulfil the contract for ordering the "Exclusive Download" and to send you our newsletter on a regular basis in accordance with the contract. It is possible to unsubscribe from our newsletter at any time, for example via a link at the end of each newsletter. Alternatively, you are welcome to send your unsubscription request at any time by e-mail to We will store your data until you unsubscribe from our newsletter.

7. Cookies, analysis tools, plugins and other third party elements

We use cookies on our website. These are small files that are automatically created by your browser and stored on your terminal device (laptop, tablet, smartphone or similar). Cookies do not cause any damage on your terminal device, and do not contain any viruses, trojans or other malware. Information is stored in the cookie that is related to the specific terminal device used. This does not mean, however, that we obtain direct knowledge of your identity.

Analysis tools evaluate the user behaviour of website visitors and enable the operator of a website to optimise it and fine-tune marketing measures.

Plugins and other elements of third parties are used to integrate content from these providers into the website.


a) Required first-party cookies

The use of our required first-party cookies first of all serves to make the use of our offer more convenient for you. For example, we use so-called session cookies to recognise that you have already visited individual pages of our website. These are automatically deleted when you leave our site.

In addition, we also use temporary cookies, which are stored on your end device for a certain fixed period of time, to optimise user-friendliness. If you visit our site again in order to use our services, we will automatically recognise that you have already been with us and which entries and settings you have made so that you do not have to enter them again.

These data will be deleted after 6 months at the latest.

We process your data on the basis of our legitimate interest in the presentation of our company to the outside world via the website you have called up and to promote user-friendliness. The legal basis for the processing is provided by Art. 6 (1) (1) (f) of the GDPR.

Most browsers accept these cookies automatically. You can configure your browser, however, so that no cookies are stored on your computer or so that a message always appears before such a cookie is created. However, completely disabling cookies may result in the website not being displayed correctly or you may not be able to use all the features of our website.


b) Third party cookies, plugins and other third party elements

The third-party cookies, plug-ins and other third-party elements listed in the following and used by us are only used with your express consent and hence on the basis of Art. 6 (1) (1) (a) of the GDPR. You can revoke consent you have issued at any time with effect for the future. To do so, you can change your settings under "9. Cookie details” in this Data Protection Policy. Failure to grant or revoke consent may result in the website not being displayed correctly or your being unable to use all the functions of the website.

By using third-party cookies, plug-ins or other third-party elements, we want to ensure that our website is designed to meet the needs of our customers and is continuously optimised.

The respective descriptions of functions, possible recipients of the data, details regarding possible transfers to a third country and the storage period are provided in the following notes on processes involving individual processing with third-party cookies, plug-ins or other third-party elements. For additional details relating to cookies, see "9. Cookie details" in this Data Protection Policy.


(1) Matomo

We use the open source software Matomo to analyse and statistically evaluate the use of our website. Cookies are used for this purpose. Information generated by the cookie about the use of our website is transferred to our servers and summarised in pseudonymous user profiles.

The following information is collected:

  • Clicks, mouse movements, hovering, scrolling
  • Browser
  • Device (desktop/tablet/mobile device)
  • Language
  • Operating system
  • Screen resolution
  • Duration of visit
  • Navigation (URLs)
  • Page content (HTML)
  • ISP & location (city, state/region, country)
  • Referrer URL
  • Type of visitor (first-time visitor/returner)
  • Individual tags or variables

The information is used to evaluate use of the website and to enable us to design our website in line with requirements. The information is visualised in so-called "heat maps" and "session recordings". The heat maps show which areas of the website are clicked on. In "session recordings", usage behaviour (mouse movements, call-up of sub-pages, etc.) is recorded. Subpages on which you can enter personal data (such as in the contact form) are excluded from this tracking. The information will not be passed on to third parties. Under no circumstances will the IP address be linked to other data concerning the user. IP addresses are made anonymous, rendering assignment impossible (IPMasking). Further information can be found in English in the data protection policy of the provider.

(2) YouTube

We use social plugins from YouTube LLC (901 Cherry Avenue, San Bruno, CA 94066, USA), a subsidiary of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA), on our website to make our company better known.

The plug-ins are marked with a YouTube logo, for example in the form of a "YouTube camera" or a "play" button.

These plug-ins are integrated by us by means of the so-called two-click method and the YouTube nocookie settings to protect visitors of our website in the best possible manner. This means that your personal data (in particular your IP address) will not already be transmitted to YouTube when you access the website. Instead, you first have to activate the integrated "buttons" and videos by clicking them. With this click, you provide your consent for a connection to YouTube servers to be established. The data transmitted will be reduced by the YouTube nocookie settings.

Through this integration, YouTube is informed that your browser has called up the respective page of our website, even if you do not have a YouTube profile or are not currently logged in to YouTube.

This information (including your IP address) is transmitted by your browser directly to a YouTube server in the USA and stored there. If you are logged in to YouTube, YouTube is able to directly attribute your visit to our website to your YouTube account. If you interact with the plugins, for example by clicking the "YouTube" button, this information is also transmitted directly to a YouTube server and stored there. The information is also published on your YouTube account and displayed to your contacts there.

If you do not want YouTube to associate the information collected via our website directly with your YouTube account, you must log out of YouTube before activating the plugins.

For more information, please see the YouTube Privacy Policy (

In accordance with Art. 49 (1) (a) of the GDPR, the data will be transferred with your consent to the USA as a third country if you have provided us your consent after we have informed you of the possible lack or limitation of legal protection and the lower level of data protection in the USA in contrast to the EU.

(3) Podigee Podcast Hosting

We use the podcast hosting service Podigee of the provider Podigee GmbH, Schlesische Straße 20, 10997 Berlin, Germany. The podcasts are thereby loaded by Podigee or transmitted via Podigee.

The use is based on our legitimate interests, i.e. interest in a safe and efficient provision, analysis as well as optimization of our podcast offer according to Art. 6 para. 1 lit. f. DSGVO.

Podigee processes IP addresses and device information to enable podcast downloads/playbacks and to determine statistical data, such as call-up figures. This data is anonymized or pseudonymized before being stored in Podigee's database, unless it is necessary for the provision of the podcasts.

Further information and opt-out options can be found in Podigee's privacy policy:

(4) Microsoft Dynamics 365 Marketing

We use the Microsoft Dynamics 365 Marketing tool from the provider Microsoft (Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland) for data storage. We use the system for storing the data of newsletter prospects as well as for the efficient dispatch of the newsletter. When you subscribe to the newsletter, the tool sets cookies with your consent, which in particular transmit the following information to us: 

  • Client ID
  • Geographical location
  • Type of browser
  • Duration of visit
  • Pages viewed

For more information about privacy, see Microsoft's privacy policy at For more information on the use of cookies in connection with the system, please visit

8. Up-to-dateness and amendment of our Data Protection Policy

This Data Protection Policy is currently valid and has been updated as of July 2020. It may become necessary to change this Data Protection Policy due to the further development of our website and offers relating thereto or due to changed legal or official requirements. You can access and print out our currently applicable Data Protection Policy at any time on the website at

9. Cookie details

Load YouTube Video