article banner

Privacy policy

Privacy policy

Grant Thornton AG Wirtschaftsprüfungsgesellschaft (hereafter „Grant Thornton Germany“,,, +49 211 9524 0) is pleased with your visit of our website. Privacy, and in particular the protection of personal data, is an important concern to which we pay special attention. With these privacy policies, we would like to inform you about the types of personal data processed by Grant Thornton Germany and the purposes it is used for. The right is retained by Grant Thornton Germany to make any changes to this privacy statement at any time. This may be necessary due to subsequently recognised gaps in the regulations or due to new services provided by us. You may access and print out this privacy policy statement from any page of this internet service by clicking on the “privacy policy” link.

1. Territorial scope

This privacy policy is valid exclusively for the use of the website offered by Grant Thornton AG Wirtschaftsprüfungsgesellschaft as well as Grant Thornton GmbH & Co. KG and Grant Thornton Rechtsanwaltsgesellschaft mbH (hereafter “Grant Thornton Germany subsidiaries“), which can be accessed under the domain and all subdomains (hereafter “our website“).
KINAST Rechtsanwaltsgesellschaft mbH

Externe Datenschutzbeauftragte I Externe Compliancebeauftragte
Hohenzollernring 54
D-50672 Köln
T +49 221 – 222 183 0

2. What is personal data?

Personal data means any information which can be used to learn personal or factual circumstances about you (e.g. name, address, telephone number, date of birth or e-mail address). Data not allowing us to deduce information concerning your person (or only with a disproportional effort), e.g. anonymised data, is not personal data.
The processing of personal data (e.g. collection, recording, use, storage or transmission) must always be justified by legal grounds or your consent. Processed personal data is erased as soon as the purpose of the processing is reached, subject to legal retention obligations. If we process your personal data for the provision of specific offers, we will inform you about the specific processes, the scope and purpose of the processing, the legal basis and the respective retention period.

3. Which personal data is collected/processed and used?

The greater part of our website can be used without specifying personal data.
We do store log files, entailing the following information:
the name of the accessed file,
the time (date and time) of accessing,
the data amount transmitted,
a notification about successful accessing,
your web browser, operating system and the enquiring domain, as well as
your IP address.

This data is exclusively analysed for the purpose of improving our services and does not allow any conclusions to be made about your person.
If you wish to make use of the services offered by us, such as the subscription to our newsletter etc., it is however necessary that you provide further data. This concerns data which is required for the specific processing, such as your e-mail-address when subscribing.
We use the data which we collect for the provision of the goods and services we offer, for the replies to your enquiries, as well as our business and the constant improvement of our websites and applications.

We use your personal data exclusively to be able to provide you with an extensive service, or to render the desired service should you use our contact form.
We will not pass on your personal data to external third parties unless you have given your consent. At present all transmissions are encrypted, prohibiting the access of third parties.

Grant Thornton Germany subsidiaries are not third parties for the purpose of this policy.
We reserve the right to transmit your personal data to external contractors in the context of a commissioned processing in terms of the Federal Data Protection Act (BDSG) and the General Data Protection Regulation (GDPR). In particular we point out the use of Google Analytics, unless you objected to this.

There is no further use of your personal data. There is no transmission of personal data to third parties or use of your data for marketing purposes without your consent (subject to the cases outlined below) unless we are legally bound to surrender data (information to criminal prosecution authorities and courts; information to public authorities receiving data due to statutory provisions, e.g. social insurance agencies, finance authorities etc.), or we engage legally bound third parties for the enforcement of our claims concerning professional secrecy.
In particular, we use personal data for the following purposes:

a) Registration / User Account

If you register at our website, initially your e-mail-address will be saved in order to be able to provide you with new login details should you forget these. Additionally we save your user name and password to enable you a comfortable login to your account, as well as the mandatory data (these are marked with (*); any further information is voluntary).
This data is used for the above-mentioned purposes, in order to provide you with this service.

