1. Controller

The controller within the meaning of data protection law for the processing described in this policy is:

• [Full Legal Name of Law Firm]
• [Postal Address]
• Email: [Official Contact Email]
• Phone: [Official Telephone Number]
• VAT ID (if applicable): [VAT Identification Number]
• Responsible person: [Name of Responsible Attorney / Representative]

2. General Information on Data Processing

We process personal data only where this is legally permitted, required for providing this website and legal services, or based on your consent. The scope of processing depends on how you use the website, whether you contact us, and whether you submit documents for legal review.

Personal data may include identification details, contact data, communication content, technical access data, and case-related information that you provide in connection with a legal inquiry.

3. Hosting and Server Log Data

When you access this website, technical data is processed automatically to ensure secure delivery and system stability. This may include IP address, date and time of access, requested resource, referrer URL, browser type and version, operating system, and response status.

Server log data is processed for security monitoring, fault analysis, and abuse prevention. Unless longer storage is required for security incidents or legal obligations, log data is retained only for a limited period.

4. Contact and Inquiry Handling

If you contact us by form, email, or other channels provided on this website, we process your details and message content to handle your request, assess legal relevance, and communicate with you.

• Mandatory details are processed to identify your request and respond appropriately.
• Additional information is processed only to the extent required for legal assessment and case preparation.
• Communications may be documented to preserve evidence, maintain file integrity, and meet professional obligations.

5. Confidential Document Submission and Uploaded Files

Where you submit documents through the website, we process file content and related metadata for legal review, evidentiary preservation, and communication regarding your matter.

• Files are handled as confidential legal communications within professional secrecy obligations.
• Access is restricted to authorized personnel and service providers with a defined legal or operational need.
• Documents that are not required for legal processing are deleted or anonymized in accordance with applicable retention rules.

6. Legal Bases for Processing

Depending on the context, processing is based in particular on performance of pre-contractual measures or a contract, compliance with legal obligations, legitimate interests, and consent where required.

• Contract / pre-contract: handling inquiries, case intake, and legal representation steps.
• Legal obligations: statutory retention, professional and regulatory duties.
• Legitimate interests: secure operation, abuse prevention, documentation, and quality assurance.
• Consent: where processing is optional and legally consent-based.

7. Storage Duration

We retain personal data only for as long as necessary for the relevant purpose, for legal defense and enforcement, and to satisfy statutory retention obligations under professional, commercial, and tax law.

Where no ongoing mandate exists, inquiry data is reviewed periodically and deleted when no longer required, unless legal retention or evidentiary needs justify longer storage.

8. Categories of Recipients

Personal data may be disclosed only as necessary and on a legal basis, particularly to the following categories:

• Internal authorized legal and administrative staff.
• Technical hosting and IT service providers bound by confidentiality and data processing agreements.
• Public authorities, courts, or opposing representatives where required for legal proceedings or lawful requests.
• Professional advisers and auditors, where legally required or justified.

9. Your Data Protection Rights

Subject to statutory conditions, you have rights to access, rectification, erasure, restriction of processing, data portability, and objection to processing based on legitimate interests.

Where processing is based on consent, you may withdraw consent at any time with effect for the future. The lawfulness of processing before withdrawal remains unaffected.

10. Right to Complain to a Supervisory Authority

You have the right to lodge a complaint with a competent data protection supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement.

11. SSL/TLS Encryption and Technical Security

This website uses current SSL/TLS encryption to protect data transmission. We also apply technical and organizational safeguards designed to protect personal data against unauthorized access, loss, manipulation, or unlawful disclosure.