Privacy Policy

1. Information on the Collection of Personal Data

  1. We hereby inform you about the collection of personal data when using our website and services. Personal data refers to all data that can be personally associated with you, such as your name, address, email addresses, and user behavior.
  2. Data Controller pursuant to Art. 4(7) of the EU General Data Protection Regulation (GDPR) is:
    METZLER LEGAL
    Attorney Metzler
    Freiheit 12AB
    D-12555 Berlin, Germany
    Phone: +49 30 60 98 53 70 0
    Fax: +49 30 60 98 53 70 5
    Email: info@metzler-legal.de
  3. We generally process personal data of our users only to the extent necessary to provide our content and services. The processing of personal data of our users takes place either with the user’s consent or where the processing of the data is permitted by legal regulations, in particular Art. 6(1) sentence 1 GDPR, for example, to fulfill a legal obligation to which the controller is subject.
  4. When you contact us via email, the data you provide (your email address, and possibly your name and phone number) will be stored by us to respond to your inquiries. We will delete the data collected in this context once storage is no longer necessary, or we will restrict processing if statutory retention obligations apply.
  5. When using the contact form on our website, we use the service Formspree to process your inquiries. Formspree (Formspree, Inc., USA) collects and processes the data you enter (e.g., name, phone number, message) on our behalf. Your data will be forwarded to info@metzler-legal.de. Further information can be found in Formspree's privacy policy: https://formspree.io/legal/privacy-policy. The legal basis for this processing is Art. 6(1) lit. b GDPR (performance of pre-contractual measures).
  6. If we engage third-party service providers for specific functions of our services or wish to use your data for advertising purposes, we will inform you in detail below about the respective processes. We will also specify the defined criteria for the storage duration.

2. Collection of Personal Data When Visiting Our Website

  1. When you use our website for informational purposes only, i.e., if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. When you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6(1) sentence 1 lit. f GDPR):
    – IP address
    – Date and time of the request
    – Time zone difference to Greenwich Mean Time (GMT)
    – Content of the request (specific page)
    – Access status/HTTP status code
    – Amount of data transferred in each case
    – Website from which the request originates
    – Browser
    – Operating system and its interface
    – Language and version of the browser software.
  2. Our website does not use cookies, Google Analytics, or Google Fonts. No additional data beyond your visit is collected or stored.

3. Legal Basis for the Processing of Personal Data

If we obtain the consent of the data subject for the processing of personal data, Art. 6(1) sentence 1 lit. a EU General Data Protection Regulation (GDPR) serves as the legal basis.

For the processing of personal data necessary for the performance of a contract to which the data subject is a party, Art. 6(1) lit. b GDPR serves as the legal basis. This also applies to processing operations required to carry out pre-contractual measures.

If the processing of personal data is necessary to comply with a legal obligation to which our company is subject, Art. 6(1) lit. c GDPR serves as the legal basis.

If the processing is necessary to safeguard a legitimate interest of our company or a third party and the interests, fundamental rights, and freedoms of the data subject do not outweigh the aforementioned interest, Art. 6(1) lit. f GDPR serves as the legal basis for the processing.

4. Data Deletion and Storage Duration

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to apply. Storage may continue if required by European or national legislators in EU regulations, laws, or other provisions to which the controller is subject. Blocking or deletion of the data also occurs when a storage period prescribed by the aforementioned regulations expires, unless further storage of the data is necessary for the conclusion or fulfillment of a contract. We store your data only as long as necessary to fulfill the stated purposes and delete it immediately thereafter, provided no legal retention obligations apply.

5. Your Rights

If your personal data is processed, you are a data subject within the meaning of the GDPR, and you have the following rights vis-à-vis the controller:

  1. Right to Information: You may request confirmation from the controller as to whether personal data concerning you is being processed by us.
  2. Right to Rectification: You have the right to request the controller to correct and/or complete your personal data if the processed personal data concerning you is incorrect or incomplete.
  3. Right to Restriction of Processing: You have the right to request that the processing of all or part of your personal data be temporarily or permanently restricted.
  4. Right to Erasure: You may request that the controller delete your personal data without undue delay.
  5. Right to Notification: If you have asserted your right to rectification, erasure, or restriction of processing vis-à-vis the controller, the controller is obliged to notify all recipients to whom your personal data has been disclosed of this rectification, erasure, or restriction of processing, unless this proves impossible or involves disproportionate effort. You have the right to be informed about these recipients by the controller.
  6. Right to Data Portability: You have the right to receive the personal data concerning you, which you have provided to the controller, in a structured, commonly used, and machine-readable format.
  7. Right to Object: You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on Art. 6(1) lit. e or f GDPR; this also applies to profiling based on these provisions. If you object to processing for direct marketing purposes, your personal data will no longer be processed for such purposes.
  8. Right to Withdraw Consent: You have the right to withdraw your consent to the processing of your personal data at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
  9. Right Not to Be Subject to Automated Decision-Making, Including Profiling: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
  10. Right to Lodge a Complaint with a Supervisory Authority: Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR.
  11. Exercise of Your Rights as a Data Subject: To exercise your rights, please contact us using the contact details provided in the imprint.