b) Newsletter

In order to subscribe to our e-mail newsletter service, we need at least your e-mail-address to which the newsletter shall be sent, in addition to your consent. Any further information is voluntary and is used to address you personally and to shape the contents of the newsletter according to your preferences, as well as to clarify potential queries. It is your free decision, whether you give us this data or not. However, without this data we cannot send you our newsletter.
When subscribing to the newsletter, your e-mail-address will be used for marketing purposes until you unsubscribe. You can unsubscribe by clicking on the link at the bottom of the newsletter.

c) Contact form

Should you make use of the contact form to send us enquiries, we will ask for your name and surname, the company you work for and your e-mail-address or telephone number. You can enter your individual message to us in the message area.
It is your free decision, whether you give us this data or not. At present all transmissions are encrypted, prohibiting the access of third parties.

d) Advertising and Market Research

If you declare your consent to advertising and market research, we will not only use your data to enable the performance of the services you chose, but we will also use it to provide you with a website tailored to your interests. We will also, by mail or e-mail (in the form of our newsletter), occasionally send you news and tips about our company or our goods and services which suit your individual interests based on your data, and we will use your data for the thereto necessary analysis and market research purposes.
Therefore it is technically necessary to collect your incidental and stated data in usage profiles and to analyse it for the above-mentioned purposes. This only takes place internally and for the above-mentioned purposes.

You can revoke your consent hereto at any time using, or +49 (0)221 – 222 183 – 0. If you do not give your consent or you revoke it, data processing according to the above-mentioned paragraphs will not take place. You can of course still use the services Grant Thornton Germany provides.

4. User profiles / Use of Cookies

But for the above-mentioned cases we do not create any personal user profiles. Only anonymised data for the performance of our various services or for analysis purposes is stored on our servers in conjunction with the access of the desired data. At this, general data is logged, e.g. information about which contents from our services are accessed when or which pages are visited the most.

We use so-called “cookies” (small text files with configuration information). Cookies are small text files which are sent from our web server to your browser when you visit our website. They are then retained on your computer for a subsequent retrieval.
The cookies particularly help us to determine the user frequency and the amount of users on our websites, and to be able to constantly identify your computer during the switch from the visit of one of our websites to another of our websites, and to be able to determine the end of your visit. By doing this we learn which area of our website and which other websites our users have visited. This user data however does not allow any conclusions to be made about the user. This anonymised user data is not merged with your personal data according to §3 of this privacy policy and is deleted immediately after the statistical evaluation.

During the visit of our website, cookies are stored indefinitely on your computer. This serves to optimise the user-friendliness and the simple and fast access to the websites.

The majority of browsers are preconfigured in a way that they accept cookies automatically. However, you can deactivate the use of cookies or configure your browser in a way that you will be notified prior to any use of cookies.

You can also stop the installation of cookies by configuring the according settings in your in browser software. However we would like to point out that in this case you may not be able to use several functions on our website fully.
For further information please visit

5. Social Media

Our website contains buttons linking to social media. These are not plug-ins. Behind the buttons there is an external link linking to our site on the respective platforms. Neither are cookies saved on your computer, nor is your data transmitted. At present the website contains links to the following social networks:
“Twitter” (Twitter, Inc. 1355 Market St, Suite 900, San Francisco, CA 94103, USA),
“LinkedIn“ (LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA),
“Xing” (XING AG, Dammtorstraße 30, 20354 Hamburg, Deutschland)
These are exclusively operated by the respective provider. The links to our company profiles on the respective platforms are identified by the respective button on the website.

During the visit of our websites which contain a button as described above, your browser will not connect with the server of the respective service unless you click on the respective button. Therefore the information about your visit of our website will not be passed on to the respective provider. If, during the visit of our website, you are simultaneously logged into your personal user account on the provider’s website (e.g. via another browser session), and then klick on the button, your visit on our website can be attributed to your user account.
Should you wish to stop such data transfer, you have to either log out of your user account of the respective platform before visiting our website or not use the links. Should you wish to obtain information about the scope and purpose of the data collection by the provider as well as any further processing and use of your data, please take this from the privacy policy statements of the websites of those providers directly. There you can also obtain further information about your respective rights and settings options concerning the protection of your privacy.

a) Xing

We would like to inform you about the processing of personal data carried out by XING, which is linked on our website. By clicking on the link a connection to the servers of XING is established in your browser. The current privacy policies of XING as well as additional information can be accessed on: and

b) LinkedIn

There are also links to the social network LinkedIn on our website. When visiting our website, a direct connection of your browser to the LinkedIn server is established, if you click on the respective link. LinkedIn thus obtains the information that you have visited our website using your IP address. If you click on the LinkedIn link whilst being logged into your LinkedIn account, you can link the contents of our websites on your LinkedIn profile. Thereby LinkedIn is able to attribute the visit of our websites to your user account. We would like to point out that by providing the websites we do not gain any knowledge of the contents of the transmitted data or their use by LinkedIn.
Details about the data collection (purpose, scope, further processing, use) and your rights and setting options can be found in the privacy statements of LinkedIn, which you can access under

c) Twitter

We implemented a Twitter feed and link into our website. By clicking on the feed or the link, you will be forwarded to Twitter and a cookie will be saved on your computer. This cookie enables Twitter to establish a connection to your account. Should you not have a Twitter account or never have visited their website before, Twitter will assign you an identification in order to log your accesses of our Twitter feed.
You can find further privacy statements by Twitter under:

6. Google Analytics

This website uses Google Analytics, a web analysis service provided by Google Inc., based in 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google“). Google Analytics uses so-called “cookies“. These are text files which are stored on your computer and enable an analysis of your use of the website. The data generated with the help of cookies about the use of this website is usually transmitted to a Google server in the US and stored there. Google may transmit this data to third parties, if this is prescribed by law or insofar as third parties process this data on behalf of Google.
In the case of IP anonymisation on this website, your IP address will first be shortened by Google within the member states of the European Union or in other signatory states to the EEA Agreement. Only in exceptional cases the full IP address will be transmitted to a Google server in the US and shortened there. We point out that on this website Google Analytics has been broadened to include the code “gat._anonymizeIp();“ to ensure an anonymised collection of IP addresses (“IP Masking”).

On behalf of the website provider Google will use this information to analyse your use of the website, to compile reports about website activities and to render further services associated with the website and internet use for the website provider. The IP address transmitted from your browser in the context of Google Analytics is not merged with other data from Google.
You can also stop the storage of cookies by configuring the according settings in your in browser software. However we would like to point out that in this case you may not be able to use several functions on our website fully. You can also prevent Google from collecting data created by the cookie concerning your use of the website by downloading and installing the browser plug-in available under the following link:

Alternatively, or within browsers on mobile devices, you can prevent the collection by Google Analytics by clicking on the following link: <ahref="javascript:gaOptout()">Google Analytics deaktivieren</a >
An opt-out-cookie will be set which will prevent future collections of your data when visiting this website.
You can find further information by visiting or (general information about Google Analytics and data protection).

7. Google Maps

Furthermore, Google Maps, a map service provided by Google Inc. (“Google“), is implemented on this website. Google Maps uses so-called “cookies“. These are text files which are stored on your computer if you use the map function on our website.
If you click on the link a direct connection is established between your browser and the Google server. Google thus obtains the information that you have visited our website using your IP address. If you click on the Google Maps link whilst being logged into your Google account, Google is able to attribute the visit of our websites to your user account. We would like to point out that by providing the websites we do not gain any knowledge of the contents of the transmitted data or their use by Google.

Details about the data collection (purpose, scope, further processing, use) and your rights and setting options can be found in the privacy statements of Google, which you can access under

8. Use of YouTube videos

We use embedded YouTube videos. YouTube is a service provided by Google Inc., Amphitheatre Parkway, Mountain View, CA 94043, USA.
By accessing the website and for the embedding of the videos, the IP address is transmitted. It cannot be attributed unless you have logged into YouTube or another Google service before accessing the site or are logged in permanently.
As soon as you start playback of an embedded video by clicking, YouTube only stores cookies on your computer which do not contain any personal data. These cookies can be prevented by using the according browser settings or add-ons (source: YouTube “Activating the extended data protection mode for embedded videos“).
You can find further information about the integration of YouTube videos on the information website of YouTube:

9. Security measures for the protection of data

We are obliged to protect your privacy and to treat your personal data confidentially. To prevent loss or misuse of the data we store, we take extensive technical and organisational safety precautions which are reviewed regularly and adjusted to technological progress. We do however point out that due to the structure of the internet it is possible for other persons or institutions not under the control of Grant Thornton Germany or its agents to violate the rules of data privacy protection and the above-mentioned safety precautions.

10. Hyperlinks to external websites

Our website contains hyperlinks to websites of third-party providers. By activating these hyperlinks, you will be directly forwarded from our website to the website of the third-party providers. This is visible in, inter alia, the change of the URL. We do not take any responsibility for the confidential handling of your data on these websites of third parties, as we do not have any influence on the compliance with data protection regulations of these companies. Please seek information about the handling of personal data by these companies directly on their websites.

11. Revocation / Objection

You have declared your consent to the following explicitly, if applicable. Please note that you can withdraw your consent with future effect and object to the processing and use of your data for marketing purposes at any time: Please use or contact +49 (0)221 – 222 183 – 0. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

a) Consent to E-mail Marketing/ Newsletters

( ) Yes, I would like to have the __________ Newsletter regularly sent to my stated e-mail address. I can unsubscribe from the newsletter service at any time by clicking the link “unsubscribe“ at the bottom of the newsletter or by contacting
b) Consent to Advertising/Marketing and Market Research
( ) I agree to Grant Thornton Germany storing, processing and using my data which was collected via the website or the services provided by Grant Thornton Germany for the purpose of the creation of user profiles for advertising and market research purposes, for the purpose of a needs-oriented design of the Grant Thornton Germany websites and the purpose of advertising via mail and – as long as I have subscribed separately – via e-mail.
I am aware that the declaration of the preceding consent forms is voluntary and that I have the right to withdraw my consent at any time by contacting If I do not give my consent or withdraw it, this will not affect the use of the services provided by Grant Thornton Germany.

12. Your rights related to the personal data we store / Storage period

We store your personal data only as long as it is permitted by law. The personal data is deleted when the user withdraws their consent to the storage or when storage is not needed any longer to fulfil the pursued purpose, in particular when the user account is deleted or when the storage is not permitted by law.

We are pleased to inform which data we store about your person at your request. Should we be storing any inaccurate data despite our efforts to keep correct and up-to-date data, we will rectify these immediately. Additionally you have the right to receive the personal data whose processing you have consented to, in a structured, commonly used and machine-readable format and to transmit that data to another controller with or without the help of the controller to which the personal data has been provided.

You always have the possibility to review, change, or delete the data which you have provided us with by writing an e-mail to Should you wish the deletion of the stored data, the deletion will also be performed immediately at your request. If a deletion is not possible for legal reasons, a restriction of the respective data will take place. However please note that after deletion of your data we will not be able to provide you with the services as described herein.
Should you be of the opinion that the processing of data concerning your person is in breach of the law, you can exercise your right to lodge a complaint with a supervisory authority.

13. External Data Protection Officer

Should you have any further queries and suggestions relating to data protection in our company or to this privacy policy, please do not hesitate to contact our external data protection officer KINAST Rechtsanwaltsgesellschaft mbH directly.
T +49 (0)221 – 222 183 – 0